Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
File: pS3-y7QxcCl5YaIbfltKPEfeCVs.mft (raw, json)
Hash identifier: yfRbjKdCxt6459PzUpea6IxYXrHc2YHrONKrg/XP5X4=
Subject key identifier: 47:EF:8D:6B:09:CC:E2:25:4E:CC:52:F9:34:5F:03:5E:7B:D1:72:E5
Authority key identifier: A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B
Certificate issuer: /CN=a52dfecbb43170297961a21b7e5b4a3c47de095b
Certificate serial: 019A4EF4246F8181A2E7FA1B5734FF5F7EA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
Manifest number: 091F
Signing time: Tue 04 Nov 2025 13:00:14 +0000
Manifest this update: Tue 04 Nov 2025 13:00:14 +0000
Manifest next update: Wed 05 Nov 2025 13:00:14 +0000
Files and hashes: 1: pS3-y7QxcCl5YaIbfltKPEfeCVs.crl (hash: EACCAkwOaWpXE9M0IFNPA2p+pwD+Mf12rpxwPeIa2mI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:24:6f:81:81:a2:e7:fa:1b:57:34:ff:5f:7e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52dfecbb43170297961a21b7e5b4a3c47de095b
Validity
Not Before: Nov 4 13:00:14 2025 GMT
Not After : Nov 5 13:00:14 2025 GMT
Subject: CN=47ef8d6b09cce2254ecc52f9345f035e7bd172e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:90:50:d9:ea:a8:d1:2c:63:94:6b:86:97:17:
7f:fa:5d:39:2b:1f:18:bb:9f:76:5a:74:c4:26:98:
32:87:a8:f5:9f:b7:58:dd:c8:89:e9:90:c9:8a:87:
eb:36:7d:67:ff:f1:fe:7b:d5:eb:26:a8:38:45:ce:
84:2f:1a:5e:b1:df:a6:c9:91:07:8f:69:ab:12:74:
b3:60:f3:81:11:0b:1c:2d:a6:dd:92:7e:50:b3:19:
0a:ef:c6:38:9a:00:a3:05:c6:38:2d:fd:f8:ba:d5:
d2:81:92:39:d7:67:9b:fa:df:b5:88:43:e2:2a:a8:
c1:1c:fe:d3:ca:54:11:57:54:de:fe:1a:d1:75:a9:
58:fd:3d:33:50:ed:65:85:74:19:d3:89:71:92:0d:
7d:df:3a:86:26:0a:44:10:ed:3e:01:2d:97:18:fd:
09:0d:a5:71:0b:5d:35:40:6a:23:fd:8c:c6:3f:75:
25:e0:76:a8:91:98:9f:b8:89:ff:2d:03:77:8f:bd:
ea:5c:f4:95:d2:c0:a1:d0:7a:14:96:b3:8d:0e:ba:
95:cf:81:40:7c:f3:62:4d:07:31:a2:a2:ce:c8:44:
6c:ca:a2:d7:57:ef:78:7c:ce:b5:91:b7:44:08:0c:
40:03:de:81:c5:e8:d1:da:4e:eb:db:98:79:6d:30:
3f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:EF:8D:6B:09:CC:E2:25:4E:CC:52:F9:34:5F:03:5E:7B:D1:72:E5
X509v3 Authority Key Identifier:
keyid:A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:4f:38:68:9a:6d:07:b8:b8:db:28:3a:09:b0:90:2a:0e:6f:
36:f0:27:f7:91:05:d7:51:e9:7b:3f:8d:a3:2a:25:ce:86:9e:
3e:76:2c:f2:9c:d3:f0:48:ca:6d:14:87:8e:8c:fb:5d:72:76:
04:c3:f5:11:da:83:88:b5:8d:01:97:51:90:d9:3a:94:c2:a3:
db:d1:2d:f4:6f:38:b4:20:d4:5c:7a:4f:75:df:bf:fa:38:91:
08:06:c7:60:68:41:74:0a:41:97:b0:df:88:00:e5:2c:45:a9:
a1:5c:c9:d2:eb:d6:56:4b:c1:f1:1d:4c:84:d4:db:f2:6d:79:
22:a9:fd:43:93:26:1c:db:7b:77:6b:c9:1a:b7:82:3d:b7:cf:
aa:81:6f:be:11:31:a6:9b:6c:76:7c:35:9b:0d:2c:c1:b2:a9:
c6:03:f1:f6:2a:24:fe:39:f6:29:39:f1:d9:d5:6e:3f:3c:cd:
ff:c5:d3:11:47:dc:59:c6:b0:00:c3:12:f3:6e:30:e5:a8:92:
78:9e:1a:7c:eb:79:fa:f9:4b:ee:ee:c5:fb:b8:5e:7f:17:7a:
21:c1:79:31:03:32:8f:51:98:20:ee:09:05:cc:a2:b7:b5:c3:
f3:63:19:e6:99:fb:36:d0:04:9c:8d:2d:3e:81:7f:7e:e3:cb:
dd:be:35:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:16:54 2025 by rpki-client