Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
File: P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft (raw, json)
Hash identifier: BG4kVaTRabnqPqGsAII2UC/9lYznaJ2GgxUqDeTnl6c=
Subject key identifier: B6:D4:59:57:BC:E2:6F:CD:0F:BC:4B:80:A1:41:29:6D:57:D9:1D:2E
Authority key identifier: 3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4
Certificate issuer: /CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4
Certificate serial: 019A72CA337EB4AA7E1A79FF25A303912E07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
Manifest number: 074A
Signing time: Tue 11 Nov 2025 12:00:45 +0000
Manifest this update: Tue 11 Nov 2025 12:00:45 +0000
Manifest next update: Wed 12 Nov 2025 12:00:45 +0000
Files and hashes: 1: P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl (hash: l34oXzHwiL9LLvnpYsqTFNnB6bQREL0fqbGXSsp+qtg=)
2: gZtu_mvpfnIEYpfX3O3Zhm8l3oY.roa (hash: eNPnQnlHd8yy83e7BBZ3vW4/qWGTiwqTNCUFgABwjBU=)
3: tJp6RAZ2Y3Z3o2R75yur_W5Ex-w.roa (hash: GGPR+7RZv9vuHEdD+t//WBPxSiCJToRwFhnk1FKFqWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:33:7e:b4:aa:7e:1a:79:ff:25:a3:03:91:2e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4
Validity
Not Before: Nov 11 12:00:45 2025 GMT
Not After : Nov 12 12:00:45 2025 GMT
Subject: CN=b6d45957bce26fcd0fbc4b80a141296d57d91d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b7:0a:a3:20:b0:35:f6:f3:e2:47:5d:d8:af:
e1:cf:da:33:f6:7d:7c:36:a3:53:0f:60:10:97:f4:
20:0a:98:ad:1e:72:59:23:ea:c3:75:b0:26:cd:8c:
ff:93:8d:0d:66:26:d3:75:9d:06:6e:8e:c3:d6:de:
51:ec:64:66:87:71:1d:19:f7:dc:05:18:b5:6b:3e:
01:fe:aa:04:63:33:6d:78:a3:6d:05:9f:eb:92:e3:
8e:35:9b:53:b9:bc:3c:8f:ac:d2:b0:65:e7:85:99:
80:2a:ae:14:69:18:3c:ad:6d:15:71:c2:2e:3c:58:
47:bc:59:35:01:d2:c7:b0:23:3f:dd:f9:98:41:0b:
64:57:7c:53:28:16:43:f9:44:f8:17:95:f0:40:cf:
57:97:79:d7:94:f1:44:9b:6c:3d:a8:e0:d6:dc:a2:
b7:63:d3:6e:38:e0:53:ed:5a:71:5e:49:94:a4:20:
71:b3:9e:6b:bc:9d:de:6a:c5:fb:17:e4:42:f0:61:
b6:bb:5a:9d:97:e9:7d:bd:d2:c0:31:74:74:a2:21:
37:ba:da:9b:e4:2d:c2:05:b2:9c:77:44:b1:97:6e:
6a:93:54:70:7d:62:76:77:d5:f1:4b:70:45:db:db:
47:0d:ff:f0:b2:fa:37:f5:57:ea:19:3e:68:b0:fa:
44:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D4:59:57:BC:E2:6F:CD:0F:BC:4B:80:A1:41:29:6D:57:D9:1D:2E
X509v3 Authority Key Identifier:
keyid:3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d1:ef:0e:46:1d:22:3e:cc:64:fe:85:75:32:69:46:9b:32:
58:07:78:42:74:dd:d5:82:77:13:44:ec:63:56:4f:21:f8:4f:
45:1f:54:4a:2a:2b:fa:d7:3c:29:60:1a:87:6d:e6:b6:e8:59:
ff:45:04:b6:a4:9a:24:1c:f6:5b:2c:ec:df:44:05:de:65:69:
02:a2:1c:c0:dd:82:e6:f9:14:f6:b9:cc:11:da:06:11:f1:18:
97:8e:e0:dd:79:32:30:a7:ad:0a:62:a0:1a:63:7b:e6:21:64:
dc:c5:d7:49:8e:de:14:99:9e:8e:7d:61:8d:03:8a:9c:d6:35:
e6:5a:62:cb:a4:93:f6:a5:5c:d9:c8:6f:f5:a6:4e:8c:da:3d:
a4:85:2a:6c:01:ec:12:a1:e2:33:91:df:72:fe:12:42:22:7e:
44:19:61:4d:54:7f:69:49:fc:bc:33:6c:98:0a:f9:0e:12:0c:
60:1e:02:e5:e1:4d:aa:4b:ef:23:d4:f9:08:8e:fc:cb:f7:c5:
dd:c7:62:08:ef:62:db:eb:ff:13:3c:08:4c:a7:78:1c:f3:bc:
9b:5a:0f:60:a3:c2:c3:78:aa:74:54:56:43:7c:47:cd:f2:44:
9c:03:20:1b:50:44:80:f2:c3:76:d0:9b:99:0e:f1:4c:8b:48:
86:c6:2c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:38:21 2025 by rpki-client