Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft
File: P5oSEPUJkiOdOn8uXoATtatJH_8.mft (raw, json)
Hash identifier: IGbIxQIH0e76Yf/wTAKqB1LhNfxxSJKvvAphjIG4ZLA=
Subject key identifier: D1:AC:36:1C:C5:8C:87:4C:1E:E9:C6:F1:B5:E5:A9:68:3C:28:17:81
Authority key identifier: 3F:9A:12:10:F5:09:92:23:9D:3A:7F:2E:5E:80:13:B5:AB:49:1F:FF
Certificate issuer: /CN=3f9a1210f50992239d3a7f2e5e8013b5ab491fff
Certificate serial: 0198733D3D4413461541980743489CBF939D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5oSEPUJkiOdOn8uXoATtatJH_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft
Manifest number: 11E5
Signing time: Mon 04 Aug 2025 04:00:49 +0000
Manifest this update: Mon 04 Aug 2025 04:00:49 +0000
Manifest next update: Tue 05 Aug 2025 04:00:49 +0000
Files and hashes: 1: P5oSEPUJkiOdOn8uXoATtatJH_8.crl (hash: +TvVH7Zt/2z3zLLrAqISzo49ilSA1OALJK5/5xubH3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5oSEPUJkiOdOn8uXoATtatJH_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:3d:44:13:46:15:41:98:07:43:48:9c:bf:93:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f9a1210f50992239d3a7f2e5e8013b5ab491fff
Validity
Not Before: Aug 4 04:00:49 2025 GMT
Not After : Aug 5 04:00:49 2025 GMT
Subject: CN=d1ac361cc58c874c1ee9c6f1b5e5a9683c281781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a9:e6:15:9e:86:43:f1:08:f7:68:b9:05:66:
d3:45:42:65:a2:f4:1f:71:d9:64:06:05:14:ed:d7:
9b:e4:de:6e:08:80:8c:3c:72:7b:00:08:10:7d:1b:
17:1d:95:58:77:bc:4b:e6:10:a6:78:97:2b:af:12:
ea:78:61:4d:5f:59:f7:25:9c:ee:4b:5b:fb:60:a2:
23:49:79:3d:a4:1e:21:e7:79:7f:82:69:bb:e8:24:
d6:66:54:15:72:0a:0c:e8:d9:46:c2:c6:ca:96:2f:
b4:bd:cb:9e:a1:4d:64:b9:33:3e:ae:ef:f0:d8:71:
43:e4:bc:c8:75:0a:ab:e6:e7:cc:88:c0:0a:28:c9:
95:dc:8e:de:be:90:79:a5:1a:4e:f2:9a:6a:32:76:
5f:61:97:97:14:a9:5b:ce:50:63:1c:bf:4d:8d:3f:
d7:c5:c2:6f:b8:ab:f9:46:34:3c:23:a0:5f:f2:ba:
cd:08:4f:28:9e:48:a9:94:b0:39:69:b5:d8:b1:4b:
05:2b:0f:46:f9:2e:a5:52:57:7c:11:10:b4:25:96:
37:d2:06:df:33:7c:85:4d:18:aa:aa:13:06:d3:f1:
7c:da:0f:fc:85:27:ac:43:06:8d:f3:3d:b1:ee:e4:
8f:23:37:b3:63:5a:85:37:ef:79:68:dd:8a:74:7f:
6a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AC:36:1C:C5:8C:87:4C:1E:E9:C6:F1:B5:E5:A9:68:3C:28:17:81
X509v3 Authority Key Identifier:
keyid:3F:9A:12:10:F5:09:92:23:9D:3A:7F:2E:5E:80:13:B5:AB:49:1F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5oSEPUJkiOdOn8uXoATtatJH_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:7c:70:98:07:91:5f:3f:45:8e:18:a7:da:20:fa:87:2b:88:
7a:8c:b6:26:78:23:d9:91:42:d7:69:32:73:46:a3:60:df:ec:
12:6f:23:a8:37:7a:d2:6e:92:4f:71:fd:79:d0:c0:0b:a8:c6:
17:ac:09:13:da:a6:85:01:3c:7e:81:dd:88:b5:8b:99:65:de:
ec:04:29:ec:27:3e:bd:c7:0b:62:de:6c:c5:8e:85:75:9e:72:
70:e4:ef:14:40:6d:bc:0e:05:ca:d4:89:b1:11:d7:e7:e0:e7:
16:65:46:cd:41:9c:77:cb:9d:63:65:d8:72:2d:4b:d2:c5:30:
57:0e:9e:de:e1:24:2d:ff:d9:00:b5:9d:12:08:68:9a:b8:9b:
e6:cb:56:c9:25:5b:ac:4b:67:e0:31:ad:d6:3d:d2:82:19:d0:
92:de:9f:b2:b8:e9:7a:5a:88:b3:06:57:0d:0a:15:e5:fa:6b:
73:04:c8:d5:78:e5:66:ab:aa:86:99:db:7f:59:ae:28:67:94:
8b:1b:ef:61:c3:94:7a:78:1c:6f:83:d7:48:27:b8:60:18:38:
5d:c0:5a:45:96:8e:e1:d2:d6:13:41:6e:32:c1:1b:62:d2:81:
d5:78:05:ba:e6:54:f1:4a:a8:40:84:34:22:e6:b0:f0:c3:8b:
df:c5:24:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:28 2025 by rpki-client