Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
File: P1umH85V_19gjjr27FYLN67CNf8.mft (raw, json)
Hash identifier: 2nZyqP0ENjZ8zKEvycJgm65FSBvMqtYEpZQ6rFD565M=
Subject key identifier: D8:F5:0F:3A:5B:0F:4C:90:55:8C:4D:12:65:4A:D1:D7:BA:72:3A:ED
Authority key identifier: 3F:5B:A6:1F:CE:55:FF:5F:60:8E:3A:F6:EC:56:0B:37:AE:C2:35:FF
Certificate issuer: /CN=3f5ba61fce55ff5f608e3af6ec560b37aec235ff
Certificate serial: 019893A42BFE18060C95235528088850852E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
Manifest number: 047D
Signing time: Sun 10 Aug 2025 11:01:06 +0000
Manifest this update: Sun 10 Aug 2025 11:01:06 +0000
Manifest next update: Mon 11 Aug 2025 11:01:06 +0000
Files and hashes: 1: P1umH85V_19gjjr27FYLN67CNf8.crl (hash: eeJiU7PkZAEzjMgIPi3YJ/0HwTdax3bj84NkMH9lE1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a4:2b:fe:18:06:0c:95:23:55:28:08:88:50:85:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5ba61fce55ff5f608e3af6ec560b37aec235ff
Validity
Not Before: Aug 10 11:01:06 2025 GMT
Not After : Aug 11 11:01:06 2025 GMT
Subject: CN=d8f50f3a5b0f4c90558c4d12654ad1d7ba723aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:17:f5:25:52:1c:1d:b1:a3:3b:31:5e:63:5e:
1f:68:2c:db:1a:91:53:1a:c1:f5:38:9e:89:c8:fe:
53:15:dd:6c:a3:36:b9:bf:37:24:59:1b:e6:ae:7f:
86:33:a3:66:72:eb:12:b1:8c:c7:2e:e4:f5:a1:c2:
a7:d9:fb:f6:b5:ff:3a:40:66:74:85:c7:93:f0:c9:
15:1f:60:85:68:8b:01:4c:4d:8d:d3:c5:0d:bb:d2:
d1:f5:d6:21:4f:52:6e:23:6a:5d:b7:6e:c3:2c:71:
99:a1:db:ea:db:dc:ab:29:27:07:7f:e7:ee:23:55:
d6:7a:11:b3:25:8f:13:7a:bd:ef:b0:88:28:0c:06:
e6:96:8c:cb:e0:a0:0a:d7:8b:89:61:73:47:a6:10:
a9:d5:dd:9b:71:53:db:1f:07:cc:5a:cf:2d:22:fb:
6e:05:8d:6a:55:95:26:50:b1:73:d9:e8:9a:89:b4:
43:90:8c:bb:ef:d0:ba:57:d3:61:56:c5:06:7d:0d:
6e:21:5d:9a:76:90:ea:b1:76:1e:ec:7c:41:c3:d2:
e4:76:1a:cc:3f:3a:b5:ff:9b:bb:3d:07:59:99:e8:
9c:85:1c:68:01:0d:89:b9:d7:6e:b4:d1:70:72:5e:
74:c4:23:e7:66:c6:16:9b:d9:69:d1:bf:25:c9:66:
fd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F5:0F:3A:5B:0F:4C:90:55:8C:4D:12:65:4A:D1:D7:BA:72:3A:ED
X509v3 Authority Key Identifier:
keyid:3F:5B:A6:1F:CE:55:FF:5F:60:8E:3A:F6:EC:56:0B:37:AE:C2:35:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:84:64:da:83:29:51:a1:d3:b1:cd:75:16:ff:0b:7b:fe:b5:
5a:28:ab:be:e7:66:55:f6:a7:ce:05:b9:de:d2:5e:67:12:e6:
6b:e1:ed:11:cd:31:0e:f5:78:2d:f5:17:da:7b:0f:8b:7e:8c:
c6:83:2e:44:38:bf:47:d6:e6:61:f0:db:db:25:5a:88:8b:22:
7d:f1:4c:9c:95:3e:42:64:03:89:7e:af:a0:ad:36:c0:68:36:
77:5c:be:fa:af:a0:e3:e2:ae:33:7d:b1:ac:df:ec:72:be:d0:
c5:cc:be:ba:ec:fa:77:d6:18:57:db:af:a3:12:58:de:93:b4:
dd:32:76:d6:f1:1d:86:be:7d:50:1a:be:56:ab:5e:bc:ca:fd:
f8:ca:27:51:9b:b2:16:19:e9:9a:1f:a4:4a:e9:e9:24:e3:b5:
bf:55:4a:72:41:e0:b7:ad:85:03:e6:17:79:c9:6d:9a:65:42:
8d:3c:ff:77:e5:c1:2d:13:f5:0c:23:1e:9a:23:97:2f:dd:ea:
f8:ed:71:9a:ad:02:96:37:fd:df:86:1f:ab:58:f7:23:b2:42:
98:93:4a:45:31:cc:44:2a:9c:05:b2:06:cc:e1:7d:e2:98:97:
63:5c:27:55:d6:54:cb:24:7b:7a:c9:d1:a1:16:92:8f:1a:2b:
3b:8e:63:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:50:09 2025 by rpki-client