Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
File: P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft (raw, json)
Hash identifier: FOSDkRebs6qM3Yy2pohbRPmKLZT/pLoLBEgsL+SAlXs=
Subject key identifier: CC:9A:94:9C:7E:14:1F:E5:D4:F5:F1:01:E6:4D:52:35:53:D1:B5:B3
Authority key identifier: 3F:F7:78:93:46:A9:F9:29:15:F1:F7:5B:10:AF:94:F9:7B:6E:24:FA
Certificate issuer: /CN=3ff7789346a9f92915f1f75b10af94f97b6e24fa
Certificate serial: 0199FFC87D76298ADCFFBF2E5D238CD37AD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
Manifest number: 1668
Signing time: Mon 20 Oct 2025 04:02:33 +0000
Manifest this update: Mon 20 Oct 2025 04:02:33 +0000
Manifest next update: Tue 21 Oct 2025 04:02:33 +0000
Files and hashes: 1: P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl (hash: UEWJ4IOG0hyOMl2NLJOYMxXGTQaSkFOtP8zPFl1JStY=)
2: dfyn6nhNR8JQy6SGJlUvEZfvkyM.roa (hash: k281u51pv38AcL8abAJjlmfLN2hampMY0v32cElp30w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:7d:76:29:8a:dc:ff:bf:2e:5d:23:8c:d3:7a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ff7789346a9f92915f1f75b10af94f97b6e24fa
Validity
Not Before: Oct 20 04:02:33 2025 GMT
Not After : Oct 21 04:02:33 2025 GMT
Subject: CN=cc9a949c7e141fe5d4f5f101e64d523553d1b5b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5e:0d:f3:9d:f0:7d:86:fa:9d:0a:f4:83:50:
e6:50:c9:a0:a9:c3:66:b2:1c:31:3f:2e:cb:b6:c7:
ef:9f:ac:9c:7c:83:63:f1:af:34:b3:08:b6:ff:1d:
7b:cc:31:dd:ad:2a:f1:7c:ef:5f:b4:9c:0c:c7:99:
e0:0e:26:82:1e:6e:7b:3d:7c:d7:73:87:98:c6:7a:
18:52:50:e6:79:08:8f:9b:1e:31:68:fb:e3:b3:0d:
22:66:ad:25:a9:0c:f9:6d:28:12:8e:d6:33:e7:7d:
6d:fa:cb:c9:db:89:cd:1a:66:f4:83:1a:a7:23:53:
71:3c:d9:48:37:71:1c:53:81:02:9d:6e:a3:55:c2:
af:81:db:ba:44:13:ae:4c:05:9e:76:b7:59:f1:f0:
cf:eb:10:52:09:13:06:bb:f3:54:88:6a:13:97:02:
66:04:46:68:d3:28:96:42:bb:fa:5d:b0:d9:e9:e9:
5a:04:b1:d6:9b:84:6d:c4:ee:31:37:99:b0:b6:a9:
ba:bd:c2:a6:14:e3:ec:95:f9:0c:be:6d:dc:df:5b:
bb:71:b1:00:4a:02:15:b0:fd:3c:b2:0e:f5:7c:da:
72:f3:e1:13:c8:33:94:e5:78:16:61:db:f7:22:8b:
91:85:b0:75:1a:03:88:4e:5b:fe:d5:f1:2d:5d:4e:
ce:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9A:94:9C:7E:14:1F:E5:D4:F5:F1:01:E6:4D:52:35:53:D1:B5:B3
X509v3 Authority Key Identifier:
keyid:3F:F7:78:93:46:A9:F9:29:15:F1:F7:5B:10:AF:94:F9:7B:6E:24:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:6f:31:ed:fc:5e:a8:9e:7c:a5:bb:2d:63:b4:c5:65:33:fc:
d0:0c:55:65:61:10:6a:50:4e:6d:15:b4:b5:d8:a6:00:94:1a:
e3:2b:a4:f5:24:ec:0d:34:88:a1:37:a3:6f:19:ba:e8:c2:ac:
4a:cd:1c:18:f8:03:92:e8:a0:91:74:64:26:8f:8d:ea:bb:b9:
21:f0:4c:d0:96:cb:2b:a0:14:f3:7d:c8:39:9e:db:52:b6:40:
59:5c:78:4d:29:c2:c7:c8:f9:a3:ac:6e:f5:14:9e:f5:a2:7c:
ee:94:8b:a7:f9:f0:19:56:8f:40:7d:ad:96:3b:9f:d7:4c:98:
a0:b6:cb:44:37:33:35:be:19:37:ae:1b:19:7f:06:55:ad:4c:
0e:7e:fa:96:14:23:64:8f:97:f4:89:e7:b2:f2:87:d1:57:60:
f4:93:4b:b6:00:37:1f:bb:75:9e:fe:4d:16:d0:c6:12:64:80:
9e:30:c0:19:91:6a:7f:ee:4b:c7:88:da:af:90:ac:46:1f:ed:
b4:7a:29:99:7c:36:93:c5:d6:7d:f9:f0:6d:9d:6f:db:c9:1d:
2e:88:de:09:65:a5:ef:a0:a3:8b:a2:2a:b7:89:c5:af:66:00:
5e:3f:88:4b:f5:37:ec:ee:f7:98:85:fb:ea:79:c3:de:64:a0:
6f:22:6e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:30:54 2025 by rpki-client