Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft
File: P5oSEPUJkiOdOn8uXoATtatJH_8.mft (raw, json)
Hash identifier: i7fqXEtZeOFVNPiYGj5QfF1WzpdDBf5mND9m7/wE3P0=
Subject key identifier: C6:F1:8B:BB:F4:17:D3:3B:AD:6A:EC:D1:3A:32:D8:43:DE:C1:8E:83
Authority key identifier: 3F:9A:12:10:F5:09:92:23:9D:3A:7F:2E:5E:80:13:B5:AB:49:1F:FF
Certificate issuer: /CN=3f9a1210f50992239d3a7f2e5e8013b5ab491fff
Certificate serial: 0198D5BBBBC541FF184728C5CF3C0B2A8D15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5oSEPUJkiOdOn8uXoATtatJH_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft
Manifest number: 1218
Signing time: Sat 23 Aug 2025 07:01:46 +0000
Manifest this update: Sat 23 Aug 2025 07:01:46 +0000
Manifest next update: Sun 24 Aug 2025 07:01:46 +0000
Files and hashes: 1: P5oSEPUJkiOdOn8uXoATtatJH_8.crl (hash: oJku2FypfZOH+YyD8Lw0oqCc4XwBB3lVj6BVC+V96/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5oSEPUJkiOdOn8uXoATtatJH_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:bb:c5:41:ff:18:47:28:c5:cf:3c:0b:2a:8d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f9a1210f50992239d3a7f2e5e8013b5ab491fff
Validity
Not Before: Aug 23 07:01:46 2025 GMT
Not After : Aug 24 07:01:46 2025 GMT
Subject: CN=c6f18bbbf417d33bad6aecd13a32d843dec18e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:22:af:90:89:1d:b4:4d:b3:69:8d:e0:af:27:
49:0f:da:34:31:5c:6c:ba:3d:c8:62:26:00:56:05:
62:68:d6:c5:9e:7d:7f:26:ec:49:8c:18:36:48:2a:
cc:25:55:af:a4:d2:62:1d:31:b2:49:d6:e6:5f:e7:
ff:b7:fa:a0:95:09:3e:b7:3a:00:55:a2:8a:e2:fb:
2d:a2:29:29:cb:6a:ae:d8:a1:07:9f:e4:e0:db:51:
98:fd:49:4a:60:ce:41:b5:8b:90:78:59:ed:5f:e8:
d0:f5:4b:53:34:da:99:8e:3a:b1:85:7e:57:f2:f5:
66:a0:9f:73:c5:70:ce:3a:bf:f7:49:49:f2:02:24:
94:fc:db:97:0b:08:f5:6c:10:b1:69:c7:41:98:59:
c5:d9:13:31:bf:58:33:80:f0:35:e7:31:04:fd:16:
1f:87:59:60:1c:c7:fe:44:a7:32:6c:ce:92:b4:37:
7e:d4:da:8c:ce:0d:29:63:0b:6e:97:d5:a6:9e:6e:
d5:8d:28:7a:08:00:89:c3:cf:ae:ac:e4:b2:68:e1:
72:09:28:16:dd:1e:0f:da:f4:9d:9e:7e:ae:4b:68:
0d:8a:3f:99:29:81:6b:79:fe:8f:79:f8:c4:87:f8:
17:e4:46:b0:b3:e8:34:4c:f5:c3:6d:a6:2a:32:a8:
41:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F1:8B:BB:F4:17:D3:3B:AD:6A:EC:D1:3A:32:D8:43:DE:C1:8E:83
X509v3 Authority Key Identifier:
keyid:3F:9A:12:10:F5:09:92:23:9D:3A:7F:2E:5E:80:13:B5:AB:49:1F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5oSEPUJkiOdOn8uXoATtatJH_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:25:dd:2c:80:a5:ab:e7:be:51:c1:45:51:91:73:82:e2:61:
2f:4d:e5:0b:3e:68:0a:28:3e:fe:f1:d1:00:b3:49:86:8a:96:
60:9b:71:9a:f2:eb:bb:bc:42:37:59:20:fd:8d:ef:1f:12:7c:
16:7d:10:8d:45:d8:c2:6c:3f:1f:eb:05:68:e0:d6:e0:d4:a6:
19:c2:a3:c1:5b:56:3b:3c:45:c9:0a:fe:ef:2a:d3:3d:12:5e:
5d:93:43:99:5a:4e:a0:1b:2a:0e:ae:37:aa:b1:47:b3:a3:c3:
50:ad:7a:09:0f:d1:da:45:c6:d8:8a:3c:d2:e0:51:2e:00:ad:
a5:dd:81:f8:6e:84:15:0e:12:b4:44:a0:9d:40:88:8c:ba:99:
49:31:e2:0c:ea:f6:36:08:bc:15:78:dc:61:d1:ba:61:00:ad:
d4:87:a4:46:a5:d5:29:ff:4d:a3:fa:24:58:9b:5e:9e:1b:92:
b1:a1:82:39:cd:07:1e:8b:22:6b:08:6f:14:5b:c2:be:5e:f7:
df:e3:2c:62:cb:9b:51:6b:17:e8:c9:53:41:5d:9f:2d:68:08:
c9:f7:16:31:df:3f:ec:cb:6c:08:69:4b:5e:26:4d:fd:cb:07:
b5:dc:a9:65:f6:60:5f:9f:bc:bd:3f:94:6f:38:4d:a6:1d:2a:
ac:a5:7c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:51:53 2025 by rpki-client