Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
File: P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft (raw, json)
Hash identifier: XG7H3XVSjsiQIDLVVBoaEyePIBzMsov4rwfOtbLhtQ8=
Subject key identifier: D3:F3:9B:F2:86:7D:32:B2:E2:83:A2:09:BC:61:7D:06:7F:C9:EE:59
Authority key identifier: 3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA
Certificate issuer: /CN=3f46c351ee89c9f5558167530704885b8be46eaa
Certificate serial: 0199FD6B4E3CBB533E3C04807AE0FFACE526
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 17:01:31 +0000
Manifest this update: Sun 19 Oct 2025 17:01:31 +0000
Manifest next update: Mon 20 Oct 2025 17:01:31 +0000
Files and hashes: 1: P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl (hash: wyrvO5yQiJZLNozFT007/aUkcZk+4r4ltPInDpLkAJo=)
2: QxahHBF5SSiTCKjSwe1FlEjpjhQ.roa (hash: d1pnjZFtEihgfo0iFcK4wvbFSZ9uzn9ZUOrv5mZKK8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:4e:3c:bb:53:3e:3c:04:80:7a:e0:ff:ac:e5:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f46c351ee89c9f5558167530704885b8be46eaa
Validity
Not Before: Oct 19 17:01:31 2025 GMT
Not After : Oct 20 17:01:31 2025 GMT
Subject: CN=d3f39bf2867d32b2e283a209bc617d067fc9ee59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2d:97:a5:b3:58:2a:b7:3d:e9:1a:49:fe:98:
89:2a:5c:c5:71:5b:5a:3a:e5:30:25:b5:be:6f:87:
4d:1a:1a:03:c3:8e:fb:71:db:94:f4:7f:a0:d5:34:
46:7f:15:bf:41:7a:0b:bc:7f:2c:9a:56:51:00:d5:
0c:0a:5f:3d:f3:e0:dd:af:5a:53:b7:ef:b5:d0:6a:
bf:05:cf:70:65:ec:92:17:51:9a:a5:7f:f1:70:fb:
68:63:75:4f:88:73:18:2b:b5:60:5f:19:48:85:a8:
bc:0a:f8:30:ca:12:bc:6c:fc:59:d3:b0:f8:5d:60:
84:27:b2:72:ae:2a:55:34:86:20:70:7c:67:ff:b1:
ec:4a:5b:35:82:2b:b8:45:99:89:30:ec:8c:5f:a9:
21:a5:b1:3c:64:07:17:60:d6:c2:cd:9c:e3:bf:30:
f9:a5:51:d7:b5:f1:fe:cb:c6:ab:d5:54:94:33:90:
71:78:e9:34:cd:3f:10:39:9c:9b:10:67:a1:9a:e0:
8e:42:57:3a:c2:ca:9e:ee:94:6b:62:fb:43:0c:db:
eb:55:db:da:02:37:ae:94:84:35:b4:7d:59:2b:f7:
f0:60:04:f4:09:2e:a9:72:4e:4f:34:57:87:a1:25:
f1:e3:cf:44:fa:de:ac:4d:29:16:24:22:ff:c2:f5:
f7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F3:9B:F2:86:7D:32:B2:E2:83:A2:09:BC:61:7D:06:7F:C9:EE:59
X509v3 Authority Key Identifier:
keyid:3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d2:c4:90:1e:8e:8d:93:95:5a:f2:61:4e:12:70:e1:5e:c9:
a0:fd:56:12:07:b2:ed:55:6e:8e:77:5a:c7:14:ca:30:e5:98:
4b:b1:08:5e:2b:a2:19:5e:46:29:b1:98:6c:32:7b:24:d5:14:
36:46:8d:f9:5d:53:e1:b6:99:2d:50:31:63:68:2d:58:e2:d3:
ff:28:89:cc:02:f3:17:e4:91:a8:51:4a:13:98:99:ec:8a:1b:
55:c9:4d:cb:bb:a0:29:9b:50:b6:0a:39:e7:87:41:87:e4:48:
ab:87:8d:52:18:03:07:c2:0c:0a:53:b2:a8:59:9c:c9:bf:db:
e3:92:38:3e:bf:7e:8f:b9:e8:fb:25:4f:8b:99:14:48:6c:85:
6b:03:3f:74:dd:63:61:9b:83:c2:20:fa:53:a2:a4:c1:32:80:
9b:2e:92:71:f9:49:c7:30:5d:c9:ec:e1:0d:60:f6:5a:7c:3f:
64:c2:c6:0e:d2:a1:af:47:4f:83:15:d8:35:74:99:64:98:bb:
f0:04:e8:ec:fc:aa:8a:61:33:d1:a6:dc:7f:e4:88:32:64:2e:
5b:a6:db:de:56:b1:41:50:c1:0c:86:2a:c8:67:3e:64:70:93:
bc:cb:9d:a8:4d:a2:53:14:f7:7c:1d:23:06:bf:74:b0:3b:b5:
23:ad:ce:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:06 2025 by rpki-client