Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
File: P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft (raw, json)
Hash identifier: T+wHKxwFgyxlrvZBzl83ObKsopFTL3qtRq0/XUQ4UBE=
Subject key identifier: 56:A8:A1:02:06:0B:FC:92:FF:08:50:85:54:9E:DF:88:0B:29:23:4D
Authority key identifier: 3F:F5:8D:FF:BA:4D:F6:AC:34:BD:9F:48:11:9A:E1:1C:FE:F8:A7:6C
Certificate issuer: /CN=3ff58dffba4df6ac34bd9f48119ae11cfef8a76c
Certificate serial: 0198511ECC90A5CD95C582440B3AABAF491D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
Manifest number: 1396
Signing time: Mon 28 Jul 2025 13:00:29 +0000
Manifest this update: Mon 28 Jul 2025 13:00:29 +0000
Manifest next update: Tue 29 Jul 2025 13:00:29 +0000
Files and hashes: 1: P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl (hash: vvwO6BCfbTv6dr75iOvVbDG7olwaHLOT3qnmfPBtpt8=)
2: Q0NTavEWJ5qlzhM0Gok-q7D_kpE.roa (hash: 38GOGOOApNFSuUu3tueeEDSFag3IGEHi/vwKyUqguXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:1e:cc:90:a5:cd:95:c5:82:44:0b:3a:ab:af:49:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ff58dffba4df6ac34bd9f48119ae11cfef8a76c
Validity
Not Before: Jul 28 13:00:29 2025 GMT
Not After : Jul 29 13:00:29 2025 GMT
Subject: CN=56a8a102060bfc92ff085085549edf880b29234d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2b:34:e5:8a:2a:8a:e6:d2:11:a8:30:e4:f7:
af:46:8a:f9:46:97:e7:32:5d:92:f1:6d:5a:a4:59:
ec:03:53:52:44:0d:3c:5a:16:8a:7c:df:fe:b0:af:
6a:f9:b3:02:19:e3:7f:3e:03:b5:a9:a2:41:4b:93:
cd:77:11:a0:15:3b:52:52:55:c2:24:f8:84:3c:72:
00:ff:6a:87:52:c7:74:35:bb:9f:be:2e:47:f3:48:
99:64:58:b1:e0:f9:f6:62:c5:a2:91:19:eb:39:b5:
c2:5b:00:c3:22:91:03:6d:0d:e3:1a:d9:e1:8f:a3:
46:f8:75:3d:b3:d6:c7:21:6f:96:07:f3:a1:7b:9e:
c2:0a:0d:8e:30:8a:03:f9:d9:e2:35:b8:93:2f:68:
71:d4:14:ad:63:f0:7d:43:87:21:33:80:bf:fd:27:
42:1c:97:72:ea:5c:73:22:b1:5f:77:e5:df:44:27:
fe:b7:77:7e:3d:2b:88:9f:8c:6d:d9:17:f7:a2:b0:
58:52:a0:0d:b2:b3:c0:00:e2:25:58:24:25:bc:c0:
a3:53:78:9f:7c:bb:03:97:11:cc:30:35:8a:47:a7:
1f:57:f4:0d:ec:60:02:19:4f:c3:94:84:07:5e:5d:
03:44:ea:33:33:07:f4:d0:e3:72:34:e3:dd:4c:97:
8f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A8:A1:02:06:0B:FC:92:FF:08:50:85:54:9E:DF:88:0B:29:23:4D
X509v3 Authority Key Identifier:
keyid:3F:F5:8D:FF:BA:4D:F6:AC:34:BD:9F:48:11:9A:E1:1C:FE:F8:A7:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:e9:50:c4:86:fa:c4:d7:0f:9b:84:54:5b:52:86:74:ae:36:
63:14:21:47:bf:c9:9a:36:f4:55:3b:32:55:78:21:84:5f:04:
ca:11:e1:09:56:7d:4e:69:5b:6b:89:2f:a5:7f:8a:d0:d8:d5:
d8:9b:0b:28:aa:ef:a6:8e:35:93:c6:4b:07:55:f1:60:62:6c:
e9:e8:a3:d7:ea:c4:df:09:e2:e1:e1:b1:97:d6:b3:dd:a3:e3:
eb:d5:d0:40:1d:b4:c7:23:29:b7:30:8a:29:c7:52:a5:94:d4:
22:1f:13:03:8a:b2:d2:15:e6:37:a7:2a:cc:f8:43:e4:c3:d0:
77:2f:66:23:0d:b7:71:8d:3a:9f:95:c6:48:e3:df:72:2c:47:
ce:56:b1:47:f7:2c:21:50:93:ba:6d:f0:12:38:b2:e9:37:e3:
1c:74:b7:db:d1:2d:d2:d8:66:74:c1:2b:a8:32:41:8c:f0:19:
89:ed:66:66:e7:eb:e2:48:bc:2c:6a:85:5c:49:6c:65:4d:d0:
46:01:83:58:a9:a8:95:e4:96:97:8c:fa:2a:e2:46:c9:ac:cb:
4b:9c:43:4d:4c:dc:fe:67:c4:ce:5d:bc:ed:51:d2:c6:4e:ba:
d3:f4:39:76:10:43:04:8e:4a:cf:02:7f:0e:b3:4b:d1:f2:45:
61:21:15:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 20:44:18 2025 by rpki-client