Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
File: P1umH85V_19gjjr27FYLN67CNf8.mft (raw, json)
Hash identifier: Y4bNdwNGTfw/IJVfNzjEdUnb9vpxNvBul3gMdf7d9R8=
Subject key identifier: FF:03:8D:CB:F4:61:C6:14:C8:CD:AC:73:17:A3:E5:20:A2:7F:37:40
Authority key identifier: 3F:5B:A6:1F:CE:55:FF:5F:60:8E:3A:F6:EC:56:0B:37:AE:C2:35:FF
Certificate issuer: /CN=3f5ba61fce55ff5f608e3af6ec560b37aec235ff
Certificate serial: 0199228CBAE97485771A8714FB833EDDEDE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
Manifest number: 04C7
Signing time: Sun 07 Sep 2025 05:01:12 +0000
Manifest this update: Sun 07 Sep 2025 05:01:12 +0000
Manifest next update: Mon 08 Sep 2025 05:01:12 +0000
Files and hashes: 1: P1umH85V_19gjjr27FYLN67CNf8.crl (hash: hKlUtpNcThRjXgIEEpkFZwTdmSj77MyolmT8poPITUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:ba:e9:74:85:77:1a:87:14:fb:83:3e:dd:ed:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5ba61fce55ff5f608e3af6ec560b37aec235ff
Validity
Not Before: Sep 7 05:01:12 2025 GMT
Not After : Sep 8 05:01:12 2025 GMT
Subject: CN=ff038dcbf461c614c8cdac7317a3e520a27f3740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9c:bc:8e:05:23:dc:d4:78:c4:9a:87:be:86:
84:76:e1:8a:2a:b5:08:b0:ba:45:75:51:ed:94:1b:
1b:83:cf:a5:be:50:39:02:8b:b2:c2:a4:d2:c0:c4:
2b:cf:84:8c:64:cd:c6:1f:36:87:6f:1e:38:ec:61:
91:bc:a4:34:fb:73:74:7f:04:c5:2f:37:37:e1:4f:
cb:cd:77:5c:f8:e5:fd:23:b7:10:ed:00:8e:70:8e:
77:6a:de:7b:52:26:ae:57:8e:1e:fc:d0:57:2b:ed:
96:43:64:df:72:50:8f:b0:93:e2:51:06:e7:63:f6:
48:8f:ab:b6:9e:90:11:3b:47:64:7c:fc:11:cd:a3:
be:4a:c2:51:2e:e5:ea:b5:02:4c:f9:63:17:51:74:
18:ee:59:4f:70:d2:ef:5d:e6:da:9b:89:f4:c8:e9:
74:de:0a:7e:0a:94:f5:5f:b3:42:d7:3a:d0:a4:36:
0d:4c:a5:11:3d:11:20:c8:50:7a:3f:4d:88:c2:fa:
bf:db:85:37:68:f0:fb:3b:3d:b6:29:73:82:27:5d:
04:10:bc:e8:91:e0:2f:a6:65:61:a4:13:d2:94:46:
28:ec:96:89:ee:42:fb:61:b6:26:bc:d3:2a:04:63:
c3:82:a4:a6:c1:04:1c:cf:32:fc:7a:1a:d8:43:80:
67:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:03:8D:CB:F4:61:C6:14:C8:CD:AC:73:17:A3:E5:20:A2:7F:37:40
X509v3 Authority Key Identifier:
keyid:3F:5B:A6:1F:CE:55:FF:5F:60:8E:3A:F6:EC:56:0B:37:AE:C2:35:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:54:14:5c:b0:4f:79:ff:78:bc:6b:27:94:e7:30:af:82:a5:
38:93:04:74:01:0a:38:16:11:80:bc:f6:49:15:54:71:29:10:
a7:8f:f0:54:ff:d5:d1:24:1a:94:34:a8:2a:b5:6d:3c:fa:13:
15:07:67:b2:e5:42:81:4c:9c:b8:b6:22:bd:dc:f6:c2:8e:4a:
af:8a:ed:a0:aa:c6:f5:8c:a1:b1:c3:f0:2c:6f:f0:91:5f:83:
82:95:7c:05:c1:c1:08:f0:dd:6d:a7:a8:3e:86:4b:01:40:53:
48:61:0c:f7:32:25:ff:f6:0d:2e:5a:de:21:df:ca:fc:f5:5a:
96:a9:1b:f6:b4:64:d5:b7:26:a5:01:09:4b:7e:d0:1d:a5:a1:
43:ba:94:12:28:51:e9:30:c7:9e:c3:31:8c:c7:81:b9:6c:ca:
75:ff:69:ec:e0:45:1f:4e:26:58:7b:cb:19:56:a8:c9:05:f6:
10:ae:3a:72:27:73:07:6c:a8:c2:29:ad:21:e9:77:9e:50:f6:
22:ba:2b:6c:0f:53:6a:4b:43:29:e4:44:c2:0a:c3:89:19:dd:
ec:cd:d3:83:2d:5a:69:d5:c8:57:cf:c3:c0:91:a4:d9:fd:6f:
9a:d8:59:16:e4:40:f2:14:2c:d2:d8:58:42:72:29:c3:bb:28:
e8:63:a5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:54 2025 by rpki-client