Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
File: p0FyV8tjZv81cjOybSXdWIfaifs.mft (raw, json)
Hash identifier: y0qgVSi2QRBRmM1pUozaQGVDfZo53pMBJjd26beAMNM=
Subject key identifier: F6:BF:68:DA:7D:88:5A:90:D5:41:DE:2E:05:E7:84:5F:33:43:A8:86
Authority key identifier: A7:41:72:57:CB:63:66:FF:35:72:33:B2:6D:25:DD:58:87:DA:89:FB
Certificate issuer: /CN=a7417257cb6366ff357233b26d25dd5887da89fb
Certificate serial: 01989E5F7B909A70D5A2691DCD529A47B864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
Manifest number: 162B
Signing time: Tue 12 Aug 2025 13:01:54 +0000
Manifest this update: Tue 12 Aug 2025 13:01:54 +0000
Manifest next update: Wed 13 Aug 2025 13:01:54 +0000
Files and hashes: 1: p0FyV8tjZv81cjOybSXdWIfaifs.crl (hash: h/xoWAiT+Y6KjPMedc7JWcZ4Feka4qJAx1Flc7Y+B08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:5f:7b:90:9a:70:d5:a2:69:1d:cd:52:9a:47:b8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7417257cb6366ff357233b26d25dd5887da89fb
Validity
Not Before: Aug 12 13:01:54 2025 GMT
Not After : Aug 13 13:01:54 2025 GMT
Subject: CN=f6bf68da7d885a90d541de2e05e7845f3343a886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d1:00:7f:ff:b8:07:10:e6:8e:66:1e:6f:d2:
a7:b6:52:f3:66:30:08:a7:f9:69:65:e8:2c:8b:66:
9c:0a:a2:ee:3b:ce:ef:bd:98:58:94:25:01:ed:18:
45:4e:72:b4:f5:0a:2f:72:1f:ed:a3:9e:80:e0:30:
ed:3a:ce:4e:b0:df:14:7f:d1:39:97:a3:41:ff:cd:
fa:a2:91:3a:f0:b5:f5:41:77:43:41:76:84:00:92:
6f:ea:6e:86:b2:73:3f:bc:88:10:05:e4:f4:ad:87:
f6:c3:a7:6d:80:42:c7:f1:46:c6:aa:82:8a:d0:ab:
e1:6e:d1:ae:ac:76:ee:8b:1f:a5:fa:37:b7:e0:cd:
ac:b6:8a:98:9c:e0:15:84:2c:12:95:c0:f5:b3:26:
93:ec:19:ca:e0:37:ba:b8:43:cd:94:fa:3a:99:30:
d4:6d:1d:d3:1f:1d:8e:ca:e4:95:e3:ea:e8:bf:cd:
eb:d5:cd:ec:36:8b:35:5a:97:d8:06:16:41:fc:b1:
af:47:be:01:90:c2:57:3b:f5:e2:02:2e:82:04:14:
4d:8c:69:97:66:66:07:70:81:05:00:bb:dc:3e:db:
11:69:58:d9:e2:84:9f:d1:d0:6e:88:86:3d:75:d7:
83:34:13:08:44:68:53:d0:03:77:b5:3b:53:19:0b:
a2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BF:68:DA:7D:88:5A:90:D5:41:DE:2E:05:E7:84:5F:33:43:A8:86
X509v3 Authority Key Identifier:
keyid:A7:41:72:57:CB:63:66:FF:35:72:33:B2:6D:25:DD:58:87:DA:89:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:26:04:1d:29:6b:6c:4c:a4:b3:c0:77:ab:18:65:09:9c:4a:
35:57:30:2a:08:a3:8e:6d:91:61:02:f6:1a:1e:09:c0:07:d0:
02:16:c9:e1:dd:07:16:54:1d:d7:de:3d:d8:b9:6b:5d:62:2e:
ac:67:32:d3:16:61:7c:7b:2b:d4:55:ee:8f:17:5d:47:08:14:
f2:dc:70:68:f1:4b:4f:c2:95:05:cf:58:64:ee:24:4f:34:5c:
a4:b3:ce:cc:71:bf:7f:cf:a4:09:a5:82:67:3d:f2:97:0b:ef:
a9:87:fb:3a:24:0c:4c:af:89:66:38:9e:33:b6:a5:42:3d:db:
d9:4c:b9:7d:31:de:73:a2:2e:98:83:cd:64:63:52:87:5b:85:
c5:b9:54:81:c9:3a:97:b9:01:b7:6c:ea:ea:74:9d:e2:df:37:
ca:62:91:e8:3e:79:cb:04:62:39:28:73:82:cf:8a:ed:4b:5d:
ec:06:4e:da:e4:f0:43:e5:d8:32:a5:cf:92:4f:64:f3:c2:a7:
16:9c:29:70:ac:8f:cb:eb:2a:3c:4b:b3:d8:3b:18:ae:88:16:
5e:9a:dc:ef:e6:e5:d2:3e:91:2d:ac:94:c0:b7:f3:56:46:e3:
3b:5e:62:36:25:aa:93:89:bd:bf:e8:e2:c0:c8:3d:d3:da:71:
1e:d4:05:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:40:36 2025 by rpki-client