Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
File: p1OwvT1iQYAynSGj7NzKGy--3m0.mft (raw, json)
Hash identifier: f2vCyPVBCUAT+s05+MHRIktJZnsIvBFxdfOPZzDzU68=
Subject key identifier: 89:37:81:6F:E0:53:BB:8F:09:5D:95:49:E2:01:D1:DE:94:B9:74:63
Authority key identifier: A7:53:B0:BD:3D:62:41:80:32:9D:21:A3:EC:DC:CA:1B:2F:BE:DE:6D
Certificate issuer: /CN=a753b0bd3d624180329d21a3ecdcca1b2fbede6d
Certificate serial: 01984BC15369900A973DD8D17B4F522A04E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 12:00:17 +0000
Manifest this update: Sun 27 Jul 2025 12:00:17 +0000
Manifest next update: Mon 28 Jul 2025 12:00:17 +0000
Files and hashes: 1: p1OwvT1iQYAynSGj7NzKGy--3m0.crl (hash: 1VAVyQkriYBGZyTEFYkPIF7CPgrABXnVjHKAXSFCSzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:53:69:90:0a:97:3d:d8:d1:7b:4f:52:2a:04:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a753b0bd3d624180329d21a3ecdcca1b2fbede6d
Validity
Not Before: Jul 27 12:00:17 2025 GMT
Not After : Jul 28 12:00:17 2025 GMT
Subject: CN=8937816fe053bb8f095d9549e201d1de94b97463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2a:94:5e:9c:30:c4:92:1b:d9:cf:e0:d2:e0:
c0:ec:ca:e4:87:42:99:c0:1b:8c:47:c8:46:5b:f5:
85:8a:02:e9:4c:c3:bd:2c:c7:c5:e4:73:96:24:09:
e7:04:13:93:65:92:6b:06:ce:bb:ba:64:c1:8b:0a:
07:85:d6:96:e2:54:af:55:b9:e9:cb:3a:41:2e:14:
a5:c6:cc:19:49:36:e0:95:75:c5:1c:7b:e9:d0:ad:
37:8a:91:aa:71:e5:2f:9d:e7:c7:1d:05:c6:f5:fe:
02:b8:bf:c5:d1:d5:60:35:0d:69:92:d7:53:e0:e7:
41:6f:f4:31:7b:b6:e0:56:25:bd:49:4b:1e:8d:54:
12:a1:5e:2b:b8:a5:91:56:09:99:20:26:05:87:6e:
0e:c9:96:71:50:ef:86:70:c0:2f:14:84:74:3a:26:
a6:89:26:b0:e3:97:5d:88:6d:4a:06:8d:e1:cf:c9:
12:9a:1c:3b:f5:b3:44:74:92:0e:94:e4:c3:9c:e5:
bf:42:fd:b7:ba:55:9f:84:7d:35:9b:36:2b:1a:dd:
fc:9c:8f:64:24:d5:ac:cd:8d:d1:29:5b:d0:b4:58:
e8:be:11:69:d0:25:4d:82:e7:99:cc:91:6c:37:c0:
06:7a:e5:f3:fd:5e:3a:2c:d0:7e:12:6c:b8:8b:31:
16:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:37:81:6F:E0:53:BB:8F:09:5D:95:49:E2:01:D1:DE:94:B9:74:63
X509v3 Authority Key Identifier:
keyid:A7:53:B0:BD:3D:62:41:80:32:9D:21:A3:EC:DC:CA:1B:2F:BE:DE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ed:c2:5e:f1:e0:92:2d:3e:b8:98:fd:24:f1:37:3b:ec:a0:
95:8b:55:4c:48:86:67:b8:e2:22:64:a6:c8:b7:7a:ad:97:32:
0c:0f:0f:6a:c5:27:8d:ac:1a:7f:0a:16:2f:57:15:bd:41:ce:
de:a7:e6:e3:c9:b3:a2:a7:1b:82:4e:4f:27:12:b3:52:e7:11:
47:7e:ce:9f:66:df:72:43:a8:94:55:d6:61:74:86:40:5f:a7:
51:7c:bd:d0:41:0b:76:6b:b8:77:2e:45:74:26:19:08:f2:d1:
96:5d:08:e1:aa:5e:31:d8:61:4a:5f:60:5c:ac:c8:e0:2d:25:
c9:67:44:d8:79:06:dd:b3:18:3c:ff:aa:4b:1d:f9:d9:4b:65:
a8:10:72:b8:56:29:46:61:51:97:2f:80:26:a4:38:4e:82:46:
ad:62:16:08:ce:1b:ea:0c:2f:ed:a6:77:32:cc:ee:d8:c0:ce:
2e:49:d9:82:95:b1:cb:12:c1:9a:39:3e:9c:05:04:93:cb:ee:
ce:ef:6b:5a:36:ac:9d:10:5a:01:10:33:99:77:98:9d:14:f0:
4f:3f:ac:94:35:6c:c5:14:f1:fe:89:41:61:06:99:b2:33:2e:
89:d8:c4:fd:b8:8e:5b:1e:7c:84:e7:25:ae:20:07:7f:d6:e5:
59:29:0c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:18:17 2025 by rpki-client