Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
File: P_xs3-GW1bOdLqYOkMldtwRF2bk.mft (raw, json)
Hash identifier: Ot5xtC5AwaBlTB2O5Bwz0vmXFGvqGAiOf+OJoh1mV+E=
Subject key identifier: F7:B5:A6:04:E7:C0:8F:1C:24:AD:0E:AD:10:6D:85:1E:CA:64:11:FE
Authority key identifier: 3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
Certificate issuer: /CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Certificate serial: 0198D69821DE2C7841602F66C05402586DBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
Manifest number: 015E
Signing time: Sat 23 Aug 2025 11:02:30 +0000
Manifest this update: Sat 23 Aug 2025 11:02:30 +0000
Manifest next update: Sun 24 Aug 2025 11:02:30 +0000
Files and hashes: 1: P_xs3-GW1bOdLqYOkMldtwRF2bk.crl (hash: 0QgJfyqU57R4RajUtFI/kQF/lcIxEGKdIfAgdDnTKu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:21:de:2c:78:41:60:2f:66:c0:54:02:58:6d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Validity
Not Before: Aug 23 11:02:30 2025 GMT
Not After : Aug 24 11:02:30 2025 GMT
Subject: CN=f7b5a604e7c08f1c24ad0ead106d851eca6411fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3a:45:ef:48:0c:cd:08:e2:38:dc:02:1a:80:
9b:6c:fe:3c:15:5d:4d:cc:7c:c1:26:57:b0:9b:2d:
5b:3b:04:ba:d9:f1:5f:63:a9:21:c1:79:73:a6:f4:
54:15:a5:51:28:b6:b2:d5:2c:64:88:94:30:e2:29:
fa:7c:de:c7:42:06:c3:ec:66:04:39:d4:5d:d4:05:
57:31:aa:e2:a4:e7:3f:b1:d0:5e:12:1e:1b:6f:2b:
b6:0f:0f:9d:1d:93:fd:f9:64:e8:f8:28:a9:bd:f8:
10:de:d9:45:4a:36:9e:30:b0:93:47:56:43:74:88:
ff:a2:91:1f:ba:3c:a2:d8:4d:1a:77:cc:08:b1:f7:
63:a0:d9:9d:54:fb:89:45:5f:a6:04:0f:d4:ef:05:
da:2b:ca:ca:61:69:3f:90:bb:9a:40:ef:74:b8:07:
ae:6d:9a:33:54:65:d9:62:35:b8:0c:b8:6c:4c:81:
f8:f6:4f:9d:64:b2:97:af:a8:46:e2:d0:63:f5:cd:
87:3e:07:8d:f6:1b:6b:dc:1c:b1:ed:6e:57:91:6f:
c1:fa:10:25:2c:4b:93:b9:a4:a3:60:ba:b4:a1:ba:
da:9d:44:f6:05:a2:92:5d:f0:92:5e:2e:4f:22:7a:
a4:86:2e:12:90:44:f7:5c:7b:87:bf:03:d1:26:b7:
81:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B5:A6:04:E7:C0:8F:1C:24:AD:0E:AD:10:6D:85:1E:CA:64:11:FE
X509v3 Authority Key Identifier:
keyid:3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ba:df:42:6e:f4:9f:8e:97:57:94:cb:b0:6d:aa:4f:88:f0:
fa:c3:40:b2:5b:7a:8b:08:20:20:d0:6e:a0:28:ed:4d:8e:31:
a6:b0:cd:3a:81:e7:fc:8f:48:08:c0:01:b2:f8:06:0d:23:74:
7e:7e:27:42:b9:21:76:40:fd:a8:58:06:e3:33:70:ce:64:85:
a9:42:42:f2:59:d3:c3:e1:90:21:bd:65:1d:0a:72:b6:5b:96:
4a:91:e8:df:76:44:1d:a8:a0:1f:a4:6b:fa:02:41:7f:32:64:
cd:f8:b7:8b:96:25:f2:d6:89:94:c8:de:b4:71:0a:09:37:59:
5a:dc:2b:88:2f:5b:04:c0:48:e6:f1:7b:88:0c:f2:d7:14:c8:
44:b5:9e:fe:87:d8:ed:30:fa:65:5d:27:16:96:ed:bc:0c:5d:
d0:f1:13:78:80:30:94:9f:28:7d:48:b4:8e:81:ce:ff:38:19:
48:ef:4f:ec:2b:6c:c9:72:81:36:51:f0:7f:bd:92:49:89:22:
ea:8a:fd:02:d2:ad:ac:58:07:45:8a:9b:75:6b:02:c4:05:e5:
8f:cc:4c:ab:c4:8e:6d:2a:30:96:9f:b6:83:81:69:e7:82:25:
35:89:d4:f3:59:79:ef:e3:bc:60:6d:12:97:64:05:05:56:be:
84:15:72:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:39:58 2025 by rpki-client