Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/6934b5-96c0-476d-bf54-237f65b64327/1/pU3VdP7HLUOUwlU2uoUyydOPQLo.mft
File: pU3VdP7HLUOUwlU2uoUyydOPQLo.mft (raw, json)
Hash identifier: Va144OpO9O0F0r6xVqLkBSD5FnlFXiJrUT9JY0r7tOg=
Subject key identifier: 0E:A8:77:65:05:F2:4A:B7:F0:AC:AE:DE:A8:D0:3C:8E:B8:13:D1:F6
Authority key identifier: A5:4D:D5:74:FE:C7:2D:43:94:C2:55:36:BA:85:32:C9:D3:8F:40:BA
Certificate issuer: /CN=a54dd574fec72d4394c25536ba8532c9d38f40ba
Certificate serial: 019A50E3B90D07161557C3E52A969EB1E3E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pU3VdP7HLUOUwlU2uoUyydOPQLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/6934b5-96c0-476d-bf54-237f65b64327/1/pU3VdP7HLUOUwlU2uoUyydOPQLo.mft
Manifest number: 0A23
Signing time: Tue 04 Nov 2025 22:01:32 +0000
Manifest this update: Tue 04 Nov 2025 22:01:32 +0000
Manifest next update: Wed 05 Nov 2025 22:01:32 +0000
Files and hashes: 1: pU3VdP7HLUOUwlU2uoUyydOPQLo.crl (hash: DP9Qp5owr2AekvgR0zt/VARTzNcaj0GzXNF/fg+Ez4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/6934b5-96c0-476d-bf54-237f65b64327/1/pU3VdP7HLUOUwlU2uoUyydOPQLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/6934b5-96c0-476d-bf54-237f65b64327/1/pU3VdP7HLUOUwlU2uoUyydOPQLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pU3VdP7HLUOUwlU2uoUyydOPQLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:b9:0d:07:16:15:57:c3:e5:2a:96:9e:b1:e3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a54dd574fec72d4394c25536ba8532c9d38f40ba
Validity
Not Before: Nov 4 22:01:32 2025 GMT
Not After : Nov 5 22:01:32 2025 GMT
Subject: CN=0ea8776505f24ab7f0acaedea8d03c8eb813d1f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f8:81:52:9c:9e:c3:ca:02:aa:20:fb:e6:45:
8e:fb:1c:6b:d4:45:ce:bd:59:b7:90:8a:04:6f:cf:
a5:00:96:70:ea:d3:db:37:2a:49:68:28:20:50:14:
f9:53:92:29:b1:9d:4d:3c:b8:cc:49:1b:d8:0a:c6:
42:eb:56:61:38:c6:6e:08:96:ab:f6:32:3e:c7:e6:
79:12:07:4a:b9:1d:86:1d:88:e0:e9:c1:cd:f4:c2:
22:a1:87:06:01:45:5e:a8:c4:52:9f:ae:ac:c3:92:
a8:99:b0:18:27:31:b8:de:25:b3:57:58:93:57:ea:
98:00:9d:e5:33:e2:ae:86:15:78:af:8a:e3:ba:e3:
1b:36:8e:b9:3d:36:37:87:df:ff:2c:fe:df:be:b7:
9c:a9:42:2b:75:64:e5:8d:3e:50:c3:5f:e4:c0:a3:
9a:64:89:fe:79:8b:5d:75:6b:aa:fe:e7:fa:c0:a0:
9b:ed:da:93:b3:74:06:21:b2:1f:fc:24:a5:fb:31:
7e:f1:7e:df:5c:e5:1f:42:2a:be:b4:70:6a:2f:b3:
7f:31:25:ab:19:6a:dc:fe:ff:0e:e3:0e:60:7e:ef:
01:de:34:2b:9e:f1:bd:eb:e0:f6:46:1f:16:c4:e3:
0e:f5:e7:82:49:45:7e:6e:78:d7:b9:72:85:c0:63:
bf:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A8:77:65:05:F2:4A:B7:F0:AC:AE:DE:A8:D0:3C:8E:B8:13:D1:F6
X509v3 Authority Key Identifier:
keyid:A5:4D:D5:74:FE:C7:2D:43:94:C2:55:36:BA:85:32:C9:D3:8F:40:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pU3VdP7HLUOUwlU2uoUyydOPQLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6934b5-96c0-476d-bf54-237f65b64327/1/pU3VdP7HLUOUwlU2uoUyydOPQLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6934b5-96c0-476d-bf54-237f65b64327/1/pU3VdP7HLUOUwlU2uoUyydOPQLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:81:e9:b1:89:8d:6a:77:9e:a3:cf:60:cf:f3:7f:98:a1:82:
12:b7:90:d7:4a:7d:b2:1c:25:c2:86:1d:9c:0e:8f:36:cf:60:
76:a4:d2:f5:a8:c7:b8:51:7f:6e:3f:43:5f:d0:4b:6e:ee:84:
1e:66:10:28:08:00:61:a9:13:d2:9e:b3:0f:b0:d6:aa:c8:6d:
ca:f4:05:03:77:70:31:e0:be:4e:7f:f4:a3:a5:bd:0a:69:92:
f3:4e:30:7c:cc:b1:84:01:a4:a9:35:b3:03:d8:20:86:65:2e:
a4:6a:a0:e2:5b:74:96:c7:17:f8:61:90:d9:70:80:ee:ff:ea:
dc:4d:f6:29:3c:8f:cb:5e:61:2e:fa:19:e6:01:b0:54:bc:af:
f0:63:5e:e9:ea:ea:d2:47:97:14:68:9d:ad:23:ee:b9:91:88:
66:05:94:a9:52:5f:5d:19:03:bc:3c:a7:5d:01:53:c0:12:23:
60:51:95:dc:87:91:f4:f6:63:c9:91:94:78:bb:ec:e5:a1:9c:
d2:45:94:66:95:06:2a:9e:4a:9b:7a:c2:85:5d:16:0e:0b:ce:
5b:c1:63:0e:9e:67:3f:83:71:92:ea:ad:48:55:cc:7e:b0:88:
a6:04:41:66:ab:0f:2a:ef:7b:b5:9f:1e:9f:ae:4c:db:14:e2:
f3:bc:31:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:05:06 2025 by rpki-client