Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
File: P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft (raw, json)
Hash identifier: xKAllI5rh8blBUMG/9k974eyxrfrJDJ+qPToPSrIjlY=
Subject key identifier: B6:87:2B:5D:51:51:86:6C:E1:EF:09:44:3F:07:BD:64:EF:35:19:98
Authority key identifier: 3F:DA:63:02:13:CD:42:38:80:F9:FE:F1:6D:78:FB:43:6E:08:F2:47
Certificate issuer: /CN=3fda630213cd423880f9fef16d78fb436e08f247
Certificate serial: 019922FA885A873093D6DF4F510BA4FE5A30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
Manifest number: 0D52
Signing time: Sun 07 Sep 2025 07:01:08 +0000
Manifest this update: Sun 07 Sep 2025 07:01:08 +0000
Manifest next update: Mon 08 Sep 2025 07:01:08 +0000
Files and hashes: 1: P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl (hash: aw1vNNUK3HzP8Ot3XcValHw8w3M2U8/K2M5eB4Qhz/0=)
2: gDeneKJTQtX9OIr5MlGy6dCHOYA.roa (hash: 3GvtE0X7YdCyMroXXNh2AEtxzHBHmy4owPJWbBMbbzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:88:5a:87:30:93:d6:df:4f:51:0b:a4:fe:5a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fda630213cd423880f9fef16d78fb436e08f247
Validity
Not Before: Sep 7 07:01:08 2025 GMT
Not After : Sep 8 07:01:08 2025 GMT
Subject: CN=b6872b5d5151866ce1ef09443f07bd64ef351998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0e:33:bb:9a:7e:b8:ac:a7:24:82:5d:1d:44:
a1:2f:d6:43:5f:57:a0:e2:e9:b6:ee:e7:7f:e1:d6:
8e:bc:52:a5:89:77:b2:5f:d8:3e:2e:61:5d:69:36:
87:61:78:e9:b8:85:e4:53:85:2e:bf:8f:40:8a:da:
0b:82:b6:6b:59:f7:09:23:8a:e2:29:7f:47:69:6f:
37:dd:e3:c8:83:ae:96:95:e0:77:b3:ed:c5:2c:6d:
78:c9:1b:d7:27:b3:6b:04:4b:25:7b:16:e6:63:4f:
29:b5:23:62:82:7d:7f:b6:68:df:e1:00:88:f7:02:
b3:6a:c7:2b:b0:b7:d2:68:b7:36:6d:ef:23:33:61:
b0:0c:eb:aa:ec:35:ef:85:2d:0e:7a:07:c3:b8:67:
d3:bd:47:5a:e7:a6:f4:be:43:8b:91:7a:e4:df:b8:
e0:c8:66:1a:52:77:84:27:12:27:b1:92:80:f4:f0:
ca:76:41:e3:a5:b2:26:32:99:7b:94:a6:3d:d7:aa:
45:24:ff:d3:16:c3:66:ae:55:5a:cc:f5:84:e6:87:
ac:f8:80:5c:ff:7b:60:fb:46:dc:5d:e7:60:1c:b6:
0e:1c:5b:3f:5e:e7:66:67:4b:44:5c:ec:95:c5:81:
fa:57:32:b6:2e:3f:fd:8b:13:55:01:af:35:8d:4e:
7b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:87:2B:5D:51:51:86:6C:E1:EF:09:44:3F:07:BD:64:EF:35:19:98
X509v3 Authority Key Identifier:
keyid:3F:DA:63:02:13:CD:42:38:80:F9:FE:F1:6D:78:FB:43:6E:08:F2:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:9d:c6:6e:d6:3e:d5:e4:ee:61:38:cb:c5:b8:f6:e1:0d:4f:
