Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
File: P1jM0LF5IrWNXoss8uV5zmmrOGM.mft (raw, json)
Hash identifier: 4pyAYtBmpfIhe7KhFeCBr+EeDU18/Kn8B+Bv5mATFag=
Subject key identifier: FE:A0:4D:95:9B:44:A6:27:DC:AE:E3:91:F9:92:8C:E3:8F:63:9A:9D
Authority key identifier: 3F:58:CC:D0:B1:79:22:B5:8D:5E:8B:2C:F2:E5:79:CE:69:AB:38:63
Certificate issuer: /CN=3f58ccd0b17922b58d5e8b2cf2e579ce69ab3863
Certificate serial: 0198D5F193EFA58F476EF6C4D3A26C09EA60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
Manifest number: 88
Signing time: Sat 23 Aug 2025 08:00:35 +0000
Manifest this update: Sat 23 Aug 2025 08:00:35 +0000
Manifest next update: Sun 24 Aug 2025 08:00:35 +0000
Files and hashes: 1: P1jM0LF5IrWNXoss8uV5zmmrOGM.crl (hash: 7a0Sc3Okcuruwf8M91QUF49jUm56h/8R4Lnr2TMvURs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:93:ef:a5:8f:47:6e:f6:c4:d3:a2:6c:09:ea:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f58ccd0b17922b58d5e8b2cf2e579ce69ab3863
Validity
Not Before: Aug 23 08:00:35 2025 GMT
Not After : Aug 24 08:00:35 2025 GMT
Subject: CN=fea04d959b44a627dcaee391f9928ce38f639a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2b:f9:da:af:a1:d3:7c:60:ce:d1:1c:91:8a:
cd:18:7a:f0:d6:d0:d5:3d:7f:aa:d4:18:4b:4a:c0:
99:11:3a:17:83:75:03:91:7e:c4:89:41:90:1f:0a:
57:dc:7e:fc:8e:92:3b:38:92:c4:86:4f:cb:b5:d1:
13:a8:43:9c:a1:c1:ab:2b:a1:be:05:f5:04:45:21:
d5:96:15:e5:d9:3d:90:b9:9b:75:35:a2:32:16:66:
6b:42:9a:c3:d7:48:58:a6:c4:6c:d4:82:27:33:45:
43:ce:a5:8e:65:95:cc:bf:a3:de:cb:e0:9a:91:65:
5b:9d:b3:c6:f2:81:e5:d0:23:5e:93:c0:a6:52:b9:
21:ff:4d:53:7a:e7:2e:f3:85:9f:51:dc:3c:c6:5b:
b2:d4:26:c7:30:b3:fa:c2:36:df:05:ca:ab:59:e7:
aa:c2:1d:92:a7:ef:fa:25:67:01:78:89:94:77:a4:
8c:1e:e4:f0:20:b5:ff:f1:7e:53:ef:81:d5:01:f1:
c7:d4:7f:30:2f:36:50:ad:04:d3:c8:f6:77:f3:72:
ab:6a:5b:d8:87:6d:f8:b0:27:95:33:37:f7:44:4a:
8a:af:0e:1c:9a:61:c5:ca:7d:49:b7:f5:3d:5c:5a:
d2:b0:f2:e4:d8:c0:e7:e6:9e:ee:89:de:4d:58:15:
9a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A0:4D:95:9B:44:A6:27:DC:AE:E3:91:F9:92:8C:E3:8F:63:9A:9D
X509v3 Authority Key Identifier:
keyid:3F:58:CC:D0:B1:79:22:B5:8D:5E:8B:2C:F2:E5:79:CE:69:AB:38:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:30:75:99:80:dc:a0:ca:da:bf:eb:9b:ea:57:bb:8b:f0:6a:
a4:61:83:16:d5:39:52:cf:c6:e4:12:a9:6e:98:14:3c:a9:4d:
58:cd:e8:40:6b:6e:cb:4e:9c:97:14:e4:6c:b5:40:14:b4:9d:
09:e0:52:4c:a2:e8:eb:76:d1:d3:41:23:ab:fe:2c:70:61:b7:
fb:fa:27:3c:66:dc:5b:ea:ac:24:81:32:bf:24:3f:00:91:be:
34:a5:d1:98:e4:23:1f:64:3e:e0:b6:12:20:e1:75:af:5d:10:
b2:44:6b:d0:97:20:ed:bb:1a:ca:0e:65:ee:c8:ba:95:e3:1c:
7e:de:4f:f7:2b:ce:25:b5:dd:a1:55:93:cd:45:0f:f5:ad:27:
ae:45:66:2a:7c:c8:4a:b5:34:87:5f:10:32:25:90:58:2c:f9:
94:bf:5c:88:15:16:f5:8d:ae:2e:7c:72:b8:a7:23:eb:c7:5d:
4e:43:51:4a:e8:51:7d:fd:83:c7:0f:24:f4:bb:a5:b5:b4:74:
92:3a:bd:fe:ae:2c:77:20:49:ed:7a:90:18:e3:27:7b:84:00:
63:38:d6:df:9c:39:c8:76:f9:1f:e4:b4:f6:52:a9:de:7c:e3:
ec:8c:61:47:71:a2:05:1e:f1:d5:9f:3c:dd:21:5c:ce:09:e1:
5f:3d:56:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:16:54 2025 by rpki-client