Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
File: P__L7IiMEEfyIdfPk5a_FBKrr5s.mft (raw, json)
Hash identifier: bj+M4NpkAQYBCdp6lj4Bx12QrMsYxZcB8tA8bAYSvx0=
Subject key identifier: A5:70:86:66:87:A9:40:49:E1:20:22:54:FF:32:B3:20:62:20:AB:21
Authority key identifier: 3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B
Certificate issuer: /CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
Certificate serial: 019922FA405358954427448C8571C001E8C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
Manifest number: 0C5D
Signing time: Sun 07 Sep 2025 07:00:49 +0000
Manifest this update: Sun 07 Sep 2025 07:00:49 +0000
Manifest next update: Mon 08 Sep 2025 07:00:49 +0000
Files and hashes: 1: G1ZoPreJjIkkyyNJWvhlfTtWo1U.roa (hash: ZGtSGL/7afo62ORK+9uxVq7WnlKM3t68x8dY3Lc6a40=)
2: P__L7IiMEEfyIdfPk5a_FBKrr5s.crl (hash: o9uXgez7IXkFi2P1PSS+4ptjH+YgFB4dbQCLH/zQ4KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:40:53:58:95:44:27:44:8c:85:71:c0:01:e8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
Validity
Not Before: Sep 7 07:00:49 2025 GMT
Not After : Sep 8 07:00:49 2025 GMT
Subject: CN=a570866687a94049e1202254ff32b3206220ab21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a0:06:6c:7b:d0:a6:0a:2d:8f:c9:2a:f2:e2:
0a:1c:f0:9a:b9:78:b5:c1:cb:cf:af:a7:55:d9:ca:
37:67:fa:81:f1:32:66:7f:f0:97:81:e1:0c:37:4d:
86:49:72:7c:17:82:2e:24:de:fb:f6:ad:8a:62:74:
c0:0b:20:f4:f0:45:a4:24:98:a8:d0:46:7f:32:f6:
fc:c2:2a:da:b8:26:cc:e9:8d:4a:61:5a:ad:41:67:
9b:8d:b8:f7:4a:30:4e:55:a1:73:77:ef:63:5c:28:
bc:74:4c:af:ce:8f:ef:31:e7:3f:7e:3d:81:97:72:
85:24:5a:5f:6c:18:79:10:d4:85:2a:9f:46:4b:de:
9d:b7:10:45:2a:f2:8c:be:f3:d7:73:3b:62:8a:e0:
7b:37:c5:09:50:b6:d3:64:7e:57:1c:88:5b:06:d0:
1e:82:e7:03:0c:da:5e:be:a8:e7:e0:32:6c:b3:1a:
08:f9:89:e7:9a:23:ef:d8:74:61:24:54:2c:c7:0c:
93:5d:68:30:63:20:b9:79:78:36:ce:1a:a6:6f:ea:
f7:26:5c:4a:7f:54:bd:30:ff:b5:3b:8e:76:8b:5d:
da:3f:55:d8:2c:3e:a1:11:88:31:47:28:70:aa:7d:
67:f7:ec:45:62:b4:2e:f4:b8:83:89:45:87:7d:89:
1a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:70:86:66:87:A9:40:49:E1:20:22:54:FF:32:B3:20:62:20:AB:21
X509v3 Authority Key Identifier:
keyid:3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:61:7f:dc:b9:f8:ed:1d:35:0f:48:57:71:57:7f:64:f5:59:
26:3a:75:65:8b:1d:b5:be:de:84:46:9b:5b:71:82:e4:8f:c2:
b3:d3:9d:08:d4:ba:87:08:5d:9d:c6:a6:6d:9c:f8:6a:87:9e:
94:55:a0:f9:ed:53:61:86:42:d8:dd:67:ac:98:cc:51:15:ed:
74:82:df:9e:12:83:fd:99:8d:ba:b4:55:53:c1:cd:21:bc:16:
d8:5b:f4:a6:68:13:eb:98:9e:77:e3:7c:be:b9:22:6e:82:00:
87:8a:95:89:54:9a:4b:73:93:32:ec:14:84:b4:7f:32:bb:ac:
97:1f:76:31:e4:ad:d2:5f:15:c9:cd:d3:82:e1:a3:46:c3:e7:
4a:b3:64:87:d9:95:9e:4c:88:ae:0c:76:7b:48:37:17:d4:58:
e2:78:9c:e8:af:dd:f7:2d:5e:eb:d9:01:3d:46:56:b6:81:41:
72:cf:a6:f6:7a:48:96:73:63:b5:37:19:e5:3b:c1:77:01:7d:
4d:17:0f:f2:19:ae:2f:c0:da:86:20:cd:76:18:38:ee:37:79:
f3:b0:23:9b:1f:6b:e0:cc:2e:92:72:b3:72:b6:59:f5:b4:8e:
ab:4a:21:86:d4:8e:bd:46:f1:16:19:45:80:ff:bd:3d:eb:dc:
7c:42:b0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:20 2025 by rpki-client