Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
File: PQG9lJxV7QfnAkLhUDPQqEdKnho.mft (raw, json)
Hash identifier: WN40ZtirEtwIfQ3c4FPbgLkOCsDrTJVJ1SI1R/4SR8M=
Subject key identifier: 7C:A7:D7:2F:29:1F:3F:07:D7:03:AE:DF:F3:F4:76:0B:23:DE:E1:33
Authority key identifier: 3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
Certificate issuer: /CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Certificate serial: 019A53E3B18E84CB02F59DCE37A7466B5BE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
Manifest number: 05EE
Signing time: Wed 05 Nov 2025 12:00:22 +0000
Manifest this update: Wed 05 Nov 2025 12:00:22 +0000
Manifest next update: Thu 06 Nov 2025 12:00:22 +0000
Files and hashes: 1: PQG9lJxV7QfnAkLhUDPQqEdKnho.crl (hash: NLoYKFCrRoRYjpPml0HA+JTQL5wGSkd1sltDD4YpHlY=)
2: wTHnefFYASN9t7OgaDJP2pTz5W4.roa (hash: 9oC2Jer2cW2AbqdUqYgPoU7bU/Jm0xDFHVun+XWYaKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:b1:8e:84:cb:02:f5:9d:ce:37:a7:46:6b:5b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Validity
Not Before: Nov 5 12:00:22 2025 GMT
Not After : Nov 6 12:00:22 2025 GMT
Subject: CN=7ca7d72f291f3f07d703aedff3f4760b23dee133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d4:da:dd:34:53:38:da:93:4c:62:fb:60:7f:
7f:27:60:f6:97:85:e7:e6:58:d7:5d:ef:f4:88:b1:
cf:b2:01:8a:a1:57:de:4c:84:5c:f1:b4:96:ba:47:
ed:88:20:fd:27:77:5f:60:ad:08:52:62:49:fb:c8:
4d:2a:30:32:15:ab:6e:3c:32:ef:49:b4:39:c0:a4:
12:74:18:9f:55:e8:58:b3:c6:dc:a0:4c:de:d5:8e:
17:95:fd:d6:ef:47:7a:fc:47:4f:3c:91:85:76:f7:
35:bc:87:03:19:13:ef:59:43:1d:c5:5b:af:6e:42:
b3:bc:8d:11:a9:19:7d:f2:86:8b:ab:45:42:ce:a8:
54:2b:71:0f:b0:aa:e0:71:87:a8:a4:d5:fd:e6:e9:
c1:6d:4b:8a:7a:ca:c7:51:d4:95:04:5f:cb:04:14:
23:c0:05:33:09:35:38:b6:0c:18:0a:f5:2c:0f:12:
23:72:86:6f:b5:30:20:09:f8:66:83:7d:98:ba:2a:
0d:4c:5a:9f:e3:9c:d5:59:fd:6d:51:63:40:fb:c4:
03:f1:80:2f:79:c1:45:6d:f2:b9:41:88:07:d7:d0:
88:06:a3:99:e4:ca:c9:d6:15:28:4a:e0:dc:cb:8c:
7c:98:92:5a:db:9f:14:73:90:27:49:c7:ba:3e:0e:
fa:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A7:D7:2F:29:1F:3F:07:D7:03:AE:DF:F3:F4:76:0B:23:DE:E1:33
X509v3 Authority Key Identifier:
keyid:3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:b6:05:42:84:e2:97:19:79:8c:60:2b:2a:c6:fe:d3:9d:ac:
10:0e:82:21:e5:bf:5b:54:6b:96:24:2f:03:fa:bc:96:a0:61:
a7:42:67:da:3c:86:88:55:ca:d5:ce:0a:96:83:09:47:39:47:
c9:d0:46:81:80:95:64:77:20:ec:f7:16:f6:64:37:ae:7f:ec:
35:a7:bb:e5:a3:67:4d:8d:86:3e:47:98:7d:f5:8e:5d:b8:c7:
b6:e4:35:42:dd:e5:ff:0c:ac:45:77:8b:9d:60:8b:e4:e0:9d:
12:20:4d:28:fc:af:d9:41:c6:c0:1e:53:87:ff:20:a3:27:12:
35:1f:99:3b:29:10:79:83:88:0f:28:3d:5a:a1:35:39:bf:78:
10:ba:68:98:8a:a2:47:46:6f:91:2c:dc:36:b8:77:60:15:39:
55:b5:01:56:d6:f3:95:7f:06:f6:50:95:3f:9a:81:a9:a7:8a:
0c:30:5a:f1:2d:e9:33:27:14:7c:3a:5e:86:8e:5e:ee:a7:65:
61:bc:6e:26:73:25:32:ac:ee:79:34:58:46:df:72:0e:ad:26:
7d:fc:45:d8:47:d4:23:64:85:80:c8:42:57:eb:07:65:8d:77:
75:75:2d:6a:0f:b1:c4:d2:ea:f4:bd:1c:08:80:c2:77:3b:90:
13:a7:66:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:45:53 2025 by rpki-client