Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
File: p3l5GlNwwc1X5JPZSfke-82mYX4.mft (raw, json)
Hash identifier: WV7LPxl3C6+wo5VFFsLyU3SZq7/zjOYxJ7Ou2VQ2SCs=
Subject key identifier: A9:C0:96:42:3D:1B:63:D9:76:26:47:C8:11:51:9A:05:3A:60:5F:E3
Authority key identifier: A7:79:79:1A:53:70:C1:CD:57:E4:93:D9:49:F9:1E:FB:CD:A6:61:7E
Certificate issuer: /CN=a779791a5370c1cd57e493d949f91efbcda6617e
Certificate serial: 0198D4E0B001E7B204FA4351DCFD43D63403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
Manifest number: 0AEC
Signing time: Sat 23 Aug 2025 03:02:31 +0000
Manifest this update: Sat 23 Aug 2025 03:02:31 +0000
Manifest next update: Sun 24 Aug 2025 03:02:31 +0000
Files and hashes: 1: p3l5GlNwwc1X5JPZSfke-82mYX4.crl (hash: 2WklL5oyBvcix3OENHQCmJwQHZnebK1XdRC30EVgTWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:b0:01:e7:b2:04:fa:43:51:dc:fd:43:d6:34:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a779791a5370c1cd57e493d949f91efbcda6617e
Validity
Not Before: Aug 23 03:02:31 2025 GMT
Not After : Aug 24 03:02:31 2025 GMT
Subject: CN=a9c096423d1b63d9762647c811519a053a605fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6f:0e:f3:79:14:c2:20:12:9a:cb:23:15:23:
f5:3a:bc:7c:5f:50:f0:d4:1e:be:c4:aa:c8:21:43:
9e:ba:d7:64:e1:56:ff:dc:a4:71:12:8d:61:f8:bb:
bc:ec:27:7e:51:94:46:7f:50:c6:36:98:41:8e:7b:
a7:a3:c1:03:05:fc:95:2e:eb:10:cc:3b:d5:f3:29:
9a:ef:8a:3c:2d:ab:7c:38:47:1e:9f:1b:42:5f:fc:
9d:c8:c1:f1:35:ec:48:88:9c:c5:54:f0:b2:6d:4c:
61:8f:90:71:9f:8f:6d:19:87:42:63:8b:da:05:59:
f8:47:f7:88:8e:77:41:03:35:3d:f4:e5:ce:6a:b6:
99:16:e5:96:5c:a1:97:f0:35:e6:e9:63:5f:bf:7f:
a4:a0:ef:16:19:32:f5:a7:13:be:13:54:fd:e9:54:
3c:a9:d6:e1:80:c9:58:b3:fa:cd:5b:7e:26:96:04:
e4:47:18:e1:7e:ae:17:b7:8e:45:7b:0a:e1:a6:33:
c8:8b:27:3a:2e:47:c1:02:89:a2:cd:e8:13:d9:af:
bd:2a:51:7f:b4:cb:84:17:c5:2c:5d:b2:9f:6d:82:
bb:00:d6:33:b5:b6:c2:f7:4d:42:56:49:ad:6f:ed:
a5:9a:ad:3e:5a:a0:c6:68:2f:d5:98:57:ee:b0:7e:
30:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C0:96:42:3D:1B:63:D9:76:26:47:C8:11:51:9A:05:3A:60:5F:E3
X509v3 Authority Key Identifier:
keyid:A7:79:79:1A:53:70:C1:CD:57:E4:93:D9:49:F9:1E:FB:CD:A6:61:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:45:c9:b5:80:13:82:45:d1:65:92:85:40:e3:1f:54:4e:78:
79:ef:5c:85:33:f3:38:2d:7c:5d:eb:57:77:7a:c6:1c:ee:b2:
7f:92:20:fb:50:79:c0:8f:d6:df:8b:76:2f:84:d0:6d:21:4d:
5c:6c:90:dc:fa:19:29:88:b5:23:fe:f1:63:82:79:0e:f9:e4:
87:2c:2b:51:6a:7e:40:ed:b0:da:39:60:20:e8:2c:fd:ba:9e:
8c:b3:91:84:13:4c:fe:32:08:d2:59:5d:19:aa:6b:de:40:2d:
0e:6d:a1:59:22:90:2a:54:54:4a:00:f6:51:b7:5d:8b:52:74:
75:a1:74:e8:e9:4e:90:3b:04:04:48:44:00:5f:46:b1:f8:fa:
03:3d:f7:97:20:8e:41:28:0a:5f:e9:3f:08:50:8d:c6:4b:c1:
f7:d3:44:1b:c3:f3:67:78:26:1b:2d:c9:91:52:88:44:6b:d1:
86:02:20:31:27:33:14:4e:c8:85:9c:1d:19:c5:01:84:ee:1c:
ac:e4:f7:09:3f:ce:8a:bc:c3:3c:01:d8:3e:bd:3e:5a:5d:1b:
8f:d5:c2:51:c9:da:5a:c1:00:60:5e:6a:6e:89:1e:2e:1a:09:
e3:2b:6f:0d:51:a3:46:36:01:0f:bd:c8:fe:91:54:11:62:d3:
a6:0c:0e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:21 2025 by rpki-client