Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
File: P4_xyWZv4ZXySqH-jDRdecSOe8A.mft (raw, json)
Hash identifier: jtFSrcfGIWEgyk27SEsNVUB56z4epyJrP1DnD43vsxo=
Subject key identifier: A6:94:E8:79:B8:DA:A4:93:66:97:67:00:8C:5B:D2:EA:60:18:73:21
Authority key identifier: 3F:8F:F1:C9:66:6F:E1:95:F2:4A:A1:FE:8C:34:5D:79:C4:8E:7B:C0
Certificate issuer: /CN=3f8ff1c9666fe195f24aa1fe8c345d79c48e7bc0
Certificate serial: 0199FD343CAE74DAD6716F932C7813CFDE50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
Manifest number: 0ACE
Signing time: Sun 19 Oct 2025 16:01:23 +0000
Manifest this update: Sun 19 Oct 2025 16:01:23 +0000
Manifest next update: Mon 20 Oct 2025 16:01:23 +0000
Files and hashes: 1: P4_xyWZv4ZXySqH-jDRdecSOe8A.crl (hash: chiUP1Z6TQUkwJi8+a69qAhFzLmeCOLyIwv6PdCS/QE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:3c:ae:74:da:d6:71:6f:93:2c:78:13:cf:de:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ff1c9666fe195f24aa1fe8c345d79c48e7bc0
Validity
Not Before: Oct 19 16:01:23 2025 GMT
Not After : Oct 20 16:01:23 2025 GMT
Subject: CN=a694e879b8daa493669767008c5bd2ea60187321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c0:a4:a3:e0:40:d8:fd:a8:40:05:91:e4:e1:
45:76:cd:fc:72:5c:7f:af:df:db:09:7b:3b:4d:e2:
ab:2a:8a:7b:b8:e7:38:e7:13:aa:2c:9f:11:0a:f3:
9c:d9:92:65:b4:dc:5d:68:c4:44:ee:e3:85:b3:65:
f1:ef:43:7f:99:5e:bd:a3:22:87:5d:0c:86:a5:7f:
80:3b:e5:6a:4b:84:55:25:36:3a:17:09:01:46:0b:
2c:c1:61:85:ca:b9:cc:01:55:e2:de:99:cb:c3:4c:
f5:ba:68:5c:16:7c:3c:cc:4c:ee:58:62:ec:8e:56:
15:c5:2f:d5:11:e6:b6:2f:bd:06:0b:51:4f:74:4d:
8c:d1:d2:1e:0e:94:2a:28:22:f6:e3:c6:55:d5:d1:
4c:a7:7d:12:5b:b9:f1:bc:cf:b1:62:8a:e6:d7:ff:
9f:4d:2a:8a:21:6c:aa:4a:b5:16:4b:04:6a:a6:be:
d9:84:e4:6f:d4:60:ba:21:a0:be:f8:e7:29:3b:a1:
23:09:03:9b:cf:ac:2f:65:18:2d:a3:cd:91:bd:46:
a5:3d:f3:03:12:bf:22:26:1a:d3:a8:95:5f:dd:9f:
52:46:dc:41:66:16:10:f9:c4:93:20:87:fe:5c:a5:
9f:41:08:da:1a:85:7f:e4:53:81:b7:3d:90:eb:43:
0c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:94:E8:79:B8:DA:A4:93:66:97:67:00:8C:5B:D2:EA:60:18:73:21
X509v3 Authority Key Identifier:
keyid:3F:8F:F1:C9:66:6F:E1:95:F2:4A:A1:FE:8C:34:5D:79:C4:8E:7B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ec:aa:3d:fd:70:32:d1:54:17:0e:9c:3e:86:fa:a0:13:3d:
59:35:f7:74:d5:4f:bf:ee:fe:b0:5d:25:52:27:c1:d9:9c:df:
c0:11:7a:25:0f:7b:0c:36:f8:26:eb:66:08:65:92:ed:9d:bf:
a4:4f:b4:79:6d:25:db:fb:25:40:63:e9:7a:93:c4:16:d9:63:
54:45:11:2a:d8:ff:45:17:4d:f5:78:23:eb:11:2a:20:86:c5:
09:59:22:5c:74:79:64:8c:26:a3:fc:73:f2:29:13:b1:fd:39:
f1:49:2a:b0:f9:6c:22:76:cd:e2:c1:3f:ae:5c:b8:3c:83:f8:
6a:21:7f:59:61:ed:55:c1:15:92:5a:f4:33:2b:23:c8:ba:ca:
c7:d5:c8:90:f8:db:c2:0b:e3:87:1c:1e:75:76:ea:4c:79:ad:
83:04:4f:8e:22:8f:2f:9a:bb:d5:47:af:77:93:c0:3f:b1:9d:
aa:33:a5:1b:1a:07:53:12:d7:b7:1b:e4:4f:43:fd:bb:60:a4:
3b:d5:4e:67:38:a5:f6:76:45:e5:5f:f2:db:7f:d2:1b:6a:6a:
60:5b:3a:05:ce:1c:38:27:c4:44:85:42:57:5e:ae:a5:21:36:
6c:f9:cd:25:b2:4d:cc:fe:95:43:9d:96:d5:5c:ad:b6:d5:48:
37:b2:df:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:12 2025 by rpki-client