Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
File: P1umH85V_19gjjr27FYLN67CNf8.mft (raw, json)
Hash identifier: dc5MgyV8jMR1NtuICHJzzYYpqYA0nwLZyRJV+TlDO0k=
Subject key identifier: 6E:07:3F:21:DC:5C:2B:C5:D3:FB:CA:40:1B:D8:D6:0D:97:5C:CF:93
Authority key identifier: 3F:5B:A6:1F:CE:55:FF:5F:60:8E:3A:F6:EC:56:0B:37:AE:C2:35:FF
Certificate issuer: /CN=3f5ba61fce55ff5f608e3af6ec560b37aec235ff
Certificate serial: 0199FCC6675778BD29B64D3ACA24DF50A6E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
Manifest number: 0538
Signing time: Sun 19 Oct 2025 14:01:24 +0000
Manifest this update: Sun 19 Oct 2025 14:01:24 +0000
Manifest next update: Mon 20 Oct 2025 14:01:24 +0000
Files and hashes: 1: P1umH85V_19gjjr27FYLN67CNf8.crl (hash: uWwF1bziIZltuyNilsKMMZMajV00hV3Gy6V2bqRTjOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:67:57:78:bd:29:b6:4d:3a:ca:24:df:50:a6:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5ba61fce55ff5f608e3af6ec560b37aec235ff
Validity
Not Before: Oct 19 14:01:24 2025 GMT
Not After : Oct 20 14:01:24 2025 GMT
Subject: CN=6e073f21dc5c2bc5d3fbca401bd8d60d975ccf93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6f:34:c1:9c:a1:a5:16:b6:4d:e3:66:82:6e:
1a:02:0d:f7:e3:d0:2e:18:49:4f:6e:a3:e3:cf:ad:
f9:4b:23:17:c6:6f:b3:41:95:19:3a:e4:55:c3:e6:
a1:ec:84:97:0b:1f:4e:8d:10:03:12:28:84:24:f7:
99:ae:91:0a:4d:9c:30:07:0e:48:f5:92:8b:2b:fa:
5a:07:56:52:05:3f:68:28:80:1c:18:ce:3a:6d:62:
b8:76:f3:ae:94:51:08:35:29:c3:f5:cf:7e:25:04:
d6:7d:f9:1a:7c:58:c9:66:82:d9:64:b6:64:29:7c:
ef:4a:70:bc:a5:cf:70:7c:76:27:bf:cc:4d:81:02:
28:70:e3:48:18:ca:4e:36:4b:28:68:20:b1:e8:c8:
de:4a:1a:7e:55:47:83:07:65:15:06:07:d6:d4:f7:
d6:b7:4e:bb:a2:a3:5b:e9:4e:d0:a6:82:7d:1a:0b:
40:52:92:45:2d:76:06:b1:e3:60:24:76:a6:99:f6:
bc:66:0d:73:a3:0a:1e:7d:4d:3d:8c:d5:7a:a2:8c:
85:c6:17:86:b2:27:0f:dd:ca:ba:3a:f3:d7:22:92:
de:f5:7a:27:48:3b:3e:ab:f9:79:41:05:71:1f:59:
58:ab:12:ca:3f:00:43:62:0d:b3:02:87:5e:9c:52:
a6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:07:3F:21:DC:5C:2B:C5:D3:FB:CA:40:1B:D8:D6:0D:97:5C:CF:93
X509v3 Authority Key Identifier:
keyid:3F:5B:A6:1F:CE:55:FF:5F:60:8E:3A:F6:EC:56:0B:37:AE:C2:35:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:54:16:71:57:66:85:ee:86:bf:f9:d6:ef:d7:3c:05:45:1b:
14:d3:2d:a0:74:76:bf:44:df:98:85:ed:55:bc:73:fa:f9:a5:
6d:d7:77:9b:d0:f8:0c:0e:75:3c:fb:47:32:31:ce:b3:38:34:
6f:45:ff:2a:41:08:c9:c5:fa:61:22:72:5f:77:c8:43:d9:ec:
65:42:b9:5e:d1:c3:87:88:be:e0:fd:df:a1:1e:5d:cf:31:e3:
8d:db:20:14:b1:0e:58:91:97:4f:e1:6b:82:fb:0d:53:73:ce:
ab:b7:be:5d:c3:59:88:33:ee:54:df:08:88:b6:83:6d:4b:72:
ee:68:bd:48:26:75:86:64:d5:e4:74:e9:f5:6a:65:c4:ac:54:
82:b2:70:3f:b8:03:ec:ad:58:90:40:b6:55:77:68:79:d8:ad:
b2:a8:6d:94:39:cf:e5:de:60:13:b5:dd:62:76:0c:f1:cd:87:
7a:48:8b:74:50:03:0a:e8:94:03:c5:90:d7:d9:74:c1:49:0b:
43:70:02:f6:73:37:31:7d:58:b9:1e:28:7c:61:74:b3:62:15:
d7:d4:b8:d1:f4:2a:44:da:c8:7c:3a:7e:0d:21:0a:b8:fe:e5:
1f:d9:21:68:7b:57:65:36:cf:b8:a2:33:a5:31:0c:c2:3d:de:
26:ce:6c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:21 2025 by rpki-client