Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft
File: p2H8O2oE10MHa9KG3oIURfBlTvc.mft (raw, json)
Hash identifier: OIDUldt5+gLCS3ZtKQNILuKNdtIuGUqhb+s81obVNe4=
Subject key identifier: 8D:06:A2:EF:BC:E6:3C:D6:F6:48:71:C5:45:20:3F:59:DB:77:11:66
Authority key identifier: A7:61:FC:3B:6A:04:D7:43:07:6B:D2:86:DE:82:14:45:F0:65:4E:F7
Certificate issuer: /CN=a761fc3b6a04d743076bd286de821445f0654ef7
Certificate serial: 019A4F98E7BA5D316AE410F5F8D7EC021530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2H8O2oE10MHa9KG3oIURfBlTvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft
Manifest number: 169C
Signing time: Tue 04 Nov 2025 16:00:12 +0000
Manifest this update: Tue 04 Nov 2025 16:00:12 +0000
Manifest next update: Wed 05 Nov 2025 16:00:12 +0000
Files and hashes: 1: p2H8O2oE10MHa9KG3oIURfBlTvc.crl (hash: FCpHZFOL1E3xfC5UgSbogm41+b8xVRmWXcGhWQjs7PQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2H8O2oE10MHa9KG3oIURfBlTvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:e7:ba:5d:31:6a:e4:10:f5:f8:d7:ec:02:15:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a761fc3b6a04d743076bd286de821445f0654ef7
Validity
Not Before: Nov 4 16:00:12 2025 GMT
Not After : Nov 5 16:00:12 2025 GMT
Subject: CN=8d06a2efbce63cd6f64871c545203f59db771166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:86:47:02:57:8d:ed:4c:61:85:22:e3:1c:94:
cd:2c:75:69:a5:dd:16:55:20:45:ea:73:96:ab:84:
02:b2:98:9c:82:51:84:63:2e:df:19:38:7b:1e:ec:
8d:ea:50:df:1e:41:6c:fa:4c:f6:43:a6:de:12:f2:
b7:87:e4:4e:cb:75:f1:72:51:64:53:d9:b5:f9:18:
6b:7b:90:5a:1e:43:68:00:2a:4d:91:f5:2f:09:7c:
64:27:ff:07:cd:96:6b:7c:c9:6f:09:53:d8:1c:46:
99:72:74:c3:12:a6:75:02:cd:ba:ec:3e:24:68:ee:
ea:50:98:fd:7e:79:9c:73:2c:05:f9:84:f4:1b:f3:
62:c4:c3:b1:9c:b0:ec:ea:9f:7b:a1:78:f9:f5:79:
3e:32:da:9c:d2:5c:35:42:97:a1:18:03:aa:1a:a8:
99:52:b9:35:51:90:34:c7:c0:39:3a:a8:d9:a7:5d:
5e:96:6d:0d:37:d8:8a:0b:e5:f0:6e:b0:d7:4a:ab:
df:56:58:7e:06:98:9b:1e:93:90:b6:9f:b3:77:e3:
19:9d:8b:7c:bf:8d:95:b2:33:4d:ad:e0:4e:ac:83:
dd:3c:3e:a3:3b:d6:78:98:8d:ef:8f:99:b7:7e:5e:
b9:62:bd:1e:08:f6:d9:89:10:08:29:06:72:16:f8:
9e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:06:A2:EF:BC:E6:3C:D6:F6:48:71:C5:45:20:3F:59:DB:77:11:66
X509v3 Authority Key Identifier:
keyid:A7:61:FC:3B:6A:04:D7:43:07:6B:D2:86:DE:82:14:45:F0:65:4E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2H8O2oE10MHa9KG3oIURfBlTvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:2c:ef:79:a1:43:c8:5e:2f:22:24:b2:76:95:58:8f:25:39:
10:53:cf:25:5f:d1:6b:50:82:e4:da:fc:52:e7:86:5b:07:5e:
96:36:59:35:d5:f7:34:f0:6e:1d:95:e9:33:66:72:d8:b2:92:
9c:fc:e9:70:73:c4:cf:8b:3a:22:14:62:38:d1:8f:13:c3:cd:
d2:4c:e3:9e:61:6a:eb:aa:55:e8:d2:80:4c:7b:96:94:f6:ed:
01:19:5e:2c:91:55:18:96:b0:c7:a7:75:c0:9e:bc:01:be:05:
03:30:be:18:54:ca:fe:d1:6b:f1:a5:c0:fe:7c:a0:80:3a:f8:
c8:03:3f:7c:42:72:4a:5b:a0:e8:00:13:71:ac:f6:2b:ac:c3:
a3:a7:d2:fa:ae:bb:43:e4:53:fd:e3:ad:a5:b3:0f:76:1f:c0:
a8:66:14:7d:f7:78:17:75:1b:ad:5f:56:87:e7:44:00:a7:02:
8c:3e:bc:a6:b2:5d:4a:4f:22:94:e9:e8:24:fe:8b:db:51:61:
3a:7e:f3:ba:47:47:74:06:f7:21:45:fa:10:50:8c:31:6c:7c:
cb:8c:ac:65:24:28:6d:f5:c6:af:53:4a:e1:c9:e8:0d:be:da:
b9:27:d7:3c:e9:0f:59:98:21:26:84:53:9b:5b:1d:3d:2f:27:
62:07:eb:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:00:19 2025 by rpki-client