Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
File: P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft (raw, json)
Hash identifier: Qzvd95IMXqMJxwD19X6ocNnACPbe2OXiIuhLARk3BS0=
Subject key identifier: 07:0E:27:A0:0C:8A:D0:4A:7E:76:20:8C:CC:C0:0B:A7:01:68:93:07
Authority key identifier: 3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA
Certificate issuer: /CN=3f46c351ee89c9f5558167530704885b8be46eaa
Certificate serial: 019923314B4A36E7B274B7C8417F436F4346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 08:00:57 +0000
Manifest this update: Sun 07 Sep 2025 08:00:57 +0000
Manifest next update: Mon 08 Sep 2025 08:00:57 +0000
Files and hashes: 1: P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl (hash: rl2EiR7dvemnpC+PvQ73UIaT/UoQjHPd53Vsppx/rIc=)
2: QxahHBF5SSiTCKjSwe1FlEjpjhQ.roa (hash: d1pnjZFtEihgfo0iFcK4wvbFSZ9uzn9ZUOrv5mZKK8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:4b:4a:36:e7:b2:74:b7:c8:41:7f:43:6f:43:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f46c351ee89c9f5558167530704885b8be46eaa
Validity
Not Before: Sep 7 08:00:57 2025 GMT
Not After : Sep 8 08:00:57 2025 GMT
Subject: CN=070e27a00c8ad04a7e76208cccc00ba701689307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cf:20:44:e4:15:80:22:ca:fe:d4:e6:6a:6f:
bd:82:73:d8:cf:1a:49:8e:9e:fc:63:a8:01:0d:44:
91:95:e9:24:0e:ea:67:e5:81:f4:6d:99:4e:0a:65:
d4:db:7b:26:34:a6:5a:61:86:7c:bb:b0:f3:8e:b8:
fd:fe:06:f9:25:c0:ed:17:e0:2c:28:07:dc:f2:8c:
b1:2e:9d:f0:47:a0:07:4e:56:72:ef:0c:af:9c:6b:
f7:e2:e3:c9:2c:2c:1e:d2:fd:1d:86:6b:b1:7e:16:
40:bd:aa:92:4b:7a:f7:ad:e6:a7:2f:c6:a9:51:4c:
c5:04:a9:d9:83:8f:85:39:56:c9:17:14:e6:19:c2:
b5:74:1b:49:18:ef:ba:1f:2e:5f:b3:6b:66:68:50:
a0:a5:9c:49:8c:b2:10:72:fc:6b:f6:9a:85:fe:1e:
19:85:e9:64:8c:27:a2:98:65:1a:c2:71:7b:8f:0a:
31:d1:e5:d1:0c:9b:3d:31:fb:cf:6f:0e:d3:df:2e:
d4:1e:a7:94:5b:49:08:7e:66:ca:44:8a:2c:45:03:
38:07:16:0d:aa:3b:ed:36:7d:06:01:91:11:88:21:
77:2d:3b:f8:62:04:19:1a:5e:57:c1:69:a8:85:f4:
ea:2f:e2:c8:af:d4:20:18:0d:46:0f:1b:8d:05:45:
b6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:0E:27:A0:0C:8A:D0:4A:7E:76:20:8C:CC:C0:0B:A7:01:68:93:07
X509v3 Authority Key Identifier:
keyid:3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d6:21:22:01:53:be:2a:16:03:5c:80:e1:a0:50:94:4e:8e:
3d:65:ab:75:1f:fa:88:a1:f6:5c:56:c3:27:0c:4c:71:9b:81:
b3:c6:cd:13:78:80:ec:15:a4:be:13:d0:8c:9e:8c:f3:8c:63:
77:cb:6e:55:61:ac:e3:10:bf:24:66:e1:a4:7f:c0:6f:46:fb:
d2:11:f0:28:e0:fb:71:de:9c:c6:5d:23:0c:7c:e8:df:ec:12:
8c:8f:bf:0f:2c:6e:de:51:6b:8f:ca:19:33:ef:4f:33:fc:76:
41:fe:57:f6:44:47:ed:73:9a:85:8c:6f:03:bb:a0:2b:cc:b7:
10:db:9a:54:30:86:e5:bb:ec:50:c3:e3:5d:ff:25:ea:b9:34:
f7:7c:8f:3a:ac:49:e8:f2:17:af:15:61:4f:1f:dd:96:29:ea:
a1:9f:4e:52:14:69:e5:d5:9e:30:32:9f:e5:82:5d:ea:74:be:
f7:16:41:55:fd:21:e7:f1:3d:db:5b:b1:b2:9f:57:0f:33:8c:
09:e9:da:57:04:34:02:2c:a0:b3:d5:66:69:ee:10:0f:de:69:
94:8e:ff:62:bd:90:3a:46:a1:0b:4c:a6:a7:dc:7d:08:25:48:
18:62:e1:51:7a:1a:d7:97:d0:8b:25:b3:d0:1c:9a:5b:5b:57:
54:8d:09:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:53:01 2025 by rpki-client