Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft
File: P5oSEPUJkiOdOn8uXoATtatJH_8.mft (raw, json)
Hash identifier: OJwJtWJTzLtjns1ZhD2LE6La3eW0sMCw2Yev1RTzDOU=
Subject key identifier: 72:C9:CA:99:36:08:5C:D4:01:32:91:02:5B:B2:CC:BB:A4:A5:5A:ED
Authority key identifier: 3F:9A:12:10:F5:09:92:23:9D:3A:7F:2E:5E:80:13:B5:AB:49:1F:FF
Certificate issuer: /CN=3f9a1210f50992239d3a7f2e5e8013b5ab491fff
Certificate serial: 0197B5FC6D73942FD8F8978941E9D9D0F6AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5oSEPUJkiOdOn8uXoATtatJH_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft
Manifest number: 1183
Signing time: Sat 28 Jun 2025 10:01:48 +0000
Manifest this update: Sat 28 Jun 2025 10:01:48 +0000
Manifest next update: Sun 29 Jun 2025 10:01:48 +0000
Files and hashes: 1: P5oSEPUJkiOdOn8uXoATtatJH_8.crl (hash: g+GIMtsxqv7ViyMwCAApeSBLpib8w7uEiAEz/94O5yE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5oSEPUJkiOdOn8uXoATtatJH_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:6d:73:94:2f:d8:f8:97:89:41:e9:d9:d0:f6:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f9a1210f50992239d3a7f2e5e8013b5ab491fff
Validity
Not Before: Jun 28 10:01:48 2025 GMT
Not After : Jun 29 10:01:48 2025 GMT
Subject: CN=72c9ca9936085cd4013291025bb2ccbba4a55aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2e:c1:4c:8f:0e:e2:e4:f6:50:f2:ab:ac:11:
71:64:e7:18:71:5e:29:bc:a4:f5:54:3e:4e:75:f3:
39:27:26:74:8c:b3:26:b3:81:06:34:47:0d:e8:ff:
d3:74:2c:11:b0:34:b3:d0:21:dc:23:9a:b6:5b:85:
2c:ce:5e:ca:fb:73:af:a8:40:a0:16:04:3c:cc:5c:
0c:aa:8b:4e:15:ed:88:e8:bf:96:6a:5f:3b:ec:0a:
a1:fb:d0:38:03:a5:27:34:31:33:e5:d3:26:48:0d:
c0:9b:ab:74:3d:3f:e4:75:26:3e:b0:11:e7:6f:e9:
3a:64:42:7a:81:8d:ef:ac:75:9c:52:e1:4a:06:5d:
21:48:67:1f:48:ff:fd:9b:5f:a1:a0:97:a8:4a:64:
fa:52:a3:57:f4:d2:3d:e2:8d:d7:e2:e1:f8:c8:48:
2f:42:d9:e8:81:73:58:16:5f:00:9d:3c:45:07:50:
18:d7:1a:7d:87:f0:1d:0d:d6:02:17:0e:2d:82:7f:
20:3f:2f:53:92:85:12:61:21:b9:68:2c:8d:3d:35:
23:e8:42:2e:57:22:20:d2:33:60:27:4c:4c:17:ed:
7b:c6:3d:48:49:90:7a:36:2f:f7:46:ac:e7:7c:b7:
a6:81:b1:68:57:5c:a2:91:fd:f3:d9:fd:a3:fe:6a:
e3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C9:CA:99:36:08:5C:D4:01:32:91:02:5B:B2:CC:BB:A4:A5:5A:ED
X509v3 Authority Key Identifier:
keyid:3F:9A:12:10:F5:09:92:23:9D:3A:7F:2E:5E:80:13:B5:AB:49:1F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5oSEPUJkiOdOn8uXoATtatJH_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:7e:de:48:6d:11:29:ad:05:1d:16:c1:3f:82:21:08:b4:c8:
a2:18:6e:b2:0b:84:de:5f:70:f3:bd:f5:c9:df:0d:b1:19:24:
19:5d:83:9b:99:f7:3b:9e:9d:98:ff:ee:1c:c2:32:ad:fe:d9:
02:10:eb:9e:0b:93:00:8c:18:f5:c3:c0:9c:ea:9a:f0:27:53:
0f:c6:d9:ad:24:11:fb:fc:c8:13:a0:5a:29:0e:e7:ec:90:27:
82:94:d2:e1:22:7b:d4:6b:97:75:33:76:ce:eb:8f:81:9e:c7:
70:28:34:6d:cc:16:93:e4:92:72:c5:d1:e1:fc:27:6b:09:92:
cc:29:ce:d3:49:63:ab:9b:0d:73:1a:0a:4f:a7:37:2b:5e:b4:
a8:47:75:4d:8a:ec:75:a9:7e:f7:a5:95:8d:4b:92:e4:8c:bb:
b8:43:c4:ad:fa:96:55:f5:67:6b:ab:e3:c9:01:fb:96:f8:92:
21:4c:88:4f:65:36:e7:0d:26:c9:93:c6:b6:77:e9:9b:f3:58:
17:a1:28:c4:64:3c:75:6b:c8:6c:d8:51:1b:fc:25:72:e7:b8:
4d:0b:4d:c7:dd:a4:8b:20:8a:56:f7:ae:e9:a8:62:14:7e:1a:
48:5b:00:f6:2f:59:bc:96:71:e9:c2:9d:ff:c0:e4:0e:fd:be:
06:9f:ed:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:50 2025 by rpki-client