Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.mft
File: P591E-0Eyp_o96RU6CeY0E8agKg.mft (raw, json)
Hash identifier: E1/oUX8d4wlWe4NblLhfc4wtTRbtd8H2ApwcJ7wdLqM=
Subject key identifier: B5:B1:70:B9:6C:FC:B6:DD:AE:89:06:2F:D6:16:5D:0C:1A:D2:D8:55
Authority key identifier: 3F:9F:75:13:ED:04:CA:9F:E8:F7:A4:54:E8:27:98:D0:4F:1A:80:A8
Certificate issuer: /CN=3f9f7513ed04ca9fe8f7a454e82798d04f1a80a8
Certificate serial: 019890DABDCE8254F7A492571008F3F93144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P591E-0Eyp_o96RU6CeY0E8agKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.mft
Manifest number: 0547
Signing time: Sat 09 Aug 2025 22:01:50 +0000
Manifest this update: Sat 09 Aug 2025 22:01:50 +0000
Manifest next update: Sun 10 Aug 2025 22:01:50 +0000
Files and hashes: 1: P591E-0Eyp_o96RU6CeY0E8agKg.crl (hash: aERCFhKd3Wu0KL0AUMeCTdidq1i0+Uch2aui0PLAnpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/P591E-0Eyp_o96RU6CeY0E8agKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:da:bd:ce:82:54:f7:a4:92:57:10:08:f3:f9:31:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f9f7513ed04ca9fe8f7a454e82798d04f1a80a8
Validity
Not Before: Aug 9 22:01:50 2025 GMT
Not After : Aug 10 22:01:50 2025 GMT
Subject: CN=b5b170b96cfcb6ddae89062fd6165d0c1ad2d855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:83:a0:f9:78:f7:5f:3d:a7:9b:5b:3c:92:70:
d1:8d:45:fc:60:2e:87:f1:a3:e3:b3:3e:5d:15:6e:
1b:f1:4e:33:c6:3e:8b:23:be:2a:58:64:7e:c5:54:
0a:3b:d1:18:73:7b:85:2f:90:38:2a:34:b1:7d:62:
e6:7c:56:ab:09:45:00:a8:28:18:8c:4f:19:ae:44:
1c:a8:f3:18:50:a1:52:52:b9:db:f8:03:4f:d8:e9:
00:ed:ff:b4:bc:89:9f:88:f1:66:20:5f:10:8f:63:
35:e5:9d:b6:4b:70:0f:15:07:55:4a:a7:11:93:03:
01:fc:f7:57:6d:05:09:b5:75:ba:ab:15:84:5b:4f:
2b:2e:a1:c5:a1:53:74:c1:dd:ee:0e:f5:40:8d:8a:
93:67:79:2c:45:5d:32:81:ff:9f:d7:b9:3b:15:06:
d6:de:ef:b2:5c:a9:62:f9:45:d4:01:25:b4:92:a0:
9d:66:83:38:b0:b0:db:fa:0f:fa:2c:9c:b5:94:e0:
80:50:27:85:31:f0:d3:3a:9c:88:e5:10:e3:af:61:
49:03:23:e6:ff:7b:d4:69:3d:bc:42:e4:f8:53:30:
0d:b2:2e:51:91:00:bb:85:22:81:46:94:b8:5b:8d:
91:4b:fc:e0:5f:2f:ba:e5:75:7d:63:f5:14:ab:3f:
40:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B1:70:B9:6C:FC:B6:DD:AE:89:06:2F:D6:16:5D:0C:1A:D2:D8:55
X509v3 Authority Key Identifier:
keyid:3F:9F:75:13:ED:04:CA:9F:E8:F7:A4:54:E8:27:98:D0:4F:1A:80:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P591E-0Eyp_o96RU6CeY0E8agKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:84:7b:21:8b:91:70:c5:8a:c2:a8:50:bd:ab:91:85:a8:26:
c5:f8:79:1a:64:12:50:60:c7:eb:65:db:ab:c1:2a:49:e8:0c:
29:41:e1:d3:d6:fa:ba:56:d6:61:c3:2c:06:e7:43:93:7b:d3:
21:a0:64:12:5b:ab:c3:4c:c8:f6:17:25:b3:f1:95:28:32:2a:
0c:c4:c6:e1:0e:9d:29:cb:d4:a7:25:39:d0:b8:c4:fb:74:22:
b7:72:7f:d9:ee:78:9a:02:f6:b0:a2:a7:1f:8b:e1:f8:c7:9c:
32:08:88:b7:b4:72:eb:86:07:e8:a1:92:8f:ae:09:13:53:58:
c7:4d:b3:79:7c:ec:55:5a:3b:9f:12:7d:36:d8:d7:4a:dc:c1:
29:9a:18:d1:fd:6f:f7:80:85:92:2c:a8:f4:e5:50:d6:1e:b5:
ba:35:89:57:26:f2:df:57:cf:aa:a3:96:1c:de:56:c6:0d:4e:
c0:6d:d9:7d:73:e5:71:90:46:d9:5f:58:8c:42:cf:06:9b:b4:
aa:87:21:bd:1e:c8:65:de:17:c1:5d:c2:10:01:13:9a:1a:31:
c4:21:79:4a:c0:c6:21:80:55:18:a4:78:4a:58:20:a2:e3:7d:
89:50:42:f8:48:ae:6b:42:fc:a8:75:96:b1:e8:a1:45:71:df:
40:88:68:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:15:49 2025 by rpki-client