Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.mft
File: P9WU69efjdhbR5LpUzvkaBaohgY.mft (raw, json)
Hash identifier: rgteIKR5umf+CRSPDeyN/dR/4xMJsnT9rzWJt7f4J0M=
Subject key identifier: 74:20:61:ED:CF:81:6C:93:7F:D4:D5:29:2A:6E:8D:94:31:76:72:A1
Authority key identifier: 3F:D5:94:EB:D7:9F:8D:D8:5B:47:92:E9:53:3B:E4:68:16:A8:86:06
Certificate issuer: /CN=3fd594ebd79f8dd85b4792e9533be46816a88606
Certificate serial: 0199FD3424E4AAB857C3D8BD1DE535FB2F20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9WU69efjdhbR5LpUzvkaBaohgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.mft
Manifest number: 1261
Signing time: Sun 19 Oct 2025 16:01:16 +0000
Manifest this update: Sun 19 Oct 2025 16:01:16 +0000
Manifest next update: Mon 20 Oct 2025 16:01:16 +0000
Files and hashes: 1: P9WU69efjdhbR5LpUzvkaBaohgY.crl (hash: RPXU0CLhJnlx9u7NNmJVjayKAOQIIPVDJ0lDCBfPeiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9WU69efjdhbR5LpUzvkaBaohgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:24:e4:aa:b8:57:c3:d8:bd:1d:e5:35:fb:2f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd594ebd79f8dd85b4792e9533be46816a88606
Validity
Not Before: Oct 19 16:01:16 2025 GMT
Not After : Oct 20 16:01:16 2025 GMT
Subject: CN=742061edcf816c937fd4d5292a6e8d94317672a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d9:2f:b9:8a:d9:a2:a2:ee:92:ef:03:af:bf:
2b:fc:9e:d2:6b:82:4b:50:44:dc:6e:52:f4:e5:7b:
ed:ad:24:92:a1:61:89:4d:7a:df:61:fd:2b:f9:70:
8e:3e:7b:f9:a9:82:6c:79:35:cc:90:0f:56:43:97:
74:81:3f:f7:36:32:c8:fa:09:d8:6d:ad:a6:96:d8:
50:46:7a:4e:58:97:38:6a:79:6e:2a:1e:b8:ac:cd:
4e:2a:a0:a0:fb:8b:9a:ea:ec:24:f7:71:c0:e6:67:
35:0e:66:e1:38:7e:c5:fb:0b:12:31:30:f3:17:ce:
f6:c2:59:28:05:f7:67:16:e2:41:cd:ab:38:f1:66:
89:c1:6e:9b:a3:c4:00:47:65:9d:d7:20:8e:9f:ab:
48:1d:8b:17:74:8a:c0:5d:83:39:e3:f8:b3:64:9a:
2b:d7:43:bc:05:d7:44:5c:bd:24:69:8d:74:41:9a:
45:2b:33:d4:97:f0:8c:8e:6f:c2:d7:9d:ef:0a:b0:
6d:f7:55:a8:db:8b:f0:85:89:21:35:2e:72:81:98:
20:e1:3a:3f:37:0d:8d:d8:69:28:ff:12:03:73:d7:
ff:6c:46:c2:eb:44:ed:d9:74:1a:4e:7c:96:07:b5:
6a:f2:72:a1:2e:1a:7e:bf:15:e5:7d:0b:89:67:f3:
e7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:20:61:ED:CF:81:6C:93:7F:D4:D5:29:2A:6E:8D:94:31:76:72:A1
X509v3 Authority Key Identifier:
keyid:3F:D5:94:EB:D7:9F:8D:D8:5B:47:92:E9:53:3B:E4:68:16:A8:86:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9WU69efjdhbR5LpUzvkaBaohgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f0:c5:df:98:33:98:6d:5e:08:82:8a:bb:be:a9:ba:fa:8e:
c0:66:3f:da:90:1e:ca:17:1b:5b:67:39:a2:13:ec:e3:aa:18:
71:e7:f0:23:1b:70:50:9e:7f:a7:a8:72:af:4d:1c:ca:76:78:
fb:02:60:99:81:95:e9:fb:ce:23:14:e9:a4:28:81:b2:8d:15:
f7:aa:7d:92:0d:0c:89:db:ea:2a:2f:68:1c:1f:8b:64:f1:ec:
b1:67:77:8f:08:1c:b5:76:88:78:46:d6:a2:07:cd:0a:3c:03:
05:da:7e:ce:13:7f:79:15:cc:fa:80:21:fd:5b:59:ba:b3:23:
af:bb:d7:1c:9b:77:3d:fa:45:31:ce:84:9b:24:da:df:59:aa:
4e:80:04:51:45:7d:5f:f2:04:34:68:c1:32:3e:ec:bc:33:ce:
88:63:a3:77:2b:df:e7:69:ae:de:49:f7:85:68:20:21:fb:1d:
54:ae:68:68:c4:07:3d:c7:2a:85:e9:62:b2:ba:33:54:2d:e1:
54:c2:eb:c2:e6:31:b5:ca:17:76:76:3c:6a:95:69:94:1b:69:
c5:13:69:b4:ec:89:68:fc:73:a4:5a:b3:88:6b:f8:e9:76:b3:
b8:a3:72:6c:f2:89:dc:d2:2e:ea:da:03:3f:4a:95:3f:60:4e:
43:60:6b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:37 2025 by rpki-client