Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
File: P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft (raw, json)
Hash identifier: JqtrkDTFMb70dtEucNy+EG3ixoDdGMgdYBbhtxEfTfc=
Subject key identifier: 3B:E7:95:48:F9:47:A9:B7:8C:CB:AD:F9:EA:11:CC:24:1A:89:4A:60
Authority key identifier: 3F:DA:63:02:13:CD:42:38:80:F9:FE:F1:6D:78:FB:43:6E:08:F2:47
Certificate issuer: /CN=3fda630213cd423880f9fef16d78fb436e08f247
Certificate serial: 0198D5BC3DFE3BB8DD1A4266C512FDEA2114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
Manifest number: 0D2A
Signing time: Sat 23 Aug 2025 07:02:20 +0000
Manifest this update: Sat 23 Aug 2025 07:02:20 +0000
Manifest next update: Sun 24 Aug 2025 07:02:20 +0000
Files and hashes: 1: P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl (hash: UsPlGV4uxdd98PX6UtCPibZAEa98C6zn2KDbTpnkegs=)
2: gDeneKJTQtX9OIr5MlGy6dCHOYA.roa (hash: 3GvtE0X7YdCyMroXXNh2AEtxzHBHmy4owPJWbBMbbzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:3d:fe:3b:b8:dd:1a:42:66:c5:12:fd:ea:21:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fda630213cd423880f9fef16d78fb436e08f247
Validity
Not Before: Aug 23 07:02:20 2025 GMT
Not After : Aug 24 07:02:20 2025 GMT
Subject: CN=3be79548f947a9b78ccbadf9ea11cc241a894a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a6:a1:93:30:50:a4:df:41:18:94:99:38:d9:
59:72:09:04:dc:43:da:c0:7b:25:44:c4:75:40:c9:
1a:e3:27:44:f5:90:bb:97:c1:e3:2c:45:21:72:86:
e0:3d:e2:ac:01:a7:42:a2:6d:05:57:12:07:88:ed:
23:f9:26:93:e3:e4:7c:10:d4:40:eb:b8:e6:76:09:
f8:4d:52:16:b1:fd:33:79:d5:04:1e:7e:35:78:af:
78:45:2f:dc:c7:d8:f4:a8:45:d4:b6:4f:15:1d:e6:
b4:3d:dd:95:66:5d:05:33:c4:15:8b:a4:6b:3d:b1:
3a:1e:f8:23:48:78:0d:2e:22:12:62:3c:74:89:ec:
83:59:e4:73:81:d6:60:15:c8:a4:83:02:b9:d4:f6:
ab:d2:8a:d2:fe:ba:fe:6d:44:a4:a1:1e:b5:d1:ea:
b3:32:e8:c1:c7:b7:ab:86:42:dd:dd:15:cd:d6:1b:
6f:16:a0:34:fc:0d:71:3e:2a:ad:c4:3a:49:ed:f5:
79:8b:42:14:e3:7f:04:77:c7:08:b4:63:2d:96:f5:
54:f2:36:45:bc:f2:37:96:00:0f:55:13:5e:e0:97:
83:3e:19:b6:85:c6:0b:cc:f2:29:8c:18:d7:6d:e7:
79:e6:3a:a2:6d:aa:dd:ad:ba:fc:4a:d0:1f:c3:1f:
89:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E7:95:48:F9:47:A9:B7:8C:CB:AD:F9:EA:11:CC:24:1A:89:4A:60
X509v3 Authority Key Identifier:
keyid:3F:DA:63:02:13:CD:42:38:80:F9:FE:F1:6D:78:FB:43:6E:08:F2:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d1:37:3c:a6:e8:1d:a6:16:72:71:26:cf:9e:44:25:a1:0f:
58:3f:4b:c5:d1:e9:1c:46:4a:29:3d:7c:81:e7:9e:52:6b:34:
cb:44:23:1d:0b:e5:5c:ac:ff:01:7d:d6:3e:14:8f:ae:f0:78:
ea:61:0b:05:c6:5e:b0:b4:6b:fe:00:f9:fb:93:ae:9c:27:e0:
15:82:80:1a:4b:35:02:6b:cb:cf:1e:5e:3c:4f:48:c7:fc:1e:
c1:ff:7f:76:37:c9:de:88:31:f5:9a:ec:43:07:9d:ff:56:92:
34:62:29:66:eb:66:7d:df:ab:29:9d:ed:4b:f8:55:df:13:24:
31:3b:80:22:ef:ef:30:cd:ac:f1:1e:e0:e0:83:1d:c1:46:43:
ef:7d:eb:b9:8e:b0:66:a4:69:77:d2:a0:3f:ee:46:6d:7e:10:
df:9d:8f:17:59:0d:ba:32:f5:dd:c0:22:bb:d5:72:6d:cd:6d:
76:8d:4d:40:3d:ca:7b:61:8a:71:d7:4a:e8:e4:ae:1b:47:f6:
3a:e0:36:85:f7:f2:de:17:98:fc:66:c3:d7:e4:cd:4b:db:8c:
3d:ea:41:f2:5c:d7:e4:ed:a9:a5:95:eb:b6:ca:db:1d:8d:d9:
46:8d:0f:bb:e9:70:cd:31:d2:3e:a7:1b:88:89:f5:9f:e3:63:
e0:d3:d9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:43:37 2025 by rpki-client