Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
File: P1KMlfYICrE8sEl4PpJE0z2cSzI.mft (raw, json)
Hash identifier: z2t301c3OboXQZVuLf0S0KgfrcuvStTsa8XX1JecYIo=
Subject key identifier: 48:A2:DA:58:11:E9:1E:3A:52:CA:FA:30:17:07:62:C5:8E:D5:59:3C
Authority key identifier: 3F:52:8C:95:F6:08:0A:B1:3C:B0:49:78:3E:92:44:D3:3D:9C:4B:32
Certificate issuer: /CN=3f528c95f6080ab13cb049783e9244d33d9c4b32
Certificate serial: 019A522C39C40F54EDAC2E42EE464F5F7E5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
Manifest number: 1621
Signing time: Wed 05 Nov 2025 04:00:21 +0000
Manifest this update: Wed 05 Nov 2025 04:00:21 +0000
Manifest next update: Thu 06 Nov 2025 04:00:21 +0000
Files and hashes: 1: P1KMlfYICrE8sEl4PpJE0z2cSzI.crl (hash: EH6E4ZpZ5/+fghg3mUYfeCRI0MIqOqK4xRwc/DK7c1A=)
2: w5HnLtF4Me5n7OHUmGug2mAnL6U.roa (hash: AsJuclUazy6myQDlUyLOaCVJ9azdwtM7AhIo+Ahv/h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:39:c4:0f:54:ed:ac:2e:42:ee:46:4f:5f:7e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f528c95f6080ab13cb049783e9244d33d9c4b32
Validity
Not Before: Nov 5 04:00:21 2025 GMT
Not After : Nov 6 04:00:21 2025 GMT
Subject: CN=48a2da5811e91e3a52cafa30170762c58ed5593c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4a:98:5c:fe:01:2c:1b:e7:52:7a:97:11:40:
00:5a:4f:82:37:54:06:c5:47:5d:d6:5f:ad:25:98:
63:b3:76:18:78:1c:9f:f9:37:00:da:d0:dc:6e:8b:
06:0c:06:55:e2:51:27:16:97:97:0f:cb:10:52:ff:
55:5a:f5:66:cc:bc:86:50:e9:fa:60:cf:a0:03:65:
5b:14:bd:15:5c:1e:ea:d3:fc:18:10:b7:f8:06:e8:
de:42:a7:84:19:98:68:f8:14:0c:1c:5a:17:7b:07:
9a:c6:17:8c:4c:dc:5f:da:03:38:c9:f2:95:6a:dd:
50:11:4b:94:32:d6:32:21:a2:d5:4a:20:cd:8a:63:
08:8e:0b:b7:23:54:00:c0:61:2f:2d:9b:df:0c:7c:
50:9a:5c:92:de:98:16:27:c8:ec:52:fc:aa:14:6f:
b4:e9:d3:6e:3f:d7:10:a8:b1:c1:91:b0:30:81:96:
7b:eb:1c:10:da:85:f1:2e:8c:f4:48:6b:fb:8a:69:
f5:83:ab:c9:3b:4d:fd:a7:cb:2c:af:92:e9:c3:10:
84:ea:34:f5:55:94:54:ae:0e:f4:5a:73:d3:74:22:
d7:b1:24:2e:c0:88:1d:74:4c:20:b0:29:ea:23:71:
59:2b:76:50:70:a3:6d:92:11:83:08:11:5c:63:95:
02:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A2:DA:58:11:E9:1E:3A:52:CA:FA:30:17:07:62:C5:8E:D5:59:3C
X509v3 Authority Key Identifier:
keyid:3F:52:8C:95:F6:08:0A:B1:3C:B0:49:78:3E:92:44:D3:3D:9C:4B:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:bf:5b:c8:db:38:b1:b3:bd:66:b8:3f:eb:12:45:03:aa:70:
db:39:7f:28:82:fe:2a:58:d7:c3:6f:74:d6:a9:81:90:25:b7:
ee:69:37:5b:be:6d:09:07:8d:d3:4d:92:83:8f:46:4f:87:2d:
06:67:be:ae:36:a0:2e:14:85:f0:ea:3d:69:6c:1e:06:02:53:
1d:85:c7:92:b7:ec:58:a5:2b:65:7c:e3:0a:a7:42:41:b0:5c:
b4:2d:38:2b:19:1f:cc:78:78:68:c5:2e:e1:9b:4d:97:cd:74:
8f:11:b6:14:a5:e0:ba:b2:b4:87:58:f5:82:8c:8e:e4:72:b9:
14:39:56:40:82:19:85:f9:83:d3:09:1c:4a:61:9e:02:31:6e:
d9:3e:59:22:c3:8a:25:cb:3b:21:8b:e8:17:79:f8:ce:7f:9b:
66:a1:f7:72:8b:91:1c:0c:88:3a:d6:8c:eb:e6:ed:a6:89:b7:
6d:27:58:a6:7c:52:31:f9:af:12:b8:bd:96:78:7a:23:1f:0d:
db:2a:ed:50:b5:b3:a5:5f:51:26:b4:f4:77:16:08:1b:7f:6b:
f2:42:31:1c:af:bb:6e:98:10:67:c6:2d:81:ca:ce:68:a9:4f:
41:9d:bf:fe:8c:5c:ae:05:5e:9d:79:6f:8b:82:b9:f1:04:69:
d0:86:d2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:44:30 2025 by rpki-client