Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
File: P1jM0LF5IrWNXoss8uV5zmmrOGM.mft (raw, json)
Hash identifier: Fj1FG307pOHmCVn9TMuClIr18q9+6175QKCq5wlZKJA=
Subject key identifier: 9F:4A:D4:E5:96:02:45:FD:63:10:0B:01:17:44:84:BF:0A:3F:57:E4
Authority key identifier: 3F:58:CC:D0:B1:79:22:B5:8D:5E:8B:2C:F2:E5:79:CE:69:AB:38:63
Certificate issuer: /CN=3f58ccd0b17922b58d5e8b2cf2e579ce69ab3863
Certificate serial: 0199FD6AFBB101FF1C8FBFC587C39EF69589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
Manifest number: 0121
Signing time: Sun 19 Oct 2025 17:01:10 +0000
Manifest this update: Sun 19 Oct 2025 17:01:10 +0000
Manifest next update: Mon 20 Oct 2025 17:01:10 +0000
Files and hashes: 1: P1jM0LF5IrWNXoss8uV5zmmrOGM.crl (hash: LAuRHJ0eyZKlRlwDyuAJc0r5G7QCL7cSs9W2VvHw+i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:fb:b1:01:ff:1c:8f:bf:c5:87:c3:9e:f6:95:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f58ccd0b17922b58d5e8b2cf2e579ce69ab3863
Validity
Not Before: Oct 19 17:01:10 2025 GMT
Not After : Oct 20 17:01:10 2025 GMT
Subject: CN=9f4ad4e5960245fd63100b01174484bf0a3f57e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b6:d4:9e:2e:43:34:5b:5b:9d:b3:09:90:20:
6e:52:a5:fc:32:7e:7b:cd:74:a3:c4:2a:9f:d2:e6:
b4:26:ab:45:3a:a7:a0:4a:03:c4:48:ff:7c:e4:a0:
ee:94:93:0a:22:f0:61:2f:ab:e4:77:c2:71:5c:f7:
0b:13:2e:8b:9f:8c:20:d8:9d:6b:b5:c7:f8:f2:b1:
8c:1e:b8:af:c3:73:0f:46:7d:51:d8:24:d9:d6:f5:
ed:1d:87:42:3a:2c:7d:b3:c0:10:9c:e1:03:49:dd:
ad:47:c7:c2:7b:2c:09:b3:da:08:29:3e:a7:05:46:
3a:9c:b0:51:72:6e:72:6e:10:5c:4b:99:1c:2b:b4:
dd:8d:5d:19:eb:c7:f9:0a:14:23:9e:5f:53:56:00:
ab:9a:a6:11:e0:0e:bb:a6:1c:38:51:ac:e0:fd:4e:
79:ae:9b:aa:5e:1b:a4:f3:c9:ac:8a:74:0f:90:94:
50:21:43:46:88:9b:7c:16:72:7f:0f:7d:f4:45:b6:
1c:5d:4e:44:43:c2:58:05:14:4c:64:9c:88:d3:f1:
c7:7e:4d:de:2c:87:7b:14:0b:a4:83:5e:59:2f:54:
7a:40:2a:d0:d4:e6:aa:3b:3c:60:46:34:d4:82:e1:
74:83:16:d1:55:69:24:a0:64:26:9d:25:72:97:ea:
90:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4A:D4:E5:96:02:45:FD:63:10:0B:01:17:44:84:BF:0A:3F:57:E4
X509v3 Authority Key Identifier:
keyid:3F:58:CC:D0:B1:79:22:B5:8D:5E:8B:2C:F2:E5:79:CE:69:AB:38:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:d4:81:21:16:5b:1d:8a:4d:1c:96:c2:e5:f3:48:f7:9f:16:
63:47:98:d1:6e:d1:bc:b3:a1:9d:96:de:28:fb:4b:cd:7f:4b:
72:4f:ec:9f:29:16:3e:b7:cc:2c:ad:3f:1d:52:1f:fe:b2:8d:
8e:e9:8c:3a:cf:4a:8b:97:38:ce:58:b6:b4:b5:6f:bf:79:a8:
20:13:b5:b6:a3:35:3b:5a:97:bb:53:03:6e:9e:aa:79:4b:64:
4e:d0:27:c8:52:dc:80:61:e8:5b:23:2d:33:9c:93:d4:d8:c3:
16:ad:82:ea:06:f9:5a:3e:26:f0:93:11:f4:7a:e6:dd:6f:24:
8b:29:14:42:83:84:fa:16:0a:c6:98:8f:cd:2f:a0:a8:b5:c7:
cd:05:bb:06:c5:36:2b:f5:68:5e:49:a9:7c:4c:68:6d:16:5f:
6c:ac:e3:75:c2:22:c3:ed:61:48:2a:ea:9c:bd:a4:76:50:ac:
ab:04:2b:3e:fd:31:89:2d:57:ac:5c:10:87:02:d8:9c:81:b3:
66:22:5b:31:2f:ca:f2:cd:48:89:cf:bc:e2:db:b4:f2:c3:29:
df:74:83:67:6c:70:94:c5:dd:57:22:14:4f:c1:5e:a6:18:15:
86:94:14:2b:eb:fb:99:36:8b:33:18:dd:8b:f2:c6:a4:22:c6:
e8:a6:bb:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:57:26 2025 by rpki-client