Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
File: p1OwvT1iQYAynSGj7NzKGy--3m0.mft (raw, json)
Hash identifier: QXrhNUM7W9AT+UGQFkun+CX6Hib2Sts1XFVgXkkzWgo=
Subject key identifier: 16:7E:89:E1:AE:C9:3E:93:0E:C2:7E:47:9B:4C:96:3B:C2:FC:58:26
Authority key identifier: A7:53:B0:BD:3D:62:41:80:32:9D:21:A3:EC:DC:CA:1B:2F:BE:DE:6D
Certificate issuer: /CN=a753b0bd3d624180329d21a3ecdcca1b2fbede6d
Certificate serial: 019A4D73ED973CF4EA54988F2623C7A56C53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 06:00:34 +0000
Manifest this update: Tue 04 Nov 2025 06:00:34 +0000
Manifest next update: Wed 05 Nov 2025 06:00:34 +0000
Files and hashes: 1: p1OwvT1iQYAynSGj7NzKGy--3m0.crl (hash: 88fw9acVBGRRxEZHzueE0f9M1CE7cE/dN8R919WFG5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:ed:97:3c:f4:ea:54:98:8f:26:23:c7:a5:6c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a753b0bd3d624180329d21a3ecdcca1b2fbede6d
Validity
Not Before: Nov 4 06:00:34 2025 GMT
Not After : Nov 5 06:00:34 2025 GMT
Subject: CN=167e89e1aec93e930ec27e479b4c963bc2fc5826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e3:56:e3:fc:2e:a6:ae:bc:8e:c7:d1:1d:3c:
f0:37:d8:9d:d3:63:c2:ea:62:c5:df:54:8e:0b:73:
7f:fe:75:9b:bf:ef:63:d5:e9:c3:88:90:b8:7b:0c:
6b:c7:db:ea:a1:47:d4:b0:a2:7e:90:2c:17:bd:d5:
b2:ee:d8:9f:16:e4:46:e2:df:08:d9:e8:2e:78:f2:
3d:a4:48:96:ad:22:6a:c1:10:20:b7:2f:0c:20:f9:
10:94:58:c5:7b:fb:63:5b:54:71:ff:a9:a4:f6:a4:
c8:41:eb:d0:fa:32:cb:ae:ef:2c:50:4a:a0:e2:55:
7e:26:79:f8:8b:d7:cf:97:80:a4:ee:97:77:1c:8c:
9b:2c:0b:c0:2b:c1:a5:0e:7a:d6:af:ab:9b:be:b6:
29:3b:c6:97:b6:1e:45:00:38:2e:ed:29:a7:25:c5:
bb:5b:3e:0d:31:ad:03:04:26:6b:c9:c3:c3:9c:cb:
5e:d8:ce:6c:e4:72:a5:b9:a3:31:74:28:28:fa:ba:
a3:a2:aa:e3:e0:5a:5a:05:bf:f2:55:82:ca:29:64:
59:b4:ec:55:23:99:1c:ff:42:de:10:f0:48:e1:7f:
0c:14:92:88:03:4a:16:6d:0a:85:f8:21:47:22:41:
90:11:c6:16:3a:49:8a:9d:5d:fb:35:d8:dd:fe:20:
46:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7E:89:E1:AE:C9:3E:93:0E:C2:7E:47:9B:4C:96:3B:C2:FC:58:26
X509v3 Authority Key Identifier:
keyid:A7:53:B0:BD:3D:62:41:80:32:9D:21:A3:EC:DC:CA:1B:2F:BE:DE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c9:48:3d:65:cd:ea:87:7e:a6:73:19:b9:ad:dc:04:6e:fe:
4a:9a:4c:3b:d4:0b:b8:c6:27:28:dd:f4:0a:f6:af:ef:6e:a4:
9d:90:08:de:37:8b:e8:de:69:d1:d7:4c:ae:c2:d3:1f:42:83:
df:c7:79:d0:8e:55:8d:fe:78:25:35:ac:94:de:d6:ba:78:66:
83:6f:1a:08:af:98:1d:11:31:1f:58:3a:b7:fc:49:43:88:a4:
af:9f:89:5a:ef:85:cd:33:ed:12:05:cc:7e:b8:33:7d:31:5c:
7c:ab:ec:a8:31:d6:02:a8:ad:b2:31:6b:77:89:69:a2:ca:2f:
e6:1f:0f:8f:ee:ac:59:27:df:c1:77:36:aa:f6:65:b9:d2:21:
68:1a:86:52:f1:3b:1a:f6:60:33:22:57:ed:27:94:f5:c9:c5:
43:ae:6c:26:9d:22:9d:d2:c8:b0:a3:ed:c0:c6:d4:bf:be:40:
39:92:d7:9a:2a:d1:b4:1b:21:47:90:8b:9e:7c:bc:44:fb:1d:
ef:3d:1c:50:e7:85:08:41:49:a7:30:c3:e7:0d:ce:85:7a:40:
f4:1a:db:90:b6:d6:fb:87:05:de:92:42:26:bb:73:21:83:26:
7a:6a:42:d5:36:66:64:6a:ad:9e:5f:7d:81:ea:d6:dd:08:c0:
3e:45:2e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:04 2025 by rpki-client