Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/PxP6dbPOiUzEZAQaipX4WffBxNI.mft
File: PxP6dbPOiUzEZAQaipX4WffBxNI.mft (raw, json)
Hash identifier: BS/6os0e7HIMFJJ+DsVmhMbP31MQ70ZWUE3uPPnAMpI=
Subject key identifier: 81:EB:9D:D0:A3:90:22:61:0D:F4:D6:77:6B:80:4A:37:7E:98:5A:3D
Authority key identifier: 3F:13:FA:75:B3:CE:89:4C:C4:64:04:1A:8A:95:F8:59:F7:C1:C4:D2
Certificate issuer: /CN=3f13fa75b3ce894cc464041a8a95f859f7c1c4d2
Certificate serial: 019893A3E6BA883025207F4C0B697BD7A003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxP6dbPOiUzEZAQaipX4WffBxNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/PxP6dbPOiUzEZAQaipX4WffBxNI.mft
Manifest number: 01AC
Signing time: Sun 10 Aug 2025 11:00:48 +0000
Manifest this update: Sun 10 Aug 2025 11:00:48 +0000
Manifest next update: Mon 11 Aug 2025 11:00:48 +0000
Files and hashes: 1: PxP6dbPOiUzEZAQaipX4WffBxNI.crl (hash: LtwJotZF0wIEaXRTnZolBEV4KKFDYNzP2XSqcdsqgqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/PxP6dbPOiUzEZAQaipX4WffBxNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/PxP6dbPOiUzEZAQaipX4WffBxNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxP6dbPOiUzEZAQaipX4WffBxNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a3:e6:ba:88:30:25:20:7f:4c:0b:69:7b:d7:a0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f13fa75b3ce894cc464041a8a95f859f7c1c4d2
Validity
Not Before: Aug 10 11:00:48 2025 GMT
Not After : Aug 11 11:00:48 2025 GMT
Subject: CN=81eb9dd0a39022610df4d6776b804a377e985a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bc:ca:33:05:17:22:30:b0:7f:ab:f0:8a:64:
cf:df:c5:28:26:d5:3c:51:cd:d5:98:51:ac:f8:a6:
4e:d8:9a:29:16:0b:f4:ec:ec:61:dc:6e:fe:96:8e:
e6:9a:a9:35:91:c7:16:8a:58:8b:32:2e:06:1d:db:
b9:7c:d0:6c:e4:cc:50:05:af:4d:95:d8:8a:ce:3e:
7c:b7:67:8c:2b:d8:48:a1:a7:20:b0:e4:7c:58:20:
52:63:52:ee:0d:c8:1a:72:00:29:be:7a:e4:37:49:
4a:bd:b2:68:01:31:6e:10:09:ba:df:2a:f9:bc:77:
81:9f:e7:c1:c6:e1:b6:8a:8f:55:0b:80:6c:ed:90:
cf:7b:b2:6b:01:d7:13:ef:6a:3d:cf:38:91:b8:4e:
e6:e1:7f:52:1e:01:da:82:bc:cf:e3:f1:91:9f:42:
55:b2:5f:aa:f1:67:61:38:7a:52:8b:5a:86:fa:00:
d0:52:32:66:75:48:e2:71:d1:b1:49:97:16:4a:18:
1b:80:b5:a2:ac:d2:2c:b4:02:52:f0:72:91:89:98:
32:8f:a3:d2:01:cf:86:36:7f:db:0e:c7:f3:88:2e:
a6:65:e7:fd:ce:24:1d:5b:3c:11:dc:57:98:a8:5d:
26:c8:9c:88:7c:7a:20:87:f6:62:38:3a:d7:e2:16:
4f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:EB:9D:D0:A3:90:22:61:0D:F4:D6:77:6B:80:4A:37:7E:98:5A:3D
X509v3 Authority Key Identifier:
keyid:3F:13:FA:75:B3:CE:89:4C:C4:64:04:1A:8A:95:F8:59:F7:C1:C4:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxP6dbPOiUzEZAQaipX4WffBxNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/PxP6dbPOiUzEZAQaipX4WffBxNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/PxP6dbPOiUzEZAQaipX4WffBxNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e3:1a:48:11:2f:6a:24:34:53:b9:df:2d:f1:a7:53:53:5c:
c8:85:82:9e:f9:ca:5b:cd:aa:09:50:a8:97:97:9d:3f:fe:9c:
47:ee:b6:1c:d4:b1:ca:91:8e:61:90:82:90:cd:30:e1:5c:dc:
b6:b9:95:df:41:99:32:b5:1d:74:32:03:1c:25:73:06:08:98:
2e:7d:82:1b:26:6d:97:00:0d:a3:c1:57:e7:01:08:dd:05:dd:
9c:f0:af:e9:e8:6d:f6:0f:7b:95:43:8a:8c:0d:ba:05:fc:02:
9e:d7:14:20:4a:90:22:b0:06:cd:4a:1a:f7:2c:26:c1:80:69:
85:c3:63:e3:a4:08:17:51:e7:c7:3a:e5:2e:45:18:23:23:a9:
9e:f6:d2:83:bb:c0:2f:cd:ec:6e:82:b0:77:a1:20:40:9d:ef:
37:b9:06:12:89:dd:50:6e:2a:11:6e:59:c9:15:65:c3:80:04:
1c:b1:59:b2:54:bf:4c:03:0c:b2:69:fd:fc:21:26:4e:0a:81:
8e:a2:22:32:a9:8b:9e:d3:9f:a5:79:14:37:ad:c0:6f:bc:b0:
b0:f0:2f:39:65:36:99:61:4e:05:2c:57:96:8d:f1:92:41:11:
69:21:9a:be:0b:11:7f:fa:c1:53:5f:0c:aa:4b:27:96:ee:33:
a7:ad:f0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:01:40 2025 by rpki-client