Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft
File: PqlK-DEYyT_-izYnXtU0mU1not0.mft (raw, json)
Hash identifier: ajgxNMgBkgrPu8WYByUrpK1na8DkxPhfrxOH1gSwPMM=
Subject key identifier: 9F:11:50:2D:C9:00:82:11:97:8F:9C:88:40:DF:F1:93:99:82:F8:5D
Authority key identifier: 3E:A9:4A:F8:31:18:C9:3F:FE:8B:36:27:5E:D5:34:99:4D:67:A2:DD
Certificate issuer: /CN=3ea94af83118c93ffe8b36275ed534994d67a2dd
Certificate serial: 019A50073CE8F3F242530E3FE2FCCF92FEEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqlK-DEYyT_-izYnXtU0mU1not0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft
Manifest number: 12FE
Signing time: Tue 04 Nov 2025 18:00:42 +0000
Manifest this update: Tue 04 Nov 2025 18:00:42 +0000
Manifest next update: Wed 05 Nov 2025 18:00:42 +0000
Files and hashes: 1: PqlK-DEYyT_-izYnXtU0mU1not0.crl (hash: /Sz+ktI6uwupr6pzfrYdDgkcDe6RIIsLE+jQpjaDkgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqlK-DEYyT_-izYnXtU0mU1not0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:3c:e8:f3:f2:42:53:0e:3f:e2:fc:cf:92:fe:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea94af83118c93ffe8b36275ed534994d67a2dd
Validity
Not Before: Nov 4 18:00:42 2025 GMT
Not After : Nov 5 18:00:42 2025 GMT
Subject: CN=9f11502dc9008211978f9c8840dff1939982f85d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e4:9d:d2:8c:a2:7a:c4:6d:6a:21:7f:62:14:
c0:3b:c9:d9:78:31:fd:8e:d6:7c:a0:39:ef:f5:e8:
90:2b:da:46:a8:b0:e2:71:85:c3:38:b8:3f:2d:3c:
9b:6d:e8:82:67:8a:7f:2a:42:70:07:4a:a5:ff:df:
4a:58:43:ce:16:31:27:18:df:0d:12:d9:c9:f3:ed:
3e:35:7f:ae:14:ad:31:c0:60:87:9b:40:b7:4b:c4:
4d:02:2f:ec:84:13:68:5d:1a:2f:ac:4c:5c:59:63:
8d:40:f6:9c:19:29:f0:ee:9e:2b:90:9b:3c:a5:7e:
4c:17:49:ea:b3:7b:c2:ba:e3:73:c4:d3:1f:28:13:
9f:77:af:c6:5a:d0:a2:2c:c0:1a:a4:c9:b7:db:00:
10:18:22:da:57:dc:8e:02:c9:c1:7c:da:b1:47:56:
7c:d8:ed:e1:e3:e3:8f:d1:d5:1f:7a:2a:d1:43:b0:
b8:4d:d8:be:8e:a0:cb:a1:34:ce:fc:69:97:c6:96:
31:5d:26:d0:b3:3c:b1:cf:07:e9:ec:2c:ad:0d:0d:
97:d9:c7:61:fd:d8:ff:40:bb:b0:b6:a0:8d:78:4d:
40:cb:c4:f3:5f:51:ad:94:38:b4:be:a8:7f:7e:c8:
18:27:10:1e:fd:bf:b1:30:9f:67:1c:e5:1f:0e:23:
21:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:11:50:2D:C9:00:82:11:97:8F:9C:88:40:DF:F1:93:99:82:F8:5D
X509v3 Authority Key Identifier:
keyid:3E:A9:4A:F8:31:18:C9:3F:FE:8B:36:27:5E:D5:34:99:4D:67:A2:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqlK-DEYyT_-izYnXtU0mU1not0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:04:24:31:06:b7:55:00:71:5c:02:ac:b0:27:66:3c:e4:6f:
69:07:74:43:67:d2:cf:99:cb:2d:c2:b9:52:b4:36:4b:d2:87:
a7:55:9b:0b:24:52:7c:e1:18:1d:c2:62:aa:ed:50:79:bc:ac:
1d:2f:e7:74:47:95:e3:39:fa:9c:81:ab:03:75:2f:d8:28:d1:
97:67:fe:69:fe:af:b7:f5:51:fb:28:bd:59:80:1b:6a:0c:60:
29:77:27:d5:5f:30:4f:22:52:e6:a9:37:f1:41:21:93:5c:60:
72:00:18:5d:85:b1:40:46:41:e1:5d:47:cd:5a:be:37:e0:95:
35:91:13:e3:fe:a5:e1:17:01:7a:ab:af:3e:22:13:98:da:cc:
43:93:da:20:0a:31:79:1f:81:16:a6:c7:e4:58:01:84:f7:fd:
1a:8c:59:35:a1:48:97:9f:68:18:4d:ca:0a:b0:40:51:fa:40:
e6:59:6e:31:45:81:52:b2:9c:2c:ed:f0:b6:64:ee:a8:db:54:
51:93:d5:b0:34:14:99:ac:e4:24:a3:14:8d:42:a4:da:e8:5a:
9e:52:9c:bf:aa:42:9a:0e:c7:05:52:08:4a:88:37:89:d4:f5:
69:cb:c8:38:e9:f3:14:6a:2c:42:ed:29:2e:9d:8f:81:7f:1c:
d4:11:4c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:21:43 2025 by rpki-client