Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
File: P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft (raw, json)
Hash identifier: CTRhK4XlufueMPYoVNnXjeKj/SDZgj2KHFWgTx4B/Os=
Subject key identifier: C4:7E:88:BB:53:70:B7:F3:F0:09:F0:59:4F:FD:AF:08:9E:30:63:2C
Authority key identifier: 3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4
Certificate issuer: /CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4
Certificate serial: 0199FCFDB4115D498242F7182C3936A29076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
Manifest number: 070D
Signing time: Sun 19 Oct 2025 15:01:49 +0000
Manifest this update: Sun 19 Oct 2025 15:01:49 +0000
Manifest next update: Mon 20 Oct 2025 15:01:49 +0000
Files and hashes: 1: P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl (hash: 24bBPQukZvojDFUQJqXbpzufd4nN0jPS50151pBE/bQ=)
2: gZtu_mvpfnIEYpfX3O3Zhm8l3oY.roa (hash: eNPnQnlHd8yy83e7BBZ3vW4/qWGTiwqTNCUFgABwjBU=)
3: tJp6RAZ2Y3Z3o2R75yur_W5Ex-w.roa (hash: GGPR+7RZv9vuHEdD+t//WBPxSiCJToRwFhnk1FKFqWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:b4:11:5d:49:82:42:f7:18:2c:39:36:a2:90:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4
Validity
Not Before: Oct 19 15:01:49 2025 GMT
Not After : Oct 20 15:01:49 2025 GMT
Subject: CN=c47e88bb5370b7f3f009f0594ffdaf089e30632c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a0:54:c4:5a:a2:16:2a:df:b6:76:ea:4a:ae:
c1:97:cc:81:bf:ac:a4:e3:d1:2e:35:ef:77:71:5d:
2b:0b:d8:9a:d7:32:f1:72:02:5f:32:73:bf:c1:ae:
a2:fb:4b:43:61:3a:32:e4:4b:a8:62:22:4d:fd:29:
5c:37:41:f2:50:36:e4:e4:7f:fc:12:d0:ee:5b:33:
5d:f0:02:fc:fb:3b:4b:06:43:3a:8a:49:7b:2d:e1:
06:d4:7b:c9:17:8a:0b:d5:a2:cd:c3:40:96:16:60:
15:6c:d0:42:26:c8:e9:77:bb:37:b1:b5:ab:36:fe:
37:f1:37:2a:c6:ca:39:c7:8d:d0:c5:2b:5b:77:80:
de:58:36:de:bf:8f:3e:ca:6a:1a:d5:04:ed:2d:44:
e8:4a:2a:a4:2a:30:43:1d:19:ee:03:15:91:be:68:
2a:e2:2f:5e:31:2f:c5:ff:a4:fd:41:76:ed:12:39:
32:15:96:78:30:22:ec:13:24:62:6b:ef:78:06:3c:
47:74:29:e7:ca:2e:a1:7e:f9:c7:79:8c:dc:5f:d4:
b1:6c:24:8b:7a:01:1b:43:66:bf:ea:25:ac:03:07:
6e:28:fe:09:52:d3:7d:77:3b:04:66:22:a6:df:99:
45:46:89:7b:20:84:31:4a:d5:ff:06:88:ed:ff:5d:
8a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:7E:88:BB:53:70:B7:F3:F0:09:F0:59:4F:FD:AF:08:9E:30:63:2C
X509v3 Authority Key Identifier:
keyid:3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:1c:6d:80:7f:52:00:76:5e:0e:bd:2b:40:3c:35:8f:e0:c7:
e8:93:6f:36:72:60:1d:af:0d:9a:8b:09:e5:f4:0c:f5:c2:3f:
5a:80:30:4b:28:4e:0c:d1:bf:64:de:14:82:02:38:b1:89:c8:
94:d7:67:12:24:5d:61:c0:8d:ce:21:d6:f4:9f:8d:21:5c:39:
57:2a:1b:28:3d:1a:28:c7:5e:d6:3a:f6:15:f9:b8:11:d5:97:
72:df:29:8f:f5:ef:c2:ee:fa:81:07:bb:26:75:bc:6a:3b:b3:
86:6a:df:b9:6a:a3:3e:45:c5:ae:ef:66:d5:1b:d8:c7:53:63:
1a:b3:81:25:6b:51:39:eb:e3:4f:c0:85:bb:90:bb:f8:82:55:
a6:98:ce:46:3a:10:c1:7e:13:7b:f8:e9:19:4e:c4:74:2a:54:
f9:37:1d:c5:06:8c:54:4d:3c:93:74:18:e7:4c:a1:4e:12:05:
d0:16:eb:bf:5f:1a:47:36:5e:4e:dd:6c:1b:3f:4f:be:3e:76:
9e:cc:fd:b7:56:47:f4:64:37:94:48:05:fd:bb:67:3b:ea:25:
67:aa:43:c6:2c:94:67:1f:ed:0f:35:9a:74:6a:46:ee:a8:9f:
83:2e:b9:29:83:4c:da:2e:55:8b:54:27:bc:2f:31:6a:25:fb:
39:33:c4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:33 2025 by rpki-client