Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft
File: P2LKnF7__TIKvS2Px-j4Nee70es.mft (raw, json)
Hash identifier: vqcJBW3cITMFH3WfiXEXxyfpHv6Pty1BGtEx6gjrra8=
Subject key identifier: 59:98:92:AD:20:92:35:80:66:9D:26:B5:D8:3F:69:1D:A0:2F:95:2B
Authority key identifier: 3F:62:CA:9C:5E:FF:FD:32:0A:BD:2D:8F:C7:E8:F8:35:E7:BB:D1:EB
Certificate issuer: /CN=3f62ca9c5efffd320abd2d8fc7e8f835e7bbd1eb
Certificate serial: 0198D84F4B2F381937DB1107639E155272A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P2LKnF7__TIKvS2Px-j4Nee70es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft
Manifest number: 0A44
Signing time: Sat 23 Aug 2025 19:02:11 +0000
Manifest this update: Sat 23 Aug 2025 19:02:11 +0000
Manifest next update: Sun 24 Aug 2025 19:02:11 +0000
Files and hashes: 1: P2LKnF7__TIKvS2Px-j4Nee70es.crl (hash: WvHZcnyCuorzSj0ug5ISvWzHInKDlZxAMF7IxjJwu8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft
rsync://rpki.ripe.net/repository/DEFAULT/P2LKnF7__TIKvS2Px-j4Nee70es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:4b:2f:38:19:37:db:11:07:63:9e:15:52:72:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f62ca9c5efffd320abd2d8fc7e8f835e7bbd1eb
Validity
Not Before: Aug 23 19:02:11 2025 GMT
Not After : Aug 24 19:02:11 2025 GMT
Subject: CN=599892ad20923580669d26b5d83f691da02f952b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:59:79:99:c3:9b:f3:c5:0e:b6:fd:e3:56:58:
67:84:eb:7f:cb:eb:51:92:28:57:cb:bf:0f:6e:05:
78:84:b0:04:2d:28:4d:8d:89:6c:ac:30:e0:2d:db:
85:35:b3:66:63:da:da:c3:17:6a:bd:62:26:ca:62:
d8:4f:73:f6:2e:08:28:90:95:9d:65:c5:74:04:37:
db:2d:2b:80:5d:cd:0b:6d:02:3b:e0:b5:3d:3d:24:
a9:3b:24:df:e2:d1:8d:ca:c0:71:5b:0f:14:4a:56:
ac:2b:90:12:e1:99:4a:d9:e0:1c:a1:f6:79:eb:8b:
d0:ae:36:cf:57:3f:a8:a3:73:96:3c:a5:61:2e:34:
52:30:f2:a0:79:75:89:a0:72:1a:45:3b:b6:1b:82:
c0:c4:2d:44:45:80:0f:80:a0:a6:02:59:d8:bc:aa:
78:ee:d3:e6:a7:37:9c:d7:12:0f:37:b8:1d:61:2e:
4e:b1:47:2a:d3:a4:73:42:ce:ad:b6:ca:41:71:5b:
f2:53:2d:d0:be:af:87:96:d9:d5:cb:bb:d3:cf:9b:
26:39:59:c8:6c:7b:a3:8e:23:ea:7f:85:7e:8d:fa:
4a:7d:50:04:d2:c5:9d:61:fb:12:12:ba:21:67:af:
44:3b:5e:01:f1:2b:96:3e:92:76:2f:60:e3:ee:02:
7e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:98:92:AD:20:92:35:80:66:9D:26:B5:D8:3F:69:1D:A0:2F:95:2B
X509v3 Authority Key Identifier:
keyid:3F:62:CA:9C:5E:FF:FD:32:0A:BD:2D:8F:C7:E8:F8:35:E7:BB:D1:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2LKnF7__TIKvS2Px-j4Nee70es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:16:f0:8a:85:c2:42:e6:b4:b6:21:76:d3:67:d2:52:9b:bb:
e6:56:2e:f8:66:48:8b:db:95:1b:3d:b4:6c:93:68:6a:be:1e:
e5:22:de:da:46:61:70:37:cf:ac:5b:40:57:21:e1:93:e6:57:
c7:6a:05:f0:54:a7:7b:22:d4:3a:f7:c5:45:83:2c:2e:53:eb:
02:0a:00:19:af:c6:91:70:7c:9e:7c:1a:a0:a5:48:08:8a:7a:
ea:6c:38:b0:93:22:b6:6b:3a:53:b0:73:39:19:ba:38:eb:e7:
ec:d8:6a:d9:71:9d:4d:f6:c3:e4:40:3d:2f:a3:ea:c8:57:4f:
cc:65:5c:b4:03:3b:6e:22:26:9b:76:5d:d7:1f:e9:4d:eb:d5:
f2:10:d7:17:2a:15:54:fe:55:70:1b:15:68:03:fd:eb:4b:71:
70:57:1a:b6:78:e0:4d:15:fa:20:3f:a4:fb:49:43:fd:9b:24:
ba:0e:86:75:12:a8:9b:65:24:a6:8b:d6:b6:88:d3:7c:68:77:
86:c5:4f:d2:bd:b0:98:e0:1b:10:9e:65:c2:33:ef:ec:6a:30:
c7:26:e5:33:c3:40:d6:ff:e2:e9:4b:dc:1e:a0:1a:83:2f:59:
9a:92:37:1a:b0:5f:45:5c:16:76:2b:94:f2:2f:21:a5:44:1d:
2f:e4:d9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:51:17 2025 by rpki-client