Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
File: P3lU2IwK4_Y5hpe_38GVanU-g9g.mft (raw, json)
Hash identifier: 13YDct6ozwb4xti4gHe7YQPXH779n79v9Blon/UyE44=
Subject key identifier: 45:A0:4D:C9:41:42:27:C8:9E:1D:BB:D6:A6:E6:87:1C:C1:32:B8:57
Authority key identifier: 3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
Certificate issuer: /CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Certificate serial: 0198D54DDD39F1083FD4D0F6BC916F754A97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
Manifest number: 1622
Signing time: Sat 23 Aug 2025 05:01:46 +0000
Manifest this update: Sat 23 Aug 2025 05:01:46 +0000
Manifest next update: Sun 24 Aug 2025 05:01:46 +0000
Files and hashes: 1: P3lU2IwK4_Y5hpe_38GVanU-g9g.crl (hash: OsDAVjK4Y+jY4xInCB2x6fIhrsKSQbOtv0bybUB1P2E=)
2: rf7Y9BfnjDYuwCtely2bugyEpys.roa (hash: 9y+7Sb1Y7U3Xr15ca0JClSv0KalX6Si92Kt+rNAmTHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:dd:39:f1:08:3f:d4:d0:f6:bc:91:6f:75:4a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Validity
Not Before: Aug 23 05:01:46 2025 GMT
Not After : Aug 24 05:01:46 2025 GMT
Subject: CN=45a04dc9414227c89e1dbbd6a6e6871cc132b857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:dd:66:39:f6:f4:1c:4e:20:e0:c2:cb:a2:62:
78:51:50:b0:26:86:7d:13:2e:cd:9a:4e:ba:39:cc:
4c:fc:75:f1:42:99:d2:6f:8e:d4:68:44:88:49:27:
33:cc:83:1e:fc:76:ef:e1:68:98:28:72:ee:65:53:
b0:3a:77:cb:d5:8f:e5:11:07:c2:44:1a:7f:85:c2:
19:03:fb:2e:e9:d1:f3:2d:9f:27:ac:ad:69:4a:e3:
06:53:9d:ba:77:0d:46:c8:d1:7e:51:05:7e:e4:9c:
1c:6b:01:b9:01:6b:ad:34:28:17:58:49:ec:6c:44:
34:15:cf:c8:62:11:af:3a:24:af:6f:52:ac:f8:c2:
09:17:ad:dd:f8:82:92:f3:a1:17:c7:93:6c:f3:ce:
2b:2e:eb:fc:3d:b0:81:59:52:4a:35:7c:df:b1:82:
aa:a5:d9:74:b0:12:3b:ca:4e:a6:8e:b1:88:fd:37:
7f:0c:48:6d:70:fd:75:db:ce:45:e7:52:06:5c:ba:
78:81:79:91:2a:63:38:ef:67:6b:fa:ba:69:0d:1d:
85:de:bc:5f:c5:c9:2a:72:24:4b:76:54:b4:c6:c3:
1b:24:5d:a7:45:4c:57:2b:95:4a:b2:98:4b:3e:32:
dc:dd:ae:e1:da:94:3b:fa:cb:06:ae:3c:5c:8c:bc:
81:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A0:4D:C9:41:42:27:C8:9E:1D:BB:D6:A6:E6:87:1C:C1:32:B8:57
X509v3 Authority Key Identifier:
keyid:3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:b5:7a:8c:ba:77:20:db:d5:c5:22:2a:43:cb:77:99:ba:72:
31:43:47:17:2d:fa:1b:a4:de:54:51:b6:d7:05:6e:9a:9f:cb:
25:e0:cd:91:1c:e2:45:fc:28:c6:25:bf:6c:8f:ec:3e:ba:87:
c7:8c:09:da:a8:07:74:11:20:78:f5:c0:22:d8:78:5a:53:b7:
d1:58:7a:b9:d5:8f:47:44:8b:11:27:71:a3:a6:d7:0a:ac:fe:
bb:2d:76:a7:64:13:43:42:b6:ce:a9:98:fa:1e:23:2d:58:76:
ef:33:5c:e4:2d:5f:2d:fc:03:64:df:e5:76:9b:46:55:da:69:
ac:fa:8f:e0:e7:e7:34:0a:38:d7:56:14:20:5c:a5:4f:bb:66:
ec:e6:2a:ee:d2:d6:0a:00:c8:58:83:c2:b1:e4:8f:c6:07:99:
82:77:d8:14:e8:fe:9e:72:92:cf:b6:cd:bc:37:e4:be:15:d6:
f8:ac:c9:23:76:df:84:a3:76:b6:e0:16:20:e7:6d:e2:09:cf:
49:d6:f3:9e:38:f3:0a:62:44:36:df:07:10:b9:49:71:d6:53:
25:ec:1d:87:3e:81:26:c1:85:95:ba:c6:de:ec:ba:e2:ed:09:
d7:c3:d1:6f:84:9a:42:49:3f:56:2e:29:f4:8d:59:1a:2f:f1:
04:fb:69:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:11 2025 by rpki-client