Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
File: P1jM0LF5IrWNXoss8uV5zmmrOGM.mft (raw, json)
Hash identifier: BqH8gfBsTBaegF6p+Sz1VUUosrS7EnjqSlKZljrgLlM=
Subject key identifier: 6A:F7:BC:8B:83:F6:A6:12:AC:89:3D:CB:93:68:6A:6E:DC:BC:8D:05
Authority key identifier: 3F:58:CC:D0:B1:79:22:B5:8D:5E:8B:2C:F2:E5:79:CE:69:AB:38:63
Certificate issuer: /CN=3f58ccd0b17922b58d5e8b2cf2e579ce69ab3863
Certificate serial: 0199233145C6735A5B6CA23C9DF20562DFA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
Manifest number: B0
Signing time: Sun 07 Sep 2025 08:00:55 +0000
Manifest this update: Sun 07 Sep 2025 08:00:55 +0000
Manifest next update: Mon 08 Sep 2025 08:00:55 +0000
Files and hashes: 1: P1jM0LF5IrWNXoss8uV5zmmrOGM.crl (hash: PR4Mi0rQptOoZ6ZH+FkTzRUXK8l9jlWwLrcOCldQ5WE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:45:c6:73:5a:5b:6c:a2:3c:9d:f2:05:62:df:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f58ccd0b17922b58d5e8b2cf2e579ce69ab3863
Validity
Not Before: Sep 7 08:00:55 2025 GMT
Not After : Sep 8 08:00:55 2025 GMT
Subject: CN=6af7bc8b83f6a612ac893dcb93686a6edcbc8d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c9:df:80:f1:59:31:50:d3:33:2b:3f:43:07:
47:a2:77:4f:03:95:e9:31:27:37:ee:64:a0:4d:54:
7e:f3:37:5c:73:e9:34:9c:e6:ec:4a:77:88:cb:e8:
ea:a9:e6:53:a5:fb:f3:10:dd:f5:83:d0:9b:a7:68:
5e:22:b2:30:94:8d:f0:cf:ab:98:93:a6:c7:f0:91:
d6:33:89:ad:dd:49:04:e4:15:e5:5d:d9:c5:38:94:
02:b2:14:ae:1f:34:a4:b9:8e:56:2e:ca:fc:15:60:
47:ff:32:cc:0a:ff:82:62:10:b4:91:c3:de:01:f3:
e5:d3:84:cf:81:7d:1a:ac:57:31:a4:88:87:f1:a0:
54:8c:ab:3d:94:c0:fb:cb:b8:bf:9d:66:a4:da:c5:
29:1b:ed:08:7b:84:63:f9:b5:bd:8c:f2:3f:be:1c:
40:eb:44:c4:b1:06:64:33:bd:b4:56:40:0d:83:f4:
b1:cf:87:47:a2:74:8d:23:49:10:ec:50:c3:b3:c7:
c3:5e:af:b1:c0:54:6a:19:9c:72:76:43:cc:eb:94:
23:7e:aa:8a:bc:9d:21:35:91:21:15:0f:1b:b0:f8:
bc:b4:d6:bc:d0:ca:21:ce:f8:6e:96:55:1c:59:23:
fa:6a:4d:79:5f:16:18:55:7d:fd:87:e0:e2:24:f1:
72:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F7:BC:8B:83:F6:A6:12:AC:89:3D:CB:93:68:6A:6E:DC:BC:8D:05
X509v3 Authority Key Identifier:
keyid:3F:58:CC:D0:B1:79:22:B5:8D:5E:8B:2C:F2:E5:79:CE:69:AB:38:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:31:d6:67:b1:c7:83:26:d3:c6:a8:32:09:fe:aa:3a:91:09:
6b:bf:31:a7:d7:0d:4b:89:ec:ce:99:20:5e:91:44:6a:19:a2:
5a:c6:f8:1b:36:95:43:d6:06:63:28:81:1f:09:ae:34:23:b1:
b4:10:2d:3f:32:7b:35:56:92:97:4b:87:9e:68:a8:21:78:7f:
21:43:b6:97:df:ab:cb:59:f3:ae:89:a9:9a:72:29:16:3d:0a:
db:99:5b:6b:d7:39:79:b0:79:f4:7b:c5:73:41:ac:ce:a6:4a:
a6:6b:72:8d:c8:43:d2:46:94:89:73:c6:d8:3f:03:8c:6c:77:
b0:d0:56:a9:62:6d:47:43:45:cf:f6:0f:c1:c3:24:d4:34:ff:
08:47:db:a1:1f:33:0f:f9:3c:2c:46:be:09:1e:ae:df:8b:dd:
5f:81:e0:38:4e:05:9a:ec:85:ae:6a:61:79:cf:08:02:56:fa:
70:b3:94:d5:b1:0e:e8:a8:17:8d:8e:4f:3e:cc:b1:7c:08:59:
ea:dc:bf:2a:94:a9:e5:e4:30:e2:17:81:1b:ca:ff:74:78:4d:
26:f1:23:73:c3:cf:32:d5:0e:6b:59:97:83:fa:d2:e5:89:9b:
55:4c:f3:60:45:df:07:b6:97:96:4d:cc:5b:5c:78:fc:da:0c:
2c:10:c0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:45:22 2025 by rpki-client