Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.mft
File: p3tNEFqlxNZemaq2926tWJ5ih8w.mft (raw, json)
Hash identifier: CgYeWZRY3O4hy0wknA6MrPwD9x2JrcTS/WM5fwEQIJ8=
Subject key identifier: A2:AF:4E:2C:04:AC:C9:3D:B6:1F:39:93:04:74:4B:0B:11:DE:97:73
Authority key identifier: A7:7B:4D:10:5A:A5:C4:D6:5E:99:AA:B6:F7:6E:AD:58:9E:62:87:CC
Certificate issuer: /CN=a77b4d105aa5c4d65e99aab6f76ead589e6287cc
Certificate serial: 019897136B96FBE57345627B728035AB4A68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3tNEFqlxNZemaq2926tWJ5ih8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.mft
Manifest number: 0426
Signing time: Mon 11 Aug 2025 03:01:28 +0000
Manifest this update: Mon 11 Aug 2025 03:01:28 +0000
Manifest next update: Tue 12 Aug 2025 03:01:28 +0000
Files and hashes: 1: p3tNEFqlxNZemaq2926tWJ5ih8w.crl (hash: vQXNmTADUpWZGOtEWm2yY1qj3r2g6uRC+DY2o9FRF38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/p3tNEFqlxNZemaq2926tWJ5ih8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:13:6b:96:fb:e5:73:45:62:7b:72:80:35:ab:4a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a77b4d105aa5c4d65e99aab6f76ead589e6287cc
Validity
Not Before: Aug 11 03:01:28 2025 GMT
Not After : Aug 12 03:01:28 2025 GMT
Subject: CN=a2af4e2c04acc93db61f399304744b0b11de9773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bf:66:64:3f:5e:8b:68:f7:dc:5d:24:61:35:
a4:7a:39:cb:b1:f4:f4:c9:1a:ba:cc:c4:47:eb:40:
bd:f0:fb:32:1e:8c:42:9e:da:9a:0b:6c:1a:a9:c0:
1d:69:20:d4:50:b9:b5:ba:63:b0:2e:42:78:af:23:
45:bc:70:a4:09:91:36:40:39:51:cd:9f:75:3b:c9:
82:ac:53:35:48:93:ad:1b:e2:f8:f7:1f:42:d1:b3:
df:8c:53:60:0f:33:25:a7:66:c6:79:7a:69:b7:da:
cc:35:db:43:0e:58:ba:2f:56:3c:8f:d8:a2:98:9d:
e8:48:dc:6e:d1:cd:a5:f2:32:56:86:65:d2:03:e5:
06:bf:ac:62:d3:d8:ae:3b:b3:3a:63:99:7b:91:48:
1d:80:e1:cc:db:a4:a6:b7:78:89:b5:95:d3:b3:cb:
31:0d:1e:a2:48:43:aa:5f:95:1d:90:7b:dd:a2:ac:
f8:7b:02:b0:b3:ab:c4:f6:a8:05:a1:9f:c7:94:10:
b2:0f:34:68:3d:4e:28:1f:49:a0:56:8c:14:49:eb:
55:c1:75:bb:58:42:31:b4:9c:12:6f:93:25:6d:d1:
c4:c9:e4:0b:ee:9c:21:88:85:ea:73:77:db:00:f1:
f7:a3:95:b0:cd:07:9c:9a:ea:ba:20:bc:23:22:8b:
57:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AF:4E:2C:04:AC:C9:3D:B6:1F:39:93:04:74:4B:0B:11:DE:97:73
X509v3 Authority Key Identifier:
keyid:A7:7B:4D:10:5A:A5:C4:D6:5E:99:AA:B6:F7:6E:AD:58:9E:62:87:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3tNEFqlxNZemaq2926tWJ5ih8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c1:11:ee:92:1e:1d:c6:e5:71:9c:ad:0e:75:a4:c2:d1:38:
cd:4f:43:ea:27:71:cd:a9:74:fa:b4:93:88:79:de:2c:a7:2e:
16:58:d7:20:cf:21:40:e1:ca:e3:01:84:65:0f:11:25:9d:46:
10:b8:bb:0d:31:3f:cc:a1:19:f7:d0:f3:2b:29:d6:c6:fa:1a:
01:20:b3:0a:c5:3c:49:64:c2:f9:31:25:4f:66:a2:8c:17:59:
30:ab:11:1f:d8:8b:d8:47:97:08:d2:c9:1f:a7:a7:20:e3:c5:
67:70:1e:8f:91:28:03:c6:12:bb:5f:4d:64:9a:8d:cc:94:65:
34:dd:55:32:b4:f8:db:1d:1f:05:b8:b3:85:8a:93:7b:2d:12:
1e:9f:fa:26:99:de:08:07:f5:10:41:60:a7:a6:79:ef:83:dc:
8a:a5:79:fd:32:2f:31:0d:69:2d:33:34:a3:2a:1c:f7:78:42:
c8:ce:1a:b9:08:10:6c:36:eb:59:26:d7:24:9d:58:b8:7f:91:
1a:50:4c:6b:6b:08:b0:a1:3b:b5:30:1d:3f:f0:01:d6:d2:37:
c0:fb:73:65:64:d4:53:ef:d8:f7:e3:34:38:95:49:58:fc:eb:
dc:ed:d0:d7:01:b1:24:37:b5:03:e8:17:4f:40:c7:c2:5d:4b:
3c:9f:3a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:09:01 2025 by rpki-client