Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
File: PZQks8jnL3RqWesZlFWqNkajpFc.mft (raw, json)
Hash identifier: K3pSM5EiN4UAC6KAnA0AxDZEI9uDDxoMUUQ5u4d8n2U=
Subject key identifier: AC:B0:8F:03:52:07:DB:02:84:C7:B3:70:41:7C:D5:00:96:1F:3C:B1
Authority key identifier: 3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
Certificate issuer: /CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Certificate serial: 019A4DE1DAD2DC8FBF745BFA956F8276FD74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 08:00:38 +0000
Manifest this update: Tue 04 Nov 2025 08:00:38 +0000
Manifest next update: Wed 05 Nov 2025 08:00:38 +0000
Files and hashes: 1: PZQks8jnL3RqWesZlFWqNkajpFc.crl (hash: pQ9PchOBWz5e3QPK5QwgZuNUaOY631zYECS6Mhpnuck=)
2: QIZ7oB864tCgRt_o70Ipdd0FOK0.roa (hash: m8Sbl87AQlvrLt/hOAausP00tdMD076gdUCeqvLuA8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:da:d2:dc:8f:bf:74:5b:fa:95:6f:82:76:fd:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Validity
Not Before: Nov 4 08:00:38 2025 GMT
Not After : Nov 5 08:00:38 2025 GMT
Subject: CN=acb08f035207db0284c7b370417cd500961f3cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:38:66:9b:dc:9a:37:5a:ab:73:78:1f:16:be:
21:9b:61:03:7c:5d:0b:df:10:06:2c:00:5d:2c:d2:
68:57:72:9d:28:7e:be:56:4a:3c:16:7f:48:84:2e:
6a:9c:3c:0f:d6:ad:7e:53:1b:9a:87:59:25:32:ec:
03:f3:08:44:d3:71:33:c9:e2:94:6e:76:6f:35:a4:
f0:f0:e7:06:3d:3a:05:65:9f:a6:50:76:7e:46:d5:
2d:37:41:c7:7a:25:96:2d:43:74:c6:d4:f6:7f:b9:
25:82:57:2f:2e:f2:6d:f3:ce:6a:e1:16:01:c7:72:
db:b8:ef:3f:ba:d4:28:48:f6:36:2d:85:7c:81:97:
e4:ec:b0:ad:09:d8:7b:35:7e:f1:21:32:62:8a:7a:
5a:a2:d7:bf:d1:ee:09:2a:80:b7:b8:61:63:b9:2e:
2c:3b:a9:98:f7:60:bd:21:59:50:97:ea:a4:22:95:
43:6e:35:85:3e:4d:aa:e3:6f:dc:d9:86:79:8a:20:
9d:bb:bf:44:d7:c3:7b:95:45:5a:26:ef:ff:78:b4:
41:83:ef:92:b6:64:1f:89:85:c0:b6:7f:d6:e7:4b:
60:c4:1f:ac:bc:44:8c:6d:30:48:e6:f2:b2:b8:8b:
aa:ce:4b:00:4c:2c:06:a6:bc:f1:08:77:e6:01:ba:
dd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B0:8F:03:52:07:DB:02:84:C7:B3:70:41:7C:D5:00:96:1F:3C:B1
X509v3 Authority Key Identifier:
keyid:3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a8:82:d5:d1:f2:09:bb:a2:e6:04:30:78:6b:4a:f8:89:78:
82:ba:fd:ec:40:1b:eb:e4:7f:b6:b9:42:e9:19:5f:24:a2:f3:
63:ff:f9:25:5d:71:6c:32:22:e7:ce:f5:a7:96:c8:6a:58:e4:
fd:82:6c:44:b2:1f:d8:0b:4f:bf:fe:43:96:27:e5:81:1b:55:
44:c2:01:a5:e8:90:fc:91:df:9f:0c:c4:f2:34:2b:0c:f8:5d:
a2:d3:6c:d5:f9:01:7d:b4:7c:e3:9f:fb:97:70:1b:3f:2a:8a:
c2:16:60:31:d1:7e:54:a9:ae:2a:c6:9a:18:48:f4:fe:e3:65:
35:f4:5f:92:2f:89:1d:a5:b1:49:b6:06:66:e6:4f:b1:13:60:
d6:3f:72:e3:c8:28:5e:e8:f3:9e:47:fa:8b:cb:13:75:5c:94:
3e:5e:64:81:c4:f5:6c:19:c9:90:b4:e2:a7:4f:65:d5:c3:f5:
f0:eb:39:17:7b:7e:13:5a:91:19:7b:6a:a8:34:34:f7:a2:d6:
f0:1a:96:f9:84:a8:82:eb:d5:4e:44:94:51:53:5e:11:94:4c:
bf:99:a0:5c:4b:34:54:18:32:f3:8d:41:73:ed:a7:f0:6e:b6:
30:cf:5a:14:5b:1e:11:67:5c:82:6d:71:b4:16:67:03:a8:8a:
da:91:84:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:28 2025 by rpki-client