95:6d:a5:47:3d:9a:b1:95:76:8a:a8:75:2d:0e:de:9b:3d:4e:
21:89:0a:70:26:6c:0b:0c:f0:58:33:fe:92:8c:05:b7:fd:59:
cd:fc:93:bd:73:5e:ed:ce:ed:44:ca:44:18:25:b4:83:23:a9:
c4:7e:18:5b:ed:a4:94:29:f5:6c:42:65:fc:6b:f3:d4:a9:21:
2e:30:67:2c:c7:f5:71:2c:39:f3:7f:47:74:80:df:7b:a6:7b:
44:a9:8d:43:d2:ce:4f:f9:51:0c:91:8d:59:e3:a8:35:51:b0:
ba:57:72:fd:0c:ed:55:6a:d7:05:38:e2:ea:83:ae:c7:50:5b:
0a:af:b9:b8:e1:1f:9e:ec:cf:59:cb:89:16:45:c4:ec:00:de:
f4:3e:a2:ae:e7:4c:ad:bb:1d:44:c1:18:1f:db:cb:f0:9e:1e:
5c:0c:a4:06:bd:d3:a6:7c:e1:b2:bb:49:57:a7:e3:47:c8:8c:
9c:0e:d7:c5:6b:84:d9:46:7c:c7:aa:63:8c:e6:a7:42:ae:41:
ac:7d:48:9e:3d:e6:89:d7:d3:d0:4b:e0:f5:87:33:84:fc:42:
bc:af:58:ed:e5:00:c9:0e:d9:3f:a1:be:e3:15:c9:53:89:2f:
d3:bc:af:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+ohahzCT1t9PUQuk/lowMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZGE2MzAyMTNjZDQyMzg4MGY5ZmVmMTZkNzhmYjQzNmUw
OGYyNDcwHhcNMjUwOTA3MDcwMTA4WhcNMjUwOTA4MDcwMTA4WjAzMTEwLwYDVQQD
EyhiNjg3MmI1ZDUxNTE4NjZjZTFlZjA5NDQzZjA3YmQ2NGVmMzUxOTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4A4zu5p+uKynJIJdHUShL9ZDX1eg
4um27ud/4daOvFKliXeyX9g+LmFdaTaHYXjpuIXkU4Uuv49AitoLgrZrWfcJI4ri
KX9HaW833ePIg66WleB3s+3FLG14yRvXJ7NrBEslexbmY08ptSNign1/tmjf4QCI
9wKzascrsLfSaLc2be8jM2GwDOuq7DXvhS0OegfDuGfTvUda56b0vkOLkXrk37jg
yGYaUneEJxInsZKA9PDKdkHjpbImMpl7lKY916pFJP/TFsNmrlVazPWE5oes+IBc
/3tg+0bcXedgHLYOHFs/XudmZ0tEXOyVxYH6VzK2Lj/9ixNVAa81jU57CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaHK11RUYZs4e8JRD8HvWTvNRmYMB8GA1UdIwQY
MBaAFD/aYwITzUI4gPn+8W14+0NuCPJHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlwakFoUE5RamlBLWY3eGJYajdRMjRJOGtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My81NGM2OTEtOWZiYi00MzhhLWE1NWYt
MzgyMzdmZTRlNDE0LzEvUDlwakFoUE5RamlBLWY3eGJYajdRMjRJOGtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My81NGM2OTEtOWZiYi00MzhhLWE1NWYtMzgyMzdmZTRlNDE0
LzEvUDlwakFoUE5RamlBLWY3eGJYajdRMjRJOGtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXp3GbtY+
1eTuYTjLxbj24Q1PlW2lRz2asZV2iqh1LQ7emz1OIYkKcCZsCwzwWDP+kowFt/1Z
zfyTvXNe7c7tRMpEGCW0gyOpxH4YW+2klCn1bEJl/Gvz1KkhLjBnLMf1cSw5839H
dIDfe6Z7RKmNQ9LOT/lRDJGNWeOoNVGwuldy/QztVWrXBTji6oOux1BbCq+5uOEf
nuzPWcuJFkXE7ADe9D6irudMrbsdRMEYH9vL8J4eXAykBr3TpnzhsrtJV6fjR8iM
nA7XxWuE2UZ8x6pjjOanQq5BrH1Inj3midfT0Evg9YczhPxCvK9Y7eUAyQ7ZP6G+
4xXJU4kv07yvtw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:23:11 2025 by rpki-client