Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
File: P4_xyWZv4ZXySqH-jDRdecSOe8A.mft (raw, json)
Hash identifier: FooZ/JvomVGyEnnQ/sJDsEREKS3SIhxHgUGEMma1MLA=
Subject key identifier: D1:B8:B3:9C:5D:69:2A:EA:9E:29:C4:90:3D:D1:4B:7A:F1:88:25:C8
Authority key identifier: 3F:8F:F1:C9:66:6F:E1:95:F2:4A:A1:FE:8C:34:5D:79:C4:8E:7B:C0
Certificate issuer: /CN=3f8ff1c9666fe195f24aa1fe8c345d79c48e7bc0
Certificate serial: 01984AAF379F031C7801E2B67E6AD4D2101A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
Manifest number: 09ED
Signing time: Sun 27 Jul 2025 07:00:53 +0000
Manifest this update: Sun 27 Jul 2025 07:00:53 +0000
Manifest next update: Mon 28 Jul 2025 07:00:53 +0000
Files and hashes: 1: P4_xyWZv4ZXySqH-jDRdecSOe8A.crl (hash: HxKfbqUZvHLNgich58t37PO06HPzke91u/3msXkrG0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:37:9f:03:1c:78:01:e2:b6:7e:6a:d4:d2:10:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ff1c9666fe195f24aa1fe8c345d79c48e7bc0
Validity
Not Before: Jul 27 07:00:53 2025 GMT
Not After : Jul 28 07:00:53 2025 GMT
Subject: CN=d1b8b39c5d692aea9e29c4903dd14b7af18825c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:8e:42:54:b1:b7:8a:9c:7d:d1:13:0b:74:79:
88:02:a3:20:ff:5a:c0:e8:58:36:9f:e5:4e:8a:0e:
6a:81:20:77:1a:05:6a:11:58:88:a2:1a:22:d1:93:
e1:74:d2:9d:fb:4c:cb:e0:67:48:6c:c2:aa:49:e8:
df:00:5c:6e:ba:dc:17:d0:1f:de:e7:1b:e3:5a:9e:
19:72:bc:0b:f5:83:da:15:c9:e6:0b:fb:91:c5:d6:
a0:61:a8:a4:8a:1d:54:22:9d:a6:30:da:3d:b5:48:
e4:cf:7d:15:31:bd:9c:f2:24:ce:e2:30:39:b2:14:
31:ed:59:be:ef:e2:e1:fa:a6:96:33:de:25:89:94:
01:ee:38:e7:3c:21:94:c5:7e:41:03:fc:0c:19:23:
b9:2a:1b:5a:6b:d5:d7:07:80:6f:3f:0d:0b:80:1a:
3a:c8:22:5c:73:31:f1:33:9c:6d:74:b5:a0:a2:54:
b0:40:a1:09:55:cd:c2:29:89:4c:11:fc:e5:43:43:
af:30:3c:a4:2d:95:9f:44:3f:c9:67:7b:6d:2e:2d:
1c:ff:7a:19:2e:3d:71:18:f4:83:dd:19:c2:61:18:
65:29:4f:6d:a8:74:e0:31:fa:f1:f6:59:bc:ce:c5:
29:fe:86:5c:a4:1b:1f:0c:2d:e5:82:68:b4:bd:74:
5f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B8:B3:9C:5D:69:2A:EA:9E:29:C4:90:3D:D1:4B:7A:F1:88:25:C8
X509v3 Authority Key Identifier:
keyid:3F:8F:F1:C9:66:6F:E1:95:F2:4A:A1:FE:8C:34:5D:79:C4:8E:7B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ca:41:34:03:a1:26:97:0b:b9:71:11:a0:87:16:12:3d:69:
fd:db:19:be:02:95:ea:69:f5:7c:1e:06:90:e5:f2:4c:f8:8a:
