Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.mft
File: P591E-0Eyp_o96RU6CeY0E8agKg.mft (raw, json)
Hash identifier: y1OmbgsAP5XP7r7lkDP4Zf8bYnN91URYcPxzVy3wEpw=
Subject key identifier: FD:9C:A0:09:F7:3F:A2:C8:48:D3:81:6B:7C:EA:9E:D1:30:60:7C:2F
Authority key identifier: 3F:9F:75:13:ED:04:CA:9F:E8:F7:A4:54:E8:27:98:D0:4F:1A:80:A8
Certificate issuer: /CN=3f9f7513ed04ca9fe8f7a454e82798d04f1a80a8
Certificate serial: 0197B88F2A2B13E250F93BE32EB32E45A0F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P591E-0Eyp_o96RU6CeY0E8agKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.mft
Manifest number: 04D7
Signing time: Sat 28 Jun 2025 22:01:19 +0000
Manifest this update: Sat 28 Jun 2025 22:01:19 +0000
Manifest next update: Sun 29 Jun 2025 22:01:19 +0000
Files and hashes: 1: P591E-0Eyp_o96RU6CeY0E8agKg.crl (hash: HHURX69JUFJ+Cs4Sl/1j9oPDctPKBnhv7uF9vtZl5Fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/P591E-0Eyp_o96RU6CeY0E8agKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:2a:2b:13:e2:50:f9:3b:e3:2e:b3:2e:45:a0:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f9f7513ed04ca9fe8f7a454e82798d04f1a80a8
Validity
Not Before: Jun 28 22:01:19 2025 GMT
Not After : Jun 29 22:01:19 2025 GMT
Subject: CN=fd9ca009f73fa2c848d3816b7cea9ed130607c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:88:0f:00:ce:78:91:d1:09:2b:3f:1e:40:66:
b4:9d:6c:d3:a0:69:2a:b8:bd:b8:3f:17:c4:79:f0:
19:8d:b0:84:02:f5:99:f4:93:fa:0f:05:24:cb:1b:
7e:2a:3f:b6:54:62:51:55:6e:04:a7:b5:35:2d:7a:
f1:d6:cc:e2:32:8b:7c:4e:a6:83:5f:85:c7:53:98:
4b:9d:35:e6:e3:85:a0:f6:b7:cd:22:06:56:09:a4:
24:c3:cb:4f:f4:d4:56:83:73:19:76:fd:10:1a:3f:
75:c8:1f:47:fe:c0:d7:cb:52:48:af:fb:a7:82:67:
cb:54:49:0a:26:7f:dc:49:7e:c3:6e:93:95:d7:93:
44:aa:fb:b8:72:95:86:81:a8:80:29:38:75:34:ad:
ca:fe:5f:31:de:80:ca:4a:c7:45:ee:aa:4e:61:0d:
57:a2:11:86:16:09:eb:6b:c7:62:e6:b6:cf:16:8c:
ed:49:81:db:2d:d1:ca:80:41:cf:7c:6e:28:d2:70:
0b:f3:b6:5b:45:f0:68:0d:93:f1:29:a2:dd:81:b0:
67:03:83:80:67:5f:ea:b0:34:77:76:1e:7f:0f:d4:
fe:77:38:89:c3:49:da:91:36:26:1e:2c:b7:1a:cb:
dc:1f:64:8a:f2:89:59:6c:a0:84:9a:3c:7a:65:a8:
42:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9C:A0:09:F7:3F:A2:C8:48:D3:81:6B:7C:EA:9E:D1:30:60:7C:2F
X509v3 Authority Key Identifier:
keyid:3F:9F:75:13:ED:04:CA:9F:E8:F7:A4:54:E8:27:98:D0:4F:1A:80:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P591E-0Eyp_o96RU6CeY0E8agKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:bd:7a:5a:af:12:29:e9:60:ea:1d:95:93:4e:aa:2a:44:1c:
f2:23:f0:5b:d9:8e:9f:4e:cd:39:c9:50:72:54:d1:03:a3:bf:
18:c7:1d:12:ee:a5:36:ca:f7:25:81:eb:4e:a0:16:6e:3c:49:
c8:ce:5f:7e:6d:08:21:38:16:d6:85:cf:6b:3f:12:9f:ca:d8:
4a:5f:88:b9:15:51:39:f3:6d:83:b1:ad:e4:a0:54:50:33:43:
fc:94:82:01:c4:38:a6:b0:b0:a1:85:8e:e6:86:2d:c9:86:fc:
82:1a:14:eb:b5:4e:0b:95:20:84:47:ce:71:2d:e8:8e:28:4e:
bc:14:03:90:9a:06:1d:ca:1f:8b:da:d3:2d:ab:75:10:25:9c:
01:61:19:6b:84:0b:14:8d:89:52:d1:bc:9d:b2:83:27:69:2e:
ba:90:d5:9f:b9:81:26:e8:93:43:fb:2e:d4:2c:33:79:f7:8a:
fd:67:5a:46:aa:63:29:be:ec:cc:96:6e:50:7f:b0:ff:a2:ec:
20:c8:b0:22:1d:94:4e:06:c8:cb:49:6d:e7:a7:73:12:5b:2e:
04:8c:c4:2f:da:a1:c9:63:7c:df:8a:b7:82:62:03:cb:0c:c7:
44:41:91:c5:39:71:b7:2d:93:70:f0:f6:42:35:70:73:11:4b:
71:d2:ff:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:23 2025 by rpki-client