Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
File: PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft (raw, json)
Hash identifier: BphuOTBh5T+jYzcrFnpw+qDChMXiIQrXfCDftl1oWlQ=
Subject key identifier: 04:2F:73:37:03:3F:0E:67:63:9F:F0:E6:DE:BE:BF:2A:CC:7B:CC:4A
Authority key identifier: 3E:A6:ED:31:F9:7F:37:C5:E5:C5:50:73:2F:85:D2:46:90:96:2C:EF
Certificate issuer: /CN=3ea6ed31f97f37c5e5c550732f85d24690962cef
Certificate serial: 019A4EF425AA0457DD882B8A5396DB00924E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
Manifest number: 1708
Signing time: Tue 04 Nov 2025 13:00:14 +0000
Manifest this update: Tue 04 Nov 2025 13:00:14 +0000
Manifest next update: Wed 05 Nov 2025 13:00:14 +0000
Files and hashes: 1: PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl (hash: 26+5wuPYjuU6c6H4So4Uqgj8Rls6yXU7Fnf7eVyZynI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:25:aa:04:57:dd:88:2b:8a:53:96:db:00:92:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea6ed31f97f37c5e5c550732f85d24690962cef
Validity
Not Before: Nov 4 13:00:14 2025 GMT
Not After : Nov 5 13:00:14 2025 GMT
Subject: CN=042f7337033f0e67639ff0e6debebf2acc7bcc4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:92:a3:2e:bb:69:c7:0b:c4:a5:95:3a:c0:8f:
bf:5f:61:a8:24:18:f1:37:28:62:43:ca:f8:1c:da:
d1:28:33:09:a4:03:5d:48:1a:38:00:5b:74:2c:35:
e9:13:9b:a8:1c:29:31:54:b5:71:1b:e2:c9:87:54:
37:f3:93:f3:58:20:53:63:55:94:5e:68:62:fa:e8:
9e:b1:9b:91:79:72:5f:4a:3b:13:f0:68:52:f7:e0:
89:58:af:d3:fd:a5:d7:29:f5:37:7a:88:32:b4:ba:
37:a7:59:9f:5e:df:0e:71:10:8f:33:95:02:ac:d3:
2d:1f:8e:ac:dd:1e:f9:e3:60:e4:30:d8:4d:2f:e8:
11:10:e8:3b:22:ab:92:ff:f8:e8:7e:f9:07:50:81:
93:90:af:30:bb:18:bd:24:4c:1c:db:1b:d3:1b:1d:
d6:cf:6f:f4:f2:d6:41:08:ae:76:f1:13:0c:fd:8e:
0c:26:4a:40:23:4c:13:83:70:2c:f1:cc:41:9a:f9:
11:6e:92:43:de:82:ab:0c:96:ff:1e:3d:ec:67:74:
02:bf:fd:6f:c0:9b:b0:0b:89:ab:64:38:17:2a:a8:
09:d5:7c:d6:e5:86:00:ce:d9:07:c0:8a:d8:dd:a9:
ec:8a:20:39:d0:52:10:03:14:ed:19:c1:dd:8f:62:
95:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2F:73:37:03:3F:0E:67:63:9F:F0:E6:DE:BE:BF:2A:CC:7B:CC:4A
X509v3 Authority Key Identifier:
keyid:3E:A6:ED:31:F9:7F:37:C5:E5:C5:50:73:2F:85:D2:46:90:96:2C:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e6:71:ab:ab:11:94:63:c2:b0:0c:5b:55:df:fe:9b:5f:12:
4f:ce:0f:e6:6b:00:f8:b2:3c:57:d5:6c:00:b9:88:4d:d4:31:
b7:2a:3c:81:3e:31:69:2b:b5:3a:42:9f:e3:40:dc:cc:fe:33:
fd:27:e9:fe:10:cd:a1:c6:94:23:fd:2a:f6:5f:75:e5:5a:39:
36:98:90:40:3b:1d:6b:64:c3:d2:0a:07:08:b4:fc:49:64:f8:
db:11:e5:1c:0d:68:e3:5a:16:42:16:db:c2:b2:f3:57:88:2c:
91:b9:d5:2b:8f:48:4f:24:a4:10:f0:8a:a7:a1:40:a2:4f:b1:
97:9e:8d:49:e2:64:77:a5:42:b9:2c:dc:d6:93:81:ba:31:d9:
93:3e:a7:ea:be:a8:75:16:9c:c8:1f:3b:6e:83:b1:e6:0b:83:
10:2b:17:3d:1c:71:97:9c:78:3a:21:b9:1b:83:30:62:3c:99:
b1:91:d6:8d:1b:79:0a:ef:00:6f:00:74:db:36:b6:25:b2:ae:
7c:52:9e:5a:f2:cd:93:dc:38:36:28:19:0e:e8:34:10:70:ac:
9a:60:4b:de:eb:ef:90:b8:b6:72:5f:92:c8:45:69:18:6a:60:
5e:5e:10:9d:0d:b2:47:fa:bb:62:3f:5b:a4:72:99:af:dd:48:
d9:fe:1f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:33:09 2025 by rpki-client