Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
File: p1OwvT1iQYAynSGj7NzKGy--3m0.mft (raw, json)
Hash identifier: onExkXP3Wt5l70eWr1NJcso8JE55YAQ4VzD0yUIlLUw=
Subject key identifier: B9:F5:73:D8:B5:EF:64:15:4F:79:B9:0D:6B:B3:A6:1F:21:48:C6:5F
Authority key identifier: A7:53:B0:BD:3D:62:41:80:32:9D:21:A3:EC:DC:CA:1B:2F:BE:DE:6D
Certificate issuer: /CN=a753b0bd3d624180329d21a3ecdcca1b2fbede6d
Certificate serial: 0198D4E00D2DC46E02F0FBE50C1D42F27DBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 03:01:49 +0000
Manifest this update: Sat 23 Aug 2025 03:01:49 +0000
Manifest next update: Sun 24 Aug 2025 03:01:49 +0000
Files and hashes: 1: p1OwvT1iQYAynSGj7NzKGy--3m0.crl (hash: h+d8EEgGhyzLd8Vop9UruMjnXsneMqjtpQP+WHO5q/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:0d:2d:c4:6e:02:f0:fb:e5:0c:1d:42:f2:7d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a753b0bd3d624180329d21a3ecdcca1b2fbede6d
Validity
Not Before: Aug 23 03:01:49 2025 GMT
Not After : Aug 24 03:01:49 2025 GMT
Subject: CN=b9f573d8b5ef64154f79b90d6bb3a61f2148c65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:12:82:43:3f:c6:8d:3d:f8:ec:58:9c:42:d3:
d5:a4:7a:db:63:21:24:fc:14:4b:db:19:96:cb:60:
e1:2e:a1:90:42:64:f0:47:c6:d9:55:44:12:97:ce:
e1:66:46:a3:cc:d8:1a:8c:e4:09:95:e2:88:b0:7a:
33:89:a8:30:9f:1e:d1:6e:f7:c2:21:c7:43:6f:90:
ab:ac:ea:e7:c2:80:c0:4d:01:ce:8f:b2:1e:1c:fa:
54:94:0e:88:e0:d1:ea:47:03:86:2f:56:01:5b:24:
4e:94:fe:f3:4f:e0:fb:d6:94:99:a6:dc:5f:15:9d:
2d:27:9a:82:4d:8b:60:8d:ca:4e:26:e6:b5:73:44:
7c:74:e7:0b:1e:45:71:73:b8:42:39:71:bd:e2:26:
66:0f:5f:80:6d:55:b8:80:75:32:89:60:8e:c3:80:
3f:e0:d6:a5:0e:02:72:ca:31:bd:a2:7f:5b:cc:47:
d2:56:56:a9:cf:d7:6b:6c:b4:dc:48:e5:f3:22:39:
69:9d:e0:6e:f0:19:5d:69:87:1a:57:f3:5a:a7:e0:
41:00:16:4d:fb:03:2a:a5:03:6d:9c:0d:48:5b:5c:
0a:a6:82:dd:96:55:d2:d9:f4:7d:1b:46:46:dd:00:
96:0c:21:4e:69:bf:36:df:75:32:5e:a4:30:b3:d9:
d5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F5:73:D8:B5:EF:64:15:4F:79:B9:0D:6B:B3:A6:1F:21:48:C6:5F
X509v3 Authority Key Identifier:
keyid:A7:53:B0:BD:3D:62:41:80:32:9D:21:A3:EC:DC:CA:1B:2F:BE:DE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:1f:a1:d1:9e:2f:34:5e:c8:50:1b:40:76:b4:2a:45:0a:f9:
ca:ea:50:5a:cd:90:6f:86:9c:52:78:85:17:26:7a:15:0a:d9:
f2:b9:2f:99:50:27:2c:8a:f5:ac:05:87:08:03:20:44:3b:52:
da:7a:eb:0e:07:e9:bd:10:4d:91:19:97:32:a4:c6:1d:7b:d7:
8d:46:ed:61:b7:08:f9:09:16:10:9e:6c:7d:48:cd:05:eb:0f:
6d:bb:c8:74:e2:fd:22:e8:ca:35:4f:71:00:8a:7c:cc:cf:b1:
9a:bb:3e:24:b8:14:85:9c:39:1a:fe:28:45:02:cd:00:45:2d:
27:0f:35:8c:8b:51:bb:79:c2:04:47:c2:01:68:f8:55:8c:38:
3b:17:d3:fa:d8:a0:a1:4c:11:9a:a2:64:aa:1a:95:7a:36:dc:
f8:72:0f:45:aa:14:fe:8f:b8:22:5d:1b:30:83:11:e5:5e:32:
fc:8a:58:9b:03:18:7d:a0:af:9a:4d:bd:88:93:fe:da:03:e1:
ed:9f:13:cf:77:47:46:e6:0a:62:c7:ca:d4:64:c8:ee:89:72:
0b:22:ba:66:99:81:da:6b:2d:b1:7e:0a:fb:1e:41:23:b6:3a:
1e:7f:37:24:6d:ff:89:63:3d:16:d4:2d:20:7e:26:c0:0c:02:
f9:e5:56:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:20 2025 by rpki-client