Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft
File: P-XZqjR4a6oW1Fa9857K-12XMPg.mft (raw, json)
Hash identifier: el2rvh/xBmIPCuJzqdsxupA4xEVffablA3rChWlPj7k=
Subject key identifier: C1:7F:D8:AA:BB:85:DD:9D:D3:54:D1:BF:E4:25:11:15:A0:BA:D4:0A
Authority key identifier: 3F:E5:D9:AA:34:78:6B:AA:16:D4:56:BD:F3:9E:CA:FB:5D:97:30:F8
Certificate issuer: /CN=3fe5d9aa34786baa16d456bdf39ecafb5d9730f8
Certificate serial: 0198D472C799F963D13CBFFC62C20A908A18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 01:02:28 +0000
Manifest this update: Sat 23 Aug 2025 01:02:28 +0000
Manifest next update: Sun 24 Aug 2025 01:02:28 +0000
Files and hashes: 1: I8Hl2QUOJ6pW-HzuzhburaAUCcs.roa (hash: TO7xgPDDMwBnfoyPmeOZq+S6vszklMWr0Jg0Yq+3Oiw=)
2: P-XZqjR4a6oW1Fa9857K-12XMPg.crl (hash: vHn/IqaUVzcRL/jfLMfmwOo57u8hsJqXNSkoYC5MqYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:c7:99:f9:63:d1:3c:bf:fc:62:c2:0a:90:8a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe5d9aa34786baa16d456bdf39ecafb5d9730f8
Validity
Not Before: Aug 23 01:02:28 2025 GMT
Not After : Aug 24 01:02:28 2025 GMT
Subject: CN=c17fd8aabb85dd9dd354d1bfe4251115a0bad40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b5:16:3f:a6:4a:3d:86:50:10:e1:fd:8f:73:
0a:cb:87:08:e1:f9:7b:f4:16:14:d7:c0:0e:aa:f9:
4e:27:45:4c:1f:38:0a:97:87:22:12:62:ae:99:c2:
bd:8e:98:5a:34:6d:9a:08:ef:d9:03:ad:c7:a8:80:
7f:33:44:dd:5e:4d:e0:03:a2:0e:2f:35:c1:95:2b:
86:b5:f5:b8:30:ae:d1:02:ca:7c:09:ce:30:80:b3:
fd:8d:05:47:9d:3c:b0:9d:e7:e0:bc:55:9b:ef:6c:
5c:ff:7b:07:a5:54:f3:da:5d:b6:98:52:7b:20:c7:
bf:26:d6:6d:16:27:ec:e7:c5:41:5c:ba:cf:a2:1f:
2d:0f:d0:39:a5:f6:83:09:cc:32:f7:db:88:2d:b8:
12:c0:4e:b9:b4:fd:08:13:1c:d1:fb:1a:34:52:4d:
27:a2:ff:79:6a:cf:2b:e2:10:55:d8:9e:df:43:78:
ca:2f:62:c4:f9:d4:5e:c2:cc:d7:8d:3e:fb:1f:ee:
d1:5c:70:c8:64:7f:31:5e:1b:5a:8c:b7:68:ad:63:
38:b0:3b:b0:40:92:bd:3e:c4:bf:01:aa:57:ce:9d:
a9:98:fb:d8:f8:fe:81:ac:44:d1:7b:4d:c2:f8:5e:
07:d6:46:00:51:75:9a:9b:a8:d3:77:95:81:21:f6:
14:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7F:D8:AA:BB:85:DD:9D:D3:54:D1:BF:E4:25:11:15:A0:BA:D4:0A
X509v3 Authority Key Identifier:
keyid:3F:E5:D9:AA:34:78:6B:AA:16:D4:56:BD:F3:9E:CA:FB:5D:97:30:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:21:ba:b2:bb:74:7e:63:a9:2d:67:49:85:b2:0d:d8:1b:32:
bc:c9:cc:da:b3:f0:1d:72:c9:c5:b9:0c:6f:f9:8b:c5:fd:20:
e6:74:f2:b6:83:fb:c1:ce:d5:62:63:87:a5:24:06:3a:00:cd:
13:88:27:72:6b:a6:2d:2d:97:f6:58:8c:4c:db:ac:34:76:4c:
bf:60:5c:02:ee:98:62:3a:8d:73:31:7b:5b:77:3f:35:17:11:
ec:ec:b7:56:e9:5a:5c:0b:eb:5c:f1:c9:9e:14:f2:f9:72:af:
fd:2f:06:63:23:3c:b1:5c:a0:48:65:75:97:f2:6c:54:43:d1:
4e:96:2c:4a:9d:26:7d:6f:d5:c9:03:33:24:c3:72:f6:57:e9:
07:44:be:0c:d5:6e:e1:3e:cc:4d:5b:e1:83:cd:5e:75:52:74:
a6:9c:4d:15:78:16:13:fd:24:13:b1:25:38:d3:17:34:a7:13:
87:14:4f:d5:3b:89:43:8c:2c:06:43:65:ac:89:c9:28:0c:f0:
d8:10:8d:e7:1e:98:50:51:8a:fd:1d:1a:2f:65:ab:f9:8d:a2:
3b:e8:a8:d7:79:06:14:f9:5d:fe:df:cd:5d:41:e5:d8:7d:f3:
5b:44:8c:db:c6:59:da:d8:be:d3:69:2c:e7:d2:99:f6:22:2b:
f5:a1:72:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:35 2025 by rpki-client