Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
File: p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft (raw, json)
Hash identifier: CCWOx42zQ3KBfHjHCN++/t1+2KGcOPm9ey9lvyClvNo=
Subject key identifier: 43:6F:24:08:7B:CB:12:B2:9E:53:04:53:72:89:B0:F8:47:6D:B9:54
Authority key identifier: A7:50:A9:B1:D4:54:94:9F:0B:19:30:35:24:D5:5E:62:5D:F0:BA:4B
Certificate issuer: /CN=a750a9b1d454949f0b19303524d55e625df0ba4b
Certificate serial: 0199FD343E4B3745F7381BA8A04646C64242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
Manifest number: 0E45
Signing time: Sun 19 Oct 2025 16:01:23 +0000
Manifest this update: Sun 19 Oct 2025 16:01:23 +0000
Manifest next update: Mon 20 Oct 2025 16:01:23 +0000
Files and hashes: 1: p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl (hash: Okg8Hn1mKWfj8hb+0x3OJ3cq/xNUPEM4H0EI0CrzEcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:3e:4b:37:45:f7:38:1b:a8:a0:46:46:c6:42:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a750a9b1d454949f0b19303524d55e625df0ba4b
Validity
Not Before: Oct 19 16:01:23 2025 GMT
Not After : Oct 20 16:01:23 2025 GMT
Subject: CN=436f24087bcb12b29e5304537289b0f8476db954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:86:57:77:3e:bc:a7:4a:2b:d9:53:86:64:22:
a0:24:d3:23:78:c5:79:21:8a:c7:d2:82:72:70:fe:
8a:61:35:13:34:c6:b8:c7:d9:15:4f:cd:42:3e:9f:
8a:18:c6:cc:92:53:af:8d:71:02:57:8e:22:1f:1e:
a2:df:1f:4d:0a:df:dd:b6:e1:fb:8c:e8:29:b4:91:
ed:70:ad:b8:90:c2:bd:81:28:dd:51:5f:ef:9b:da:
d7:87:d0:37:98:dc:f9:79:6a:b9:e2:73:ca:a0:48:
26:67:4b:9d:25:2a:3f:ee:ac:fd:42:6b:f6:28:bb:
38:8c:2d:40:91:e9:83:9d:6d:94:a1:8d:5c:c0:19:
e7:f8:6d:34:ac:79:27:0c:79:0e:d1:76:ee:2c:a1:
96:45:3e:78:68:ad:ab:83:f1:6c:38:b8:9b:f4:2b:
87:25:38:b6:bd:2c:7e:eb:03:8f:11:e2:32:e8:f2:
bc:59:27:15:80:7b:2f:ad:ec:8f:b4:e8:49:8e:15:
17:87:90:ad:a1:a0:5b:e8:86:f5:20:87:13:e9:f3:
1b:ef:b6:66:ba:6c:90:24:b4:41:df:43:ef:c6:63:
32:3d:2b:df:99:90:cd:d8:83:29:d9:08:10:da:c0:
9e:ba:94:5f:c7:80:92:f6:33:da:2d:2a:0c:79:66:
a7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6F:24:08:7B:CB:12:B2:9E:53:04:53:72:89:B0:F8:47:6D:B9:54
X509v3 Authority Key Identifier:
keyid:A7:50:A9:B1:D4:54:94:9F:0B:19:30:35:24:D5:5E:62:5D:F0:BA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:80:c4:88:97:fa:59:61:e5:1b:75:a7:8a:b3:33:00:88:57:
5b:d9:a5:73:b4:0b:f7:62:f6:8a:29:eb:72:37:cb:12:5a:de:
8e:14:ff:04:94:89:41:b3:92:8b:04:ce:5b:a1:7d:42:a2:20:
c8:c8:79:f4:36:e1:b8:92:47:98:13:6a:fe:24:de:d9:33:8a:
50:4f:fd:97:ac:7f:a0:da:90:0a:55:75:1c:66:69:3c:71:ab:
7b:d4:7d:15:ae:bb:b4:40:8c:37:ce:3d:c2:69:3f:e1:24:22:
fb:10:25:c0:ee:9c:80:29:cd:92:4e:16:58:8c:09:f9:4a:61:
76:23:89:fd:28:ad:7b:fa:2c:22:f1:37:16:bc:e5:93:57:75:
b4:3b:69:7e:53:ff:72:c3:8c:f4:25:6f:f1:e1:86:ba:38:9e:
34:48:86:1d:00:c2:b4:38:6f:45:a7:67:f0:d5:cb:29:7c:31:
06:c4:04:da:30:3c:33:1b:9c:f1:5b:fb:09:a4:57:10:bb:41:
8d:c1:5c:bb:ad:7a:60:6c:26:a7:59:8a:cc:33:80:b2:2b:a5:
63:e5:1a:60:81:6a:9e:e2:55:62:a0:8c:aa:e3:e9:aa:cd:9d:
d5:e6:c8:ae:03:43:ca:ee:4c:6a:83:3f:82:59:43:18:22:e9:
6b:ed:cf:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:57 2025 by rpki-client