Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
File: P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft (raw, json)
Hash identifier: i9tP80i8r15tRuopAN/MYh6Erogrrpxh99+f+TEjUP0=
Subject key identifier: 03:B2:9A:5C:34:13:8C:5D:42:C0:84:C1:E1:B4:5C:60:20:3B:4F:03
Authority key identifier: 3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4
Certificate issuer: /CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4
Certificate serial: 0197B7B326F878F0F0C883238D101B176072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
Manifest number: 05E0
Signing time: Sat 28 Jun 2025 18:01:00 +0000
Manifest this update: Sat 28 Jun 2025 18:01:00 +0000
Manifest next update: Sun 29 Jun 2025 18:01:00 +0000
Files and hashes: 1: P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl (hash: Kt/80FFMtZZ0IzrWjo1bH8IsCGgmwLJg3cRnm9I/6i4=)
2: gZtu_mvpfnIEYpfX3O3Zhm8l3oY.roa (hash: eNPnQnlHd8yy83e7BBZ3vW4/qWGTiwqTNCUFgABwjBU=)
3: tJp6RAZ2Y3Z3o2R75yur_W5Ex-w.roa (hash: GGPR+7RZv9vuHEdD+t//WBPxSiCJToRwFhnk1FKFqWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:26:f8:78:f0:f0:c8:83:23:8d:10:1b:17:60:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4
Validity
Not Before: Jun 28 18:01:00 2025 GMT
Not After : Jun 29 18:01:00 2025 GMT
Subject: CN=03b29a5c34138c5d42c084c1e1b45c60203b4f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:46:00:e4:9e:23:5c:eb:74:f2:15:5d:74:ce:
a8:46:2b:d0:34:e2:fd:58:62:8c:2d:d8:8c:af:bf:
56:37:61:f3:42:88:bb:af:4a:fa:dd:db:84:73:89:
e2:47:a3:a6:b3:91:2d:9d:f9:e0:88:1e:b6:c5:21:
d8:bb:25:19:79:4e:0a:c4:4b:65:88:04:53:27:09:
92:bb:0b:41:70:3d:f6:ab:f4:53:86:75:07:90:ab:
44:eb:33:d2:03:f9:58:ea:6e:af:df:70:df:3a:c6:
12:88:7b:ef:90:ad:65:36:7f:00:08:11:23:1e:7a:
7c:f2:86:89:2a:40:5b:e9:7a:e0:a6:81:f0:b0:51:
b3:8c:de:68:16:44:14:54:6a:91:fd:1f:54:31:65:
ca:84:cd:e6:9e:dd:85:f4:a7:ac:37:6c:57:7f:1a:
ae:77:84:76:7b:75:e1:b9:9d:e7:f4:5e:39:03:c7:
8e:76:94:3f:79:e9:e5:70:bb:08:ec:99:09:c4:c3:
13:ad:b2:5a:5e:3f:41:be:50:91:8b:06:b6:27:bc:
b3:b8:7a:a6:71:32:c3:5f:08:c0:ec:a3:01:7e:f7:
ef:1c:5c:ca:a1:f6:88:63:b8:7b:5a:bf:5d:c2:5c:
ad:5b:5d:08:8e:01:94:0f:d9:4e:8b:1f:cc:e5:02:
06:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B2:9A:5C:34:13:8C:5D:42:C0:84:C1:E1:B4:5C:60:20:3B:4F:03
X509v3 Authority Key Identifier:
keyid:3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:33:f5:69:69:19:3b:db:c6:0f:b9:f7:76:24:4b:87:78:48:
