Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
File: P1umH85V_19gjjr27FYLN67CNf8.mft (raw, json)
Hash identifier: voMtfuI1qPLwAE//wr1owKgEKUQTOZu0rsJACKZJaYo=
Subject key identifier: 00:63:AF:41:D1:CE:21:CE:30:BA:AE:27:F3:17:20:F9:73:B6:D2:C3
Authority key identifier: 3F:5B:A6:1F:CE:55:FF:5F:60:8E:3A:F6:EC:56:0B:37:AE:C2:35:FF
Certificate issuer: /CN=3f5ba61fce55ff5f608e3af6ec560b37aec235ff
Certificate serial: 019A729361D71E1BB8CE9B8AE6757FEFDEB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
Manifest number: 0575
Signing time: Tue 11 Nov 2025 11:00:52 +0000
Manifest this update: Tue 11 Nov 2025 11:00:52 +0000
Manifest next update: Wed 12 Nov 2025 11:00:52 +0000
Files and hashes: 1: P1umH85V_19gjjr27FYLN67CNf8.crl (hash: G0NWNEmpXy0oS4ESDNH59qRbz2nfaKc2R5ECShkfhs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:61:d7:1e:1b:b8:ce:9b:8a:e6:75:7f:ef:de:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5ba61fce55ff5f608e3af6ec560b37aec235ff
Validity
Not Before: Nov 11 11:00:52 2025 GMT
Not After : Nov 12 11:00:52 2025 GMT
Subject: CN=0063af41d1ce21ce30baae27f31720f973b6d2c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f1:49:34:3e:c5:54:78:9f:35:2a:5e:01:f5:
9c:84:fd:e3:ab:0c:43:ad:de:e3:48:9a:30:1c:64:
bd:56:12:f5:17:47:38:76:42:55:b5:a6:91:53:c2:
5e:f2:0e:51:a5:4e:b7:ee:b8:48:0c:5a:79:af:d3:
8f:c7:dc:56:5f:55:01:6d:7e:eb:24:0a:d0:c9:f9:
5c:de:84:a5:09:e2:56:87:21:e5:3a:02:d3:a7:93:
d0:6d:da:8a:1b:e4:10:ed:80:59:16:81:ce:28:93:
a2:68:b5:2d:fe:4f:83:35:49:2c:9e:68:8a:92:61:
9c:2e:42:0d:0a:b3:d2:cf:95:33:f2:59:c2:df:90:
19:a6:bc:af:1d:47:ba:ff:ff:88:67:36:d5:49:00:
88:6a:af:8f:cf:20:a7:68:d1:b1:c3:bf:24:d3:61:
f8:11:3f:62:b7:5a:20:ed:c6:37:34:d6:06:5b:c3:
f6:f5:c6:9a:58:2a:5e:bd:14:6f:4d:dd:b0:95:6b:
51:df:9b:1a:1e:a0:67:be:99:7d:07:d6:c3:9a:80:
7a:27:e9:69:28:78:a0:78:98:5b:06:88:a5:7a:57:
86:f4:f9:f8:74:16:a5:a5:1e:30:ca:db:86:63:44:
98:ec:18:3b:26:3b:6f:64:f4:f7:a8:ae:bc:75:ac:
79:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:63:AF:41:D1:CE:21:CE:30:BA:AE:27:F3:17:20:F9:73:B6:D2:C3
X509v3 Authority Key Identifier:
keyid:3F:5B:A6:1F:CE:55:FF:5F:60:8E:3A:F6:EC:56:0B:37:AE:C2:35:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:5e:4e:04:2c:3e:59:96:86:f5:95:b5:74:5a:5d:a3:58:62:
3f:8b:c1:52:89:14:19:90:9d:2d:66:67:18:7d:7f:54:3b:d8:
fd:9b:9a:db:55:15:04:17:12:fa:14:a3:55:00:4e:c0:0c:84:
f4:b4:9b:94:ed:4a:87:63:15:e2:02:91:8a:1f:f7:8c:01:d9:
d3:2b:5f:5d:09:39:0e:4d:d9:da:3a:87:ca:9d:d9:b1:01:a9:
c2:d1:67:ce:d7:4c:b1:0e:17:83:98:81:f3:c7:80:98:48:c6:
b6:cb:a3:34:84:8f:c4:a8:2a:15:59:13:1c:5d:c6:52:d8:04:
9c:91:ba:27:71:30:56:1b:25:2e:04:78:aa:f3:dd:af:52:bb:
ae:c2:94:7f:35:c8:e9:a9:b9:83:7a:79:d8:1e:c7:14:a7:ea:
d2:4e:f5:92:ba:d8:00:05:26:c1:30:a6:a2:46:97:25:b2:8e:
f4:0f:b5:72:26:33:21:19:98:17:98:e0:72:c4:a0:2b:53:a2:
5c:bf:f4:67:3e:36:ab:a2:7c:28:93:11:49:f1:48:7b:25:41:
58:fe:3b:d7:ca:58:91:40:a5:69:33:f3:05:a9:c9:c7:79:31:
9c:96:fd:04:ef:16:29:ef:b9:89:1b:75:2c:d7:35:f8:3a:09:
59:da:93:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:17 2025 by rpki-client