Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.mft
File: P9WU69efjdhbR5LpUzvkaBaohgY.mft (raw, json)
Hash identifier: UxZYKzCG+u44Z0tQ3vmfrDX8CD3IffVPhnyjEy5K+X8=
Subject key identifier: 92:9F:0E:16:96:FF:6B:4B:DF:D3:6F:9A:13:45:8F:B4:01:0C:6D:2A
Authority key identifier: 3F:D5:94:EB:D7:9F:8D:D8:5B:47:92:E9:53:3B:E4:68:16:A8:86:06
Certificate issuer: /CN=3fd594ebd79f8dd85b4792e9533be46816a88606
Certificate serial: 01988C583DE13688B8BD7D40284E6683CB76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9WU69efjdhbR5LpUzvkaBaohgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.mft
Manifest number: 11A2
Signing time: Sat 09 Aug 2025 01:00:49 +0000
Manifest this update: Sat 09 Aug 2025 01:00:49 +0000
Manifest next update: Sun 10 Aug 2025 01:00:49 +0000
Files and hashes: 1: P9WU69efjdhbR5LpUzvkaBaohgY.crl (hash: Nj13VhLyBAK1MV3xkFMenvEo5Aygfyt1XSBc7Y109Ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9WU69efjdhbR5LpUzvkaBaohgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:58:3d:e1:36:88:b8:bd:7d:40:28:4e:66:83:cb:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd594ebd79f8dd85b4792e9533be46816a88606
Validity
Not Before: Aug 9 01:00:49 2025 GMT
Not After : Aug 10 01:00:49 2025 GMT
Subject: CN=929f0e1696ff6b4bdfd36f9a13458fb4010c6d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bd:3a:ba:2b:19:ec:e8:f0:d3:2f:32:ec:35:
8d:6a:6e:46:87:0a:cb:db:27:f3:04:fd:dc:28:cf:
84:9e:cc:f6:28:f4:eb:16:07:9d:35:51:a7:ee:bc:
10:82:26:3d:8a:99:d6:bf:77:d8:4f:8a:cd:93:71:
f8:cd:0c:97:2b:f8:77:a4:b8:13:eb:e0:e6:30:b7:
9e:43:ab:e5:f9:0c:c8:5a:63:9f:71:c2:4e:54:ce:
94:6d:4e:d2:6a:51:1b:1c:ef:7f:73:1f:05:9f:51:
d0:63:98:69:38:c1:76:b2:5a:cd:0d:58:b0:f8:a5:
0b:42:26:f4:28:c9:44:2d:55:80:12:53:98:d1:c7:
d0:bc:e0:59:fb:46:1e:7f:26:bd:31:fe:57:bc:1d:
01:80:d1:80:9e:ea:e5:53:3e:40:00:e6:ad:3b:27:
96:f0:81:e8:d7:f3:fe:6e:ea:40:76:56:c2:98:29:
6c:37:97:66:fa:b3:1e:be:52:c5:41:0d:b9:e9:24:
21:e0:e0:0b:f2:bb:44:a2:24:be:1c:d1:16:b2:d1:
d2:0b:49:6e:d5:36:06:a3:31:da:ba:b3:8f:e1:75:
8a:ad:a1:6d:e7:1a:26:73:4e:ea:15:7f:e4:18:b4:
03:65:18:0b:72:52:39:ea:84:e4:4d:cb:66:19:0a:
8a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9F:0E:16:96:FF:6B:4B:DF:D3:6F:9A:13:45:8F:B4:01:0C:6D:2A
X509v3 Authority Key Identifier:
keyid:3F:D5:94:EB:D7:9F:8D:D8:5B:47:92:E9:53:3B:E4:68:16:A8:86:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9WU69efjdhbR5LpUzvkaBaohgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:58:ae:63:33:da:f7:72:00:b3:ab:dc:cf:bd:3c:23:0a:48:
b5:16:03:74:88:74:57:59:4f:ac:b5:38:dc:0a:cf:b6:76:30:
7d:35:09:68:4b:10:2d:a0:b0:23:48:b5:e8:ed:5f:ac:f4:45:
1b:ea:64:7e:2b:e9:9a:26:02:df:f1:b3:0b:bb:4e:96:c2:b2:
fb:77:de:d0:2b:5f:f7:cb:6e:d4:64:9f:42:b0:f8:2d:15:eb:
79:bb:96:af:bd:37:37:e5:3d:69:04:27:95:74:a5:ae:1f:6b:
b7:1b:e4:0f:ca:a9:3c:ce:14:ad:9e:e4:10:fa:ac:aa:8f:db:
d3:00:b9:42:86:93:42:40:6e:2a:f7:b8:eb:34:a8:e2:ae:a6:
fc:60:a5:72:7f:ed:4b:4b:84:55:92:ca:7a:6d:5a:62:b7:b6:
ae:b4:e1:5e:6c:9d:2c:51:b6:62:53:96:13:2a:6d:a1:f3:48:
4e:ca:ed:23:c0:c7:0d:8d:0c:f3:73:1d:df:52:83:d1:1e:70:
be:78:59:ab:96:ad:6a:26:57:0c:12:f8:cd:c1:39:a4:cd:07:
0a:87:db:65:8d:d3:ed:2b:7a:3a:29:f9:c3:be:9b:48:b8:97:
2f:3f:f9:ff:16:5b:d5:67:8f:3d:40:94:4c:9b:16:e2:31:48:
da:b8:61:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:31:59 2025 by rpki-client