Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
File: P1KMlfYICrE8sEl4PpJE0z2cSzI.mft (raw, json)
Hash identifier: 4hmK/CDHkvtSBqkFHwjLaWcupLAIY9LM1TTChNLNSno=
Subject key identifier: 65:6D:14:CF:61:A0:8A:05:BA:60:33:47:F6:41:96:05:3E:19:2C:15
Authority key identifier: 3F:52:8C:95:F6:08:0A:B1:3C:B0:49:78:3E:92:44:D3:3D:9C:4B:32
Certificate issuer: /CN=3f528c95f6080ab13cb049783e9244d33d9c4b32
Certificate serial: 0199FD344F416E4720C9475337B0388CD19A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
Manifest number: 15F5
Signing time: Sun 19 Oct 2025 16:01:27 +0000
Manifest this update: Sun 19 Oct 2025 16:01:27 +0000
Manifest next update: Mon 20 Oct 2025 16:01:27 +0000
Files and hashes: 1: P1KMlfYICrE8sEl4PpJE0z2cSzI.crl (hash: +n6oTHFcSGvDvhr77oIh+e8+upSpyTmwVlYSw5Lil4E=)
2: w5HnLtF4Me5n7OHUmGug2mAnL6U.roa (hash: AsJuclUazy6myQDlUyLOaCVJ9azdwtM7AhIo+Ahv/h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:4f:41:6e:47:20:c9:47:53:37:b0:38:8c:d1:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f528c95f6080ab13cb049783e9244d33d9c4b32
Validity
Not Before: Oct 19 16:01:27 2025 GMT
Not After : Oct 20 16:01:27 2025 GMT
Subject: CN=656d14cf61a08a05ba603347f64196053e192c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:80:a4:87:a2:07:cf:d1:c8:df:58:e3:0a:1a:
c4:ac:35:7a:9a:b0:c5:57:85:b1:4c:0b:a5:45:6f:
8e:dd:83:c9:97:5a:7f:8b:f9:62:86:3a:09:20:05:
53:24:5c:82:38:94:5f:30:26:ae:73:49:cc:58:44:
50:94:23:40:a1:b4:d3:5d:8d:bb:c5:eb:02:a5:23:
60:f4:00:f7:4a:de:81:43:9e:c2:f0:f4:c2:13:cc:
25:6e:9b:06:65:c8:4d:c0:7c:26:81:30:d3:b0:68:
27:9d:a0:15:d4:3e:cc:1e:5b:cf:98:9d:d7:c7:79:
84:a7:00:0b:4c:8e:ff:40:ae:d5:b8:c3:e3:fe:6d:
56:85:3b:11:fa:35:2d:63:7e:ff:76:68:17:1e:52:
42:c8:fa:a5:fc:30:00:2a:b6:f5:bc:b3:11:69:22:
b2:ed:de:58:18:42:d7:a5:66:89:7b:73:db:87:09:
93:4c:df:64:21:e9:9c:fe:b9:07:27:cf:40:26:71:
77:65:b7:4e:f4:2b:e3:8a:af:83:44:64:91:e8:42:
8b:bc:9c:04:e0:48:2b:53:0a:df:df:73:6b:c9:48:
2b:b3:0b:83:e6:59:41:12:5c:58:d3:03:60:69:df:
85:cb:01:6d:8e:91:b3:ab:33:03:ca:f5:cf:2d:41:
77:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6D:14:CF:61:A0:8A:05:BA:60:33:47:F6:41:96:05:3E:19:2C:15
X509v3 Authority Key Identifier:
keyid:3F:52:8C:95:F6:08:0A:B1:3C:B0:49:78:3E:92:44:D3:3D:9C:4B:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:87:44:48:36:3d:54:ef:fe:44:3b:50:d3:54:75:29:39:a9:
de:51:6e:7c:d0:33:69:7e:92:98:6b:bd:ca:4f:7e:fe:f9:60:
7b:3c:90:a3:13:61:2e:4f:ab:71:83:64:e0:81:f0:14:35:9f:
d2:2c:0c:42:06:4e:2c:60:7b:6e:5a:62:4c:5a:af:21:8e:64:
c1:f4:d4:a4:39:de:ab:69:8b:87:f7:e6:51:e8:2a:a4:a9:76:
7e:31:95:c0:e0:f2:8e:89:58:50:5c:96:aa:e7:3f:18:87:34:
c7:df:72:5a:60:f1:9f:55:d0:e5:11:9c:38:8a:5c:4c:fd:e4:
c5:da:78:cc:71:bc:39:b4:31:72:a6:82:38:47:8e:43:e2:a9:
e2:b9:a6:85:a7:3c:45:e9:9c:04:f1:1a:44:e0:42:08:5e:74:
a6:1d:9c:3f:90:d9:1c:6b:24:84:35:3a:e5:97:67:7f:8d:41:
87:91:01:7b:9e:cb:6d:d6:d4:8f:61:d3:70:d2:dd:74:9e:2c:
4e:04:62:a5:89:7a:7d:51:b8:56:f7:2f:18:08:1d:e6:15:bf:
ad:b5:7d:9e:53:f0:1e:10:1c:84:93:79:b1:aa:54:87:4f:68:
0a:80:73:92:a0:75:a0:8b:c0:61:17:c5:de:5f:71:2d:20:14:
1e:28:70:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:27:37 2025 by rpki-client