Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/67b254-56f4-4e89-a99d-caa329181964/1/PnpcKTN0JfqBOVVRcmyMK35MUIc.mft
File: PnpcKTN0JfqBOVVRcmyMK35MUIc.mft (raw, json)
Hash identifier: 1XUa+y1BDptM5Ydq3R7TPCKTQFHn9gDchaxuFPpAj7Y=
Subject key identifier: 31:3E:87:DB:43:86:1B:DF:9E:1D:D8:53:9F:C3:98:EB:A1:D4:EB:BB
Authority key identifier: 3E:7A:5C:29:33:74:25:FA:81:39:55:51:72:6C:8C:2B:7E:4C:50:87
Certificate issuer: /CN=3e7a5c29337425fa81395551726c8c2b7e4c5087
Certificate serial: 019A4D745DB6CC93B0F0558A619CC878CDBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnpcKTN0JfqBOVVRcmyMK35MUIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/67b254-56f4-4e89-a99d-caa329181964/1/PnpcKTN0JfqBOVVRcmyMK35MUIc.mft
Manifest number: 0454
Signing time: Tue 04 Nov 2025 06:01:03 +0000
Manifest this update: Tue 04 Nov 2025 06:01:03 +0000
Manifest next update: Wed 05 Nov 2025 06:01:03 +0000
Files and hashes: 1: PnpcKTN0JfqBOVVRcmyMK35MUIc.crl (hash: MF6y6IxHjJgUmSIklKnlLZul4Fafl77MA3SiCTFJudY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/67b254-56f4-4e89-a99d-caa329181964/1/PnpcKTN0JfqBOVVRcmyMK35MUIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/67b254-56f4-4e89-a99d-caa329181964/1/PnpcKTN0JfqBOVVRcmyMK35MUIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnpcKTN0JfqBOVVRcmyMK35MUIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:5d:b6:cc:93:b0:f0:55:8a:61:9c:c8:78:cd:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e7a5c29337425fa81395551726c8c2b7e4c5087
Validity
Not Before: Nov 4 06:01:03 2025 GMT
Not After : Nov 5 06:01:03 2025 GMT
Subject: CN=313e87db43861bdf9e1dd8539fc398eba1d4ebbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ee:8a:5c:d6:39:49:3b:24:cc:ab:8c:d6:cf:
8e:ef:de:e1:93:cb:3a:fc:60:34:16:ca:09:63:32:
ec:e9:ef:ec:1d:72:2b:63:79:23:ba:cb:9e:71:39:
6f:45:e2:66:88:ac:03:75:3f:5c:e9:94:ba:cc:8c:
6b:a4:6a:48:40:39:1d:13:91:b6:fb:55:90:e3:a1:
e0:cc:58:86:c0:a0:2d:9b:f6:b8:06:34:c7:1f:33:
f1:13:14:49:4f:43:cc:6f:7e:67:28:5b:d4:c5:fe:
03:22:6e:ee:74:e7:ef:da:cb:98:bf:ed:fa:a4:d0:
65:99:c8:1b:fe:15:20:29:3d:94:58:03:49:0b:90:
82:db:8e:70:4a:3a:4f:d4:a4:78:6c:72:a8:b8:c6:
28:e6:66:cc:44:87:a3:81:7f:05:52:ee:49:a8:92:
dd:82:4b:46:34:8b:90:bb:f2:2f:76:e7:5c:e3:92:
19:17:f5:0f:a8:87:77:82:d6:dc:a2:ff:75:90:53:
64:fb:b1:1e:e4:18:cb:12:70:5a:13:d4:35:5e:62:
38:44:2b:89:f6:1f:3c:b6:2e:6e:d0:03:41:0f:5e:
8c:bc:bd:62:b9:d7:c9:74:9e:3d:73:95:60:12:41:
ae:0d:bc:7f:6c:8f:3e:8d:c9:15:f3:68:0f:ac:09:
d2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3E:87:DB:43:86:1B:DF:9E:1D:D8:53:9F:C3:98:EB:A1:D4:EB:BB
X509v3 Authority Key Identifier:
keyid:3E:7A:5C:29:33:74:25:FA:81:39:55:51:72:6C:8C:2B:7E:4C:50:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnpcKTN0JfqBOVVRcmyMK35MUIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/67b254-56f4-4e89-a99d-caa329181964/1/PnpcKTN0JfqBOVVRcmyMK35MUIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/67b254-56f4-4e89-a99d-caa329181964/1/PnpcKTN0JfqBOVVRcmyMK35MUIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:eb:d6:57:24:bf:bf:28:55:67:9a:b2:7c:98:40:51:95:62:
9c:97:9b:61:1e:92:72:d0:b8:0b:f1:30:e1:34:10:46:bc:e1:
21:fd:b9:e8:a3:be:79:5d:dc:3f:70:21:a9:02:ca:ec:c1:99:
01:a8:7f:ee:89:43:d2:3e:50:34:73:7c:fa:5c:b6:2d:30:8b:
da:11:72:a1:de:49:9b:79:38:99:13:9e:90:61:7d:d5:49:e9:
c2:67:4d:37:05:49:c2:e5:82:14:24:53:f1:85:43:45:23:bb:
44:ca:0f:81:93:19:cc:6d:b8:b0:de:a1:bc:94:06:da:83:df:
e6:02:6d:59:84:f7:36:4d:e7:90:d6:f7:5e:6c:63:7c:14:7d:
60:97:21:e5:ed:42:8a:02:e7:00:10:ed:fa:67:81:fc:ce:a6:
e6:77:dd:52:a6:a1:e7:61:cc:e8:40:8a:76:9f:a0:44:da:28:
e6:6b:82:94:4c:1a:7d:6c:05:2f:96:76:2c:9c:74:ea:54:01:
21:b9:42:ee:4a:e1:3f:ed:6f:6c:cc:0d:c1:6f:7b:29:2d:ea:
d7:17:13:56:c0:62:fc:c5:e2:bc:e0:1c:e7:23:00:e0:dd:c7:
9b:ef:9b:c4:54:13:04:1c:7c:52:a5:91:84:1e:cb:83:16:25:
ef:14:5f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:59:10 2025 by rpki-client