Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
File: pS3-y7QxcCl5YaIbfltKPEfeCVs.mft (raw, json)
Hash identifier: efWLYYSd7prWfb09ddHIQSmg/PAzivOxHZ7DwL9GdRE=
Subject key identifier: 68:AC:04:E0:27:A5:45:F7:83:51:95:BA:D3:C3:B7:C0:58:9E:1D:96
Authority key identifier: A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B
Certificate issuer: /CN=a52dfecbb43170297961a21b7e5b4a3c47de095b
Certificate serial: 0199FDD93B2F77A5D75C08A81D855EB26F82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
Manifest number: 08F5
Signing time: Sun 19 Oct 2025 19:01:36 +0000
Manifest this update: Sun 19 Oct 2025 19:01:36 +0000
Manifest next update: Mon 20 Oct 2025 19:01:36 +0000
Files and hashes: 1: pS3-y7QxcCl5YaIbfltKPEfeCVs.crl (hash: ml9X9kY/bSY8m9NW6KAmpgO7X9XMU/2WHK91PHSUcA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:3b:2f:77:a5:d7:5c:08:a8:1d:85:5e:b2:6f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52dfecbb43170297961a21b7e5b4a3c47de095b
Validity
Not Before: Oct 19 19:01:36 2025 GMT
Not After : Oct 20 19:01:36 2025 GMT
Subject: CN=68ac04e027a545f7835195bad3c3b7c0589e1d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ab:7d:d5:3b:20:0c:f9:12:a5:b1:4d:0c:32:
28:71:24:ec:8c:38:92:02:c3:b8:12:e7:3e:0d:6c:
0f:22:39:e5:27:3e:73:02:60:3f:f9:ed:7d:7a:bb:
e5:2f:a3:fb:4c:67:8f:17:c4:ff:17:11:d5:f7:e6:
46:f2:35:e7:5f:24:da:d6:7d:33:f5:31:68:d0:e6:
83:73:e2:aa:bb:b5:39:72:df:73:33:8b:df:da:12:
c4:fc:41:30:17:b0:f4:e7:a1:03:d7:0c:cc:83:87:
57:5a:15:e0:a4:e9:c8:96:bb:c3:5d:f1:9d:cb:c8:
b9:c7:33:55:31:7f:4c:f2:24:bd:6b:bc:43:5c:65:
fc:fc:d7:15:ab:9f:24:3c:2f:a5:15:03:29:bf:ec:
fa:c7:48:b7:45:e8:61:52:5c:9c:70:bf:90:7e:b8:
55:d6:af:dc:13:8a:85:ad:b9:7b:2a:db:7f:77:f3:
5a:9e:d3:8f:2c:18:e5:d6:be:c8:0d:a5:15:77:e7:
c3:d0:8d:15:0f:e1:eb:95:b9:1e:b6:e2:a6:00:d5:
35:a4:7c:e0:92:fa:f3:91:c7:56:c1:e4:da:69:01:
27:54:d3:23:6e:c2:4d:00:ae:8e:8c:86:3c:2b:4e:
90:20:b3:1c:2e:7c:03:97:6e:8a:b4:de:58:a2:30:
0c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AC:04:E0:27:A5:45:F7:83:51:95:BA:D3:C3:B7:C0:58:9E:1D:96
X509v3 Authority Key Identifier:
keyid:A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b3:1e:f1:f7:d8:25:69:e5:9d:2c:55:70:d8:51:32:d0:88:
b0:d5:47:18:e3:db:0d:f1:e3:11:6d:4e:d3:2f:02:63:78:6e:
50:4c:54:84:cb:ac:9b:d1:e3:85:8f:50:87:14:84:34:95:2c:
b1:f6:5e:5d:f4:43:d5:d8:83:b6:f6:0d:20:4b:f5:ea:45:bf:
23:4e:2e:26:1e:34:43:7e:2f:98:84:90:c1:33:5c:a8:57:4f:
fa:a7:b2:a6:2e:e3:04:cd:cb:1a:02:c0:73:85:64:b4:e8:d9:
54:88:29:8f:32:00:08:96:a5:17:e6:54:da:8a:71:6b:a5:95:
b3:2a:f3:53:dd:14:0b:3b:64:7f:54:67:26:31:ed:4e:32:90:
63:fd:f5:c5:5b:8f:30:d1:36:a5:13:12:07:ad:0c:90:57:c5:
8f:cc:15:96:5a:be:3b:4a:4a:d3:18:fc:a0:50:63:76:74:0f:
4c:a9:a3:21:4a:36:1a:71:88:6d:06:38:fb:4f:1b:84:06:70:
be:dd:b7:10:a0:04:05:b9:cb:9f:65:6b:f0:10:89:9a:da:62:
d8:0f:0d:8f:69:41:c5:2f:14:52:1d:62:88:b1:2c:e8:89:3b:
98:0c:c8:d8:c6:59:de:92:ac:55:b8:94:e2:4d:de:d4:ed:85:
5f:6f:2f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:02:49 2025 by rpki-client