Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
File: P3cnpBMI2bn25j3xsg6LnNgjgSA.mft (raw, json)
Hash identifier: SsgBNuU/JG0CLOY04NF+TOCpnBDYppsanVbNO13OjO8=
Subject key identifier: 4B:EC:42:C1:CC:27:FF:AC:4E:59:07:7B:17:72:EF:CB:FA:EE:CB:A7
Authority key identifier: 3F:77:27:A4:13:08:D9:B9:F6:E6:3D:F1:B2:0E:8B:9C:D8:23:81:20
Certificate issuer: /CN=3f7727a41308d9b9f6e63df1b20e8b9cd8238120
Certificate serial: 0199240D80E023A1225D725B3D91792754B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
Manifest number: 0769
Signing time: Sun 07 Sep 2025 12:01:28 +0000
Manifest this update: Sun 07 Sep 2025 12:01:28 +0000
Manifest next update: Mon 08 Sep 2025 12:01:28 +0000
Files and hashes: 1: P3cnpBMI2bn25j3xsg6LnNgjgSA.crl (hash: VqclzpIXc2C/jv6ObV+AR2nY5Eo4WqPtRU20G128tjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:80:e0:23:a1:22:5d:72:5b:3d:91:79:27:54:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f7727a41308d9b9f6e63df1b20e8b9cd8238120
Validity
Not Before: Sep 7 12:01:28 2025 GMT
Not After : Sep 8 12:01:28 2025 GMT
Subject: CN=4bec42c1cc27ffac4e59077b1772efcbfaeecba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d3:2b:78:60:89:83:a3:94:0c:c1:cb:d3:73:
83:3b:2a:1e:b5:c2:a0:b1:a8:c0:3c:6a:97:61:b3:
56:ef:31:2c:99:64:70:0c:ea:fc:c1:54:68:82:22:
87:fb:54:a0:45:58:2e:9a:f4:0c:4c:9f:e9:d6:f0:
b4:89:7c:39:e0:a2:4a:3e:f8:65:60:0e:f8:bd:53:
8a:6e:ea:87:c8:f9:22:1b:44:fc:a9:44:2c:05:be:
fb:5d:fd:18:e1:3b:a5:46:d5:44:3b:f2:fb:09:67:
4b:fb:a3:ae:75:a9:64:60:27:28:8d:94:d1:9c:e3:
d4:51:e0:3c:9c:44:35:14:53:a9:c1:66:a6:a0:e8:
96:15:88:50:6a:90:41:b9:a9:2c:f1:93:f0:14:94:
e9:95:83:f4:a2:24:55:21:24:fc:1e:7c:6b:e5:25:
21:b9:87:9d:f6:ce:ad:21:39:2e:1e:6e:a2:1d:c3:
6c:b3:9f:cc:2e:12:74:06:43:1b:a7:20:dd:61:48:
9c:5a:4b:47:ed:a7:1c:21:d2:ba:1c:02:c1:c7:1a:
61:e7:ec:35:3e:04:1e:08:eb:31:df:70:8b:4c:42:
f5:c2:e4:27:48:1f:2a:ba:ba:5d:94:8d:e5:0e:92:
9c:80:42:45:71:ed:01:ad:aa:b9:8e:54:47:05:17:
50:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EC:42:C1:CC:27:FF:AC:4E:59:07:7B:17:72:EF:CB:FA:EE:CB:A7
X509v3 Authority Key Identifier:
keyid:3F:77:27:A4:13:08:D9:B9:F6:E6:3D:F1:B2:0E:8B:9C:D8:23:81:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:80:c5:5b:98:76:52:3f:8f:58:ab:35:d3:94:ff:7d:d2:29:
e1:cd:08:66:b0:61:dc:4f:ff:f2:2c:76:c5:44:80:88:7d:63:
af:8f:03:74:38:5d:eb:08:54:bd:a5:36:99:07:bb:56:b2:45:
d5:34:b4:2f:25:7f:59:d6:9c:7b:bc:dc:69:ae:b5:c5:50:8e:
da:8e:d0:31:67:f3:32:68:75:6d:5f:7f:14:6c:7f:b2:f7:a1:
25:34:f9:b3:ba:07:4f:48:bf:65:7f:43:0a:8c:d4:c8:d8:f1:
16:64:b5:d6:2a:a3:51:af:6d:fa:f5:e3:62:61:60:7f:5c:de:
3f:f2:37:0b:c6:df:5e:bd:e1:2d:90:e5:87:c0:a1:35:a0:28:
1c:93:fd:5f:21:49:df:ae:49:8a:66:60:59:24:2c:86:7a:d3:
a1:35:0a:93:48:89:ca:66:ec:83:eb:cf:f8:1c:6e:45:ef:1f:
27:81:7e:0b:7c:3e:17:db:69:20:3c:59:bc:6e:b3:09:f9:7e:
36:e9:26:1c:8d:e0:51:a9:4a:5a:bd:f2:8c:90:97:2d:1e:09:
af:46:89:8b:02:fd:8e:bc:ac:43:81:68:7d:58:e2:04:b7:34:
7e:66:ec:73:09:40:c0:51:de:41:9d:5b:2f:b4:99:65:a8:9a:
bd:28:a5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:43 2025 by rpki-client