Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
File: P1umH85V_19gjjr27FYLN67CNf8.mft (raw, json)
Hash identifier: uGyWkm+L7poQZrNydd11wcGisFI+JKeLgLSX9OuyjrI=
Subject key identifier: 91:D5:09:94:30:21:23:F4:0D:79:BB:EF:F8:CF:EB:88:06:FC:09:F1
Authority key identifier: 3F:5B:A6:1F:CE:55:FF:5F:60:8E:3A:F6:EC:56:0B:37:AE:C2:35:FF
Certificate issuer: /CN=3f5ba61fce55ff5f608e3af6ec560b37aec235ff
Certificate serial: 0198D73B71D823118FB21AA8D8BBFE3C38A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
Manifest number: 04A0
Signing time: Sat 23 Aug 2025 14:00:53 +0000
Manifest this update: Sat 23 Aug 2025 14:00:53 +0000
Manifest next update: Sun 24 Aug 2025 14:00:53 +0000
Files and hashes: 1: P1umH85V_19gjjr27FYLN67CNf8.crl (hash: GDUbMNqNu4siG0EJok/nsODkanAa9PiWx3dF2Y6PbH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:71:d8:23:11:8f:b2:1a:a8:d8:bb:fe:3c:38:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5ba61fce55ff5f608e3af6ec560b37aec235ff
Validity
Not Before: Aug 23 14:00:53 2025 GMT
Not After : Aug 24 14:00:53 2025 GMT
Subject: CN=91d50994302123f40d79bbeff8cfeb8806fc09f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f7:58:eb:c3:33:dc:77:22:7e:37:bc:0a:f5:
fd:0b:1d:ec:46:da:f6:f6:68:43:db:56:ce:85:f9:
67:d8:43:5a:01:1c:f0:ba:ea:66:5f:d5:d4:b0:c7:
ff:31:34:44:2b:d8:ff:f6:ae:16:1c:0b:7c:2a:74:
51:66:30:dc:85:c8:d4:a5:25:c3:cb:73:1d:48:5e:
7d:06:19:62:c2:f4:74:f5:54:4b:84:eb:47:c3:8d:
30:9f:de:0b:db:14:75:2d:38:4d:e2:ae:51:d5:ed:
54:a0:e1:12:ac:7d:9d:82:19:97:5f:7e:64:50:91:
31:71:8a:42:a0:3d:bd:15:3c:63:15:a8:6c:f3:55:
db:e1:09:a8:ac:c7:8a:1a:55:45:de:b2:97:43:19:
84:a0:8d:26:d9:eb:e3:4e:f5:bc:18:b9:d0:64:cf:
7f:be:d4:e3:d2:b1:c3:32:b9:5d:3b:f7:af:1b:7c:
fc:bc:93:4f:88:4d:c2:79:b2:db:07:24:d3:4f:ee:
d7:85:f8:e4:8b:b8:f4:17:0e:b4:99:e7:c3:b4:47:
aa:91:6e:38:66:5f:0a:f2:8b:d5:fc:94:b5:af:6d:
a5:27:ad:e0:43:cc:81:fc:38:3c:fd:d6:e0:09:3a:
c9:ae:b2:31:f3:07:2e:bf:88:04:2d:26:f0:46:81:
bc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D5:09:94:30:21:23:F4:0D:79:BB:EF:F8:CF:EB:88:06:FC:09:F1
X509v3 Authority Key Identifier:
keyid:3F:5B:A6:1F:CE:55:FF:5F:60:8E:3A:F6:EC:56:0B:37:AE:C2:35:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:7a:89:71:f7:fe:97:85:3c:55:da:94:ed:f7:dc:91:9f:a9:
9a:84:18:af:61:e9:03:65:f9:ab:b1:39:8e:7d:71:ae:0f:9b:
