Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft
File: p2H8O2oE10MHa9KG3oIURfBlTvc.mft (raw, json)
Hash identifier: M7LAvylMnfsyVffHVWsdOEVuJ4qr5dB2Mt7qbs31X/s=
Subject key identifier: 60:DE:0B:E3:B8:1D:40:6C:59:55:6A:3D:90:29:E6:C2:A2:1B:DE:8E
Authority key identifier: A7:61:FC:3B:6A:04:D7:43:07:6B:D2:86:DE:82:14:45:F0:65:4E:F7
Certificate issuer: /CN=a761fc3b6a04d743076bd286de821445f0654ef7
Certificate serial: 0198D515997F2A2F8815AC8DC59C3646F776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2H8O2oE10MHa9KG3oIURfBlTvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft
Manifest number: 15D8
Signing time: Sat 23 Aug 2025 04:00:19 +0000
Manifest this update: Sat 23 Aug 2025 04:00:19 +0000
Manifest next update: Sun 24 Aug 2025 04:00:19 +0000
Files and hashes: 1: p2H8O2oE10MHa9KG3oIURfBlTvc.crl (hash: BQd5xNb+LvN9eWZZyIPQ+5rT6qv8tSz2T7TvkIne+uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2H8O2oE10MHa9KG3oIURfBlTvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:99:7f:2a:2f:88:15:ac:8d:c5:9c:36:46:f7:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a761fc3b6a04d743076bd286de821445f0654ef7
Validity
Not Before: Aug 23 04:00:19 2025 GMT
Not After : Aug 24 04:00:19 2025 GMT
Subject: CN=60de0be3b81d406c59556a3d9029e6c2a21bde8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:16:98:57:5b:f2:23:d8:54:2a:eb:49:b6:7c:
7d:98:d3:ad:af:a7:0c:60:ca:e2:ce:9d:2b:69:ec:
bf:9d:58:b0:58:1c:f5:2c:df:da:cf:05:6e:a0:71:
a1:20:13:50:9e:22:a8:ff:75:73:8c:9c:d8:4b:ec:
db:84:29:ca:c9:81:d5:62:01:00:41:31:9a:b8:c3:
2c:0f:14:a1:16:6d:4f:3f:c0:f9:d2:51:bf:7f:83:
cc:85:05:44:fe:6d:b5:33:7e:38:1f:9c:ef:f0:81:
06:7f:11:5c:83:01:d7:89:9f:8d:e6:73:d8:cf:ca:
12:c6:a9:71:e9:ac:b6:21:6f:c2:f7:ec:04:2e:ff:
0c:ed:bf:ad:43:4e:20:45:15:1c:0a:08:1e:e0:c4:
93:0f:52:8f:5b:bd:ff:80:96:b8:cd:fe:0c:b1:9d:
3c:be:be:79:40:5b:cf:d8:c6:13:2c:f6:9f:fe:86:
b5:89:c4:94:19:ad:6c:18:8e:c9:24:e7:fa:10:e0:
0f:1c:77:51:f4:e6:98:8b:80:f7:63:4a:82:31:60:
d5:34:77:fc:c4:e0:e2:ad:50:88:c1:7a:2b:5e:31:
df:2c:c3:fd:57:e7:86:3e:8a:12:f8:ed:da:14:c3:
4e:f4:0e:1b:ff:f0:c2:c4:b3:5f:8e:01:a8:de:b0:
1a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DE:0B:E3:B8:1D:40:6C:59:55:6A:3D:90:29:E6:C2:A2:1B:DE:8E
X509v3 Authority Key Identifier:
keyid:A7:61:FC:3B:6A:04:D7:43:07:6B:D2:86:DE:82:14:45:F0:65:4E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2H8O2oE10MHa9KG3oIURfBlTvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:18:49:04:1c:f7:36:ab:62:02:41:9e:1a:5a:d7:2d:37:2f:
be:51:80:cd:50:8b:5d:cc:e9:49:66:a3:93:a9:b8:01:c0:30:
72:76:e2:85:ec:e2:7f:0c:c5:f9:65:c3:dd:8c:80:c5:ba:82:
c7:2e:92:e4:a5:14:e0:2d:09:a1:97:2a:3b:cc:09:3b:03:54:
df:dd:f9:fa:fa:09:54:b7:f2:57:1a:72:5b:da:c5:29:b4:c1:
38:c0:b1:51:5d:e9:88:db:b1:66:ee:12:f7:91:0a:ea:3c:4c:
7e:f1:ae:8b:de:29:77:f8:0d:47:04:d7:a7:60:47:3e:26:3b:
51:8d:7a:a6:2c:d5:99:49:f4:2a:1c:a8:8b:a4:71:e3:14:93:
77:2a:fc:fe:cc:05:f0:04:fb:2c:97:90:6f:92:e1:00:31:c5:
67:6c:b7:3b:f4:2e:4f:92:b4:1a:fa:22:6d:76:78:1e:6f:7b:
30:36:a8:71:c2:ca:7d:8e:88:c0:de:43:eb:87:d3:07:08:32:
14:2d:c2:35:00:74:da:64:07:de:cd:00:95:45:7e:6d:25:8e:
a9:5e:0a:32:dd:49:d6:60:84:e3:24:07:48:d7:d2:3f:1c:90:
f3:a9:59:e8:69:50:12:74:9b:b1:2c:84:94:f7:3a:5d:03:4b:
78:ee:1f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:17:59 2025 by rpki-client