Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
File: p3l5GlNwwc1X5JPZSfke-82mYX4.mft (raw, json)
Hash identifier: 2aOnI9KncMWMykLyn/gOwMGTh4+g2yuniFpKfk2qktw=
Subject key identifier: B0:42:97:7A:AB:28:AE:CA:06:42:E1:BD:8B:C0:97:25:6C:F9:9B:4B
Authority key identifier: A7:79:79:1A:53:70:C1:CD:57:E4:93:D9:49:F9:1E:FB:CD:A6:61:7E
Certificate issuer: /CN=a779791a5370c1cd57e493d949f91efbcda6617e
Certificate serial: 019A722668318C763744BA23C2C5C57BBBC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
Manifest number: 0BC2
Signing time: Tue 11 Nov 2025 09:01:50 +0000
Manifest this update: Tue 11 Nov 2025 09:01:50 +0000
Manifest next update: Wed 12 Nov 2025 09:01:50 +0000
Files and hashes: 1: p3l5GlNwwc1X5JPZSfke-82mYX4.crl (hash: wsnf4t0LS99gV8Z9ZOVXxkCmTdMxYgbGXC59VSrPdI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:68:31:8c:76:37:44:ba:23:c2:c5:c5:7b:bb:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a779791a5370c1cd57e493d949f91efbcda6617e
Validity
Not Before: Nov 11 09:01:50 2025 GMT
Not After : Nov 12 09:01:50 2025 GMT
Subject: CN=b042977aab28aeca0642e1bd8bc097256cf99b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d4:3f:87:7d:50:e2:3e:31:2d:78:cb:2c:4d:
ee:0d:bc:b9:2f:16:6b:ed:d3:30:3c:88:d9:8b:21:
5f:11:fe:0a:e9:52:86:67:70:93:28:7d:9e:f5:fe:
37:69:cb:b5:25:56:8e:bb:ed:35:19:4d:69:20:2e:
dc:ea:14:b4:41:dc:34:0b:4c:15:8e:16:78:bb:df:
21:7a:5e:09:3a:28:b5:5b:97:b9:d7:fc:c6:9b:b6:
05:c4:ad:8a:68:3f:18:e1:dd:89:b1:e0:72:9a:fd:
a8:8e:38:1a:f0:42:56:7f:32:72:e3:62:35:04:12:
8a:e6:35:05:16:7d:fd:0d:72:f7:87:c0:9c:e4:da:
fb:da:05:fd:e0:f6:8a:e8:c0:5d:41:6a:7f:8f:09:
f2:e2:a5:93:7d:a1:cb:8e:2c:1c:b9:11:d0:56:f4:
c0:46:20:d6:49:c8:ee:2f:57:a3:7f:51:df:30:18:
36:a2:55:ae:f2:06:b4:c1:41:81:6c:16:3a:cc:f7:
32:a2:6c:ca:62:f8:c7:b8:23:f4:4d:0e:4d:5a:90:
91:2f:57:92:d7:91:00:53:15:ab:de:da:73:8c:85:
dd:35:dd:ad:3b:07:57:f2:2b:f6:58:7f:88:ee:0c:
e3:6e:9e:27:b0:97:9b:84:b8:86:7d:57:23:58:a7:
2a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:42:97:7A:AB:28:AE:CA:06:42:E1:BD:8B:C0:97:25:6C:F9:9B:4B
X509v3 Authority Key Identifier:
keyid:A7:79:79:1A:53:70:C1:CD:57:E4:93:D9:49:F9:1E:FB:CD:A6:61:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:32:7d:75:75:39:1d:7b:e6:07:87:87:28:32:91:6b:aa:f4:
af:70:04:38:97:f4:7e:a5:82:b0:65:50:fb:17:46:f2:fc:c0:
eb:41:53:d4:2e:69:4e:39:4d:c9:da:4d:5f:88:cb:45:6e:8a:
24:01:dc:ad:15:25:ad:d6:2a:c5:d9:85:c2:a3:83:74:cb:9f:
5f:fb:6a:cb:1a:1e:b9:cb:b5:10:1f:45:02:9f:68:8b:75:59:
ca:a5:b7:a2:b5:2f:bd:17:89:3f:dd:5f:8e:fb:af:db:f6:22:
61:aa:ec:eb:60:65:5d:8f:56:2d:30:e8:67:d7:a4:44:fe:49:
69:bb:9e:24:22:c2:c8:c1:88:60:3d:77:4b:eb:3a:f3:f2:5f:
6f:6b:46:68:18:f5:66:90:3d:8c:fc:a5:c3:4b:e1:e1:9a:8c:
32:a9:c0:f2:e6:42:0d:a9:50:f8:4b:1b:78:e5:82:ca:7b:41:
d0:a5:04:5e:3e:a2:81:c2:ff:d5:67:4b:84:3c:18:a6:b9:dd:
ba:23:80:97:ca:fd:e8:32:9f:74:83:da:c8:9e:7c:39:e6:64:
4a:53:9a:f5:f0:cf:fe:b9:13:87:8d:d8:5a:ac:04:8a:b1:87:
7c:5c:dc:a4:05:9d:cc:6a:b8:30:15:d1:57:3b:09:fb:91:6a:
a0:45:67:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:38 2025 by rpki-client