Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
File: P3cnpBMI2bn25j3xsg6LnNgjgSA.mft (raw, json)
Hash identifier: joSzWl1FH1jXx6lk1TzO4vAu0t/MebJBX+HWoQP+4q0=
Subject key identifier: 37:26:3E:60:F2:36:EE:63:A8:84:C9:D6:28:D7:0D:62:CA:53:D3:93
Authority key identifier: 3F:77:27:A4:13:08:D9:B9:F6:E6:3D:F1:B2:0E:8B:9C:D8:23:81:20
Certificate issuer: /CN=3f7727a41308d9b9f6e63df1b20e8b9cd8238120
Certificate serial: 019A722632C233FF7608ED606B8ADDB75546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
Manifest number: 0816
Signing time: Tue 11 Nov 2025 09:01:37 +0000
Manifest this update: Tue 11 Nov 2025 09:01:37 +0000
Manifest next update: Wed 12 Nov 2025 09:01:37 +0000
Files and hashes: 1: P3cnpBMI2bn25j3xsg6LnNgjgSA.crl (hash: q4WQNhgC1AQNFx9IkHaPbPy4e8I1LNfg/wH6NfsePgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:32:c2:33:ff:76:08:ed:60:6b:8a:dd:b7:55:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f7727a41308d9b9f6e63df1b20e8b9cd8238120
Validity
Not Before: Nov 11 09:01:37 2025 GMT
Not After : Nov 12 09:01:37 2025 GMT
Subject: CN=37263e60f236ee63a884c9d628d70d62ca53d393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:aa:b9:0d:b2:51:01:ba:c9:e4:f9:0d:e9:e9:
a1:b6:7b:83:c6:37:2e:7d:10:a8:34:6e:31:5e:c6:
be:6d:42:26:31:cd:0d:52:c8:6c:2e:f3:b0:3b:6a:
28:47:b3:ef:6b:04:52:ec:f7:77:98:bd:d2:dc:09:
cd:91:e3:9c:13:76:91:36:3c:de:62:d9:fd:dc:e5:
fd:55:81:e4:c7:c0:58:3c:61:7d:a8:0c:ca:ab:69:
89:47:ee:1f:ea:e5:0a:c9:be:82:96:b3:fb:e7:6c:
6d:3a:16:75:90:13:47:ce:e6:34:06:6d:30:ff:49:
10:f8:c9:6b:4e:8e:bc:9f:7f:30:c0:d3:fc:8c:a7:
f0:e6:3a:aa:24:7e:0f:a3:53:da:59:8c:0a:37:c9:
f2:34:68:a7:e4:5d:91:40:a7:49:f1:fd:51:76:e1:
b5:78:58:b1:f8:85:94:5a:5d:c5:fc:6e:c3:46:ac:
98:d4:23:13:8f:f6:86:c3:55:b2:82:8b:00:b4:ab:
e3:e6:c2:b7:2c:c6:77:a0:42:4d:6f:8a:2e:94:de:
0f:8f:0d:dc:bc:18:fb:22:37:28:ad:f7:34:d3:19:
91:f8:66:8a:d0:c8:72:3b:67:a2:6b:6d:2b:c4:fb:
61:6f:20:6f:d0:36:27:e7:14:e8:13:ec:5b:95:97:
37:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:26:3E:60:F2:36:EE:63:A8:84:C9:D6:28:D7:0D:62:CA:53:D3:93
X509v3 Authority Key Identifier:
keyid:3F:77:27:A4:13:08:D9:B9:F6:E6:3D:F1:B2:0E:8B:9C:D8:23:81:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:0a:d0:4e:cb:5b:62:9a:ac:af:6a:05:42:ab:72:a7:de:e3:
96:6d:d4:5f:1b:bd:91:64:8d:a3:29:d9:20:48:5d:76:0c:17:
64:bc:5f:3b:5e:b5:c5:d7:2e:46:e8:5d:14:16:f6:2e:88:7a:
ea:06:98:c3:66:2b:e8:38:ff:14:56:30:65:65:1d:1b:ae:0f:
20:10:cd:35:8b:fd:22:1d:f0:e2:99:bb:46:c0:0f:2c:0a:5f:
d8:2c:02:50:8c:61:c3:48:98:3c:d5:93:f0:85:45:ef:62:34:
bc:da:4d:0f:b6:8f:fb:6c:1e:f3:97:06:5a:7f:a7:f3:cf:ea:
e2:8f:80:55:c3:5a:44:da:9e:be:6f:2f:75:f2:0c:d9:f5:43:
76:ba:57:18:57:85:0a:05:f5:ea:15:37:93:56:50:6e:2e:e7:
e3:d0:f6:ca:b9:22:32:c8:19:d0:6e:28:92:00:93:9c:90:cb:
b5:b0:37:c6:bb:79:9a:4e:13:75:59:47:26:5a:50:81:90:af:
1f:94:7e:91:13:f2:aa:12:20:ea:73:16:55:54:9a:84:e2:bb:
75:79:01:f6:5a:7f:02:a6:be:31:92:98:8e:fc:1c:81:ae:ea:
a9:f8:ca:b6:0f:0e:23:a2:d6:2b:6b:dc:ba:aa:c5:41:ab:cc:
7a:3d:2d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:41 2025 by rpki-client