Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
File: P98IRZEZlp1LnBf1qF6ScyxVF9E.mft (raw, json)
Hash identifier: cLIWJ4s6/iB1r7NKzJGgh12/usw7nrULhOuvWRdM8bM=
Subject key identifier: 39:4B:3B:C7:7A:23:08:B0:90:FD:E8:E8:72:CF:1A:16:A7:C7:58:32
Authority key identifier: 3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1
Certificate issuer: /CN=3fdf08459119969d4b9c17f5a85e92732c5517d1
Certificate serial: 019A202D3669BD3BC2ACEF8C066F6E8C42E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
Manifest number: 16DC
Signing time: Sun 26 Oct 2025 11:00:25 +0000
Manifest this update: Sun 26 Oct 2025 11:00:25 +0000
Manifest next update: Mon 27 Oct 2025 11:00:25 +0000
Files and hashes: 1: P98IRZEZlp1LnBf1qF6ScyxVF9E.crl (hash: b8hZo5of9dM+lx/kdkoQ0PUyoLXvg3pw+On/Gj18+tA=)
2: qHPsdBiuTYXVZwMEuexg2CV5_Rc.roa (hash: okNXh+NCN1SYoCMfp10oC5B+Is3b/qKgY4b94Oq45BU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 05:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:2d:36:69:bd:3b:c2:ac:ef:8c:06:6f:6e:8c:42:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fdf08459119969d4b9c17f5a85e92732c5517d1
Validity
Not Before: Oct 26 11:00:25 2025 GMT
Not After : Oct 27 11:00:25 2025 GMT
Subject: CN=394b3bc77a2308b090fde8e872cf1a16a7c75832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b5:87:cd:f0:c6:02:0f:b5:7d:62:1c:10:c5:
d6:8d:b0:ab:93:f1:9b:df:fc:77:b2:00:f7:f9:4b:
9c:36:29:2c:1a:fc:a9:88:6e:62:62:b4:df:7c:ae:
3b:f2:77:81:12:c8:2e:1f:9d:cf:59:56:cf:e9:c7:
37:60:20:98:65:34:34:cf:e3:0e:25:e3:d9:7e:05:
d8:d3:83:d9:1e:2b:77:f8:64:08:6d:cd:8f:de:56:
a8:19:3d:bf:8a:b0:4f:ea:8c:d7:9b:ff:34:46:12:
87:fa:76:0b:f7:aa:14:f0:8f:a5:dc:0f:2c:5d:09:
a4:76:ba:4e:f0:c7:b5:16:3a:17:43:23:f9:95:cb:
61:02:b8:19:18:ba:d5:47:6c:d6:96:e7:be:6d:80:
32:5b:d6:a9:a4:bc:12:e8:a8:e1:af:93:81:45:1e:
31:5a:2c:99:22:16:f8:ea:cb:e5:0b:42:ee:01:f8:
a2:71:7b:7c:ef:c0:1c:e8:af:f6:f7:75:7e:96:5d:
f7:ac:28:63:30:82:46:8e:da:ea:a7:47:fa:60:95:
dd:2e:60:ef:a2:9c:e5:14:7d:de:08:95:bf:c6:0f:
f6:0d:5e:dc:da:54:74:6a:c3:c0:8a:30:87:33:62:
35:25:ac:c0:be:8d:12:fa:bd:b0:48:32:70:42:03:
39:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4B:3B:C7:7A:23:08:B0:90:FD:E8:E8:72:CF:1A:16:A7:C7:58:32
X509v3 Authority Key Identifier:
keyid:3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5e:7a:a5:81:18:d5:b6:46:98:c8:f0:e8:67:7f:fd:2f:36:
4a:1c:b0:21:7a:a4:7e:8d:3c:67:73:bd:7a:6a:c7:99:fe:a4:
e0:21:f9:b8:e8:5e:e4:ea:db:7a:f3:d7:8e:e1:ba:ea:a4:39:
1c:7a:bd:16:ac:21:21:5c:40:41:2e:14:aa:6c:f7:20:c8:4a:
11:ba:e3:82:cd:96:94:71:c2:75:32:17:34:59:7a:f4:e6:73:
dc:5b:bc:03:ba:3b:32:c7:09:b5:2e:44:2f:db:16:b1:ec:29:
e0:48:22:ae:55:08:7a:c2:b4:cb:6c:8f:63:b0:b7:f1:58:1b:
23:9b:f6:0f:d3:36:5f:0e:b0:36:f5:7e:e0:e4:16:ea:52:4a:
da:42:45:81:96:44:34:7b:ec:9b:64:ed:62:3f:1f:2c:f4:14:
a3:e8:0e:93:82:bb:1e:71:af:ca:21:74:17:de:06:2a:f6:7b:
26:7f:e9:b4:13:5a:b4:a8:88:ab:37:76:d9:9c:41:3f:82:84:
a1:39:7b:bb:c2:c6:6f:c2:13:81:e9:45:ae:7a:c2:02:bc:c3:
d9:19:00:d2:b5:48:7b:38:24:4c:0e:72:14:3c:28:47:e9:56:
a4:2a:78:df:33:c8:54:75:57:b2:3d:99:89:c4:f4:cc:9d:73:
10:ca:dd:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 14:03:26 2025 by rpki-client