Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
File: P_xs3-GW1bOdLqYOkMldtwRF2bk.mft (raw, json)
Hash identifier: J28WsGafHIydLoXrgFYUlgiTF9fMlUWPFElJ/PaEVQY=
Subject key identifier: 7C:FA:5D:EB:84:D8:DF:5F:62:36:BF:D7:FD:F3:9F:D0:01:91:5E:1C
Authority key identifier: 3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
Certificate issuer: /CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Certificate serial: 019923D5EEC73874C1A5A43E6A8CB0A041DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
Manifest number: 0186
Signing time: Sun 07 Sep 2025 11:00:46 +0000
Manifest this update: Sun 07 Sep 2025 11:00:46 +0000
Manifest next update: Mon 08 Sep 2025 11:00:46 +0000
Files and hashes: 1: P_xs3-GW1bOdLqYOkMldtwRF2bk.crl (hash: VlDZ5S/sIj9a2lac/6lx2brzGzYuTwvN14chEL7F1jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:ee:c7:38:74:c1:a5:a4:3e:6a:8c:b0:a0:41:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Validity
Not Before: Sep 7 11:00:46 2025 GMT
Not After : Sep 8 11:00:46 2025 GMT
Subject: CN=7cfa5deb84d8df5f6236bfd7fdf39fd001915e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:39:4d:a2:01:e1:16:e0:b6:ae:26:30:1b:87:
33:ff:2f:1a:1b:64:56:b0:8e:3c:59:86:b5:a3:11:
50:1c:16:bb:ea:f2:eb:d0:8d:d6:ff:49:eb:b7:74:
1b:e3:c5:79:c3:77:ae:24:98:93:44:6e:a8:44:08:
67:3b:65:00:e4:8e:e5:8a:2a:93:b1:f7:8e:c5:35:
ec:2b:78:2d:52:9d:39:4a:d4:fb:a5:1c:c9:2a:30:
6b:aa:eb:e7:fe:48:97:f3:b2:5a:c4:3c:bf:fe:4d:
06:5a:92:8f:e4:e2:6b:26:c9:b0:fd:7c:c0:8c:32:
ed:86:12:48:65:f9:69:ec:cc:92:4d:d3:ef:8b:9b:
da:dd:5f:d5:75:4b:c5:fc:98:a9:25:63:63:ce:d0:
fb:c1:81:d4:76:a7:b0:7b:fc:68:2b:88:6f:7e:ca:
73:c5:e0:a6:eb:b9:4a:53:8c:8a:78:a5:0f:10:16:
56:31:c1:ae:c8:a9:d2:b5:50:40:bd:fd:1f:3b:42:
08:76:7d:ae:17:12:46:5a:19:5a:a4:40:12:17:f5:
4a:fd:a4:8c:20:ed:89:27:40:59:79:37:25:7b:58:
cf:85:32:9a:c1:ce:a0:6b:b2:68:ef:62:e6:ea:24:
cb:98:a9:4d:35:63:bb:1f:5a:c9:02:39:be:16:61:
33:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FA:5D:EB:84:D8:DF:5F:62:36:BF:D7:FD:F3:9F:D0:01:91:5E:1C
X509v3 Authority Key Identifier:
keyid:3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:4b:6d:7e:83:0a:86:fc:71:a9:c9:ad:d9:46:05:89:db:64:
a6:c1:63:dc:a7:45:f7:ad:2f:3f:07:fe:47:4e:1b:68:80:a4:
16:ab:e5:b2:ee:ce:33:d4:11:ce:e4:cb:ae:13:8e:72:94:82:
0f:12:da:27:f8:7b:f2:a2:43:28:15:a9:bf:6f:81:f9:f1:fe:
9f:16:29:cd:bf:3e:49:a1:9b:af:ec:de:57:24:01:5d:68:14:
f1:f9:81:c2:b2:24:4a:15:0a:10:e4:6e:1c:17:42:15:3f:01:
f9:f7:16:7a:73:ef:da:f6:25:52:14:d2:32:8d:4f:74:cc:17:
3b:0e:c0:8b:c3:cc:a5:cd:f1:b4:3b:d7:64:cd:ed:81:46:48:
d7:b2:e9:ed:16:d5:c6:43:62:32:72:e9:fc:43:3a:9c:81:a6:
ce:c9:08:86:18:e5:b6:60:32:b7:05:39:18:d5:54:03:b1:da:
64:7b:5a:9c:24:14:27:4a:aa:ed:7c:a7:b4:1b:cf:c5:41:ab:
76:17:bb:84:01:4b:94:af:9f:48:c9:8c:65:af:d5:42:14:18:
2c:c0:d1:da:51:8f:dc:c9:88:fa:2d:3b:12:fa:0c:2f:90:cb:
d3:53:9d:0f:27:ae:40:1e:e6:66:bb:fd:a4:a6:93:dc:8a:b6:
49:f9:c7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:22 2025 by rpki-client