Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
File: p3l5GlNwwc1X5JPZSfke-82mYX4.mft (raw, json)
Hash identifier: n+YO9yqPVL3nLUmrVJSxtav/xd7Bkprciaxv3Zgg7yU=
Subject key identifier: 46:C7:ED:AE:3D:C7:30:68:1E:C8:B6:14:FB:57:AD:90:C3:95:3F:55
Authority key identifier: A7:79:79:1A:53:70:C1:CD:57:E4:93:D9:49:F9:1E:FB:CD:A6:61:7E
Certificate issuer: /CN=a779791a5370c1cd57e493d949f91efbcda6617e
Certificate serial: 0199FC58CD07E0A33EFE6FEAEE72CD2ADB8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
Manifest number: 0B85
Signing time: Sun 19 Oct 2025 12:01:42 +0000
Manifest this update: Sun 19 Oct 2025 12:01:42 +0000
Manifest next update: Mon 20 Oct 2025 12:01:42 +0000
Files and hashes: 1: p3l5GlNwwc1X5JPZSfke-82mYX4.crl (hash: XDt9ksCsbSS9D76RyAuKNB7cAbwjNHLK6EwrREFaUmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:cd:07:e0:a3:3e:fe:6f:ea:ee:72:cd:2a:db:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a779791a5370c1cd57e493d949f91efbcda6617e
Validity
Not Before: Oct 19 12:01:42 2025 GMT
Not After : Oct 20 12:01:42 2025 GMT
Subject: CN=46c7edae3dc730681ec8b614fb57ad90c3953f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5b:0e:fd:76:75:e4:d5:90:a7:dd:ef:61:7a:
0d:60:cb:8b:ad:74:02:e9:c9:ac:18:48:cc:ab:60:
d4:dc:66:ff:21:46:e0:42:5b:61:d8:14:1d:c1:b8:
9e:42:cd:d8:83:87:3d:91:bc:ff:3f:3d:86:46:60:
0c:ef:ad:54:16:74:fb:4a:cc:22:3f:d5:86:1c:9b:
29:b7:f8:a0:88:ce:a1:a0:d7:b6:4c:03:43:85:5e:
4e:ac:8d:6c:1c:e8:5d:78:d9:60:f1:4b:15:a0:21:
40:78:56:40:77:13:66:86:79:98:4c:f2:12:eb:63:
53:1a:2b:5a:1f:1b:c0:44:cb:f9:dc:84:b7:72:fb:
97:de:a5:09:be:e8:0d:f1:d3:d0:cf:0f:b1:e4:b7:
fe:51:7d:43:74:46:39:63:8a:cb:82:67:64:c8:d2:
78:9e:d9:c0:18:85:f5:dd:ed:67:d0:d2:35:78:39:
f4:e7:f0:de:9e:c6:6c:f9:ac:4d:c9:0d:9f:26:f9:
63:a4:a2:68:b7:93:f4:27:7c:2d:7c:81:2b:69:32:
4b:12:6b:2b:3f:c2:87:76:e2:22:af:09:7a:2f:dc:
c0:db:05:59:c6:83:a1:3c:99:85:14:31:7b:11:fb:
9c:f9:f1:ca:08:b3:28:85:0f:7f:00:55:d7:0e:6f:
05:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C7:ED:AE:3D:C7:30:68:1E:C8:B6:14:FB:57:AD:90:C3:95:3F:55
X509v3 Authority Key Identifier:
keyid:A7:79:79:1A:53:70:C1:CD:57:E4:93:D9:49:F9:1E:FB:CD:A6:61:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:58:cc:4d:4f:2e:7d:19:72:d5:dd:17:60:0d:22:0a:59:86:
53:80:c5:7d:cb:ec:d3:b3:3e:7c:91:f4:e3:8c:35:64:4f:68:
fb:8f:97:11:61:c7:30:61:8a:53:50:3d:c4:7d:e3:21:22:11:
b3:61:f0:01:d0:39:c7:8a:d6:4a:ed:19:1f:87:32:7a:6e:f4:
22:d1:ee:f8:25:91:de:70:c8:af:9a:a4:00:d5:68:9d:a7:95:
8c:9f:13:4f:b3:9c:ab:53:16:28:23:53:74:01:b4:1c:1d:60:
10:b7:d7:44:d5:de:fb:08:1c:cd:96:36:35:62:8e:23:65:ec:
59:33:d5:ca:49:84:68:66:92:7f:5e:1d:0d:f2:c0:69:2d:f7:
98:4d:46:5e:dd:4b:20:e3:b7:19:ae:8a:2f:b6:1e:e6:dd:eb:
37:04:bb:be:1e:23:84:6b:9c:41:1d:be:51:f2:d6:1d:1c:bf:
66:a6:52:5d:d6:cd:1e:ca:32:28:08:af:55:e0:8e:34:1c:9c:
c9:fb:63:4b:5d:0f:57:25:7b:83:94:06:fb:66:64:f7:77:e6:
2b:42:46:f3:89:cf:7f:de:b3:bc:21:9a:4f:bd:09:35:eb:3a:
59:02:e4:8a:2e:4e:f0:10:cc:5e:d7:b1:2d:10:9d:fc:18:c5:
13:08:8a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:38 2025 by rpki-client