d1:8b:46:91:a3:56:f3:44:45:c3:e6:0b:05:61:ad:70:bb:ae:
36:bd:10:16:8e:68:76:95:7c:e9:f4:bb:06:b6:10:b4:98:18:
19:1b:f7:bf:6f:0b:90:0f:12:c5:96:1c:a8:3c:0d:8c:80:e6:
84:ed:04:8c:56:ee:0e:40:37:8a:b8:1a:fa:2d:ff:9a:2f:bb:
59:ba:d9:c0:36:4b:3f:c9:f1:04:db:07:19:0f:cf:66:33:15:
bb:55:dd:af:7f:fc:30:25:73:f8:80:89:84:ae:43:9c:73:85:
cd:97:ec:4e:d3:13:e4:46:df:c8:26:74:e8:5d:88:8a:29:63:
9c:6b:8c:19:99:f4:1e:18:4a:f0:33:71:f0:0b:26:28:46:71:
1c:5b:f5:b5:e3:f6:d4:e3:9e:6d:80:c8:bc:de:3d:f0:8d:6a:
22:04:54:26:c3:05:1a:00:82:1b:bc:da:57:e8:f6:64:aa:28:
57:f4:d9:80:7d:00:88:fa:30:26:d2:bf:cd:52:88:3f:31:02:
8f:17:58:f5:0e:1a:4f:81:9a:c9:c5:14:bf:94:f6:d4:db:f6:
3b:01:bd:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKrzefAxx4AeK2fmrU0hAaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmOGZmMWM5NjY2ZmUxOTVmMjRhYTFmZThjMzQ1ZDc5YzQ4
ZTdiYzAwHhcNMjUwNzI3MDcwMDUzWhcNMjUwNzI4MDcwMDUzWjAzMTEwLwYDVQQD
EyhkMWI4YjM5YzVkNjkyYWVhOWUyOWM0OTAzZGQxNGI3YWYxODgyNWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8I5CVLG3ipx90RMLdHmIAqMg/1rA
6Fg2n+VOig5qgSB3GgVqEViIohoi0ZPhdNKd+0zL4GdIbMKqSejfAFxuutwX0B/e
5xvjWp4ZcrwL9YPaFcnmC/uRxdagYaikih1UIp2mMNo9tUjkz30VMb2c8iTO4jA5
shQx7Vm+7+Lh+qaWM94liZQB7jjnPCGUxX5BA/wMGSO5Khtaa9XXB4BvPw0LgBo6
yCJcczHxM5xtdLWgolSwQKEJVc3CKYlMEfzlQ0OvMDykLZWfRD/JZ3ttLi0c/3oZ
Lj1xGPSD3RnCYRhlKU9tqHTgMfrx9lm8zsUp/oZcpBsfDC3lgmi0vXRflwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNG4s5xdaSrqninEkD3RS3rxiCXIMB8GA1UdIwQY
MBaAFD+P8clmb+GV8kqh/ow0XXnEjnvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDRfeHlXWnY0Wlh5U3FILWpEUmRlY1NPZThBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy81NzJlYmYtMThiYi00YzM4LWE5OTQt
ZmJkMzYxY2I4MTkzLzEvUDRfeHlXWnY0Wlh5U3FILWpEUmRlY1NPZThBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy81NzJlYmYtMThiYi00YzM4LWE5OTQtZmJkMzYxY2I4MTkz
LzEvUDRfeHlXWnY0Wlh5U3FILWpEUmRlY1NPZThBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmcpBNAOh
JpcLuXERoIcWEj1p/dsZvgKV6mn1fB4GkOXyTPiK0YtGkaNW80RFw+YLBWGtcLuu
Nr0QFo5odpV86fS7BrYQtJgYGRv3v28LkA8SxZYcqDwNjIDmhO0EjFbuDkA3irga
+i3/mi+7WbrZwDZLP8nxBNsHGQ/PZjMVu1Xdr3/8MCVz+ICJhK5DnHOFzZfsTtMT
5EbfyCZ06F2IiiljnGuMGZn0HhhK8DNx8AsmKEZxHFv1teP21OOebYDIvN498I1q
IgRUJsMFGgCCG7zaV+j2ZKooV/TZgH0AiPowJtK/zVKIPzECjxdY9Q4aT4GaycUU
v5T21Nv2OwG9Ww==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:26:51 2025 by rpki-client