Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft
File: PqlK-DEYyT_-izYnXtU0mU1not0.mft (raw, json)
Hash identifier: OeUuPlMLqnm15VRrvsCUEoSDOiz51/JQpkcyPgfQllY=
Subject key identifier: A1:ED:90:9D:D5:D4:25:36:48:33:74:19:D9:26:BA:D3:A1:1F:0C:26
Authority key identifier: 3E:A9:4A:F8:31:18:C9:3F:FE:8B:36:27:5E:D5:34:99:4D:67:A2:DD
Certificate issuer: /CN=3ea94af83118c93ffe8b36275ed534994d67a2dd
Certificate serial: 01989F7130F42CF4C27E8F8ACD2A00CCCDED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqlK-DEYyT_-izYnXtU0mU1not0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft
Manifest number: 121E
Signing time: Tue 12 Aug 2025 18:00:52 +0000
Manifest this update: Tue 12 Aug 2025 18:00:52 +0000
Manifest next update: Wed 13 Aug 2025 18:00:52 +0000
Files and hashes: 1: PqlK-DEYyT_-izYnXtU0mU1not0.crl (hash: 4zk9diHaY+yn/SjXhDoiewRlxWT5W5h+p2MHPAO24hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqlK-DEYyT_-izYnXtU0mU1not0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 18:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:71:30:f4:2c:f4:c2:7e:8f:8a:cd:2a:00:cc:cd:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea94af83118c93ffe8b36275ed534994d67a2dd
Validity
Not Before: Aug 12 18:00:52 2025 GMT
Not After : Aug 13 18:00:52 2025 GMT
Subject: CN=a1ed909dd5d4253648337419d926bad3a11f0c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ed:9b:be:55:8a:ef:a9:c2:91:02:0c:3f:4d:
b5:2c:ba:bf:45:6b:1c:25:eb:94:fd:5c:d7:e5:6d:
65:29:bc:6f:6f:0f:b0:92:f1:b2:75:90:39:fd:4f:
4a:dd:13:7d:41:b8:63:41:fe:bf:cf:ea:a2:0d:86:
ca:cb:ff:4b:ed:37:72:94:a2:c9:09:ce:49:40:43:
8f:7d:68:b2:3f:27:9b:bb:0b:b0:91:e8:f1:41:ba:
56:27:73:3b:59:c8:78:60:2b:eb:a8:44:7d:b0:73:
7e:01:1f:98:65:af:ee:2a:51:70:5c:8b:71:ea:4a:
fb:41:81:be:79:b2:14:4c:60:39:fa:da:03:a5:fc:
ff:d5:99:e7:e2:c0:2c:f6:68:99:5a:a6:86:bf:07:
55:86:db:58:17:45:f3:a9:ca:6a:8f:43:00:78:9f:
51:4e:e8:15:d7:c9:02:fd:51:62:a8:d7:4c:da:d5:
60:8e:d8:ec:20:d9:08:54:c2:64:49:d7:fa:1b:8a:
97:a9:f6:18:8d:3c:d7:8d:1c:32:7e:cb:db:2b:a3:
b2:ea:b2:0d:62:3c:8e:eb:6b:ac:f6:4b:05:3a:6b:
37:84:8f:c1:f0:60:f9:58:9c:c4:ff:57:00:66:2b:
09:73:5b:0e:cf:e5:c6:fb:90:bd:2b:6f:0f:58:2c:
98:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:ED:90:9D:D5:D4:25:36:48:33:74:19:D9:26:BA:D3:A1:1F:0C:26
X509v3 Authority Key Identifier:
keyid:3E:A9:4A:F8:31:18:C9:3F:FE:8B:36:27:5E:D5:34:99:4D:67:A2:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqlK-DEYyT_-izYnXtU0mU1not0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f4:9f:d3:52:3e:6e:66:50:48:d7:52:77:ca:f7:df:dd:cc:
81:84:74:71:46:47:de:db:de:c0:b4:ec:8f:3d:43:6c:c1:93:
ee:09:6b:eb:d0:01:09:99:a1:72:d0:c0:17:87:3f:60:d2:21:
de:a1:0c:de:21:c4:9e:2d:c5:8a:27:bd:2d:da:31:c1:a1:99:
1c:6c:d8:24:9b:c5:65:db:9c:f7:35:b5:17:37:13:90:1b:d4:
39:d4:b6:38:ef:9d:2a:b7:39:0e:c7:a1:91:0d:02:32:13:92:
9f:aa:01:f7:fb:86:f9:a8:df:ee:1f:39:6c:58:54:fa:5b:59:
2c:ea:2a:22:70:62:f5:32:1f:60:28:e3:d4:7a:be:50:32:ab:
f7:18:5e:bc:ba:08:40:5a:d8:93:94:c0:ee:94:68:1f:04:7c:
d8:57:07:64:59:87:1b:69:7a:89:83:4f:8c:44:89:99:01:28:
50:87:43:8f:20:de:e8:68:b2:0d:71:94:a4:a1:22:b4:bb:64:
7b:4b:12:0a:b2:ad:bc:bd:37:ca:10:9e:d1:38:2a:e2:16:87:
2b:f0:c0:06:52:f8:50:8c:38:03:3c:82:7c:c7:a5:82:d8:ba:
dc:a0:ab:90:16:36:10:14:ba:92:96:dd:f9:e0:0a:96:5f:08:
d4:d4:91:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:27:58 2025 by rpki-client