Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
File: P4_xyWZv4ZXySqH-jDRdecSOe8A.mft (raw, json)
Hash identifier: xfqwoL0NUDO3G7CdMSxjDzifX836QwqNaZGf4n+RjgI=
Subject key identifier: 5D:E9:DE:A2:A2:41:37:50:31:85:EF:69:47:D4:25:84:D5:71:2C:34
Authority key identifier: 3F:8F:F1:C9:66:6F:E1:95:F2:4A:A1:FE:8C:34:5D:79:C4:8E:7B:C0
Certificate issuer: /CN=3f8ff1c9666fe195f24aa1fe8c345d79c48e7bc0
Certificate serial: 0198752BC1C526635C7E1AB0AD13B8215008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
Manifest number: 0A03
Signing time: Mon 04 Aug 2025 13:00:58 +0000
Manifest this update: Mon 04 Aug 2025 13:00:58 +0000
Manifest next update: Tue 05 Aug 2025 13:00:58 +0000
Files and hashes: 1: P4_xyWZv4ZXySqH-jDRdecSOe8A.crl (hash: WdMsU+JlX8Lj3KMyOtwR0IvNHJM4gU9oaa5m/Jg6G/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:c1:c5:26:63:5c:7e:1a:b0:ad:13:b8:21:50:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ff1c9666fe195f24aa1fe8c345d79c48e7bc0
Validity
Not Before: Aug 4 13:00:58 2025 GMT
Not After : Aug 5 13:00:58 2025 GMT
Subject: CN=5de9dea2a24137503185ef6947d42584d5712c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:77:f0:5a:03:4c:c6:39:0d:98:09:16:b1:ab:
59:f3:8d:b3:4d:63:dc:76:91:35:6d:bc:7b:dc:24:
00:08:3c:89:11:b8:e6:70:dd:c1:70:44:11:b0:60:
74:f0:44:38:b3:9d:6d:ae:b1:5b:54:b7:4c:e0:5d:
d0:1e:83:6d:c9:22:ca:f2:64:f4:b1:f6:35:56:aa:
f5:b6:3d:73:71:8e:39:84:2f:28:5b:db:2a:b1:ae:
ec:31:07:5c:26:9a:25:7f:11:d7:2b:66:e2:22:98:
71:cd:cb:56:bc:76:78:78:71:ac:70:c2:7c:d5:80:
ff:f0:e0:66:bc:9e:22:e0:9c:17:17:c6:c1:a7:0b:
8d:0d:39:e4:a5:73:44:91:17:c5:d0:16:50:36:9f:
8f:9e:62:22:86:55:e7:15:3f:c7:90:f6:ce:9a:71:
2a:a1:07:0e:45:5b:17:d1:c2:97:4f:79:36:32:ee:
57:41:e7:3c:3e:20:d8:78:79:d9:1c:38:29:cd:38:
f0:22:3e:9e:b4:85:01:4b:ed:30:16:71:e8:4f:27:
ae:c5:58:7c:ca:87:1a:d1:9b:88:4b:02:fa:83:e6:
63:b9:60:11:5b:29:d7:63:87:c1:88:ed:8f:c7:70:
f2:33:9e:4c:7f:65:51:1e:fb:c6:43:2b:a2:88:4d:
48:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E9:DE:A2:A2:41:37:50:31:85:EF:69:47:D4:25:84:D5:71:2C:34
X509v3 Authority Key Identifier:
keyid:3F:8F:F1:C9:66:6F:E1:95:F2:4A:A1:FE:8C:34:5D:79:C4:8E:7B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:23:e8:43:6e:95:9c:a6:a2:3d:3c:db:8a:36:4e:c3:a4:64:
ff:1d:5a:a6:bf:4f:aa:12:71:5c:40:b9:7d:6d:d4:67:70:86:
f0:69:7a:08:61:22:94:dc:f3:8b:0e:47:0f:1f:31:7f:e7:de:
8b:f8:37:3a:8b:e0:ec:64:89:e1:ec:93:fc:ad:df:42:1b:39:
4b:78:9d:1c:d3:5b:f0:6a:39:79:ec:a8:77:24:5b:a3:bb:a8:
35:e4:a3:44:7b:b0:17:97:2c:9b:47:05:bf:d7:b8:f7:c4:6f:
cb:bc:2c:fa:94:f6:49:c2:f2:4d:fc:f3:12:fd:a8:57:d2:84:
e6:26:c1:1f:6f:b7:f1:c2:3a:c0:63:e2:c7:6e:fb:a9:d6:a4:
ac:9c:03:a8:dc:bf:2a:ca:1e:2d:19:ab:12:34:95:6c:38:6b:
b1:35:f6:b0:a9:90:29:eb:b7:ba:11:69:0d:84:0e:6f:58:e3:
f7:b0:01:6f:6c:fc:50:e4:69:eb:34:64:77:66:77:82:39:d0:
1d:3e:02:28:b9:1c:7b:b6:7a:f3:7b:ed:31:4f:ed:41:31:86:
81:0c:21:6d:8a:66:c4:f0:94:e9:d4:75:39:c0:5f:7d:cf:ba:
86:f3:c5:2d:6b:ae:19:87:fe:05:b4:8a:3a:2c:00:c1:0a:0f:
10:46:4d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:28:32 2025 by rpki-client