Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft
File: Pn1HTATkiliTr3HDWnfN1oJv0zk.mft (raw, json)
Hash identifier: +0OtzjSYkNWkBpsKgssUZqd3qJN+8HwYao0CUfzV8pU=
Subject key identifier: 90:DB:E8:8F:50:D5:F9:FA:46:E7:AF:9F:FA:91:5F:91:01:8F:87:12
Authority key identifier: 3E:7D:47:4C:04:E4:8A:58:93:AF:71:C3:5A:77:CD:D6:82:6F:D3:39
Certificate issuer: /CN=3e7d474c04e48a5893af71c35a77cdd6826fd339
Certificate serial: 019A4E86661EAB23FF9F41FC6152BAF21AC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pn1HTATkiliTr3HDWnfN1oJv0zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft
Manifest number: 05B8
Signing time: Tue 04 Nov 2025 11:00:22 +0000
Manifest this update: Tue 04 Nov 2025 11:00:22 +0000
Manifest next update: Wed 05 Nov 2025 11:00:22 +0000
Files and hashes: 1: Pn1HTATkiliTr3HDWnfN1oJv0zk.crl (hash: l8HZSqVwrbhU8jYqoCpwrAvXALmAkDR0dJH0cBfOOrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pn1HTATkiliTr3HDWnfN1oJv0zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:66:1e:ab:23:ff:9f:41:fc:61:52:ba:f2:1a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e7d474c04e48a5893af71c35a77cdd6826fd339
Validity
Not Before: Nov 4 11:00:22 2025 GMT
Not After : Nov 5 11:00:22 2025 GMT
Subject: CN=90dbe88f50d5f9fa46e7af9ffa915f91018f8712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d9:d2:a5:13:61:b5:9e:d4:81:ad:18:de:70:
c6:c4:0c:a3:cb:b1:e3:10:54:cc:3b:a5:68:0f:13:
74:2b:58:d7:73:62:ce:bc:d9:50:b0:71:54:af:6e:
d7:74:1d:eb:de:b7:9c:f1:f0:dc:cb:55:60:d4:73:
c5:d2:0c:de:57:b7:18:e6:6c:a8:87:00:ce:24:53:
49:57:2c:5a:ff:c8:e1:08:26:d9:de:85:bf:54:b3:
7d:7d:10:a6:f1:49:2b:83:3b:c6:ac:e5:4c:54:16:
22:db:9f:e7:b1:8f:d1:1c:09:5d:f5:a5:cb:ed:4d:
05:ca:6c:23:9b:85:33:16:e7:4c:85:ac:fd:66:2a:
ba:7f:e9:64:87:41:0f:63:d7:e5:50:be:76:f0:e2:
f7:12:55:a2:93:6f:00:a1:1e:0a:e1:db:9e:62:44:
bb:07:73:80:bb:8f:79:f3:9e:9f:19:9b:22:08:e7:
fb:5b:4b:63:6a:c8:2f:69:27:01:c7:0c:fc:7f:23:
49:71:74:81:81:c1:e4:98:da:9e:8b:65:20:1b:3c:
4d:7b:f2:69:d3:73:7c:4a:0f:a3:d6:d1:bd:b9:79:
89:0b:26:ba:48:20:5f:aa:d9:a1:51:05:9b:4e:7d:
26:51:94:a7:20:ac:51:8d:48:ab:9e:64:a3:8a:e7:
af:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DB:E8:8F:50:D5:F9:FA:46:E7:AF:9F:FA:91:5F:91:01:8F:87:12
X509v3 Authority Key Identifier:
keyid:3E:7D:47:4C:04:E4:8A:58:93:AF:71:C3:5A:77:CD:D6:82:6F:D3:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pn1HTATkiliTr3HDWnfN1oJv0zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:88:c2:65:cf:39:4b:fd:bd:43:71:14:08:7e:38:db:ed:a7:
97:22:3e:27:db:74:b4:92:e3:c5:77:f3:63:8e:ca:b8:aa:fc:
97:a0:2c:26:81:a8:03:4c:42:f6:bc:d3:1f:fa:d6:ef:12:90:
07:46:2d:aa:54:31:6d:b2:a7:a7:e1:b1:6f:88:5a:62:33:f5:
ad:11:f4:33:96:d7:6a:78:f2:f2:79:55:19:38:81:0f:61:e3:
3b:12:e6:fc:31:5e:c1:e2:10:f0:ad:65:b5:ed:d7:98:10:25:
cf:4c:d9:93:ea:bf:dd:52:6e:25:0f:17:26:fa:22:64:ee:59:
db:94:08:80:6c:41:2b:d3:18:1b:75:36:57:df:4b:03:ab:29:
42:54:f4:b6:d1:a5:97:b9:22:d8:8a:f3:88:ec:3b:08:dc:ea:
78:ef:19:9f:ec:be:40:d6:44:df:28:e7:ae:bd:54:e1:3d:60:
15:8c:ad:bd:f4:f7:f9:9b:fb:a6:67:03:c0:0c:ec:ff:90:d3:
2f:b6:b9:fb:94:83:0e:23:4d:58:ab:f1:e7:78:d5:71:80:e6:
ee:33:ed:17:70:48:14:08:83:9c:42:27:2f:f4:79:63:bb:30:
ef:a9:c7:00:1d:65:13:73:8f:6d:1f:ce:39:59:e5:36:5b:c7:
46:e4:bb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:22 2025 by rpki-client