Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
File: P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft (raw, json)
Hash identifier: Q3Ckw3x1KVhR8n9i4Fe2kHT0q+i+K6dyTm6/JCSPGEE=
Subject key identifier: 69:AB:70:C4:C3:7A:45:E9:A7:5F:0E:11:CC:7F:E4:57:7E:24:98:87
Authority key identifier: 3F:47:F7:57:57:41:3C:CC:17:2D:3D:1B:82:6F:AE:5A:E9:38:5A:1B
Certificate issuer: /CN=3f47f75757413ccc172d3d1b826fae5ae9385a1b
Certificate serial: 0199FB7CEE60857E47AE2D8989112B63E551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 08:01:32 +0000
Manifest this update: Sun 19 Oct 2025 08:01:32 +0000
Manifest next update: Mon 20 Oct 2025 08:01:32 +0000
Files and hashes: 1: P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl (hash: MGDMhu+WhQWRf84F5ghj3z3GA26lSTmPB1fBFTQ90HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ee:60:85:7e:47:ae:2d:89:89:11:2b:63:e5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f47f75757413ccc172d3d1b826fae5ae9385a1b
Validity
Not Before: Oct 19 08:01:32 2025 GMT
Not After : Oct 20 08:01:32 2025 GMT
Subject: CN=69ab70c4c37a45e9a75f0e11cc7fe4577e249887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:32:1c:31:c3:c3:2a:ac:dd:3c:00:8a:83:a2:
9e:8b:b6:71:7d:9e:dc:84:12:2d:b5:9e:8a:54:73:
51:ca:a5:bc:9c:f2:9e:c3:be:74:a2:93:aa:16:1d:
0b:fb:0c:9f:00:ea:ec:86:df:fb:3b:06:c4:0b:ab:
8f:28:ed:c7:4d:66:44:35:ae:b5:24:7c:ab:5a:9d:
25:55:10:07:83:01:f0:c9:6d:0b:a7:5f:e7:77:07:
d4:fb:ca:74:5f:82:2e:aa:a8:c9:de:11:c6:de:05:
8e:22:9b:8f:88:53:17:85:15:b9:55:bd:12:71:48:
97:45:84:5c:b5:d2:3e:c6:92:c0:67:c8:a7:df:04:
02:23:e4:8d:7d:98:7b:a6:20:91:ca:ec:c8:ff:61:
55:d7:44:cd:b4:de:a0:e1:f4:ab:a3:d0:da:df:48:
7c:da:79:fa:aa:34:18:8a:8f:7b:8a:7d:93:b8:c4:
5a:10:b2:09:32:5a:5d:68:f4:7a:fb:9a:38:60:21:
55:16:9e:f1:24:b1:1e:60:06:74:d4:d1:89:e4:96:
63:d2:7b:af:fb:c0:f7:72:33:54:ae:b1:35:87:b2:
52:69:24:4b:1a:39:b5:aa:92:22:36:3c:44:cb:57:
73:28:87:d6:9f:e7:f1:06:7f:40:9b:88:65:d8:67:
dd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AB:70:C4:C3:7A:45:E9:A7:5F:0E:11:CC:7F:E4:57:7E:24:98:87
X509v3 Authority Key Identifier:
keyid:3F:47:F7:57:57:41:3C:CC:17:2D:3D:1B:82:6F:AE:5A:E9:38:5A:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:5d:46:6c:8a:b7:42:f0:fa:1d:6b:30:93:89:8a:8c:bc:8c:
f7:c3:6f:49:ee:5d:c9:42:19:02:3f:6c:a7:3b:ec:ea:9b:ca:
da:75:9a:ef:1b:4b:b9:72:05:8c:c0:47:fd:62:2e:d9:d1:04:
2e:cd:38:46:a1:1c:64:06:f9:18:45:33:09:0a:30:3e:4a:99:
d3:b3:6f:46:38:b3:2b:8f:eb:80:4a:34:b2:1d:00:38:d5:22:
9d:2c:d4:c2:35:85:ac:21:9a:9e:51:a0:10:aa:53:aa:a2:d3:
93:ab:23:57:17:1d:ec:86:42:23:27:90:59:4d:17:2e:8b:94:
d7:ab:38:2b:88:05:f3:ad:c1:ac:4c:33:df:a7:ae:17:2d:51:
7a:9b:b2:b1:6f:b4:2b:84:78:8d:67:8a:9b:c3:98:d8:11:ae:
74:d6:a9:ba:a6:b4:29:9a:0d:5d:16:98:6b:8e:5c:c7:30:72:
73:14:61:b3:a5:fd:1e:b4:5f:cf:3c:fd:f5:4a:d1:4d:37:d0:
26:ff:98:0d:ec:6d:67:3b:5a:74:a5:44:9c:27:5d:45:17:fa:
c9:c0:50:44:59:b3:2d:44:0d:d7:52:cb:e0:f4:fe:ee:6a:49:
2c:07:63:b4:77:1b:e6:20:ef:1c:bf:4a:0d:30:7f:2a:45:b0:
8d:dc:d6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:03 2025 by rpki-client