Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
File: p_555OY70WvEI3WStoTQBDPL0PY.mft (raw, json)
Hash identifier: BYbWeZM0kO/clv2+pPwWbAgd6bL2Y+HLfV6o3ggs5iw=
Subject key identifier: C6:43:D1:38:C0:3E:8F:74:FC:10:45:16:DC:DC:2F:A8:3E:F8:BF:84
Authority key identifier: A7:FE:79:E4:E6:3B:D1:6B:C4:23:75:92:B6:84:D0:04:33:CB:D0:F6
Certificate issuer: /CN=a7fe79e4e63bd16bc4237592b684d00433cbd0f6
Certificate serial: 0199FDD9ED58C718827D2A62826C47BF6906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
Manifest number: 0825
Signing time: Sun 19 Oct 2025 19:02:21 +0000
Manifest this update: Sun 19 Oct 2025 19:02:21 +0000
Manifest next update: Mon 20 Oct 2025 19:02:21 +0000
Files and hashes: 1: p_555OY70WvEI3WStoTQBDPL0PY.crl (hash: slvFFbyiuzNi32ih5U250GMo0VK/ecqt3mTbteXdCSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:ed:58:c7:18:82:7d:2a:62:82:6c:47:bf:69:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fe79e4e63bd16bc4237592b684d00433cbd0f6
Validity
Not Before: Oct 19 19:02:21 2025 GMT
Not After : Oct 20 19:02:21 2025 GMT
Subject: CN=c643d138c03e8f74fc104516dcdc2fa83ef8bf84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:2a:d0:b5:e8:f5:fb:8f:2d:a5:2e:35:0f:22:
e5:f5:56:38:92:d1:b2:4e:d2:f8:e0:91:2a:79:11:
80:10:02:6b:40:6d:e5:e7:53:e2:1e:59:31:9d:dd:
6b:14:97:cf:e0:2d:9c:50:03:6e:7c:7c:0b:ed:f8:
97:8c:f7:5a:21:7b:24:e3:4b:4a:a6:36:9d:c7:46:
f5:83:c1:77:34:ac:37:ad:50:30:9f:49:6d:5e:07:
9b:27:a0:a2:95:1d:02:51:24:cf:42:bd:54:1f:c7:
ab:7e:e3:b3:b8:f7:a6:ea:13:83:8c:b4:f9:9b:a5:
a4:f2:34:c5:49:e2:1d:40:cd:a0:88:98:a3:da:f7:
c1:b1:bc:5d:d2:cc:63:06:c8:22:1a:23:cb:73:f6:
8c:3a:57:5c:56:c0:bb:86:b2:80:49:89:fa:0a:86:
8b:60:b7:7e:c1:fd:3c:e1:03:7b:1d:26:9c:c6:b7:
d9:a4:d4:52:3d:7f:8e:16:a9:19:5e:d4:20:cb:e6:
b3:40:9a:e2:65:2e:4e:1f:54:4d:96:29:c0:0e:9b:
e1:5f:f0:74:9c:b7:49:94:7c:1c:01:93:6f:fe:55:
99:58:77:5e:cb:b1:31:3f:a9:bf:2d:d7:bd:e0:ef:
36:93:c1:a3:56:c7:04:5d:d6:65:3b:30:64:82:35:
34:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:43:D1:38:C0:3E:8F:74:FC:10:45:16:DC:DC:2F:A8:3E:F8:BF:84
X509v3 Authority Key Identifier:
keyid:A7:FE:79:E4:E6:3B:D1:6B:C4:23:75:92:B6:84:D0:04:33:CB:D0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:da:40:a4:ff:dd:20:8c:d6:23:7f:61:01:9e:3b:a1:f4:a5:
1d:35:d5:9b:d1:c8:ae:3c:03:cc:14:6b:15:d4:46:60:42:9c:
84:db:96:a3:41:d0:1d:bc:a1:e4:fc:27:1b:81:54:01:8c:7a:
db:12:ab:56:c7:3e:ca:e3:8e:a1:67:ac:0f:76:40:c2:a7:34:
30:6d:ba:1b:be:b8:22:84:58:16:48:72:f5:fc:c0:05:f2:1e:
ee:68:26:9c:d0:0d:d1:18:05:16:00:14:a1:d5:53:e1:9c:56:
ab:49:3c:fc:2f:3e:b9:ac:d6:53:99:0d:e3:3c:b0:84:dd:66:
c3:26:0c:13:61:d4:17:d6:be:26:ae:33:52:94:8e:1e:6d:7a:
21:d7:bc:3d:56:c2:0a:5b:6c:bb:38:14:b2:02:cd:96:25:25:
9a:b6:d5:e8:e4:06:b3:98:af:d8:f7:29:53:19:b9:96:67:a2:
07:0c:cb:ac:d8:f0:a2:96:5e:08:3c:f6:5e:dd:1c:79:36:06:
0d:0a:d9:d2:ef:8d:2a:ef:51:38:41:fa:c6:1a:9a:73:00:c7:
cf:4f:bd:12:de:13:c1:90:54:82:9d:e9:27:75:c3:ae:bd:3a:
09:10:ce:cb:36:a0:ff:0f:7b:67:3d:e0:fb:fc:e6:5d:7c:94:
2b:9c:b6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:04:55 2025 by rpki-client