Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
File: pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft (raw, json)
Hash identifier: aYOGHOJB/ufEXOojIbnlDQNpOZboc2LBFa1vmT/ONW8=
Subject key identifier: 36:60:BF:B8:95:66:C6:7D:9C:A2:9C:43:93:CC:22:24:B1:8F:79:28
Authority key identifier: A4:C9:F0:67:00:76:84:FA:CC:A9:BE:8C:E0:2D:A4:67:6C:09:97:2A
Certificate issuer: /CN=a4c9f067007684facca9be8ce02da4676c09972a
Certificate serial: 0199221EF1DC0D03F88A7B0597655D35BE56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
Manifest number: 06A8
Signing time: Sun 07 Sep 2025 03:01:17 +0000
Manifest this update: Sun 07 Sep 2025 03:01:17 +0000
Manifest next update: Mon 08 Sep 2025 03:01:17 +0000
Files and hashes: 1: pMnwZwB2hPrMqb6M4C2kZ2wJlyo.crl (hash: verpfI3xaRRN4/ScTbr9/LK8Ov5Ck9JWXFdOKBlmE7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:f1:dc:0d:03:f8:8a:7b:05:97:65:5d:35:be:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c9f067007684facca9be8ce02da4676c09972a
Validity
Not Before: Sep 7 03:01:17 2025 GMT
Not After : Sep 8 03:01:17 2025 GMT
Subject: CN=3660bfb89566c67d9ca29c4393cc2224b18f7928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7f:77:86:4f:27:c4:e8:51:7a:62:a5:60:80:
18:17:b1:2b:60:ce:1a:d2:64:77:ae:c7:a5:c6:8e:
11:bd:a3:9e:ae:73:b3:42:bb:35:e2:72:98:81:f0:
62:10:d8:17:a5:b5:7f:b0:0b:79:57:75:a8:c1:94:
19:b2:d6:af:37:4e:fa:bb:cb:58:77:9f:d1:71:29:
8f:08:0f:28:8f:11:a0:1d:af:96:ff:b9:90:89:80:
cc:bc:ad:32:46:e8:e3:1c:0d:21:6e:76:90:a8:ab:
d4:f0:d0:c5:25:22:1e:99:3b:c7:68:ba:2d:70:87:
b9:77:12:f3:e3:40:4e:f5:83:9d:c4:b2:65:aa:c3:
a0:ea:db:b7:3f:5d:32:e3:fb:56:0f:5c:2c:f0:5f:
c7:c1:88:b4:e3:c2:bf:9c:a0:dc:28:5a:5b:06:68:
7e:4b:59:82:2b:85:22:45:cd:6d:1f:0e:e2:8d:81:
3e:43:45:cf:4e:e5:f1:03:34:cd:4a:cf:4d:f7:09:
57:1a:5f:ce:cc:43:a6:20:5a:0d:4e:1e:a1:fc:c6:
96:16:af:89:58:99:dd:ef:88:9c:0f:74:ba:80:55:
dd:27:4a:91:6f:05:3e:14:f5:c2:98:8a:3f:46:c1:
d2:13:a0:17:bb:9b:4f:52:53:25:f8:02:df:2d:8f:
3d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:60:BF:B8:95:66:C6:7D:9C:A2:9C:43:93:CC:22:24:B1:8F:79:28
X509v3 Authority Key Identifier:
keyid:A4:C9:F0:67:00:76:84:FA:CC:A9:BE:8C:E0:2D:A4:67:6C:09:97:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:35:29:d7:b0:39:5a:95:30:96:7d:96:18:fa:60:1c:37:57:
b5:d7:06:05:3d:41:ac:3d:b1:dc:d5:b7:44:40:c0:1b:b9:9b:
ed:54:a2:f6:8b:a2:af:d1:d4:74:ab:38:0f:55:6f:79:77:9c:
30:af:b2:d5:77:55:9b:0e:63:61:19:28:71:5b:1f:24:23:86:
04:b3:a3:d5:2b:ce:eb:6d:59:a9:28:84:23:cf:95:7d:55:f6:
c1:d0:96:07:99:ec:eb:96:2c:a9:59:d5:3f:34:85:58:c8:3f:
90:18:a4:52:52:08:9d:49:f2:bd:87:c2:e9:dd:33:65:11:d8:
3d:3d:87:48:a9:c5:27:e5:8b:c2:50:82:30:bc:af:39:37:9b:
d0:cc:18:56:91:6f:0a:bf:d9:f2:b3:f8:c3:5e:d5:0e:94:fc:
fc:a4:9b:9e:00:49:ff:8e:57:10:b6:12:18:7b:86:72:76:da:
f6:be:d0:e2:e6:39:a3:77:bb:a1:33:0c:da:f7:fa:f0:65:02:
96:74:23:ea:56:44:79:59:96:7f:b2:7b:0f:6c:2d:5e:b1:7b:
0b:ba:43:71:7f:f6:f6:53:e5:d1:0d:e2:8f:b7:f6:73:6f:83:
18:bf:fe:22:96:1e:fe:d9:07:45:9d:b4:f8:a4:9d:03:06:32:
f0:e5:91:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:15 2025 by rpki-client