Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft
File: p2H8O2oE10MHa9KG3oIURfBlTvc.mft (raw, json)
Hash identifier: UgI51u0i/tYX7byR8A//7L/JBTgJRR4qvHpHHOEcgaw=
Subject key identifier: 82:6B:DC:C1:5E:55:10:FA:FB:36:66:79:C7:3A:0D:55:F4:04:3D:D7
Authority key identifier: A7:61:FC:3B:6A:04:D7:43:07:6B:D2:86:DE:82:14:45:F0:65:4E:F7
Certificate issuer: /CN=a761fc3b6a04d743076bd286de821445f0654ef7
Certificate serial: 0199FC8F3DDE994924B65B30E3D6BCF975B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2H8O2oE10MHa9KG3oIURfBlTvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft
Manifest number: 1671
Signing time: Sun 19 Oct 2025 13:01:09 +0000
Manifest this update: Sun 19 Oct 2025 13:01:09 +0000
Manifest next update: Mon 20 Oct 2025 13:01:09 +0000
Files and hashes: 1: p2H8O2oE10MHa9KG3oIURfBlTvc.crl (hash: f3ICTjv/KCLtTJBLAfXqU4fyupVhtd9Ixfyk+axWwJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2H8O2oE10MHa9KG3oIURfBlTvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:3d:de:99:49:24:b6:5b:30:e3:d6:bc:f9:75:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a761fc3b6a04d743076bd286de821445f0654ef7
Validity
Not Before: Oct 19 13:01:09 2025 GMT
Not After : Oct 20 13:01:09 2025 GMT
Subject: CN=826bdcc15e5510fafb366679c73a0d55f4043dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:14:52:91:86:82:0c:da:33:3e:2e:41:fe:b8:
e7:78:b7:20:ca:23:fe:3b:0f:7c:f0:91:b4:2d:3c:
3c:9d:aa:7f:e7:f1:4f:8a:a5:96:5c:d1:ec:d2:2f:
5c:84:3c:83:1c:d8:91:dd:80:fb:c8:05:fe:ec:7e:
bf:f8:4e:9b:c8:0c:8f:65:50:90:44:b7:0d:85:6c:
dc:82:97:db:2e:03:19:83:f0:a2:81:c9:6d:b3:de:
7d:3e:2f:33:d3:af:09:e9:08:85:4d:be:bd:65:2c:
e0:92:7b:21:39:f9:d7:9f:c2:34:b0:52:a7:66:03:
f7:9a:c6:10:58:4a:b4:17:81:5b:a5:14:66:bb:04:
61:3f:89:a5:ac:cd:1d:ff:0b:50:1e:63:e9:35:a1:
43:91:25:ca:f4:9b:1b:36:a2:94:fd:8f:cb:fc:43:
31:b5:ef:57:fb:22:28:b2:4c:c7:a7:59:c8:8a:83:
a3:73:b6:51:c2:e5:ac:6b:62:8c:26:f7:59:47:74:
4d:43:31:03:ee:c2:84:b2:ea:3d:a2:83:c2:77:de:
28:b0:4f:a5:af:e1:3d:e0:7b:6b:30:b5:ea:b9:65:
3b:93:e8:f0:1c:a0:a8:9c:4b:d1:e3:5e:fb:74:ba:
94:da:8b:62:3a:fc:11:92:8a:3b:08:d5:ef:00:bc:
b2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6B:DC:C1:5E:55:10:FA:FB:36:66:79:C7:3A:0D:55:F4:04:3D:D7
X509v3 Authority Key Identifier:
keyid:A7:61:FC:3B:6A:04:D7:43:07:6B:D2:86:DE:82:14:45:F0:65:4E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2H8O2oE10MHa9KG3oIURfBlTvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:07:a6:6d:bc:79:6e:ad:74:19:87:43:55:85:1c:63:cf:a7:
13:ea:6c:5e:11:f5:ab:7b:5f:19:88:03:73:a8:64:4c:72:d8:
49:60:3b:4f:0a:1f:8b:08:0c:e5:fb:52:3f:31:3f:34:b5:5f:
7c:b3:d9:d9:a6:e6:e2:02:d9:70:98:81:81:61:ca:5a:3d:b2:
b8:63:a6:28:eb:ae:55:a4:91:7f:8f:58:90:94:92:2e:03:48:
ba:57:c2:88:96:93:77:52:e8:bd:e5:0b:6a:b6:12:53:6d:32:
67:15:94:63:54:8c:9d:7e:ff:fb:b1:4e:08:dd:a6:82:4a:a1:
3d:4e:f2:6c:c7:ee:47:7b:85:d7:fd:06:7f:5d:bd:de:ae:43:
83:30:c5:52:08:0d:e6:4a:3c:d0:9b:6d:d4:f0:c8:9e:11:f5:
f4:09:71:91:9c:ec:bd:4c:2f:7d:7c:40:8a:5f:cc:f7:c5:de:
68:1c:f5:57:13:b8:b8:06:e0:02:59:70:5c:fe:64:fe:3c:7e:
ed:58:fc:e3:9d:55:c9:18:4f:23:04:b7:19:aa:84:a2:e4:c9:
96:8b:46:3f:60:ff:60:ab:a1:21:f3:d2:41:85:16:ba:77:66:
29:87:dd:50:a6:ad:21:13:2c:6a:66:03:94:f7:d1:ef:0b:67:
68:b8:30:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:38 2025 by rpki-client