Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
File: P3lU2IwK4_Y5hpe_38GVanU-g9g.mft (raw, json)
Hash identifier: WWx+Z8cZyGAXbIuPnaL4aM6GYIZI/zUqZkNIMFKxbEo=
Subject key identifier: 81:37:F7:CC:E3:57:CA:46:FD:31:04:13:0B:34:5D:AF:EB:A4:FC:D4
Authority key identifier: 3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
Certificate issuer: /CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Certificate serial: 0199228CDF09BB6C613FB1CE307CE0DB9359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
Manifest number: 164A
Signing time: Sun 07 Sep 2025 05:01:21 +0000
Manifest this update: Sun 07 Sep 2025 05:01:21 +0000
Manifest next update: Mon 08 Sep 2025 05:01:21 +0000
Files and hashes: 1: P3lU2IwK4_Y5hpe_38GVanU-g9g.crl (hash: wOhgbdSzzxzJ3uFep0rZ4+TAiEE1z7t0jvR6AC54UhU=)
2: rf7Y9BfnjDYuwCtely2bugyEpys.roa (hash: 9y+7Sb1Y7U3Xr15ca0JClSv0KalX6Si92Kt+rNAmTHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:df:09:bb:6c:61:3f:b1:ce:30:7c:e0:db:93:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Validity
Not Before: Sep 7 05:01:21 2025 GMT
Not After : Sep 8 05:01:21 2025 GMT
Subject: CN=8137f7cce357ca46fd3104130b345dafeba4fcd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b1:24:cf:20:a6:88:5e:67:67:09:5e:f3:f5:
f4:bd:80:da:44:33:9d:12:cf:dc:d3:10:f3:35:ad:
2e:d4:27:3a:01:18:b8:f2:7a:3b:50:a5:88:98:57:
70:04:7d:85:47:37:3c:0a:11:7b:5a:8e:00:ef:c0:
bb:c8:d3:52:af:82:a6:bb:dc:44:d2:e6:83:73:aa:
5e:27:ea:43:d9:a3:10:8b:dc:77:47:cd:fc:f7:b9:
3b:20:4b:7c:ab:b7:09:14:92:46:d6:9e:74:67:57:
85:61:7d:bb:83:04:e8:fa:ff:64:76:fa:82:ce:fa:
b0:40:c3:52:62:41:3c:1d:64:17:11:98:01:7b:f8:
20:9f:26:cf:f5:03:41:c9:78:0e:1c:fc:85:71:5c:
a9:6e:b7:76:e2:cf:e9:9f:6f:0c:9c:0a:8e:c0:49:
d7:57:70:ef:86:3f:79:91:1a:2c:9f:fa:79:4a:6c:
05:72:db:72:08:d3:9b:db:13:bc:de:a0:c7:94:58:
79:64:b2:b3:61:5c:f9:d1:70:db:e2:dc:1c:be:82:
56:84:f9:bc:fe:e2:62:94:41:88:25:f2:0a:cd:32:
76:65:34:9b:e5:5c:0b:5a:d7:98:e8:7e:df:8d:a3:
d4:89:bf:4a:0e:7e:7e:9f:4d:10:cf:91:96:9e:ae:
58:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:37:F7:CC:E3:57:CA:46:FD:31:04:13:0B:34:5D:AF:EB:A4:FC:D4
X509v3 Authority Key Identifier:
keyid:3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:cc:a0:8a:87:6c:6f:eb:52:ca:28:1c:62:bd:1c:4d:0e:db:
16:8b:b0:30:3b:28:53:d3:5a:bc:bf:dd:92:e7:4d:c1:20:89:
94:e8:60:a7:22:c9:e5:c2:91:7f:74:cb:22:4c:a8:44:0b:86:
d2:3e:79:e5:cc:fc:c6:1f:db:d0:d9:22:3d:48:71:3f:92:a2:
af:7c:dd:bc:e2:56:9f:89:33:ce:9a:43:2b:62:d3:29:ac:1a:
91:85:2a:9e:4f:de:06:da:9b:86:3c:1b:62:84:f7:8d:13:41:
24:a4:fb:7c:74:83:b2:db:55:1e:d1:84:09:19:6a:2b:fb:68:
bc:d5:8b:04:f9:b3:ea:41:b7:1b:77:29:46:db:7b:42:f5:90:
40:9f:ec:aa:07:c8:e9:ec:7e:f9:5b:35:6f:cb:d4:ce:3c:3b:
d1:68:54:04:e2:84:35:11:e8:37:dd:c4:47:97:a0:1b:69:1a:
43:4b:b8:1c:bd:2a:98:ac:99:fe:95:8a:d1:75:d7:e4:d8:9a:
ff:1c:11:dc:e1:a3:f9:f1:fe:d7:09:b7:52:dc:d6:73:6e:8b:
eb:10:66:7b:1b:e8:f9:58:7b:71:9e:6d:de:94:f5:e9:51:bb:
28:a9:da:8f:d3:23:11:38:58:b4:0b:27:60:2c:ea:e9:e6:44:
4a:73:0d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:42:29 2025 by rpki-client