Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
File: PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft (raw, json)
Hash identifier: VPgx4GYblv+Q+LlQHwmT283MraB3QYdM5qtfsfZ97B0=
Subject key identifier: E9:C8:59:23:B9:65:C7:27:70:8E:54:9D:91:91:2B:A6:F5:BF:50:84
Authority key identifier: 3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
Certificate issuer: /CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Certificate serial: 019A51F53D9969C164C4E5B5FE2D1E08C3C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
Manifest number: 0E54
Signing time: Wed 05 Nov 2025 03:00:17 +0000
Manifest this update: Wed 05 Nov 2025 03:00:17 +0000
Manifest next update: Thu 06 Nov 2025 03:00:17 +0000
Files and hashes: 1: PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl (hash: jB1uI+gesjT2qH6eoztavVdgO5NEnNtkXUX6v4fWTqQ=)
2: Zudt2t67uMUQbMO8N99rmxJB1wQ.roa (hash: SIlAW/DlBSg5+XbRtnFyzPAIYziyY+yFv6/k5lPUFJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:3d:99:69:c1:64:c4:e5:b5:fe:2d:1e:08:c3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Validity
Not Before: Nov 5 03:00:17 2025 GMT
Not After : Nov 6 03:00:17 2025 GMT
Subject: CN=e9c85923b965c727708e549d91912ba6f5bf5084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:86:5d:91:d4:0d:bd:9e:85:fa:0c:44:f0:eb:
09:90:36:5f:ee:5a:d2:f1:09:d4:f3:6f:e1:bd:f3:
48:b4:c9:ee:bc:19:11:5d:a8:1b:2d:4b:21:ad:3b:
2c:51:89:3d:64:55:b6:29:dd:dc:6a:8e:ed:76:c2:
f7:a3:1f:9a:aa:8d:b0:23:67:0a:2e:f6:bc:d5:03:
14:5a:0b:fa:a5:1b:48:d1:e9:46:82:af:8f:2d:8d:
78:b1:69:52:f6:55:a8:a5:b1:c0:85:66:9e:bf:e3:
32:f1:ec:29:42:09:5e:6e:ca:99:09:c6:84:5e:29:
4f:05:d9:8a:96:e3:e1:c6:75:b3:85:70:37:43:76:
c2:17:f6:15:e7:22:ca:07:25:0e:0a:a8:65:2f:6d:
49:82:0f:e7:c6:82:01:07:3d:13:0f:c3:fb:62:c8:
78:59:e0:3e:4b:b3:60:14:4f:9b:cb:c8:eb:15:26:
4a:d3:d3:0c:0b:93:4d:b1:07:02:ce:b2:e7:27:01:
87:3f:a3:ac:b2:69:83:43:0e:37:4d:e6:bc:e2:98:
bc:b2:22:4b:7a:aa:5d:01:37:2a:67:67:75:8a:ac:
b4:fe:c9:e1:0e:00:57:a7:ec:d5:26:35:d9:4f:29:
e0:27:23:2b:de:f0:9f:6f:0c:6b:d1:43:6d:60:44:
71:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C8:59:23:B9:65:C7:27:70:8E:54:9D:91:91:2B:A6:F5:BF:50:84
X509v3 Authority Key Identifier:
keyid:3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f7:e5:af:46:cf:b7:a3:ee:67:3b:2d:08:46:10:fd:6e:93:
3f:0f:fe:2c:d3:73:bf:f0:2e:32:e9:65:c6:d4:58:b6:02:86:
d9:8a:02:a4:7a:f8:99:37:26:58:58:0b:f4:7d:ca:fa:af:2b:
61:1d:2c:48:81:f8:92:6e:89:ec:72:83:6e:9c:46:bf:29:0c:
3e:ab:58:e1:fe:1b:68:0a:fc:dc:e6:a1:06:50:a7:ef:02:cf:
e0:85:fc:67:e2:ba:e6:44:90:48:ab:f2:b9:6c:64:f1:43:46:
9f:8c:7a:c5:14:d8:e1:08:8c:7e:fc:0b:41:be:7f:fe:35:9b:
e0:a2:e0:f2:10:cb:30:e0:4e:6d:71:e9:48:13:f6:ec:40:20:
09:dc:90:2c:f2:03:90:d7:e2:5a:3f:32:4b:45:69:bd:8d:c0:
1d:f8:f8:20:f3:ab:3b:c3:eb:1c:1e:c8:f9:99:0d:75:b1:18:
be:b5:f7:e3:c6:26:dc:28:20:6c:20:01:92:a3:ec:d7:87:ac:
cc:7a:7b:52:e1:1b:a6:e8:89:6d:b6:a1:5d:5b:7c:e6:98:fa:
ad:e2:84:e3:6c:a4:ea:86:46:17:f6:0a:0d:b4:54:d0:f8:f5:
f5:b8:4f:64:3d:84:43:a2:be:4b:b6:e4:8a:58:b4:89:75:10:
5c:7e:80:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:50:21 2025 by rpki-client