Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
File: P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft (raw, json)
Hash identifier: jM6AnVNTlyaWjke4/ShuZFQ0TSrmRV1N9WQiEiQ5qY8=
Subject key identifier: D2:79:6E:07:0D:48:A9:F0:E3:C6:E4:8E:06:28:84:1E:C8:11:02:62
Authority key identifier: 3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA
Certificate issuer: /CN=3f46c351ee89c9f5558167530704885b8be46eaa
Certificate serial: 019A7149E5C560A90A86A8B31187B0E568D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 05:00:59 +0000
Manifest this update: Tue 11 Nov 2025 05:00:59 +0000
Manifest next update: Wed 12 Nov 2025 05:00:59 +0000
Files and hashes: 1: P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl (hash: pHrmUnnI8hA5S0JM7ik5AhtktiRVK4xTMwQOC5asFhI=)
2: QxahHBF5SSiTCKjSwe1FlEjpjhQ.roa (hash: d1pnjZFtEihgfo0iFcK4wvbFSZ9uzn9ZUOrv5mZKK8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:e5:c5:60:a9:0a:86:a8:b3:11:87:b0:e5:68:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f46c351ee89c9f5558167530704885b8be46eaa
Validity
Not Before: Nov 11 05:00:59 2025 GMT
Not After : Nov 12 05:00:59 2025 GMT
Subject: CN=d2796e070d48a9f0e3c6e48e0628841ec8110262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cd:5d:a3:90:7e:ee:04:12:b6:04:e2:bc:d8:
35:9a:f0:1f:18:62:d0:4a:9f:c5:8e:27:90:26:0b:
ef:fa:f1:f1:10:e3:64:53:d4:59:02:29:f0:50:82:
c1:98:85:0b:e6:f4:76:e4:ee:3b:e5:5e:16:0e:88:
f7:ed:ab:fc:c1:bc:15:01:f3:cc:88:19:e9:fc:fe:
5a:0f:d1:4b:e8:0e:f9:46:e9:be:a1:15:9f:55:39:
12:82:9b:55:f8:0a:5c:7c:2d:37:86:18:d9:08:d1:
de:c4:c5:39:f8:58:40:f4:a2:ed:77:13:ed:d7:97:
e9:b7:29:2d:7f:3d:2e:91:7f:4a:8a:90:03:8d:e3:
d4:5a:c5:1c:97:eb:7c:cd:76:62:12:b1:88:80:27:
b6:30:ac:8a:be:72:ae:84:b1:f7:f5:7e:a5:2a:3c:
fd:86:1b:e9:93:14:c0:d0:6e:6d:f7:67:08:17:41:
71:bb:c9:37:f7:4d:c8:ff:5f:f4:b1:92:e0:99:1f:
61:ff:9d:9a:91:de:21:09:44:1b:f9:bf:13:6a:cd:
99:64:3b:dc:f6:bb:28:16:98:e5:dd:0f:d3:c8:63:
23:ed:e7:19:73:a5:48:3c:3a:66:3b:5a:37:cd:c3:
34:99:3c:36:1e:6d:03:36:f5:ec:5b:ba:64:1d:8b:
d3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:79:6E:07:0D:48:A9:F0:E3:C6:E4:8E:06:28:84:1E:C8:11:02:62
X509v3 Authority Key Identifier:
keyid:3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:41:15:78:e6:58:d1:39:a3:2c:6e:0c:70:1f:b8:98:a0:28:
e4:b3:1c:a7:c5:f6:30:0b:1d:6e:ee:50:7b:bf:58:a0:8f:56:
9a:31:02:26:6a:89:65:b1:e9:ef:1d:5a:67:f9:75:25:9a:07:
ca:a8:fd:ca:d5:50:49:43:c9:ce:7a:8d:f0:74:1f:26:f0:7d:
f6:ad:44:ac:41:9c:95:5a:69:82:9a:c3:88:6c:2f:10:51:fe:
1b:34:3b:6a:41:4e:fb:e3:06:01:a2:f4:8b:15:a0:86:4f:89:
e3:8e:0c:f2:3f:19:d2:93:05:29:74:bf:3f:7a:33:06:e1:c8:
79:05:42:44:cc:47:b7:1c:21:b7:68:67:68:09:2d:46:ce:9c:
12:92:36:ee:3c:85:0f:e0:ae:05:24:bd:17:8b:ad:dc:e0:2d:
36:9b:6b:e0:40:10:d1:1f:31:74:e2:94:42:1c:d0:3b:ad:61:
21:4e:21:7d:c2:29:a8:f3:87:b3:0c:af:d1:87:09:b2:c1:35:
71:3f:bc:86:f4:32:58:68:cc:49:78:5b:91:91:18:2e:37:10:
ac:52:f0:05:37:b3:7b:31:1e:34:7e:6d:9d:ec:de:78:5d:ba:
33:fa:b0:86:44:2d:1d:45:1a:2b:af:7f:c8:64:e6:81:e6:bb:
d4:cd:5c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:00 2025 by rpki-client