Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
File: P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft (raw, json)
Hash identifier: H1DKvdkVgx/TAATvl/hDIJ4qp71SprUYE7unU5qf7I4=
Subject key identifier: A9:2D:2E:20:73:CA:0C:86:7F:20:C3:EF:D1:12:3B:4E:90:02:BD:C4
Authority key identifier: 3F:47:F7:57:57:41:3C:CC:17:2D:3D:1B:82:6F:AE:5A:E9:38:5A:1B
Certificate issuer: /CN=3f47f75757413ccc172d3d1b826fae5ae9385a1b
Certificate serial: 0198D5F14C07B2A10B0E28D9EC11DD85384A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 08:00:17 +0000
Manifest this update: Sat 23 Aug 2025 08:00:17 +0000
Manifest next update: Sun 24 Aug 2025 08:00:17 +0000
Files and hashes: 1: P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl (hash: r9xZtCt+kmJ//b4xtrhp6IV1Da/R0VnmDesFcYW3SV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:4c:07:b2:a1:0b:0e:28:d9:ec:11:dd:85:38:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f47f75757413ccc172d3d1b826fae5ae9385a1b
Validity
Not Before: Aug 23 08:00:17 2025 GMT
Not After : Aug 24 08:00:17 2025 GMT
Subject: CN=a92d2e2073ca0c867f20c3efd1123b4e9002bdc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:60:77:ab:27:50:6a:4e:c7:3e:fd:9e:8d:58:
05:e5:ae:ce:e1:68:84:80:ba:7b:21:28:ee:1f:eb:
48:5d:89:25:6a:3e:9c:39:5b:e4:6a:54:0b:57:45:
86:ff:90:7f:8f:03:a2:bb:cb:02:b7:53:1f:1b:73:
5c:20:b1:6b:75:7b:99:c8:07:9f:e2:73:5c:a3:3a:
aa:c4:51:62:ed:38:25:3a:a6:92:09:4d:0d:99:d1:
94:ec:11:37:c6:0f:cd:32:54:dd:a8:df:37:7f:9e:
38:0b:b8:44:83:1f:53:11:2a:49:6a:5a:f3:44:83:
39:56:09:9e:f0:2d:3b:3f:68:35:05:b0:a3:f9:a4:
19:b3:f4:6b:76:fa:b8:97:6f:92:63:48:91:3d:b0:
62:07:24:70:79:88:dc:d4:c5:2f:49:fb:d8:84:d7:
b3:c9:cd:2c:56:8f:46:21:c7:17:d1:87:34:8c:2b:
44:06:cc:a0:2b:56:03:e8:ef:04:6b:e0:cc:1c:35:
12:71:b6:96:bd:d3:61:1c:25:1b:c7:96:c5:2e:34:
2e:3a:32:4a:49:01:e9:f4:38:f1:ad:55:47:4f:3a:
3b:2f:81:33:04:d8:67:41:0c:f3:fb:39:c2:f1:5e:
20:fb:7d:49:18:d9:4b:d2:c3:87:23:d6:d4:f5:a7:
1f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2D:2E:20:73:CA:0C:86:7F:20:C3:EF:D1:12:3B:4E:90:02:BD:C4
X509v3 Authority Key Identifier:
keyid:3F:47:F7:57:57:41:3C:CC:17:2D:3D:1B:82:6F:AE:5A:E9:38:5A:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:da:1e:25:e1:f2:c7:80:d7:ec:ee:bd:d9:f6:cd:64:dd:b9:
e8:d2:91:35:ab:4d:0c:a6:0f:1f:af:29:10:a0:e2:1d:10:81:
d7:72:79:0e:a1:60:6c:bc:31:1d:44:20:ed:4f:03:53:aa:29:
8d:ec:52:67:d2:51:d6:57:4f:77:32:db:d2:89:77:6d:67:21:
b0:8c:f5:01:f5:48:5a:f8:2e:a8:21:80:db:58:98:d6:55:5d:
ab:b2:f3:08:6d:23:46:20:bd:9c:d6:67:5d:cc:7e:2b:30:5e:
23:ba:de:7c:e0:98:4a:a7:2d:7a:c3:8c:ea:1e:e9:c0:fc:dd:
54:45:03:8b:9d:20:40:45:59:d6:a1:9c:f9:f2:a8:bd:13:f4:
7a:31:23:91:8f:f4:71:a5:ee:4c:72:a8:8f:55:b6:08:e3:8c:
92:1e:0b:7b:77:f1:f3:ac:0f:39:ad:d4:3e:e5:93:4b:36:36:
12:c2:81:81:e7:a7:d9:de:e5:74:02:17:64:94:15:46:05:b5:
2b:50:c4:10:ed:5a:25:61:0a:be:2c:de:33:07:56:eb:72:e9:
5b:45:db:93:73:bb:58:cd:69:8e:eb:f0:45:96:c1:9b:7f:c9:
97:65:ba:d7:24:44:a8:2a:d7:ac:1e:d8:0e:18:95:b8:f0:a6:
10:28:2c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:22 2025 by rpki-client