Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
File: P__L7IiMEEfyIdfPk5a_FBKrr5s.mft (raw, json)
Hash identifier: /RziwUfb8R2D7Mft71qZECzbpW9ozIFr2uvb/Fl/4gk=
Subject key identifier: 28:F1:7D:68:46:A4:0B:85:65:3A:99:35:B3:AD:38:08:EF:CA:D3:06
Authority key identifier: 3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B
Certificate issuer: /CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
Certificate serial: 019A711378C02193269B77966BD1EB680ADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
Manifest number: 0D0A
Signing time: Tue 11 Nov 2025 04:01:32 +0000
Manifest this update: Tue 11 Nov 2025 04:01:32 +0000
Manifest next update: Wed 12 Nov 2025 04:01:32 +0000
Files and hashes: 1: G1ZoPreJjIkkyyNJWvhlfTtWo1U.roa (hash: ZGtSGL/7afo62ORK+9uxVq7WnlKM3t68x8dY3Lc6a40=)
2: P__L7IiMEEfyIdfPk5a_FBKrr5s.crl (hash: bfirJrTNnZRZS4+r3oq8UNzOpR7LHBWkqTVFMCResWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:78:c0:21:93:26:9b:77:96:6b:d1:eb:68:0a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
Validity
Not Before: Nov 11 04:01:32 2025 GMT
Not After : Nov 12 04:01:32 2025 GMT
Subject: CN=28f17d6846a40b85653a9935b3ad3808efcad306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:97:01:0f:a7:42:12:58:c5:16:1c:09:ac:cb:
84:fe:54:02:00:75:1c:88:6d:22:36:09:b3:ca:33:
0a:df:ba:d7:b0:cb:d7:c6:d6:d7:3e:0c:7b:7f:cf:
df:7f:05:bc:bc:c3:11:79:70:f7:06:39:ad:78:7e:
a8:16:21:e8:06:c0:3a:75:6e:2d:04:17:84:05:a8:
f7:04:44:69:25:53:65:a4:22:27:3e:0f:9c:70:81:
1d:9f:d4:98:5e:b7:c6:5c:0d:d9:69:f2:a6:13:ad:
3d:91:72:8f:c1:02:79:4b:3b:c6:c8:e5:b1:10:60:
33:c2:53:7b:e1:58:87:d0:a6:7f:3d:a0:3c:8d:84:
1f:ea:f5:32:2d:65:bf:17:54:a8:bb:fb:bb:36:95:
d2:fd:a7:24:f0:fd:18:36:2c:ef:73:2b:9e:2b:15:
6d:05:a3:b4:f9:ef:a3:66:60:c6:ca:87:92:05:cb:
50:49:a1:e5:fd:e5:c4:b6:4e:04:86:87:f0:bc:7e:
bc:08:49:26:45:5d:fd:8c:4f:fb:4f:f2:7d:ff:62:
e6:23:95:77:6d:f4:7f:dc:82:80:c8:7c:34:09:53:
44:cd:49:0d:e3:39:2e:8d:8a:bb:b5:b7:f7:3d:27:
2c:1f:2d:5e:84:17:55:39:0a:a4:cb:3e:84:3e:1d:
83:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F1:7D:68:46:A4:0B:85:65:3A:99:35:B3:AD:38:08:EF:CA:D3:06
X509v3 Authority Key Identifier:
keyid:3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e0:87:f9:5d:9b:2d:b3:82:77:d4:15:f3:91:d4:ca:fb:be:
ec:e5:4a:f2:74:f4:38:08:5e:a2:a5:86:6d:72:b3:d1:9f:a6:
9b:d6:e0:59:2a:85:7f:fc:24:3b:ba:04:65:2e:4e:08:d8:41:
82:83:c4:53:e8:5f:19:79:13:99:d6:3a:f7:2c:bb:b9:70:0c:
f7:04:cc:29:f5:36:0c:ce:a0:5f:53:ad:31:04:03:9d:a6:42:
db:52:83:74:e6:d1:ce:83:0c:68:b0:4e:2a:1e:84:60:ef:5a:
bc:0f:a5:7e:da:4f:14:28:d0:bb:94:05:59:05:28:69:bd:77:
37:6a:bd:05:02:8f:de:62:42:6c:d7:6e:ce:56:54:76:9f:16:
1c:ea:dc:d6:6f:b3:f2:5b:f9:e6:c3:1e:59:7e:92:49:a3:35:
90:df:6a:bc:57:36:be:98:8d:4e:ba:3c:b5:ae:92:6b:9e:fc:
f7:aa:66:98:6f:82:b2:26:4d:9e:7c:20:d2:a5:b2:40:ef:21:
c2:1b:5d:4b:e7:d8:ed:69:c6:63:7b:7e:7a:58:97:5d:96:92:
10:91:9e:c4:4c:8e:af:8a:13:c3:fc:22:3c:2a:30:cd:4e:9f:
39:f6:b9:f5:8a:12:1c:42:76:41:76:38:67:75:bf:f0:d5:12:
2f:b0:21:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:39 2025 by rpki-client