
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
File: p0FyV8tjZv81cjOybSXdWIfaifs.mft (raw, json)
Hash identifier: 20hPiZ/l+zPuqGxYH4Tk4lQp8sRnwrtTTZtfFn6Fz5U=
Subject key identifier: F8:17:8B:AB:73:6E:97:EC:E6:EE:F7:14:F8:DC:C0:D7:7D:E5:B7:32
Authority key identifier: A7:41:72:57:CB:63:66:FF:35:72:33:B2:6D:25:DD:58:87:DA:89:FB
Certificate issuer: /CN=a7417257cb6366ff357233b26d25dd5887da89fb
Certificate serial: 0198D66061BCDB072662D3A92DB7F88A9B08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 10:01:37 +0000
Manifest this update: Sat 23 Aug 2025 10:01:37 +0000
Manifest next update: Sun 24 Aug 2025 10:01:37 +0000
Files and hashes: 1: p0FyV8tjZv81cjOybSXdWIfaifs.crl (hash: 1l4L1629+9b8On6M6pyKuUwHsHkCTJWh+0j/vNuoFFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:61:bc:db:07:26:62:d3:a9:2d:b7:f8:8a:9b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7417257cb6366ff357233b26d25dd5887da89fb
Validity
Not Before: Aug 23 10:01:37 2025 GMT
Not After : Aug 24 10:01:37 2025 GMT
Subject: CN=f8178bab736e97ece6eef714f8dcc0d77de5b732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:51:37:4a:12:a4:32:fd:6b:31:a1:a9:0c:b5:
7c:be:61:18:46:cb:63:ec:09:81:73:6e:1c:0c:c6:
12:90:93:1d:25:02:b9:db:00:83:59:8d:64:14:6b:
ff:57:1d:d7:b6:76:fb:2e:fb:27:00:85:28:c4:8f:
57:3b:ac:66:6e:d7:35:9f:5a:92:28:fd:9a:32:47:
63:d3:31:b6:42:38:45:07:70:bc:58:44:3e:a6:b3:
6f:55:d0:0e:f6:bc:87:09:c1:3f:cc:d1:62:40:93:
a7:33:64:88:ad:5c:65:06:b5:e6:af:cd:8b:04:62:
39:70:63:1c:d1:d1:be:9b:f7:f5:ec:de:b7:4d:a9:
86:be:7e:f5:7f:b8:a8:7e:71:4d:55:50:91:03:b0:
19:6b:c5:41:1b:dc:1c:8e:f0:be:ba:64:a2:e8:62:
c7:67:9f:e3:a5:f5:56:2b:dd:12:72:0a:4b:05:84:
5d:fe:42:72:3f:c6:7f:2c:68:a9:0e:12:3b:c3:e7:
97:95:b2:47:36:64:5e:58:a4:7b:76:74:a6:ce:27:
84:eb:ef:42:df:ee:f0:a5:b3:64:3f:eb:09:e7:7f:
d2:42:46:94:59:30:6f:ae:09:b0:98:26:f2:e4:54:
33:5f:ca:95:92:5f:6d:88:ee:dd:6a:71:8d:17:f5:
bc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:17:8B:AB:73:6E:97:EC:E6:EE:F7:14:F8:DC:C0:D7:7D:E5:B7:32
X509v3 Authority Key Identifier:
keyid:A7:41:72:57:CB:63:66:FF:35:72:33:B2:6D:25:DD:58:87:DA:89:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ce:9e:82:29:bf:25:4a:3d:2e:b0:2b:1a:44:fa:6e:5a:5d:
fd:72:1a:41:47:4c:7c:ca:d5:2c:3d:a3:8c:2c:40:12:de:00:
cb:28:33:76:5e:48:62:d2:47:5a:4a:57:e3:4c:72:ff:06:6e:
d2:b6:68:73:57:99:60:1c:93:11:c1:ed:a1:19:13:ac:bd:27:
87:e7:c1:cd:da:f7:c0:1e:f9:51:71:78:63:e5:68:03:c1:17:
bf:2f:09:49:b1:93:9c:05:fc:98:6c:a4:09:86:26:df:2e:e0:
d6:8a:57:e0:70:5a:bd:c4:26:e1:bf:f2:c5:3a:67:22:06:34:
67:cd:41:8b:6c:e1:64:36:6d:e3:d2:99:b2:ea:bd:44:53:9c:
f1:62:ce:6d:1a:3d:ae:1c:f7:d6:dc:1a:0d:c4:88:55:a0:e8:
18:66:75:39:bc:9f:17:a1:05:0d:a0:46:3b:1a:78:3c:7b:33:
f4:21:69:c9:e3:63:26:ca:c9:7f:80:fe:41:85:ce:4f:6c:c6:
9e:fa:73:3d:96:e4:75:9d:80:2e:62:a9:11:eb:7a:ac:f5:0b:
ff:51:f3:10:67:66:55:2e:32:7a:67:ed:3d:4f:7d:99:67:0a:
52:86:d0:ec:d3:b1:73:86:ca:e6:e1:58:b3:81:aa:ff:25:93:
cb:3c:33:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:29 2025 by rpki-client