Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
File: PP8fKxF18GBdAl5RAXNpwcqLGkY.mft (raw, json)
Hash identifier: h0dA8PawP/EoGJ6ACtr+gwcjprsc2uyzSG2di/E3ceo=
Subject key identifier: 76:13:88:45:48:1B:88:72:DB:F6:EB:54:A1:E8:1B:3D:13:77:64:D8
Authority key identifier: 3C:FF:1F:2B:11:75:F0:60:5D:02:5E:51:01:73:69:C1:CA:8B:1A:46
Certificate issuer: /CN=3cff1f2b1175f0605d025e51017369c1ca8b1a46
Certificate serial: 019A4E4FAB12CA97FB022BB662847C580998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 10:00:35 +0000
Manifest this update: Tue 04 Nov 2025 10:00:35 +0000
Manifest next update: Wed 05 Nov 2025 10:00:35 +0000
Files and hashes: 1: PP8fKxF18GBdAl5RAXNpwcqLGkY.crl (hash: 5ElJr9Uaw8nAQnR4qrui0nw/QBFiBLFKKQpkPjnch04=)
2: rEJUWBjq_sWfsa1cNiXjG-c5ovw.roa (hash: ZZH1S0+UsBnMa9sS+gXeBGEXEb7GWoo4AFZx2+gdykk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:ab:12:ca:97:fb:02:2b:b6:62:84:7c:58:09:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cff1f2b1175f0605d025e51017369c1ca8b1a46
Validity
Not Before: Nov 4 10:00:35 2025 GMT
Not After : Nov 5 10:00:35 2025 GMT
Subject: CN=76138845481b8872dbf6eb54a1e81b3d137764d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:46:ed:4b:2b:31:72:2d:9f:00:d6:37:81:f3:
95:56:0e:b6:6e:d7:25:48:a0:80:a5:ed:7c:1c:11:
39:c3:24:ad:a9:65:c2:e6:71:b9:48:de:08:94:70:
84:97:92:e7:44:74:b5:f1:3f:b4:5e:f4:5f:7b:c4:
58:b0:92:c6:15:7c:c1:95:47:03:0c:bf:23:ae:ab:
53:7f:01:23:21:23:d6:63:71:bd:28:ee:d3:34:32:
0b:d9:a5:56:ca:a7:e5:d7:20:bf:ad:42:da:25:2f:
b3:96:fe:e0:88:0b:02:58:1a:dd:45:dc:6f:61:a2:
ea:02:2a:7a:71:cf:63:5f:6e:04:22:db:5e:1b:9f:
af:bd:be:50:bb:ec:fd:94:69:ac:b6:f6:6a:97:98:
1c:f7:70:34:48:d4:25:fc:40:dd:8c:1d:cd:8b:73:
31:8a:61:80:f2:37:12:8b:3f:4c:4c:de:fd:ab:bd:
37:d3:e3:40:3d:c2:23:c0:75:8c:5d:2d:2c:d4:24:
24:68:0a:3d:ca:08:75:92:ca:c2:22:76:77:1f:83:
2a:1c:19:7b:a4:a0:ea:f1:06:59:4a:33:7b:24:2f:
6d:af:da:32:8f:8d:ce:5f:8d:af:df:2b:f4:07:17:
51:a8:01:4d:13:b8:93:0c:88:0e:da:cf:09:e0:69:
89:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:13:88:45:48:1B:88:72:DB:F6:EB:54:A1:E8:1B:3D:13:77:64:D8
X509v3 Authority Key Identifier:
keyid:3C:FF:1F:2B:11:75:F0:60:5D:02:5E:51:01:73:69:C1:CA:8B:1A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e9:bb:14:c9:ca:1b:7a:91:88:d4:3c:8a:b4:56:3a:6d:5b:
54:1f:de:24:19:62:4d:37:0d:94:dc:c2:05:ea:3b:fd:55:7b:
d9:bc:3a:6e:8b:b2:ea:e0:de:9f:5f:62:f7:53:86:0f:99:35:
90:7f:ad:bf:00:ab:af:80:09:f7:ee:8d:04:9e:1d:cf:54:19:
1e:65:93:9e:c3:84:54:80:af:14:bc:99:07:a1:0c:13:15:ce:
15:f6:8a:c8:a2:ff:26:60:ec:dd:68:4c:41:51:de:f6:8e:8b:
f8:b4:3d:7b:28:2d:44:fc:2c:54:58:b3:cf:df:f0:a1:51:fb:
c1:97:1e:10:22:e7:e5:19:65:12:8c:e9:ff:51:93:db:1d:47:
2e:5c:41:92:d4:48:3f:dc:e7:9f:09:fc:7c:52:f5:db:c8:55:
3a:9d:37:b1:3f:1d:f5:26:37:eb:3e:67:93:61:3b:30:18:1a:
70:35:89:87:a8:f5:ed:6f:cb:46:74:79:c3:04:37:ca:20:10:
bc:d0:cd:ca:98:f8:23:02:d7:37:0d:03:e5:bc:b8:df:36:75:
06:a7:31:32:a8:d3:6c:a0:8d:66:e1:1a:93:34:f0:90:b8:95:
6c:01:37:46:1e:1a:67:89:9d:07:83:5e:ba:24:27:41:22:91:
ea:64:8c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:35 2025 by rpki-client