Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft
File: PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft (raw, json)
Hash identifier: vvPYwAf3JqLdGKI6o1IImrMaEdHcBhBiORh+LKAysMk=
Subject key identifier: 61:82:6C:26:03:95:8C:FA:84:8B:23:00:8F:C9:0C:6D:7E:D3:6A:E5
Authority key identifier: 3D:0E:F4:35:8A:DB:04:0F:33:3D:93:61:A4:26:1E:A0:E5:0D:38:AB
Certificate issuer: /CN=3d0ef4358adb040f333d9361a4261ea0e50d38ab
Certificate serial: 019A50E3827E3D9A522041A5DAFB74DD1E39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQ70NYrbBA8zPZNhpCYeoOUNOKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 22:01:18 +0000
Manifest this update: Tue 04 Nov 2025 22:01:18 +0000
Manifest next update: Wed 05 Nov 2025 22:01:18 +0000
Files and hashes: 1: PQ70NYrbBA8zPZNhpCYeoOUNOKs.crl (hash: jDb3U1WwO1LdgGClvVgwmpZmVUo/AlrnFnBU6o3nb1I=)
2: baHbcRR9kf1ghjeGFAS82cVbM5E.roa (hash: ryV49aEsL3mdbzWN2VnZ4BiiOTM51N9BlYGHQV8L9fI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQ70NYrbBA8zPZNhpCYeoOUNOKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:82:7e:3d:9a:52:20:41:a5:da:fb:74:dd:1e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0ef4358adb040f333d9361a4261ea0e50d38ab
Validity
Not Before: Nov 4 22:01:18 2025 GMT
Not After : Nov 5 22:01:18 2025 GMT
Subject: CN=61826c2603958cfa848b23008fc90c6d7ed36ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a5:aa:77:87:16:fa:7d:60:6d:1e:f4:74:3d:
f9:ba:bd:8a:e1:ef:47:ab:fb:22:81:8e:ee:30:14:
38:79:66:2f:48:a8:6e:c6:1d:2c:6c:1e:72:a2:56:
76:55:6a:f0:8a:8d:9b:45:9a:06:36:40:17:aa:9f:
87:db:37:e0:dd:a0:13:83:73:8b:06:63:e4:5f:63:
9c:57:25:2b:96:4c:47:6a:7b:99:bc:6d:d8:98:c8:
38:fa:2d:eb:75:5a:88:80:da:b7:47:6a:ff:9d:1a:
06:62:6c:ae:0d:6b:98:af:1d:5c:22:ab:b2:1e:e2:
6f:e9:9c:64:8d:8d:ad:af:a9:11:c6:98:2f:2b:5a:
99:46:95:8f:d1:8d:88:f2:81:40:ee:99:39:c0:75:
9e:6b:62:0d:b4:7b:c5:c7:06:5b:60:57:28:61:2d:
dd:28:fa:ad:fa:d1:fb:5b:1a:a7:13:bb:af:b0:6d:
70:a0:3e:99:fc:94:93:dc:d0:4c:a4:6c:62:85:b2:
3a:55:a2:76:10:2b:aa:15:f4:8c:05:f1:c0:c7:d1:
92:e7:47:e1:59:4f:2e:72:d5:9b:c0:e4:5e:39:00:
97:fe:8a:83:7e:2f:05:9e:38:51:ef:c6:74:0f:44:
4c:24:59:72:d7:06:48:1d:d5:41:cf:03:7c:03:d5:
f6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:82:6C:26:03:95:8C:FA:84:8B:23:00:8F:C9:0C:6D:7E:D3:6A:E5
X509v3 Authority Key Identifier:
keyid:3D:0E:F4:35:8A:DB:04:0F:33:3D:93:61:A4:26:1E:A0:E5:0D:38:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQ70NYrbBA8zPZNhpCYeoOUNOKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:4a:05:30:07:7c:c4:e2:24:0d:77:3b:c2:f0:2a:8a:36:ce:
f6:61:a0:54:47:9d:b1:1b:3d:86:4d:1c:a0:5b:5d:db:5a:77:
54:13:f0:c8:5f:a4:59:72:54:67:9d:d9:23:57:bb:48:a1:66:
02:87:a0:27:39:9a:ad:3a:82:19:7f:59:42:76:b7:49:b2:13:
35:36:14:92:aa:50:5a:db:fe:75:8e:3b:63:58:93:04:24:1b:
f8:f6:85:ad:86:6d:19:47:d6:f7:44:c2:aa:99:d4:af:e2:33:
0a:a7:54:12:4c:f5:59:88:47:5d:98:76:f5:38:42:07:e1:1c:
a5:d0:08:f3:ee:9f:01:0e:3a:07:91:71:91:35:58:06:64:08:
6a:2a:17:94:b0:65:2e:2e:f5:95:99:03:c1:c4:57:a4:08:94:
fc:62:c4:ae:a2:4d:8e:78:c9:3e:ff:94:ed:80:6b:90:62:fc:
a1:37:bc:cc:9e:6a:8f:e7:ef:7c:66:71:10:02:59:3f:29:f6:
0e:51:f1:7c:e7:36:e1:78:78:22:0a:ff:0b:99:8e:e0:18:45:
8f:4e:a2:70:f4:31:42:34:1d:b3:40:c2:64:97:07:f6:90:44:
77:6f:f4:7e:09:ce:f1:e0:b5:fb:3d:0a:9c:10:0f:e7:71:56:
61:58:cf:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:18:29 2025 by rpki-client