6f:2e:ac:0e:f8:d2:1d:c2:48:3a:f1:4a:21:e4:9c:46:9e:0c:
5b:f8:f9:e8:18:75:13:b2:ba:22:20:3f:de:91:53:62:ee:6f:
5f:a3:da:ad:59:83:34:4f:28:fc:56:e9:8d:00:e5:b0:ba:34:
da:71:c8:76:1f:ee:bc:9a:c4:76:19:49:4e:59:39:a3:7b:b6:
d6:b8:e9:e6:d7:e1:41:96:c0:08:d4:9c:96:d6:37:da:15:ec:
02:c5:e3:1a:7f:0f:25:01:0b:b9:9f:4e:2e:59:f7:03:c1:43:
42:02:f9:fc:d4:a6:fa:b8:d4:3f:e8:49:ce:c8:b3:78:d5:bb:
ae:22:7f:18:55:23:d7:02:a3:d6:0d:9b:72:2b:2b:d9:25:82:
6f:d3:7b:80:b1:46:e1:1c:b3:cb:85:c5:dd:4b:10:a0:a4:58:
ef:30:32:0c:bb:fd:68:79:8a:c0:c3:b9:31:e1:89:f2:d8:29:
95:81:b6:39:47:7d:b3:04:5c:d8:8e:51:0d:4b:9a:e2:4c:45:
03:55:dc:dd:ee:16:b6:50:c0:13:ea:94:ac:19:33:09:b3:6f:
e4:ed:ef:5a:e3:5b:2b:9d:e9:70:a6:47:9a:f9:53:d6:fd:4c:
f2:c7:21:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3syb4ePDwyIMjjRAbF2ByMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZTE0MzI5YjZjMWU2OTUwMTFhODI0MDZmN2FmNDhmNGJi
MTBhZDQwHhcNMjUwNjI4MTgwMTAwWhcNMjUwNjI5MTgwMTAwWjAzMTEwLwYDVQQD
EygwM2IyOWE1YzM0MTM4YzVkNDJjMDg0YzFlMWI0NWM2MDIwM2I0ZjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0YA5J4jXOt08hVddM6oRivQNOL9
WGKMLdiMr79WN2HzQoi7r0r63duEc4niR6Oms5EtnfngiB62xSHYuyUZeU4KxEtl
iARTJwmSuwtBcD32q/RThnUHkKtE6zPSA/lY6m6v33DfOsYSiHvvkK1lNn8ACBEj
Hnp88oaJKkBb6XrgpoHwsFGzjN5oFkQUVGqR/R9UMWXKhM3mnt2F9KesN2xXfxqu
d4R2e3XhuZ3n9F45A8eOdpQ/eenlcLsI7JkJxMMTrbJaXj9BvlCRiwa2J7yzuHqm
cTLDXwjA7KMBfvfvHFzKofaIY7h7Wr9dwlytW10IjgGUD9lOix/M5QIGGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAOymlw0E4xdQsCEweG0XGAgO08DMB8GA1UdIwQY
MBaAFD/hQym2weaVARqCQG969I9LsQrUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC1GREtiYkI1cFVCR29KQWIzcjBqMHV4Q3RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wMGM2YzQtYWIyOC00NDA1LWI2OTQt
YzNkNTdlMjM4N2NhLzEvUC1GREtiYkI1cFVCR29KQWIzcjBqMHV4Q3RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wMGM2YzQtYWIyOC00NDA1LWI2OTQtYzNkNTdlMjM4N2Nh
LzEvUC1GREtiYkI1cFVCR29KQWIzcjBqMHV4Q3RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjzP1aWkZ
O9vGD7n3diRLh3hIby6sDvjSHcJIOvFKIeScRp4MW/j56Bh1E7K6IiA/3pFTYu5v
X6ParVmDNE8o/FbpjQDlsLo02nHIdh/uvJrEdhlJTlk5o3u21rjp5tfhQZbACNSc
ltY32hXsAsXjGn8PJQELuZ9OLln3A8FDQgL5/NSm+rjUP+hJzsizeNW7riJ/GFUj
1wKj1g2bcisr2SWCb9N7gLFG4Ryzy4XF3UsQoKRY7zAyDLv9aHmKwMO5MeGJ8tgp
lYG2OUd9swRc2I5RDUua4kxFA1Xc3e4WtlDAE+qUrBkzCbNv5O3vWuNbK53pcKZH
mvlT1v1M8schOg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:18 2025 by rpki-client