Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
File: P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft (raw, json)
Hash identifier: wyG11TOGbeS2wtplGWo/rZRsOTa7HeDGV6Ac1f2QM2I=
Subject key identifier: 93:4E:73:15:03:24:05:C8:A0:75:73:BC:7E:F6:02:90:48:33:B3:AB
Authority key identifier: 3F:F7:78:93:46:A9:F9:29:15:F1:F7:5B:10:AF:94:F9:7B:6E:24:FA
Certificate issuer: /CN=3ff7789346a9f92915f1f75b10af94f97b6e24fa
Certificate serial: 0199239F3B418137676273D843AE0107D731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
Manifest number: 15F6
Signing time: Sun 07 Sep 2025 10:01:01 +0000
Manifest this update: Sun 07 Sep 2025 10:01:01 +0000
Manifest next update: Mon 08 Sep 2025 10:01:01 +0000
Files and hashes: 1: P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl (hash: RnVoN7ktQj/xbbwOzZmHasH1HSMOBU0Tb/nBDQ62Ri4=)
2: dfyn6nhNR8JQy6SGJlUvEZfvkyM.roa (hash: k281u51pv38AcL8abAJjlmfLN2hampMY0v32cElp30w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:3b:41:81:37:67:62:73:d8:43:ae:01:07:d7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ff7789346a9f92915f1f75b10af94f97b6e24fa
Validity
Not Before: Sep 7 10:01:01 2025 GMT
Not After : Sep 8 10:01:01 2025 GMT
Subject: CN=934e7315032405c8a07573bc7ef602904833b3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:87:a5:9e:81:0f:33:1c:f2:3e:fe:c1:be:fd:
70:3a:94:f1:9d:79:45:fa:c1:45:15:0e:93:12:18:
a2:b7:3a:66:7d:46:0c:bc:3e:db:f2:71:1c:a6:7c:
c3:60:74:35:fe:56:cb:12:1c:5f:03:60:55:f6:65:
56:21:7d:e2:20:2a:de:9d:c9:79:ba:78:99:c8:35:
c3:d0:5c:ae:8a:0d:a0:3b:c1:3f:be:e7:77:50:b2:
92:4d:35:1f:a5:84:fc:c3:6d:c4:81:9d:ca:8c:72:
8e:35:60:84:e2:df:26:0f:c8:2a:46:1d:2f:8d:8b:
f1:02:20:4e:3e:e9:b3:59:12:3a:06:62:b0:02:3c:
ec:84:8c:bb:7a:72:03:c5:7b:a3:6b:d6:ed:b6:df:
f5:03:86:59:03:e9:0a:48:ed:4d:4c:52:d8:58:ea:
8e:70:86:ff:e3:a5:cb:97:a9:a2:ee:21:89:f5:be:
93:27:36:c8:34:a9:2a:a9:12:7a:cb:27:67:b1:3b:
30:85:89:fe:b2:4c:70:a9:52:2d:9c:03:70:9e:6f:
bf:41:53:35:1e:f2:68:4f:39:30:b3:ef:31:3e:b9:
19:b7:47:0f:91:7f:35:35:eb:16:93:14:5c:82:8a:
39:f8:11:f3:55:39:d1:23:8a:cd:a2:fe:2a:a5:58:
9a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4E:73:15:03:24:05:C8:A0:75:73:BC:7E:F6:02:90:48:33:B3:AB
X509v3 Authority Key Identifier:
keyid:3F:F7:78:93:46:A9:F9:29:15:F1:F7:5B:10:AF:94:F9:7B:6E:24:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:35:0e:ff:14:79:e8:c3:1b:08:9e:1e:f8:61:0c:33:93:54:
60:fc:3f:35:04:2b:be:45:1d:fd:03:95:fa:3d:ad:bd:6e:ec:
88:3c:2f:08:4c:08:4c:83:39:0e:0e:96:c3:31:45:ba:71:d8:
c4:f0:19:c1:99:b6:52:f2:81:5c:0d:cb:d8:dd:22:a8:6e:4c:
7e:ad:2d:5f:35:5e:79:90:52:a7:9d:a3:fb:11:81:5e:64:d9:
b5:5d:8d:fd:84:a1:ce:11:d9:74:c0:37:96:ee:e5:95:3b:9c:
e5:77:97:9c:2d:57:dc:a6:53:a8:b1:6e:e5:3c:5a:ab:6a:5d:
d1:7a:3a:8f:b8:18:42:90:8f:8e:19:b8:d6:45:51:94:2d:fd:
0a:f2:e1:87:7a:6f:5c:3c:70:88:d5:f7:19:7f:ce:7a:6b:03:
b7:72:77:c4:14:3d:ec:67:04:84:ef:5e:7c:da:ec:b8:f9:af:
ca:b9:5e:af:c2:c9:bc:73:94:94:0d:ff:42:b0:f5:1f:f0:13:
74:9d:c1:96:3b:54:a6:b4:30:13:aa:e0:76:f6:60:3b:cb:4a:
5e:85:d7:13:09:b8:05:37:0d:59:23:8f:39:22:f2:82:dc:56:
9e:d0:a4:50:59:48:4d:07:4d:d8:dc:2b:8f:0e:f2:ca:10:0a:
2b:d9:1b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:10:59 2025 by rpki-client