Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
File: pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft (raw, json)
Hash identifier: ThgrgV445gzy89TvwhQ79+yE67Z1gI1FVuXj6tYPi2s=
Subject key identifier: 18:E7:52:11:31:4D:4C:29:F4:0F:FD:B3:36:44:F3:6D:A7:4B:BE:FF
Authority key identifier: A5:C2:28:64:E3:92:0E:16:0A:D9:B8:4F:F0:1D:A8:66:AA:40:97:85
Certificate issuer: /CN=a5c22864e3920e160ad9b84ff01da866aa409785
Certificate serial: 019A4DE1BC54F1E349CCCB169E0CB246348A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
Manifest number: 05E0
Signing time: Tue 04 Nov 2025 08:00:30 +0000
Manifest this update: Tue 04 Nov 2025 08:00:30 +0000
Manifest next update: Wed 05 Nov 2025 08:00:30 +0000
Files and hashes: 1: pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl (hash: B6e44jFYsfe2kDrIXvJt5H1+k01B1+QFcnsZq7Ptp+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:bc:54:f1:e3:49:cc:cb:16:9e:0c:b2:46:34:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c22864e3920e160ad9b84ff01da866aa409785
Validity
Not Before: Nov 4 08:00:30 2025 GMT
Not After : Nov 5 08:00:30 2025 GMT
Subject: CN=18e75211314d4c29f40ffdb33644f36da74bbeff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dd:c9:af:a5:32:35:66:7a:86:40:48:e6:63:
0a:26:b8:07:eb:4c:be:a0:51:07:e6:aa:47:56:93:
48:03:19:9e:7e:48:c7:b9:8c:e1:83:02:b5:e8:af:
98:30:38:43:26:f3:76:e4:40:72:f3:9e:46:14:73:
66:61:fa:4c:71:d8:38:74:15:28:d0:61:12:90:61:
7a:9c:b6:a5:6e:ed:14:f1:1a:e8:22:9a:21:9b:b7:
00:d9:78:c6:05:3d:d0:00:69:5f:d2:8c:91:19:d5:
2d:d0:35:e5:89:f1:db:81:51:29:72:74:fe:79:32:
0a:3e:3d:73:e2:6f:a4:76:ad:71:65:70:63:3a:f5:
ef:0e:4f:9b:7f:68:0e:b3:9e:86:4a:6e:c6:66:07:
3f:fd:1a:ce:bb:ab:92:8d:bb:79:c5:26:90:c8:be:
b5:99:6e:2e:e4:38:b8:a5:d8:38:c6:52:d7:63:dd:
f9:27:7e:08:71:e4:41:ca:b0:12:9f:ce:c6:cc:aa:
c0:19:9a:0d:0b:90:f9:be:44:98:38:7b:69:f9:34:
98:7a:de:f8:ac:77:5c:80:e3:16:fe:74:53:a5:c1:
c1:d1:5a:9e:f3:c9:3f:f1:7d:a0:74:93:33:b3:f6:
04:75:b7:4f:1c:ac:0e:f9:fd:7d:8b:f2:86:9a:50:
4d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E7:52:11:31:4D:4C:29:F4:0F:FD:B3:36:44:F3:6D:A7:4B:BE:FF
X509v3 Authority Key Identifier:
keyid:A5:C2:28:64:E3:92:0E:16:0A:D9:B8:4F:F0:1D:A8:66:AA:40:97:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:3f:95:ce:b3:bf:a3:bb:76:93:75:81:b4:f0:b3:6f:1f:40:
ea:98:a1:2c:dc:c2:56:f5:ba:57:af:a0:9a:9c:ee:b0:dd:0f:
51:72:64:29:c6:1d:ed:ff:12:1b:93:1f:ef:10:58:3a:3e:d4:
13:99:a7:49:4f:0b:16:7b:a3:b7:00:82:20:02:c2:61:54:63:
7a:ec:d8:db:de:c4:45:ac:46:8c:63:7b:96:fe:b1:67:86:61:
8f:55:38:88:cf:4a:50:63:82:c7:29:66:e4:4a:ab:c5:13:e3:
f6:fc:60:af:d3:5b:df:53:ea:c2:e6:38:09:c8:ef:96:60:59:
d2:89:9a:46:6c:bb:a9:c4:0c:46:bd:4c:87:68:b2:d5:00:aa:
0e:4a:b7:c1:19:ec:fa:0f:5e:ba:38:d6:3e:54:bd:69:c3:0d:
3f:f6:dd:13:9f:5d:35:78:16:cf:95:89:72:2f:a0:c0:30:41:
9d:7b:e5:1c:7b:0b:10:bc:e9:fd:d1:f5:b6:63:e7:bb:d3:b0:
cd:2e:33:6c:53:26:b7:ac:b8:9e:25:fd:95:62:99:71:38:a8:
d2:9c:e1:18:59:36:00:00:dd:11:83:3b:c2:42:93:32:aa:64:
60:3b:8c:a9:c0:2d:d7:b8:c7:fb:9d:7b:f2:b8:98:49:fa:e7:
e9:39:96:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:37 2025 by rpki-client