Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
File: P1KMlfYICrE8sEl4PpJE0z2cSzI.mft (raw, json)
Hash identifier: qgi2seSgLkOS62C72KXW2A5844aHisnVWrrfCWmxHaM=
Subject key identifier: 7A:65:DA:40:06:DB:B2:A0:D6:A2:3B:0F:30:25:43:7D:47:15:A6:59
Authority key identifier: 3F:52:8C:95:F6:08:0A:B1:3C:B0:49:78:3E:92:44:D3:3D:9C:4B:32
Certificate issuer: /CN=3f528c95f6080ab13cb049783e9244d33d9c4b32
Certificate serial: 0198733D19240EAED3396AE07478EF673C3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
Manifest number: 1529
Signing time: Mon 04 Aug 2025 04:00:40 +0000
Manifest this update: Mon 04 Aug 2025 04:00:40 +0000
Manifest next update: Tue 05 Aug 2025 04:00:40 +0000
Files and hashes: 1: P1KMlfYICrE8sEl4PpJE0z2cSzI.crl (hash: syW0HqvUz20uIx0H4Fhhg8JXm+QbgcIuKVjeqf1GkHM=)
2: w5HnLtF4Me5n7OHUmGug2mAnL6U.roa (hash: AsJuclUazy6myQDlUyLOaCVJ9azdwtM7AhIo+Ahv/h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:19:24:0e:ae:d3:39:6a:e0:74:78:ef:67:3c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f528c95f6080ab13cb049783e9244d33d9c4b32
Validity
Not Before: Aug 4 04:00:40 2025 GMT
Not After : Aug 5 04:00:40 2025 GMT
Subject: CN=7a65da4006dbb2a0d6a23b0f3025437d4715a659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:66:d6:86:81:ae:5c:cc:87:76:6b:a4:49:16:
b5:38:54:48:0c:36:88:18:73:6d:ee:38:fa:fe:5d:
e2:28:0a:59:a6:62:a8:cb:32:30:ff:5e:7a:e7:f1:
c5:bb:a5:0d:a5:71:d0:7e:0e:72:f4:53:70:45:1c:
5f:5b:d2:3f:ab:55:99:25:48:aa:cb:13:09:9d:58:
f0:0e:83:d2:19:a2:7e:6a:45:1d:20:bc:79:3d:90:
0f:9f:98:93:20:be:77:f7:78:5e:b7:c2:dd:ac:93:
39:f6:b3:5c:9c:53:12:40:8b:11:7a:18:10:02:0c:
9a:15:2e:ec:2a:1e:65:5a:0f:dd:31:a3:77:79:89:
10:3a:68:d9:ce:7c:55:0f:a2:bb:08:bc:18:29:db:
95:84:46:ea:e1:a2:52:63:73:03:5d:1c:ff:35:e6:
30:17:da:b1:29:9e:a4:e9:72:05:54:fb:a1:5d:b1:
5c:44:a7:91:b3:15:40:5e:e2:d5:d6:1d:28:57:1d:
c2:59:54:49:4c:4c:bb:3b:0a:4e:54:49:9f:76:c2:
6c:42:a0:fb:42:02:59:6a:89:56:5f:1d:a2:74:f6:
ca:fa:a9:e1:32:3d:4a:21:7e:54:1c:24:f2:e1:b3:
fd:37:3c:57:fd:dc:82:05:31:0f:c6:78:77:39:51:
85:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:65:DA:40:06:DB:B2:A0:D6:A2:3B:0F:30:25:43:7D:47:15:A6:59
X509v3 Authority Key Identifier:
keyid:3F:52:8C:95:F6:08:0A:B1:3C:B0:49:78:3E:92:44:D3:3D:9C:4B:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:10:45:f6:d9:00:0f:1f:f6:cd:67:94:a5:c9:b1:db:64:d9:
e9:ee:e5:ad:b0:e0:7e:eb:4e:3e:e8:fd:14:da:a7:b0:50:09:
bc:2a:da:1b:39:13:b0:b1:59:fd:ff:76:aa:89:0b:a9:72:32:
12:b0:c0:70:51:81:5e:0c:c7:79:3f:bb:4b:ae:69:b5:60:52:
9c:eb:ba:fc:01:06:69:9b:91:62:5e:76:04:1a:21:a8:b2:7c:
c2:0b:d2:2c:3c:9c:af:e1:b1:1c:a3:cd:5e:1f:ec:65:b1:d0:
66:2d:c0:af:99:76:7c:3d:99:5a:d3:ce:06:7d:85:fd:a6:11:
90:b6:5a:74:95:3b:f5:02:0e:2b:1b:3e:d5:bb:c7:69:61:a4:
e7:4c:88:9e:85:66:9b:8f:d7:e5:26:5b:76:7e:09:9b:94:11:
72:fe:ca:2e:dc:d1:10:33:87:98:91:de:a8:ce:10:75:01:01:
75:4c:81:f0:40:9f:73:44:f1:7d:49:01:f6:90:c9:30:f0:db:
ca:4c:19:31:d2:c0:fe:bb:c2:69:c5:3a:ca:14:6d:18:0f:2a:
b0:20:14:bc:8c:2c:bc:61:df:d7:61:6e:a2:94:ea:8c:ce:1f:
32:a9:06:5d:df:d9:99:fa:f7:a9:3e:16:bb:17:90:77:17:1a:
0b:0a:ce:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:01 2025 by rpki-client