Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
File: P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft (raw, json)
Hash identifier: myt+ey0cuWZJTh2R2PGXBxNXvracQrOJiNNhRtuhb8A=
Subject key identifier: A2:ED:52:1B:F4:52:CA:35:DA:9C:2B:10:AB:E0:BB:ED:A4:7F:91:E6
Authority key identifier: 3F:F5:8D:FF:BA:4D:F6:AC:34:BD:9F:48:11:9A:E1:1C:FE:F8:A7:6C
Certificate issuer: /CN=3ff58dffba4df6ac34bd9f48119ae11cfef8a76c
Certificate serial: 0199FFC8427DA681AC06B1E661F9B7967FCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
Manifest number: 1475
Signing time: Mon 20 Oct 2025 04:02:18 +0000
Manifest this update: Mon 20 Oct 2025 04:02:18 +0000
Manifest next update: Tue 21 Oct 2025 04:02:18 +0000
Files and hashes: 1: P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl (hash: 5/tDRyXbcE/UuKc0AT0prlK3JshlTxa6EDfDmhAJeiQ=)
2: Q0NTavEWJ5qlzhM0Gok-q7D_kpE.roa (hash: 38GOGOOApNFSuUu3tueeEDSFag3IGEHi/vwKyUqguXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:42:7d:a6:81:ac:06:b1:e6:61:f9:b7:96:7f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ff58dffba4df6ac34bd9f48119ae11cfef8a76c
Validity
Not Before: Oct 20 04:02:18 2025 GMT
Not After : Oct 21 04:02:18 2025 GMT
Subject: CN=a2ed521bf452ca35da9c2b10abe0bbeda47f91e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7d:32:18:ad:7c:14:ea:88:ad:37:f4:0c:f2:
49:c3:e7:40:fe:5a:d9:d6:3c:61:62:d3:c3:2b:bb:
e2:e4:60:24:e3:c3:5b:c0:84:1e:71:83:0e:1c:30:
06:b2:81:35:6d:56:fb:29:0a:46:f2:c2:41:a5:20:
78:b2:8d:1f:63:c0:a8:20:57:a0:b4:23:2b:b6:04:
98:64:0d:38:c4:f5:2f:fe:38:5f:a6:9d:e6:76:0f:
06:69:20:8a:a7:7d:5b:cf:7d:8f:08:6a:dc:11:61:
f9:62:f1:6c:e7:eb:96:67:83:d9:d5:7a:c8:2c:b3:
89:bd:ce:08:1d:d6:d8:55:82:e5:8a:ac:c5:8a:53:
45:17:13:be:f3:4c:a8:42:88:d5:09:16:df:6e:3b:
e7:9c:eb:bd:a6:0d:9f:96:dc:a1:79:dc:e1:d1:fd:
e8:63:71:b3:a1:d8:2d:fa:b3:3e:9e:5d:2c:97:01:
16:eb:8f:32:67:fe:85:13:b3:fd:be:94:1b:66:ba:
99:63:07:23:7b:1a:f7:d2:eb:06:44:c0:f9:4a:8b:
af:9e:0d:71:f7:3c:fd:39:fd:6a:41:3d:3c:a2:21:
dc:be:25:21:2f:4e:f9:9f:19:29:9c:93:d4:81:fd:
d0:5e:fc:60:72:84:0b:cc:08:80:80:22:29:fb:0e:
ef:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:ED:52:1B:F4:52:CA:35:DA:9C:2B:10:AB:E0:BB:ED:A4:7F:91:E6
X509v3 Authority Key Identifier:
keyid:3F:F5:8D:FF:BA:4D:F6:AC:34:BD:9F:48:11:9A:E1:1C:FE:F8:A7:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:2c:f0:33:8e:e3:16:02:97:67:cb:46:ae:12:18:ee:85:97:
94:df:33:ea:5a:a5:77:f8:7f:89:d5:d9:ec:27:0f:9f:47:a1:
5e:42:69:5b:29:f8:7d:92:8b:ee:e9:8b:06:5b:be:39:4c:34:
8d:ad:43:25:32:e3:1d:3a:36:53:15:54:c9:ca:1b:b3:02:56:
1c:50:8b:b8:15:79:0a:20:95:f7:ff:cc:15:38:2f:8c:0b:b9:
da:0e:f2:0d:a4:6a:ac:14:20:88:6b:a4:c8:2f:f7:f0:ab:f1:
e2:a6:ce:64:2e:39:81:de:b0:c0:2d:62:5a:a0:53:6c:0e:60:
ee:1f:fb:35:05:d7:07:c7:cf:f5:2a:a0:64:3d:dc:01:0d:7c:
95:a0:21:6b:37:49:28:1d:20:09:43:97:a8:98:49:f7:16:1d:
98:1f:d1:00:bc:11:c1:ea:05:91:65:81:6b:2b:5b:dd:46:67:
cd:60:bd:a8:d8:02:4d:07:eb:0a:5e:29:19:6b:0e:7e:54:3a:
70:c2:86:03:b5:dd:f5:76:62:34:58:cc:c5:36:c9:04:65:14:
48:f6:2d:54:f7:3e:92:eb:53:d8:18:2c:49:ac:ca:47:27:51:
78:56:02:89:e1:a8:81:17:a0:93:6e:7e:16:b2:ab:dd:ab:4f:
4a:f5:ab:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:33:38 2025 by rpki-client