Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
File: P3lU2IwK4_Y5hpe_38GVanU-g9g.mft (raw, json)
Hash identifier: nTFCwYCN+un/JVpT21D4qmUrPV9yH18VOWFMKxE2zyg=
Subject key identifier: F9:AB:94:3B:F1:AB:46:79:6C:90:DF:52:54:03:29:7E:17:E1:CC:C5
Authority key identifier: 3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
Certificate issuer: /CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Certificate serial: 019A7293B75195906B5214415A3F9E80A61B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
Manifest number: 16F8
Signing time: Tue 11 Nov 2025 11:01:14 +0000
Manifest this update: Tue 11 Nov 2025 11:01:14 +0000
Manifest next update: Wed 12 Nov 2025 11:01:14 +0000
Files and hashes: 1: P3lU2IwK4_Y5hpe_38GVanU-g9g.crl (hash: OcAb7E6oitGv45AW6UehGmwRdzqD/wG9WMxGW6+9tmc=)
2: rf7Y9BfnjDYuwCtely2bugyEpys.roa (hash: 9y+7Sb1Y7U3Xr15ca0JClSv0KalX6Si92Kt+rNAmTHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:b7:51:95:90:6b:52:14:41:5a:3f:9e:80:a6:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Validity
Not Before: Nov 11 11:01:14 2025 GMT
Not After : Nov 12 11:01:14 2025 GMT
Subject: CN=f9ab943bf1ab46796c90df525403297e17e1ccc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f2:a5:66:38:15:b3:e5:a3:ab:65:ad:0d:6d:
64:4d:2f:f9:bd:66:fe:43:ff:9a:db:cb:70:7b:f3:
cc:71:58:e0:4f:15:31:e4:82:cd:ae:41:9c:39:99:
a2:96:5b:92:e7:67:10:31:67:c8:23:09:ab:78:50:
86:3a:3e:4c:b7:a4:92:27:69:8b:2c:74:c5:6a:2b:
5d:96:10:08:84:8b:26:cc:91:a3:fd:33:c3:55:8c:
68:18:f6:ec:d0:93:b2:7e:9c:a0:6a:98:d5:e8:6b:
4d:3b:0b:be:d0:45:7a:a8:41:ac:00:3e:0f:f2:27:
29:4e:1a:7c:00:aa:d1:05:2d:3b:8f:f9:df:6f:1f:
6c:a7:d6:77:c3:bd:de:aa:8f:f8:a6:50:8d:03:15:
a7:0c:91:e1:8c:34:c6:39:1b:b1:60:09:f3:16:40:
2b:74:8d:b6:de:6d:1d:a3:f7:fa:69:77:f4:06:b1:
e0:af:83:7f:9d:54:07:0e:3d:db:de:cd:fe:37:b6:
ae:74:6f:39:a8:35:21:5a:94:8f:7e:ef:15:10:bb:
4d:77:7d:62:c2:25:53:69:d7:a2:a1:ad:83:a2:e2:
9d:9b:2d:95:c1:4a:64:77:98:13:f4:26:b8:e7:a9:
4b:98:92:03:92:96:5e:bb:8b:b4:fc:b4:eb:19:f8:
de:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AB:94:3B:F1:AB:46:79:6C:90:DF:52:54:03:29:7E:17:E1:CC:C5
X509v3 Authority Key Identifier:
keyid:3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:6a:9c:dc:05:07:74:e5:e9:eb:10:90:07:59:d0:8c:00:61:
29:e8:1b:7c:a2:1f:05:c0:35:99:0b:e5:79:f0:9b:07:d3:b4:
43:fd:79:f1:d0:b0:ef:80:c2:85:ac:05:ee:1c:9a:ba:4e:5b:
4a:c7:be:ec:08:cf:82:f8:93:ae:3a:11:08:32:45:95:3c:ff:
bc:a3:9b:c8:36:2c:07:cb:ac:e6:38:d9:0f:f3:9a:e7:c4:ca:
29:8e:fb:fa:44:b8:d8:7a:d4:6f:6b:80:40:93:02:b9:80:9f:
cf:50:4d:25:8c:25:e5:61:11:01:14:bd:80:db:4a:ef:c9:b4:
44:0f:cd:e5:36:d4:10:e1:93:6d:68:9c:25:55:fa:85:34:c5:
06:c4:24:03:53:98:b9:11:cc:30:b0:f7:3e:58:a5:1a:f3:8e:
af:b6:c4:75:91:f7:e9:78:09:a2:f5:cf:78:df:d7:54:85:7d:
60:c2:82:e6:98:6d:80:bc:fa:3f:af:d5:62:80:7f:47:99:ab:
e7:1c:e9:fe:d0:a0:47:b2:e9:46:c2:79:bc:3b:5a:c1:43:a5:
04:bf:af:ad:0b:c4:8c:93:5e:67:d3:74:87:c1:c3:f9:e9:41:
57:6c:37:90:41:56:2e:e2:30:fe:18:0d:40:d5:bf:da:5b:bb:
01:73:c8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:37:06 2025 by rpki-client