Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
File: P1KMlfYICrE8sEl4PpJE0z2cSzI.mft (raw, json)
Hash identifier: SEiFaNPo/i1mXyyf5sWwh+jPlazEQ+HyrDdqO4PTGyA=
Subject key identifier: 00:24:74:B7:48:5E:07:0B:04:19:53:71:A9:B5:70:87:95:E4:FF:7C
Authority key identifier: 3F:52:8C:95:F6:08:0A:B1:3C:B0:49:78:3E:92:44:D3:3D:9C:4B:32
Certificate issuer: /CN=3f528c95f6080ab13cb049783e9244d33d9c4b32
Certificate serial: 019A711353DA86F104730D023F7185FD3FE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
Manifest number: 1631
Signing time: Tue 11 Nov 2025 04:01:23 +0000
Manifest this update: Tue 11 Nov 2025 04:01:23 +0000
Manifest next update: Wed 12 Nov 2025 04:01:23 +0000
Files and hashes: 1: P1KMlfYICrE8sEl4PpJE0z2cSzI.crl (hash: 6VTZExtiBcsc1RBCY7tCPdsuAA/ui6i5wqUn+XACafs=)
2: w5HnLtF4Me5n7OHUmGug2mAnL6U.roa (hash: AsJuclUazy6myQDlUyLOaCVJ9azdwtM7AhIo+Ahv/h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:53:da:86:f1:04:73:0d:02:3f:71:85:fd:3f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f528c95f6080ab13cb049783e9244d33d9c4b32
Validity
Not Before: Nov 11 04:01:23 2025 GMT
Not After : Nov 12 04:01:23 2025 GMT
Subject: CN=002474b7485e070b04195371a9b5708795e4ff7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:51:6d:03:e0:5c:66:d2:f6:21:cf:26:db:28:
47:29:71:c4:7b:eb:15:08:0f:41:6c:b1:2e:00:14:
13:43:a9:3b:d8:d7:06:fc:2b:cd:19:91:06:19:b4:
73:47:95:f1:e4:9c:55:e3:96:ef:70:44:c3:67:5d:
ef:5a:f6:16:1b:c7:f1:8d:5f:fb:06:4c:72:99:bf:
1b:01:6f:3d:34:1e:f3:74:e2:59:61:0c:fd:d6:40:
53:54:ce:7d:aa:09:85:57:9c:b8:04:8b:6b:00:13:
cb:92:fd:b7:d8:ad:d0:a3:7f:bb:da:84:c8:53:7f:
80:6e:95:a2:9b:4c:4a:23:64:ca:0e:2b:93:e1:ce:
9b:58:da:48:0e:e2:a2:95:56:7b:b6:51:cb:cc:78:
c9:a4:89:00:d4:a3:c4:12:94:64:63:2f:62:fe:74:
fe:bf:6c:6c:27:34:bd:82:15:18:9b:3c:13:29:26:
d5:bc:38:a3:12:ed:56:87:60:60:5d:f6:79:db:7f:
58:3e:10:62:19:8f:9b:a8:5f:4c:00:f4:19:52:f0:
82:34:c6:ad:76:91:11:3e:f7:8c:24:7c:75:6e:75:
d5:36:49:57:5a:6d:30:b9:9f:c7:a0:9c:81:4d:a6:
33:63:d7:ee:6c:a1:04:e8:7a:f2:78:b6:77:2c:10:
f7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:24:74:B7:48:5E:07:0B:04:19:53:71:A9:B5:70:87:95:E4:FF:7C
X509v3 Authority Key Identifier:
keyid:3F:52:8C:95:F6:08:0A:B1:3C:B0:49:78:3E:92:44:D3:3D:9C:4B:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c3:77:63:cd:1e:84:29:ed:aa:02:e3:30:92:be:cd:ba:0e:
88:fc:94:9e:f3:66:97:94:bb:99:53:51:c1:0f:18:33:47:b9:
e9:28:55:94:c2:38:d9:c7:47:c4:c4:fb:bd:96:96:a9:32:ca:
3a:45:91:39:45:54:08:93:4f:fe:36:27:14:e4:f7:9b:78:ad:
4b:d1:a4:3a:cc:78:89:c8:26:7f:26:7c:a9:45:0d:f7:35:a3:
b9:7c:18:00:5b:eb:f2:6e:5e:04:11:e0:41:05:2f:8b:2a:25:
ce:ac:70:a4:90:2f:7b:bb:23:e8:d4:0a:a4:e8:18:eb:0c:e5:
b1:28:6d:90:8f:96:c7:63:44:58:17:71:08:13:59:11:f5:ba:
9e:ff:45:19:9f:03:5f:d1:2f:f9:5c:86:11:5b:90:7b:9b:da:
f6:03:cc:d2:89:0f:cc:36:a8:67:51:47:c6:66:18:22:52:57:
3a:ff:f9:8a:91:e8:6f:5d:6d:e2:04:bf:f2:51:32:af:1a:81:
72:4d:d0:41:fc:5c:b9:6c:4b:0e:0d:be:0e:d9:d9:af:7a:88:
46:27:dd:50:0f:62:f6:02:11:17:3c:11:e0:c4:62:40:0d:20:
d4:41:ba:31:03:94:ca:67:4c:12:1b:81:09:7b:4d:09:8e:5d:
ef:48:a1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:49 2025 by rpki-client