Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
File: P1jM0LF5IrWNXoss8uV5zmmrOGM.mft (raw, json)
Hash identifier: 1IZojqlKTOhk7zLoXACXgZyS9Y8FC1gmi9GJQvpfQDA=
Subject key identifier: D3:03:06:3E:00:19:5D:DD:0C:50:30:BD:1D:B2:B0:35:FC:E2:C4:40
Authority key identifier: 3F:58:CC:D0:B1:79:22:B5:8D:5E:8B:2C:F2:E5:79:CE:69:AB:38:63
Certificate issuer: /CN=3f58ccd0b17922b58d5e8b2cf2e579ce69ab3863
Certificate serial: 01987562BC49E822EB97792ADBBA94DCB163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
Manifest number: 56
Signing time: Mon 04 Aug 2025 14:01:01 +0000
Manifest this update: Mon 04 Aug 2025 14:01:01 +0000
Manifest next update: Tue 05 Aug 2025 14:01:01 +0000
Files and hashes: 1: P1jM0LF5IrWNXoss8uV5zmmrOGM.crl (hash: TfRXAj9B4GNkVMpAemav/Qs2XZWsbG+Ussp8DYHskBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:62:bc:49:e8:22:eb:97:79:2a:db:ba:94:dc:b1:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f58ccd0b17922b58d5e8b2cf2e579ce69ab3863
Validity
Not Before: Aug 4 14:01:01 2025 GMT
Not After : Aug 5 14:01:01 2025 GMT
Subject: CN=d303063e00195ddd0c5030bd1db2b035fce2c440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:14:b6:e6:2d:31:87:01:4e:2f:a1:fe:7b:7e:
6b:e3:67:69:2d:e5:bf:b3:e7:2e:59:b2:e4:3b:1d:
82:d9:be:f7:ac:2a:aa:35:66:5d:6f:7e:2d:c4:12:
8c:24:2e:d8:94:81:b8:04:f1:d2:5c:17:78:b9:a7:
24:dc:c0:ac:87:fd:90:b8:c7:d0:fd:57:85:de:cf:
ce:e9:96:9a:1c:15:a3:7c:32:17:c5:84:b4:43:2b:
25:d6:c4:a5:81:b2:c0:df:a4:0f:65:cd:18:46:57:
96:c8:58:ba:50:ba:a1:7a:9b:42:f3:0b:b0:34:00:
4e:cf:79:91:be:15:63:53:dc:4a:26:e7:4f:a2:de:
24:70:0a:be:0b:8f:41:a5:7c:35:f0:47:66:57:3a:
6e:36:29:b5:57:4f:05:c6:7d:40:57:e0:30:c9:a0:
38:c6:09:f9:e4:f2:c0:17:c3:4a:03:89:39:34:87:
65:0c:d9:41:ed:ec:03:0f:0f:cd:87:98:6a:ce:53:
95:bd:86:68:2f:d4:d0:1d:f1:a7:5f:79:91:cd:6e:
9a:14:e1:fb:3a:0f:2b:76:56:6b:19:05:52:1f:98:
d4:b7:91:02:90:fc:7e:88:0b:e2:83:57:a6:f2:89:
41:36:8e:f1:9d:56:0a:b1:12:f6:fc:62:25:a9:69:
c4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:03:06:3E:00:19:5D:DD:0C:50:30:BD:1D:B2:B0:35:FC:E2:C4:40
X509v3 Authority Key Identifier:
keyid:3F:58:CC:D0:B1:79:22:B5:8D:5E:8B:2C:F2:E5:79:CE:69:AB:38:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:8a:38:b7:b7:6f:4c:82:e3:44:77:c8:76:88:a5:50:80:6d:
24:b3:fe:c9:98:7a:af:5a:d9:d7:18:3b:be:81:6e:16:9b:6c:
02:4b:ea:45:0a:2a:84:32:0a:88:e6:12:b4:d8:a1:87:9a:4d:
29:e5:02:49:ee:d2:a3:11:f6:66:17:68:3d:39:4d:be:3a:03:
db:31:ef:da:ad:26:d8:a0:bb:03:de:a9:b4:8b:d9:76:df:08:
df:55:83:ff:28:5f:63:a4:0e:da:30:15:9d:1c:c1:81:c9:94:
72:66:89:cf:5a:f7:64:db:9f:8c:ba:72:b1:7e:94:c7:6b:1d:
5f:36:74:a2:f5:2f:53:d3:ee:ce:00:23:33:7a:db:59:60:57:
c9:63:05:0c:7e:5a:dd:da:5b:51:41:2b:bd:52:45:c7:c9:b0:
a3:29:68:63:cf:06:6d:de:1d:45:d1:66:88:b7:e8:45:08:7e:
e9:ea:85:e0:c8:26:2f:e8:a2:e0:1b:96:18:f3:d2:12:a0:88:
59:ed:3e:6a:0c:e0:3f:9c:b9:a8:bd:11:55:56:3a:74:40:f0:
ba:9a:7f:ff:6c:6c:48:30:8d:f2:c0:9f:ee:f5:c5:33:b1:b5:
c0:49:ea:8f:26:e4:95:65:6a:2f:7e:eb:bf:5d:ae:3c:51:0d:
6d:d7:12:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:28 2025 by rpki-client