Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
File: PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft (raw, json)
Hash identifier: ZVvYjlv66L99Or9XJUdHb8eoRzOYVgeuB60ZM9aF1vo=
Subject key identifier: B7:06:20:92:ED:F6:77:23:B7:B9:6B:2F:58:C9:BD:74:9D:3E:B1:E8
Authority key identifier: 3C:CA:84:9B:37:50:15:F4:33:E9:A2:40:EC:AB:F0:3C:F1:52:C7:81
Certificate issuer: /CN=3cca849b375015f433e9a240ecabf03cf152c781
Certificate serial: 019A4E864353BE244AF2837F74957763C686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 11:00:13 +0000
Manifest this update: Tue 04 Nov 2025 11:00:13 +0000
Manifest next update: Wed 05 Nov 2025 11:00:13 +0000
Files and hashes: 1: PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl (hash: C+D0sMGg8xN0ZPsZJRmW2mKDl8Jy+GDv41txHhYDwkc=)
2: tJh122419FX7oJQGYtZtkXOvqn0.roa (hash: 80WcSAxcwtJA+++UZrQ3DpOoXBp5rklUr6m+pRMbNZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:43:53:be:24:4a:f2:83:7f:74:95:77:63:c6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cca849b375015f433e9a240ecabf03cf152c781
Validity
Not Before: Nov 4 11:00:13 2025 GMT
Not After : Nov 5 11:00:13 2025 GMT
Subject: CN=b7062092edf67723b7b96b2f58c9bd749d3eb1e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ab:15:69:0b:98:28:63:75:de:5e:b1:19:c5:
2d:d1:76:24:a2:a8:84:37:94:a7:04:a3:14:4d:5f:
f1:61:c6:14:62:6b:db:0d:1e:f5:fc:06:8b:2e:5e:
35:97:f9:69:2e:cf:1a:d2:00:7b:b8:36:9a:f9:6a:
4a:3a:9f:36:8e:40:d0:6b:c4:24:40:be:04:83:21:
d0:b8:89:2e:5d:41:61:9f:40:2d:02:a6:a8:f6:39:
7d:d7:8c:89:37:df:d6:d1:ac:74:01:b2:69:dc:ab:
89:15:6d:2b:92:7f:6a:c1:2e:ac:32:a1:78:6c:e3:
a0:e0:61:01:58:df:b1:79:3b:5a:4d:20:9c:86:91:
6a:e8:c8:80:6f:80:4c:37:88:ce:8e:d1:12:6d:bc:
ae:64:7c:cc:fa:3c:6b:9b:a4:a8:5f:ba:be:25:5d:
3f:90:3b:42:b5:04:8a:ba:d8:2a:14:4a:77:84:40:
87:78:97:ce:02:9a:36:75:cd:d9:e4:55:59:5b:29:
54:98:4e:cd:17:e5:c0:52:03:6b:68:8e:a2:3b:37:
04:a8:b8:58:f1:1b:d9:ca:63:55:6d:96:ba:68:2c:
0d:13:0a:ea:24:3e:6f:3f:3c:63:b1:fa:5b:b2:35:
75:3c:5b:b9:a3:51:1d:4c:f6:c3:92:ce:c7:86:67:
1a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:06:20:92:ED:F6:77:23:B7:B9:6B:2F:58:C9:BD:74:9D:3E:B1:E8
X509v3 Authority Key Identifier:
keyid:3C:CA:84:9B:37:50:15:F4:33:E9:A2:40:EC:AB:F0:3C:F1:52:C7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:99:08:66:9d:5c:d4:34:d3:24:15:f2:d3:36:df:ee:14:61:
5c:fa:52:4b:87:3a:b6:4f:f7:a8:c7:3e:ef:d3:c4:83:8c:01:
ef:dc:c3:37:52:43:56:6f:93:df:95:67:45:dd:8a:22:9e:b6:
da:31:2a:60:31:b9:01:95:74:21:d2:42:d5:2c:b3:e6:a2:69:
34:1e:b3:90:7d:fd:ef:13:ce:97:49:29:b5:18:e7:43:dc:01:
5e:de:93:ff:66:d0:df:b8:6d:52:89:09:71:31:f4:33:b3:06:
1a:29:39:ce:6e:0c:93:3a:65:5f:07:21:ba:f8:34:f1:43:17:
98:ed:6f:88:10:cf:c3:e4:2d:f6:1a:18:c8:27:d9:2f:39:aa:
21:3a:f9:6f:be:e1:1c:85:4c:01:a5:05:78:d6:fc:96:29:fd:
f9:5f:1d:3e:74:6e:fe:2e:33:89:9c:c7:31:99:10:98:dc:6c:
1f:36:b5:5a:2d:39:76:e4:da:8a:80:85:9e:fa:bd:95:1f:de:
7d:7d:3a:78:99:6f:01:fb:c1:e8:3e:4a:e3:74:a7:e2:05:90:
3e:38:46:40:99:75:c8:70:4c:a3:7c:f2:62:be:3d:ef:13:d9:
7e:63:df:10:24:8a:3c:76:18:99:a8:2c:ae:96:7c:17:37:f7:
64:af:fb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:23:47 2025 by rpki-client