Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
File: P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft (raw, json)
Hash identifier: imMk2XAGQ4wtt8iR8y4jfxprLzBNVbAc2lzr/BvFBPA=
Subject key identifier: D5:2F:9B:E9:65:AD:F8:9B:81:E3:D8:2F:C5:4E:70:43:2A:69:AE:9A
Authority key identifier: 3F:94:7C:4F:D2:39:6D:9E:DB:8B:C4:54:40:5E:57:55:8D:8B:95:02
Certificate issuer: /CN=3f947c4fd2396d9edb8bc454405e57558d8b9502
Certificate serial: 019847E55CB83AA7282F7DBC90570593D80A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 18:01:10 +0000
Manifest this update: Sat 26 Jul 2025 18:01:10 +0000
Manifest next update: Sun 27 Jul 2025 18:01:10 +0000
Files and hashes: 1: P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl (hash: ObVkP+bpcKEUYJlbTjgqH9OOIXsOdCr0M/e8sTTdVF4=)
2: T32ivR4pPT16GdJvEk3qcae9a-0.roa (hash: Ar4IuLNK/JbYrWnO/0jZmTGQAGYJO2SXqHxbBEnLR+A=)
3: uXJUN0yqzJ3TaQzP9cjAtVVx7hs.roa (hash: suoYCzad2UWOr/Nnpp8SMjjTemdQYZDDmDi97rBzGqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:5c:b8:3a:a7:28:2f:7d:bc:90:57:05:93:d8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f947c4fd2396d9edb8bc454405e57558d8b9502
Validity
Not Before: Jul 26 18:01:10 2025 GMT
Not After : Jul 27 18:01:10 2025 GMT
Subject: CN=d52f9be965adf89b81e3d82fc54e70432a69ae9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a8:84:cf:3e:d1:d0:11:d6:3d:7d:36:d0:ae:
9b:01:52:b1:72:a5:de:d3:d6:30:96:07:7b:ff:e5:
54:94:c6:99:a6:86:f2:11:14:7d:89:52:74:4e:eb:
54:da:90:a9:3f:de:1c:13:ce:80:7d:b2:df:37:6a:
5d:63:46:9a:6b:c4:98:6f:b8:c2:f9:7a:89:58:c4:
c5:b8:b3:4c:42:67:1d:72:3e:4c:55:a5:88:55:da:
34:d3:5c:65:a2:87:d4:5f:5a:37:1f:b4:2e:19:ab:
4e:1f:c8:63:a9:e2:dc:19:39:6a:25:07:fa:de:e6:
61:9c:46:f3:c1:f4:a8:28:4b:4a:67:1c:73:2d:54:
a0:f9:8f:5a:77:ba:ad:85:4a:28:43:6a:6a:63:fc:
12:51:fb:55:a6:39:46:38:2d:09:24:ba:8c:da:8c:
e1:57:c3:6c:c1:ad:cd:bd:02:52:6c:3c:e2:d1:6b:
16:12:38:46:c8:a8:54:11:7f:84:e1:c4:3c:d3:66:
81:99:cc:c0:cb:f5:7b:2e:bc:c4:f0:92:6c:22:bd:
72:0a:a7:86:79:27:b6:8e:2e:61:4a:44:d2:c4:b1:
55:df:91:98:a8:d2:62:e5:42:0b:bd:cc:3c:31:d5:
72:58:53:3d:75:0b:5c:5d:15:03:34:d6:ea:27:07:
7f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2F:9B:E9:65:AD:F8:9B:81:E3:D8:2F:C5:4E:70:43:2A:69:AE:9A
X509v3 Authority Key Identifier:
keyid:3F:94:7C:4F:D2:39:6D:9E:DB:8B:C4:54:40:5E:57:55:8D:8B:95:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:1b:be:5b:6c:7c:f3:51:26:ed:29:5a:d6:05:00:8d:f0:02:
22:60:ab:9d:9b:88:62:99:31:e2:08:f1:02:f5:9f:d3:47:13:
7e:9d:1f:a6:8c:38:fc:14:8d:10:f5:44:03:9d:75:5c:29:85:
89:9d:53:f7:26:63:56:ad:26:c5:e9:b9:da:4d:fa:7f:83:05:
2d:50:03:72:31:66:d1:06:65:6e:08:22:ff:fa:dc:33:82:93:
9a:69:83:bd:85:e7:28:48:b9:37:69:c9:4f:01:b4:72:ac:1f:
22:64:75:d7:cb:48:14:18:91:ea:1d:5c:e5:c1:4e:1b:20:32:
a1:dd:ce:72:5d:89:8f:fb:f1:ab:5c:81:27:80:06:df:f5:e5:
26:ef:79:f0:cb:a1:04:62:5c:53:37:51:35:41:f1:af:39:2c:
64:78:d2:ee:fa:c7:47:7f:a6:d1:45:28:05:2d:0b:0b:74:0a:
dd:22:4f:ef:88:7a:96:be:c2:e5:88:f6:6b:05:b0:cd:a3:c6:
93:8d:c3:22:ab:29:3a:a0:3e:0c:26:87:ae:84:c5:38:93:9a:
01:05:e4:15:7a:be:24:66:60:0d:be:24:c0:cf:2c:64:0e:c4:
6a:a2:15:9a:bf:6b:65:ef:a7:b1:00:38:fb:48:39:7f:5c:e4:
f0:18:40:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:57:27 2025 by rpki-client