ce:b0:1a:2e:40:a8:1a:60:73:5c:01:e9:da:ed:53:2d:bc:78:
79:3e:9e:f2:4d:8c:1a:e9:9d:3c:ea:3e:0c:ae:d4:e3:13:90:
c9:11:b1:a9:aa:2f:06:b8:3a:61:fe:11:73:6e:e3:7a:d7:e8:
83:e5:35:43:26:58:64:ca:cf:f5:c6:87:7f:eb:37:f2:71:cd:
04:5f:e8:59:42:1a:46:0d:34:37:e7:b8:de:72:1e:22:62:4b:
7d:bc:9f:29:ef:b1:ab:40:38:4e:ab:6a:a6:24:a6:4f:49:f3:
02:9e:dc:5e:54:66:97:d3:26:0f:80:66:27:9d:78:aa:2a:5f:
42:50:ad:df:aa:91:95:ea:9a:4b:04:c1:a5:bb:63:ae:d9:d7:
07:1e:46:54:3a:f0:43:75:df:b1:5d:67:8a:12:4a:c4:6d:2a:
83:56:ed:12:c6:12:c8:bc:fe:50:4f:2d:cf:fd:8e:91:7a:bf:
0b:27:62:06:5c:49:fb:ec:54:c6:92:08:af:61:b6:0b:a3:89:
97:2b:5b:27:bd:69:ab:d7:c5:31:5d:8f:9a:7b:d6:22:92:85:
f2:cc:4d:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXO3HYIxGPshqo2Lv+PDihMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmNWJhNjFmY2U1NWZmNWY2MDhlM2FmNmVjNTYwYjM3YWVj
MjM1ZmYwHhcNMjUwODIzMTQwMDUzWhcNMjUwODI0MTQwMDUzWjAzMTEwLwYDVQQD
Eyg5MWQ1MDk5NDMwMjEyM2Y0MGQ3OWJiZWZmOGNmZWI4ODA2ZmMwOWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvdY68Mz3Hcifje8CvX9Cx3sRtr2
9mhD21bOhfln2ENaARzwuupmX9XUsMf/MTREK9j/9q4WHAt8KnRRZjDchcjUpSXD
y3MdSF59BhliwvR09VRLhOtHw40wn94L2xR1LThN4q5R1e1UoOESrH2dghmXX35k
UJExcYpCoD29FTxjFahs81Xb4QmorMeKGlVF3rKXQxmEoI0m2evjTvW8GLnQZM9/
vtTj0rHDMrldO/evG3z8vJNPiE3CebLbByTTT+7Xhfjki7j0Fw60mefDtEeqkW44
Zl8K8ovV/JS1r22lJ63gQ8yB/Dg8/dbgCTrJrrIx8wcuv4gELSbwRoG84QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJHVCZQwISP0DXm77/jP64gG/AnxMB8GA1UdIwQY
MBaAFD9bph/OVf9fYI469uxWCzeuwjX/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDF1bUg4NVZfMTlnampyMjdGWUxONjdDTmY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hZGM0ZWUtYmIxMC00YzE1LTk0NTct
M2JkYjBlYzE0ODAwLzEvUDF1bUg4NVZfMTlnampyMjdGWUxONjdDTmY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9hZGM0ZWUtYmIxMC00YzE1LTk0NTctM2JkYjBlYzE0ODAw
LzEvUDF1bUg4NVZfMTlnampyMjdGWUxONjdDTmY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw3qJcff+
l4U8VdqU7ffckZ+pmoQYr2HpA2X5q7E5jn1xrg+bzrAaLkCoGmBzXAHp2u1TLbx4
eT6e8k2MGumdPOo+DK7U4xOQyRGxqaovBrg6Yf4Rc27jetfog+U1QyZYZMrP9caH
f+s38nHNBF/oWUIaRg00N+e43nIeImJLfbyfKe+xq0A4TqtqpiSmT0nzAp7cXlRm
l9MmD4BmJ514qipfQlCt36qRleqaSwTBpbtjrtnXBx5GVDrwQ3XfsV1nihJKxG0q
g1btEsYSyLz+UE8tz/2OkXq/CydiBlxJ++xUxpIIr2G2C6OJlytbJ71pq9fFMV2P
mnvWIpKF8sxNqA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:05:46 2025 by rpki-client