Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
File: PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft (raw, json)
Hash identifier: dKWqOIew9qyhioB+4y6Z90XnSVGRcGn6iCveOSeCN5U=
Subject key identifier: 6E:BD:D5:D0:97:B6:4F:1D:E5:83:4C:73:A8:B4:E5:F8:4F:85:1B:E9
Authority key identifier: 3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1
Certificate issuer: /CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
Certificate serial: 01989592D10BF8A5190F79F994746B3C6924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
Manifest number: 11FE
Signing time: Sun 10 Aug 2025 20:01:23 +0000
Manifest this update: Sun 10 Aug 2025 20:01:23 +0000
Manifest next update: Mon 11 Aug 2025 20:01:23 +0000
Files and hashes: 1: PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl (hash: 5etA/3O5VzFg1HgGxJhNW5cDp0mC5GUvZM/OuQWlvX8=)
2: W_v27Hupk3RRQBILYKusMtNhoAc.roa (hash: yWY4EAVlw3dwpD2kqQElXOLSvOEEYUa61TWmAID32CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 20:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:92:d1:0b:f8:a5:19:0f:79:f9:94:74:6b:3c:69:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
Validity
Not Before: Aug 10 20:01:23 2025 GMT
Not After : Aug 11 20:01:23 2025 GMT
Subject: CN=6ebdd5d097b64f1de5834c73a8b4e5f84f851be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bd:8a:df:82:94:53:37:ea:99:d5:fc:71:ef:
44:50:70:70:f6:09:01:88:ac:94:dc:6e:64:2b:19:
bd:1b:52:8d:83:09:85:db:8b:4f:ab:81:59:c8:64:
cc:b6:cd:6b:76:fb:4b:e4:81:69:31:f8:a0:49:66:
41:4c:3d:87:39:7e:c0:71:59:68:f4:bb:ed:d9:85:
00:bb:a0:a1:4f:df:5d:a1:44:18:e5:a5:0a:ce:0e:
d6:0e:fd:2b:cd:6c:52:0f:13:21:3d:ab:4d:c2:14:
63:cc:88:26:14:0f:23:f1:83:61:f7:dd:98:84:e3:
fd:94:f5:e3:c8:72:eb:23:cd:16:15:e6:4a:c0:2f:
7d:0b:02:43:c0:7e:31:8b:85:77:ac:0f:8b:21:26:
73:51:6d:e8:f3:05:31:ed:f4:4a:62:40:73:26:d3:
96:2c:15:23:14:32:a3:81:bd:e8:60:99:32:20:0a:
99:1b:85:ba:36:ca:9a:c6:08:67:86:17:6b:b1:74:
c4:9b:2e:5b:1d:e1:16:37:4a:87:d6:4b:cc:ed:61:
a3:d0:5b:83:a3:c9:5c:f6:4b:79:b1:03:b5:50:2c:
b4:c6:fc:56:23:bd:96:38:cf:ca:90:f6:81:a4:1a:
04:27:7e:e5:d7:ce:a3:4d:85:1d:d1:a0:2b:53:f5:
58:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BD:D5:D0:97:B6:4F:1D:E5:83:4C:73:A8:B4:E5:F8:4F:85:1B:E9
X509v3 Authority Key Identifier:
keyid:3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:84:db:89:e8:60:58:49:37:60:0e:b2:4a:0e:b5:1a:8b:d8:
4d:3f:a1:86:14:14:4c:ee:ff:2f:89:68:df:07:76:7a:84:21:
e5:90:40:8c:77:e1:e2:ab:24:8c:aa:ab:cd:f9:b6:b0:5d:29:
57:7f:39:fc:48:02:35:f5:88:73:c7:1b:6f:ec:67:94:8c:54:
7d:1f:78:50:86:89:0d:a6:de:a1:ca:d6:08:bd:c4:87:85:82:
96:a4:6b:93:26:f6:a4:52:48:62:56:ca:cc:f1:47:4c:08:25:
0a:91:c9:3c:f4:74:61:80:eb:20:1f:77:02:e4:92:4a:38:54:
84:7f:17:b7:5f:14:77:58:f6:5b:5c:2a:f9:0c:a9:4c:29:07:
93:7d:0c:a6:f0:bb:d0:a1:5e:6d:f9:5c:4c:49:1b:d6:9f:6d:
f7:3b:d8:38:40:60:d3:ef:5f:17:4c:be:44:f2:a4:22:58:50:
3f:2c:9c:ea:69:f6:4f:2a:17:e7:b5:88:b9:01:db:06:88:a1:
f1:6e:95:5a:fc:a7:86:7f:cf:62:64:7c:50:a2:5e:da:5f:04:
a3:3a:28:57:97:fa:04:2f:02:58:6a:5e:33:4b:44:e7:eb:39:
d9:f3:04:79:0b:db:0e:9e:91:0c:e2:68:f9:e6:8b:44:5f:d4:
e0:23:69:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:09:54 2025 by rpki-client