Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
File: P98IRZEZlp1LnBf1qF6ScyxVF9E.mft (raw, json)
Hash identifier: zLcM8LF5Y1r7A3KvKMPc/XoZv/GTQa34BCiV8A2Y60Y=
Subject key identifier: 26:99:12:C1:8C:15:2E:95:1B:33:8B:BB:14:85:F0:29:53:AB:78:7C
Authority key identifier: 3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1
Certificate issuer: /CN=3fdf08459119969d4b9c17f5a85e92732c5517d1
Certificate serial: 01993492AF2A21AA960483F4B5925BFC0C36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
Manifest number: 1662
Signing time: Wed 10 Sep 2025 17:00:52 +0000
Manifest this update: Wed 10 Sep 2025 17:00:52 +0000
Manifest next update: Thu 11 Sep 2025 17:00:52 +0000
Files and hashes: 1: P98IRZEZlp1LnBf1qF6ScyxVF9E.crl (hash: NitnLo8XNTYmUY7DzkR+66avcLdztu0W0HaZUV9gXcg=)
2: qHPsdBiuTYXVZwMEuexg2CV5_Rc.roa (hash: okNXh+NCN1SYoCMfp10oC5B+Is3b/qKgY4b94Oq45BU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 17:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:92:af:2a:21:aa:96:04:83:f4:b5:92:5b:fc:0c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fdf08459119969d4b9c17f5a85e92732c5517d1
Validity
Not Before: Sep 10 17:00:52 2025 GMT
Not After : Sep 11 17:00:52 2025 GMT
Subject: CN=269912c18c152e951b338bbb1485f02953ab787c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:26:0e:64:23:9f:06:50:62:1f:4d:c2:8b:08:
cb:f2:0c:ef:19:ba:68:1d:d0:12:69:ca:89:6d:73:
36:0f:00:8c:04:8f:f2:15:05:93:28:1c:a3:56:bb:
a3:75:a4:3a:86:19:94:65:a1:60:d2:9b:ed:02:c7:
57:1e:3a:7c:6f:75:5f:fb:44:da:df:67:42:11:a1:
2c:40:9a:73:02:c2:5a:cb:0d:a7:15:be:0b:e4:60:
53:d4:9a:13:5d:64:5f:ab:06:e2:0f:84:52:6a:73:
8d:ff:ea:ba:4a:e6:04:17:c4:9b:ee:72:97:1e:b5:
bc:0c:09:44:f5:b7:31:1a:2b:35:7b:80:42:75:cb:
eb:ef:df:55:7f:a5:0e:12:be:81:0f:4b:10:d3:39:
9c:cb:0f:fc:04:5c:ec:7a:bc:d7:54:ea:11:59:c8:
73:4e:7e:b3:d9:a4:f0:e8:28:57:71:c0:4f:95:3b:
3c:0f:b4:95:1b:82:83:b9:99:c4:ba:9f:37:e0:eb:
1d:41:f1:ec:de:e8:6b:a9:da:02:14:e8:20:b2:0d:
1b:aa:a7:f9:22:1c:6c:25:46:5f:38:54:cf:8b:81:
e6:0e:4b:d3:d5:df:cd:4e:8e:1f:3a:f1:10:80:6b:
73:23:88:7c:1b:3e:30:96:4a:b4:7c:c3:04:f8:79:
c7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:99:12:C1:8C:15:2E:95:1B:33:8B:BB:14:85:F0:29:53:AB:78:7C
X509v3 Authority Key Identifier:
keyid:3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a6:22:68:28:8b:ab:f0:0d:8f:b7:73:17:c6:d0:00:52:00:
c9:f2:dc:4a:62:f9:c5:14:57:bf:38:89:fb:a5:49:87:5b:a0:
2a:af:98:22:c4:56:41:27:f6:e1:e7:6a:2b:d9:a7:8a:f3:33:
b1:73:a5:df:a1:78:f1:74:b5:39:fa:b2:4a:a4:11:58:21:9e:
44:fc:34:73:63:78:f2:4d:26:d3:00:a5:2f:1e:e0:4e:51:9f:
79:6a:5c:4b:35:bd:ba:c9:18:eb:46:8d:b0:8b:69:ad:2f:c0:
a1:cd:41:d4:92:3e:d5:9a:90:9d:c6:be:84:93:1f:de:68:26:
dc:3b:83:46:e0:8b:86:15:9b:48:94:e1:e7:89:df:39:c0:16:
96:8c:07:e6:79:d3:c5:36:08:3e:9c:10:d9:d4:a6:10:e2:9f:
2c:43:f1:c5:14:42:3c:f6:15:52:ba:3f:bd:17:50:08:4a:f6:
f0:32:35:4a:55:c3:1a:28:ca:bf:e5:45:b3:a6:0d:e5:98:af:
d2:98:44:ce:d0:63:50:21:56:22:21:b8:5a:40:60:8a:c5:de:
53:0c:10:d0:03:96:68:36:8a:07:bb:9e:14:f8:ae:f0:75:cf:
4a:4f:8e:4d:be:04:36:1c:48:98:07:8d:a2:e2:f1:3c:3b:a2:
d3:7c:00:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 00:51:26 2025 by rpki-client