Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
File: P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft (raw, json)
Hash identifier: bCgZcUujVdaF7ztBcKVnL3i6HX6O1ZOQkTNWdBoniUY=
Subject key identifier: 3F:AE:14:4D:C1:8A:EA:28:B6:02:91:01:23:C8:1B:48:68:6B:42:0E
Authority key identifier: 3F:F5:8D:FF:BA:4D:F6:AC:34:BD:9F:48:11:9A:E1:1C:FE:F8:A7:6C
Certificate issuer: /CN=3ff58dffba4df6ac34bd9f48119ae11cfef8a76c
Certificate serial: 0198D65F1351555E429A147C900BB5315764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
Manifest number: 13DB
Signing time: Sat 23 Aug 2025 10:00:11 +0000
Manifest this update: Sat 23 Aug 2025 10:00:11 +0000
Manifest next update: Sun 24 Aug 2025 10:00:11 +0000
Files and hashes: 1: P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl (hash: ZqZTz5RhLnv/JbHWemXlG5hdOEtEzD05TD3KjxgiI1E=)
2: Q0NTavEWJ5qlzhM0Gok-q7D_kpE.roa (hash: 38GOGOOApNFSuUu3tueeEDSFag3IGEHi/vwKyUqguXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:13:51:55:5e:42:9a:14:7c:90:0b:b5:31:57:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ff58dffba4df6ac34bd9f48119ae11cfef8a76c
Validity
Not Before: Aug 23 10:00:11 2025 GMT
Not After : Aug 24 10:00:11 2025 GMT
Subject: CN=3fae144dc18aea28b602910123c81b48686b420e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:31:20:9d:0b:5b:6e:8a:9d:c4:c0:94:17:9a:
52:04:24:a5:73:a6:e5:3b:90:2d:67:62:30:cd:64:
ce:19:55:fe:98:b1:59:ce:94:51:7f:ab:ca:5c:8f:
2c:d4:4c:d5:5e:87:60:30:3a:c5:1d:23:7c:90:29:
19:02:20:55:c4:71:5a:25:23:e9:bc:ba:63:ec:57:
21:5b:6e:4b:5c:0a:09:07:49:90:e5:a9:0d:9a:86:
71:e2:3d:1b:cc:7f:5f:e8:5f:2c:e6:e6:b4:0b:9b:
0f:bd:b8:cb:8e:70:3c:66:80:2a:72:da:91:08:28:
ab:82:e8:23:36:fd:8e:90:ca:f6:54:c0:1a:ce:a8:
fa:e4:d5:06:10:47:7f:8a:11:d6:b7:81:31:42:89:
65:b2:43:e3:bd:0c:b3:d4:e5:a8:59:5d:93:c0:99:
f0:a2:63:12:e4:dc:f0:16:a2:56:f6:c5:81:87:18:
10:f0:6d:85:98:cb:80:9b:ec:b9:3c:8f:06:5b:d3:
a0:c0:97:5e:7b:18:ae:41:35:6f:82:d2:7a:87:14:
9a:dd:c3:08:c7:41:d8:cd:8c:0f:32:99:8e:f2:43:
ab:b2:5e:83:4b:f4:c2:9f:d0:b6:e6:80:a4:bc:eb:
e6:d3:7e:83:9b:2a:3b:bd:f6:45:ea:7b:d6:e5:0e:
2a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AE:14:4D:C1:8A:EA:28:B6:02:91:01:23:C8:1B:48:68:6B:42:0E
X509v3 Authority Key Identifier:
keyid:3F:F5:8D:FF:BA:4D:F6:AC:34:BD:9F:48:11:9A:E1:1C:FE:F8:A7:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:bc:5f:86:08:90:17:68:1e:3b:33:53:f5:02:9b:11:c6:40:
d7:f5:98:e9:f0:16:0a:32:de:85:f8:5a:08:4e:48:61:4d:39:
bb:a2:b6:41:85:eb:1e:2c:a5:79:a1:de:f4:56:77:f3:db:f9:
38:c9:6f:6f:bd:97:2f:6f:04:e8:fc:0e:21:d3:48:5e:3d:49:
a2:5e:70:b0:68:e3:ab:2d:96:51:aa:8c:f4:75:ba:8e:0a:d7:
84:87:12:a2:7a:7c:2a:35:5f:ef:cc:ee:5d:ca:1d:71:3c:95:
1f:ce:b8:28:6f:a8:f0:e5:c5:d2:e5:d1:80:c6:26:ed:65:14:
9f:a8:47:b8:ae:c7:c6:c8:86:92:16:54:8b:39:b6:f7:00:50:
99:ec:da:bd:43:d8:b0:79:07:c3:45:80:3b:3c:94:b8:6f:a5:
c8:3c:c0:45:a4:b4:aa:69:7e:f0:43:52:71:17:d2:e4:ee:33:
f5:8b:69:18:36:ab:8b:79:1b:bd:04:c0:22:c4:e9:3c:ca:26:
c3:2c:f4:59:95:76:61:95:a2:6c:de:45:4e:f5:7e:67:46:7d:
6d:6d:62:95:03:f4:5d:5d:7a:7b:b0:e5:31:d9:ae:b2:25:d0:
b7:3d:4b:25:87:84:08:ac:23:af:ea:6c:8d:53:2b:b5:50:e7:
a5:86:0d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:19:05 2025 by rpki-client