Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
File: P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft (raw, json)
Hash identifier: s40+ZKQo5JXiEZzKAUpdzP5348hbokQL9of8R65ePoM=
Subject key identifier: C9:06:B6:48:79:B7:43:71:0D:AE:CD:53:C7:81:00:5D:3E:52:70:6A
Authority key identifier: 3F:47:F7:57:57:41:3C:CC:17:2D:3D:1B:82:6F:AE:5A:E9:38:5A:1B
Certificate issuer: /CN=3f47f75757413ccc172d3d1b826fae5ae9385a1b
Certificate serial: 01987B2D778107B59660C8FCCCB1A75BA871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
Manifest number: 161D
Signing time: Tue 05 Aug 2025 17:00:33 +0000
Manifest this update: Tue 05 Aug 2025 17:00:33 +0000
Manifest next update: Wed 06 Aug 2025 17:00:33 +0000
Files and hashes: 1: P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl (hash: CYoFV6p0FV9GVcCsELUJML4x3eRB9llJYQXEeFp1Vt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:2d:77:81:07:b5:96:60:c8:fc:cc:b1:a7:5b:a8:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f47f75757413ccc172d3d1b826fae5ae9385a1b
Validity
Not Before: Aug 5 17:00:33 2025 GMT
Not After : Aug 6 17:00:33 2025 GMT
Subject: CN=c906b64879b743710daecd53c781005d3e52706a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b7:13:20:77:5b:fb:0e:00:ed:94:18:16:f8:
d2:3e:4b:1b:81:06:bf:a9:85:c6:b0:b8:af:3c:d0:
6b:61:29:6d:6f:f8:4f:e0:9b:a8:be:77:2d:7c:68:
74:b1:75:aa:6b:7f:5d:7d:ec:75:fe:f5:4d:21:c5:
11:0f:53:50:77:aa:17:ce:d0:8a:77:c1:d7:b6:07:
b4:ad:a4:60:12:d4:f6:8e:d6:79:98:11:45:d1:1a:
a8:bb:82:ac:1a:e5:0b:55:6e:39:3b:3c:0b:05:5c:
95:88:18:05:4e:cb:36:80:15:5d:1f:c7:60:d8:46:
28:4e:49:25:b7:15:43:ef:ea:9c:8b:74:76:29:78:
42:16:87:44:ae:1b:07:a9:66:c3:2f:87:4d:00:04:
14:c4:8f:b0:64:29:72:1e:a9:9f:cc:2f:b3:68:2d:
06:72:57:09:e9:a5:ef:be:78:b5:b7:b5:8d:fa:8b:
c2:1f:8f:53:09:34:2e:3b:c2:77:44:1a:1d:28:66:
da:b1:da:93:50:22:fc:03:66:a5:36:64:ac:d5:83:
d7:c4:f7:5d:13:8a:80:fb:53:a7:58:3a:a1:d7:6a:
76:4f:99:1e:00:92:3a:bd:03:34:f6:c0:77:9a:35:
13:26:4c:62:88:42:99:e1:88:55:4c:46:c5:be:f7:
db:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:06:B6:48:79:B7:43:71:0D:AE:CD:53:C7:81:00:5D:3E:52:70:6A
X509v3 Authority Key Identifier:
keyid:3F:47:F7:57:57:41:3C:CC:17:2D:3D:1B:82:6F:AE:5A:E9:38:5A:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:27:27:75:be:64:22:52:67:5e:ed:f3:2b:9f:2a:b1:50:a1:
50:f8:8e:d7:b9:fb:65:c3:e9:3c:2f:77:d1:8c:12:39:30:9e:
71:6d:9a:b4:ee:96:62:62:7a:a5:5f:22:92:47:87:86:dc:0e:
8e:77:99:ec:9a:af:a1:47:09:c2:a5:ab:5e:96:68:bf:c1:7a:
e3:7c:14:1d:08:e7:78:78:e3:26:01:55:e3:4c:b3:67:18:77:
ea:89:e6:a2:41:0f:89:f3:f5:1f:2f:17:43:5c:11:b0:26:05:
0d:28:8d:a9:82:fc:bb:37:cf:9a:11:af:d0:4f:10:53:1b:2a:
42:e4:61:83:a5:bd:2b:6b:23:7f:d1:99:ac:1f:3a:ab:e7:16:
04:b3:4e:bb:8e:ec:16:d3:dd:58:9a:17:41:c3:92:14:70:4e:
49:d0:d4:cd:9a:7a:fb:98:ce:7b:1e:04:77:f0:a2:90:e6:96:
29:3b:91:f1:93:e6:7d:28:48:42:46:f0:73:b9:24:46:6a:b7:
c4:f6:e6:51:7a:f7:42:f4:b9:f9:e0:3e:d7:0c:65:90:69:4f:
19:af:51:d6:ea:84:89:e8:0d:ff:ce:89:25:d3:9d:0f:01:9a:
12:f7:8c:0d:3b:c9:41:35:3b:3d:90:42:08:6e:e3:26:d1:eb:
a4:d8:ee:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:48:21 2025 by rpki-client