Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
File: P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft (raw, json)
Hash identifier: MwVUH+gebZ9GAdemiUVmOsanj5m/JXkQYPIoW/cUhPY=
Subject key identifier: 61:07:18:80:B2:57:95:F7:DB:45:10:F0:08:86:D1:FC:61:6D:4A:A2
Authority key identifier: 3F:DA:63:02:13:CD:42:38:80:F9:FE:F1:6D:78:FB:43:6E:08:F2:47
Certificate issuer: /CN=3fda630213cd423880f9fef16d78fb436e08f247
Certificate serial: 0199FD346AE9872F981DFDAF0768966F191D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
Manifest number: 0DC3
Signing time: Sun 19 Oct 2025 16:01:34 +0000
Manifest this update: Sun 19 Oct 2025 16:01:34 +0000
Manifest next update: Mon 20 Oct 2025 16:01:34 +0000
Files and hashes: 1: P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl (hash: 8Rn8hnG4VV5FhXuFr6puvSmyQ24WXkEp3fqbm8ZBGrQ=)
2: gDeneKJTQtX9OIr5MlGy6dCHOYA.roa (hash: 3GvtE0X7YdCyMroXXNh2AEtxzHBHmy4owPJWbBMbbzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:6a:e9:87:2f:98:1d:fd:af:07:68:96:6f:19:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fda630213cd423880f9fef16d78fb436e08f247
Validity
Not Before: Oct 19 16:01:34 2025 GMT
Not After : Oct 20 16:01:34 2025 GMT
Subject: CN=61071880b25795f7db4510f00886d1fc616d4aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9e:16:21:69:dc:22:d5:04:53:fa:08:43:ec:
e9:d8:7d:e8:c1:9b:bf:d2:33:66:1e:96:2d:92:b0:
a8:ac:38:c1:1d:5c:a2:95:c1:42:18:c5:37:a0:1a:
ab:72:5c:c7:6f:f9:4c:77:14:0f:17:b2:56:52:ee:
7c:94:c5:4a:99:9b:27:71:47:6f:78:5b:26:b2:20:
14:d7:cc:fb:04:03:40:55:02:1c:2c:52:fc:6c:b0:
60:e0:c7:33:ab:9e:ad:9b:28:74:a3:92:26:b0:76:
f6:1e:87:f1:61:c9:8a:3f:35:5b:46:49:2e:10:a4:
56:14:7f:9c:2c:40:31:8b:53:60:51:0c:88:1c:49:
18:0d:11:20:04:cb:fb:d6:c5:06:2b:7c:16:78:42:
b4:cd:99:60:45:82:67:3a:97:e2:35:d7:4f:16:a1:
1d:8e:19:e3:1a:69:35:6d:8c:9c:24:86:51:07:5e:
ed:b7:d4:3c:5a:27:d2:63:6c:da:20:9b:f4:93:0d:
b2:c9:14:1e:12:b9:ab:9e:55:92:37:64:97:2e:db:
3f:20:1c:26:50:2c:e3:7a:94:3a:71:fb:7a:cd:13:
d3:4d:86:b9:f0:d9:dc:8a:2d:c8:9f:a0:de:c7:30:
9a:df:92:07:31:8a:06:04:5e:a3:ce:52:e8:c1:fc:
d0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:07:18:80:B2:57:95:F7:DB:45:10:F0:08:86:D1:FC:61:6D:4A:A2
X509v3 Authority Key Identifier:
keyid:3F:DA:63:02:13:CD:42:38:80:F9:FE:F1:6D:78:FB:43:6E:08:F2:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:22:f8:35:75:bc:79:d7:ce:61:75:e7:6c:ad:07:fc:71:aa:
1c:65:a9:2f:64:ba:3d:78:0a:6c:01:b8:3e:7c:06:90:5d:29:
0b:8b:1d:93:0c:b5:8b:bd:21:bc:66:2d:63:5d:4f:53:04:0d:
65:d2:7b:73:3b:76:53:30:40:e9:c7:ae:32:f3:f0:18:1f:69:
8e:8c:70:04:ac:ab:22:c1:1f:5a:30:71:db:f7:40:ed:be:f2:
92:ec:5e:19:d2:52:8d:f5:ce:55:ff:5c:58:40:3a:d3:87:f4:
6a:7a:c8:b8:56:09:6f:4e:57:4c:2a:5f:ef:9c:c1:7d:6e:99:
f0:f8:a3:94:47:9f:cb:66:ba:f6:ff:0c:45:cc:5c:27:3b:76:
cf:74:f6:ca:09:da:7b:8e:60:c7:90:91:a6:68:46:d7:db:a5:
cb:7e:68:27:0a:87:c6:b5:28:81:c6:3f:56:77:13:bd:45:fb:
b5:66:16:5e:27:f8:77:fd:ee:c5:06:ba:e3:0d:c0:d8:1d:e2:
60:a6:39:d6:7e:40:a3:88:16:ca:1a:4d:c6:cd:a9:38:7d:3d:
96:73:40:44:09:38:e8:17:7e:b6:54:e4:45:cd:29:4e:22:94:
14:b9:d7:da:be:7b:40:33:36:26:5f:94:a6:55:78:fe:53:cb:
ab:bd:ee:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:21:11 2025 by rpki-client