Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
File: P4_xyWZv4ZXySqH-jDRdecSOe8A.mft (raw, json)
Hash identifier: nVHtKY2GtPuFHJ4Y5Oid3fYIwhFf8V8jQQLaR+NlhtM=
Subject key identifier: 0D:0C:71:58:FC:80:3F:9E:CA:46:6A:F5:10:30:6F:F6:DE:AA:70:46
Authority key identifier: 3F:8F:F1:C9:66:6F:E1:95:F2:4A:A1:FE:8C:34:5D:79:C4:8E:7B:C0
Certificate issuer: /CN=3f8ff1c9666fe195f24aa1fe8c345d79c48e7bc0
Certificate serial: 019A503DB511242E7FF271CEC47B658FE2CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
Manifest number: 0AF9
Signing time: Tue 04 Nov 2025 19:00:12 +0000
Manifest this update: Tue 04 Nov 2025 19:00:12 +0000
Manifest next update: Wed 05 Nov 2025 19:00:12 +0000
Files and hashes: 1: P4_xyWZv4ZXySqH-jDRdecSOe8A.crl (hash: PzyxjBKf+jCUP5E+hF4LMxsC60zDfkX89w1/v8za64I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:b5:11:24:2e:7f:f2:71:ce:c4:7b:65:8f:e2:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ff1c9666fe195f24aa1fe8c345d79c48e7bc0
Validity
Not Before: Nov 4 19:00:12 2025 GMT
Not After : Nov 5 19:00:12 2025 GMT
Subject: CN=0d0c7158fc803f9eca466af510306ff6deaa7046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:88:8c:f5:60:e1:ab:a6:3a:ea:32:bb:c8:60:
4a:db:44:fc:2d:59:47:ff:6d:da:56:b2:20:28:aa:
52:1c:a9:9f:95:d2:6a:ab:2e:07:76:1a:1b:57:f5:
bb:c5:f5:7d:db:ac:2a:d0:22:a2:9f:c8:c7:26:f6:
77:7b:99:02:07:90:1f:bf:1b:98:a6:a4:72:f0:e3:
8d:6a:bb:16:8a:c2:25:a6:f4:4d:6c:11:c6:4f:58:
c7:97:83:9f:f1:f7:4a:be:23:cc:df:47:aa:eb:e9:
24:e6:66:8c:c8:14:63:95:51:4b:68:89:38:a9:be:
9b:f9:af:88:dd:f9:8e:41:a7:9d:a1:8f:8e:be:f6:
04:2c:cb:e8:5c:a9:9a:11:79:99:20:a4:65:a7:ee:
6a:26:ea:94:0d:15:f7:26:aa:9f:36:ee:d8:bb:94:
63:3a:5c:1d:07:ce:11:11:67:ce:61:44:5d:db:75:
3b:2b:7b:20:f0:ff:31:ec:11:f3:f3:39:b9:cc:73:
e6:a6:bd:9a:20:64:b4:6c:4e:45:8a:5e:7c:f9:be:
d5:ed:ac:5e:07:8e:17:ab:a1:00:a9:77:50:38:7d:
3d:ae:fe:a8:18:63:08:bf:d9:3c:23:65:73:a9:7f:
54:e3:6d:c1:1e:23:c1:53:17:94:8a:4f:97:5d:f2:
05:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0C:71:58:FC:80:3F:9E:CA:46:6A:F5:10:30:6F:F6:DE:AA:70:46
X509v3 Authority Key Identifier:
keyid:3F:8F:F1:C9:66:6F:E1:95:F2:4A:A1:FE:8C:34:5D:79:C4:8E:7B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:b1:de:7d:6d:b3:e2:eb:22:65:d1:10:4b:6a:fb:eb:d6:c4:
a4:7a:1f:da:f0:5b:8a:31:6e:19:7c:a6:ca:92:0b:dd:fc:d1:
b7:15:e0:1c:55:55:ae:c8:44:78:6d:6d:d7:67:36:82:90:8b:
c8:88:69:c9:5b:64:e3:89:00:01:84:5d:30:8b:eb:c2:6a:7c:
bc:19:7f:ec:8d:36:81:5a:57:92:dd:57:94:40:dd:f5:80:dd:
1c:9e:b3:3e:72:72:92:0f:ef:20:1f:78:a2:c8:83:c1:a6:8a:
32:26:b4:56:36:64:34:7f:91:04:0c:ac:2d:19:24:ab:2c:ae:
2f:0f:0c:92:49:c3:a1:7c:5f:39:83:b1:17:45:a2:95:e8:2e:
21:04:06:ef:a8:af:8e:ad:01:4c:fa:03:e6:7e:57:fa:ab:16:
af:ab:8d:ef:c5:44:1e:cd:5b:f7:08:a3:3a:c2:5e:e0:5f:59:
aa:bd:ac:a0:ff:6d:19:ac:e8:90:22:63:41:7d:09:11:63:03:
01:a8:e0:e6:f8:c6:dc:0d:ce:77:8c:86:6c:c7:6a:0f:c3:cf:
c7:e5:cb:5d:bd:d6:39:3d:e4:26:f1:10:fc:3f:36:1a:4c:2b:
13:a6:ad:b3:7c:f2:7d:86:df:f3:16:ab:73:40:bf:a9:96:e0:
54:f1:b7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:41:25 2025 by rpki-client