
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
File: p3l5GlNwwc1X5JPZSfke-82mYX4.mft (raw, json)
Hash identifier: sEKVuNavRJrxkEReT7vfJHyE01gMzHUEU/yeo4LJLfI=
Subject key identifier: 7C:51:DF:EB:4C:5B:08:BB:0C:A5:E9:84:71:97:B3:3F:1E:31:A4:E5
Authority key identifier: A7:79:79:1A:53:70:C1:CD:57:E4:93:D9:49:F9:1E:FB:CD:A6:61:7E
Certificate issuer: /CN=a779791a5370c1cd57e493d949f91efbcda6617e
Certificate serial: 0199221EFD77DA836F3B009D2F86BC4B45AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
Manifest number: 0B14
Signing time: Sun 07 Sep 2025 03:01:20 +0000
Manifest this update: Sun 07 Sep 2025 03:01:20 +0000
Manifest next update: Mon 08 Sep 2025 03:01:20 +0000
Files and hashes: 1: p3l5GlNwwc1X5JPZSfke-82mYX4.crl (hash: yuymppDUMksQkfctflwkV30q+RL7vSMOM1Dp/IIsfl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:fd:77:da:83:6f:3b:00:9d:2f:86:bc:4b:45:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a779791a5370c1cd57e493d949f91efbcda6617e
Validity
Not Before: Sep 7 03:01:20 2025 GMT
Not After : Sep 8 03:01:20 2025 GMT
Subject: CN=7c51dfeb4c5b08bb0ca5e9847197b33f1e31a4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:37:58:50:ee:ae:af:a4:a6:0b:68:5f:8f:4f:
6d:00:7e:ec:53:bc:84:c8:b9:c3:a7:a7:bf:df:63:
0f:08:ec:49:b3:3e:64:87:2c:19:08:36:61:f0:2b:
56:a5:a6:63:7a:fb:06:cc:ec:17:4e:2a:71:b9:04:
bd:f7:03:69:a1:1c:51:05:d6:b5:30:30:7d:1d:00:
d0:46:7c:e7:86:77:5d:aa:12:5c:6b:05:9d:cd:7f:
59:22:16:55:1b:c9:63:3c:bb:a7:f2:a9:9e:c6:4b:
76:6e:c2:4e:05:7f:4b:49:59:04:40:ba:e1:3c:72:
ad:5c:b9:ba:72:23:5c:d3:fb:33:02:92:eb:d1:6d:
f7:5d:d4:81:37:08:eb:9d:7a:c6:94:aa:27:66:a0:
1b:6d:f4:70:58:25:a4:c1:a9:96:cb:ed:74:24:ef:
b9:8c:91:82:db:50:3f:f0:e4:f1:b9:f6:a5:9b:1d:
ce:e5:ed:2c:42:83:98:ab:99:17:c0:0a:c3:82:f6:
f7:64:cc:27:02:81:01:1a:73:dc:1e:09:dc:37:52:
89:d6:f0:48:d0:8c:38:59:df:e2:27:18:77:09:04:
54:01:ee:69:13:3a:4f:a1:11:ab:5e:c2:91:35:d4:
73:b2:d9:18:27:0e:89:88:1c:28:f7:32:26:09:53:
df:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:51:DF:EB:4C:5B:08:BB:0C:A5:E9:84:71:97:B3:3F:1E:31:A4:E5
X509v3 Authority Key Identifier:
keyid:A7:79:79:1A:53:70:C1:CD:57:E4:93:D9:49:F9:1E:FB:CD:A6:61:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c8:53:ae:33:34:33:93:8a:dd:db:ab:b0:a9:49:c8:cf:6f:
3b:84:b2:42:c9:78:82:f7:81:e0:d8:fe:2f:db:4b:06:b9:7c:
76:c8:9a:b3:da:73:c5:65:72:a0:9c:94:c1:44:02:4d:88:15:
2f:0b:71:a8:c1:2c:42:c7:f5:7e:e2:74:e7:9e:24:f2:db:14:
c8:dd:01:17:1d:be:be:e5:13:25:97:94:b5:c0:9c:b3:01:a9:
35:f9:1f:65:c5:41:af:f2:96:39:53:57:db:25:9a:9e:7d:da:
94:51:95:c6:12:86:05:db:97:53:a0:6d:a0:98:be:13:91:1a:
9a:b8:2d:c4:f1:08:d4:01:8e:5c:fb:b8:4a:e0:a0:27:d2:32:
b5:e2:0d:b3:d7:1a:25:c8:45:15:8e:5b:bb:8c:34:dd:32:17:
b4:58:a2:19:2f:5a:a3:23:85:58:e4:43:6b:91:1b:5f:3d:47:
c5:1f:77:3f:8a:98:5f:be:70:3a:39:0b:63:b5:9c:b8:30:39:
1c:a1:34:ed:c9:4d:0b:20:e0:a5:07:d7:bf:fc:c8:41:51:fc:
47:f5:0a:7a:05:d7:fd:73:1f:14:61:c1:e8:26:24:d6:e7:e8:
55:4d:59:2d:93:39:c0:fc:5f:aa:cd:1e:43:74:73:fb:42:37:
bf:aa:b7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:45:09 2025 by rpki-client