Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.mft
File: p3tNEFqlxNZemaq2926tWJ5ih8w.mft (raw, json)
Hash identifier: 7rimMVzn7El62Ztyuo0KfJosO3y0FGXqDRQl8unHlKY=
Subject key identifier: 1D:C4:EC:10:AD:C6:BA:BE:30:E6:09:5F:10:B5:FC:2D:43:96:D1:59
Authority key identifier: A7:7B:4D:10:5A:A5:C4:D6:5E:99:AA:B6:F7:6E:AD:58:9E:62:87:CC
Certificate issuer: /CN=a77b4d105aa5c4d65e99aab6f76ead589e6287cc
Certificate serial: 0199FC586C7F495E82368D674CE611821324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3tNEFqlxNZemaq2926tWJ5ih8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.mft
Manifest number: 04DF
Signing time: Sun 19 Oct 2025 12:01:17 +0000
Manifest this update: Sun 19 Oct 2025 12:01:17 +0000
Manifest next update: Mon 20 Oct 2025 12:01:17 +0000
Files and hashes: 1: p3tNEFqlxNZemaq2926tWJ5ih8w.crl (hash: Vg8pRnNc3n7ekWgfLZ1CImPtaHbJb+UtdRKUXlsloAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/p3tNEFqlxNZemaq2926tWJ5ih8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:6c:7f:49:5e:82:36:8d:67:4c:e6:11:82:13:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a77b4d105aa5c4d65e99aab6f76ead589e6287cc
Validity
Not Before: Oct 19 12:01:17 2025 GMT
Not After : Oct 20 12:01:17 2025 GMT
Subject: CN=1dc4ec10adc6babe30e6095f10b5fc2d4396d159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:de:91:6e:f8:26:bb:bd:3a:d4:4b:a4:98:f7:
c9:cf:99:8b:64:97:5e:1b:9b:cf:cf:6b:42:03:7f:
12:64:8b:cb:ca:c0:6b:54:4d:26:12:dc:f1:27:69:
2f:03:29:8d:e9:90:ab:18:c5:58:59:c6:54:3e:07:
cc:a4:b3:88:9d:88:02:32:3c:3d:fb:f2:38:e8:10:
28:6f:03:77:39:7c:4d:29:50:61:6b:1f:83:c0:55:
24:64:44:89:c2:32:10:1d:55:95:79:22:29:bd:c7:
b6:ae:8c:26:0b:78:15:23:16:6e:b0:ca:df:34:66:
ae:90:c2:bb:c2:e9:12:a6:c5:c6:28:f3:71:42:85:
75:fa:6e:43:0a:e4:3f:7d:74:cb:14:f7:f1:64:0d:
2e:75:da:44:62:1e:76:8f:c0:c0:48:1d:d6:cc:b2:
e8:b5:95:47:f6:20:8f:50:7b:6a:fa:3b:2a:db:ed:
ca:23:7a:16:cf:4c:97:38:00:cd:07:ef:3b:8f:4d:
8f:40:38:28:23:4e:e7:5e:86:9e:41:c1:86:36:14:
a0:15:e2:2a:77:ff:16:36:a0:62:b4:52:be:51:ba:
be:94:4c:8f:5f:01:f7:22:04:5d:6a:82:eb:61:dd:
6c:c7:20:2a:1b:68:2f:57:0b:dd:10:a4:25:f1:ad:
62:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C4:EC:10:AD:C6:BA:BE:30:E6:09:5F:10:B5:FC:2D:43:96:D1:59
X509v3 Authority Key Identifier:
keyid:A7:7B:4D:10:5A:A5:C4:D6:5E:99:AA:B6:F7:6E:AD:58:9E:62:87:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3tNEFqlxNZemaq2926tWJ5ih8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e6:ce:15:47:95:8c:e5:e3:76:bb:ba:5c:85:06:db:79:bd:
6f:95:a5:69:c7:7b:57:a2:c5:51:3e:4d:7e:49:50:8c:46:93:
1b:f8:4a:1a:5d:17:e4:64:06:3f:cb:21:c0:ff:55:f2:b6:e1:
cf:60:41:8d:ee:6d:22:db:a5:be:bb:02:88:14:e8:b1:37:4b:
23:18:d5:41:d8:ad:79:43:5b:cb:99:18:9c:2a:ea:06:65:70:
5b:6c:7e:55:f2:ff:8f:dc:c3:02:76:3c:53:4b:3f:fa:70:f1:
7c:09:96:2f:24:9f:bb:63:7a:20:4a:5b:bd:72:9b:bc:9e:54:
a4:6c:32:40:5a:70:71:ab:75:f5:fd:92:4b:f5:61:93:e6:f2:
88:2c:09:42:1e:81:ba:f6:96:57:d0:26:ae:54:21:ca:6a:73:
d8:8e:9b:4e:17:d5:01:7a:22:05:b6:cd:96:0f:89:d3:cb:4e:
30:23:84:2b:56:c3:d1:bc:87:fb:f9:88:b4:88:00:e9:24:6d:
f4:0c:a4:d2:ed:be:da:bc:51:60:f0:7e:1b:fd:e0:07:e6:58:
e3:0d:e0:77:2e:8b:5c:3d:54:56:27:0f:0a:34:74:26:97:af:
3b:f2:7e:a6:f7:f8:1a:10:26:aa:8a:52:a6:af:b6:e0:af:30:
6b:6e:05:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:02 2025 by rpki-client