Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
File: P_xs3-GW1bOdLqYOkMldtwRF2bk.mft (raw, json)
Hash identifier: iLNOP2Z+yJQRfT1Sypy9fexRXrzyM4vMwEP2x/OumR8=
Subject key identifier: AC:0D:44:04:C7:82:CE:1A:AC:58:57:30:64:14:BC:66:B1:51:9D:91
Authority key identifier: 3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
Certificate issuer: /CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Certificate serial: 0199FE0FE818F69F9A23A5509B2D37355F68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
Manifest number: 01F7
Signing time: Sun 19 Oct 2025 20:01:19 +0000
Manifest this update: Sun 19 Oct 2025 20:01:19 +0000
Manifest next update: Mon 20 Oct 2025 20:01:19 +0000
Files and hashes: 1: P_xs3-GW1bOdLqYOkMldtwRF2bk.crl (hash: i9I4NWrZa1mDGil0oqu02d15jIg1RfaXjH7q4RmL/JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:e8:18:f6:9f:9a:23:a5:50:9b:2d:37:35:5f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Validity
Not Before: Oct 19 20:01:19 2025 GMT
Not After : Oct 20 20:01:19 2025 GMT
Subject: CN=ac0d4404c782ce1aac5857306414bc66b1519d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6a:ad:87:a2:97:ba:22:61:d1:5e:01:33:e7:
fd:99:13:0c:2d:cd:84:eb:ea:a8:d1:30:45:c0:2b:
8b:e0:2e:84:c9:cb:77:03:af:12:82:5e:7b:27:21:
13:e8:d5:99:01:80:c1:71:5c:63:87:b6:40:b8:05:
6c:c3:bd:d2:2b:6a:dd:05:24:bb:d5:44:19:03:e3:
4b:ae:2f:1d:c1:43:a3:74:ca:36:ca:03:b0:39:22:
75:92:b4:9a:08:60:a5:37:51:cc:0b:06:59:5d:75:
a9:35:64:5d:9c:4a:95:21:0b:7c:f0:9e:0a:21:a8:
2a:66:62:24:8c:de:e1:d3:4a:1e:be:30:8d:eb:70:
cd:55:04:a4:75:80:fb:8c:69:28:9f:71:69:49:ed:
89:5d:76:f1:02:11:9e:64:46:c0:2b:8b:e5:fd:b3:
40:7c:d2:5e:86:f6:69:86:e0:67:8f:2d:0c:c8:5b:
4d:e8:2f:70:7b:16:63:d0:7f:20:8c:60:fb:61:3c:
fd:84:31:78:f6:ce:5a:4f:c0:0d:05:24:20:8e:b6:
47:b9:81:a8:3f:ff:9b:36:bc:f7:1a:bc:c5:d4:77:
3e:01:e1:d9:79:4f:af:8e:75:05:99:4c:d9:75:57:
13:dc:c7:71:9b:a4:16:49:a6:fd:da:70:bc:39:3e:
6c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0D:44:04:C7:82:CE:1A:AC:58:57:30:64:14:BC:66:B1:51:9D:91
X509v3 Authority Key Identifier:
keyid:3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:88:d9:9e:7a:e8:08:91:6b:1b:a0:a5:16:ed:5b:a8:c3:27:
4f:31:12:48:98:0c:9c:e7:63:49:68:c9:e9:e7:3f:ef:f1:be:
ca:9d:07:f6:36:3c:1c:7b:bc:56:87:d2:7e:3d:15:ac:49:ff:
05:74:04:0a:e9:eb:91:17:2b:66:8e:1c:88:b8:7d:cc:0e:7a:
67:78:df:e2:6a:92:9f:8b:a5:fa:00:b1:f9:49:b9:6d:42:4b:
58:8b:26:83:25:7a:d5:c3:9c:f2:17:fe:52:bb:d1:47:94:b8:
04:2e:72:64:12:85:2f:d9:27:a8:ca:fb:bc:d1:d2:67:25:3b:
2f:df:42:5a:5f:57:91:6e:84:f4:38:2d:cf:f9:8e:94:81:d4:
89:07:ce:d0:d8:bc:63:5d:1c:7e:d1:f9:8e:7d:35:fc:d6:47:
cd:04:97:96:ea:89:7d:9e:7c:90:3c:c9:01:34:64:de:e3:d6:
95:7f:0c:d6:5f:98:d9:e4:fc:b4:b9:06:a4:e5:f9:c9:6e:01:
27:d8:1d:ff:6d:b0:53:ee:48:63:db:94:31:23:04:68:a5:8b:
c9:b2:7e:a9:5d:a9:44:6d:06:6a:b2:1e:c5:06:4f:fb:1b:db:
b3:75:dc:13:55:67:ea:15:3d:d5:c9:3a:80:ee:56:08:99:c9:
57:b8:1f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:58:42 2025 by rpki-client