Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
File: P__L7IiMEEfyIdfPk5a_FBKrr5s.mft (raw, json)
Hash identifier: 2/3ASdMikaoUzfoq4KMHPhOLUlbuRNKJsz5wmGwWh/8=
Subject key identifier: 5F:52:B6:13:4A:10:8E:A0:C5:02:DC:2B:16:1D:F6:5C:23:D5:69:04
Authority key identifier: 3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B
Certificate issuer: /CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
Certificate serial: 0198D7A93C0564C2810D420AECD64E945AD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
Manifest number: 0C36
Signing time: Sat 23 Aug 2025 16:00:48 +0000
Manifest this update: Sat 23 Aug 2025 16:00:48 +0000
Manifest next update: Sun 24 Aug 2025 16:00:48 +0000
Files and hashes: 1: G1ZoPreJjIkkyyNJWvhlfTtWo1U.roa (hash: ZGtSGL/7afo62ORK+9uxVq7WnlKM3t68x8dY3Lc6a40=)
2: P__L7IiMEEfyIdfPk5a_FBKrr5s.crl (hash: K3b57jgQOGYxuOHExyp128AalyaLPiQm8K6LQPSF3I0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:3c:05:64:c2:81:0d:42:0a:ec:d6:4e:94:5a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
Validity
Not Before: Aug 23 16:00:48 2025 GMT
Not After : Aug 24 16:00:48 2025 GMT
Subject: CN=5f52b6134a108ea0c502dc2b161df65c23d56904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f7:dd:fd:1c:b9:29:88:cc:8d:ef:b7:19:51:
ce:80:b1:40:62:2e:12:ed:ac:1e:7a:97:e0:fb:cf:
55:6a:91:15:0b:51:09:ba:b6:c5:f6:e2:5f:64:56:
96:6d:64:5e:f7:14:dd:ac:38:84:8a:a8:9a:27:6b:
51:9c:62:85:73:46:6e:15:0b:a3:96:4b:25:7b:81:
04:cd:82:ea:06:9e:5f:d1:dd:38:73:b2:ee:62:e1:
d4:73:98:30:24:1c:02:a7:ca:5c:7e:ca:b3:e9:3f:
34:30:47:fe:8d:5f:fc:bd:94:6f:28:48:f3:08:da:
56:ba:f0:8a:3d:68:53:b5:61:00:4b:e9:9c:9e:51:
0c:ab:5a:cb:b2:72:93:2a:4b:4f:6f:21:6b:90:a5:
80:ca:79:16:3f:e9:77:df:b8:fe:a5:11:e9:fc:27:
ee:a2:bc:3d:7e:f8:7f:80:69:05:bd:e8:2d:43:f8:
68:12:d8:b6:7a:49:ba:9b:59:93:91:a1:3d:fd:2b:
fb:60:5f:f1:ac:8b:a5:f5:de:97:6c:7f:34:24:c5:
d6:5a:cc:73:1f:58:d3:e7:1a:c6:0e:99:65:06:23:
6e:ec:9a:b4:19:92:ea:99:12:2e:f1:1a:84:04:11:
b4:20:85:d0:57:fb:27:9f:6e:6a:87:98:b8:e4:09:
d3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:52:B6:13:4A:10:8E:A0:C5:02:DC:2B:16:1D:F6:5C:23:D5:69:04
X509v3 Authority Key Identifier:
keyid:3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:8f:90:32:f6:69:f3:2e:bd:4d:e2:9d:92:d9:33:9f:57:64:
c1:82:dc:30:c6:76:a3:b7:b8:56:d0:6a:73:a0:8f:59:58:7b:
fd:94:82:a8:0b:40:dd:2c:34:37:f4:2b:bf:2c:2d:18:09:5d:
b1:80:30:53:6a:35:4a:9a:41:09:20:a3:21:3a:7b:2b:18:e4:
94:d7:24:18:f1:e1:25:1d:2f:cf:85:98:b1:eb:c8:2a:6f:67:
6b:3b:16:7c:af:00:26:1e:28:fe:88:c9:1e:19:f1:14:e3:e2:
46:7b:3a:e5:e4:8c:41:8a:0f:67:cc:8d:4b:28:cf:58:9e:e5:
aa:c9:41:17:31:c1:5e:58:27:5b:00:0a:06:63:4a:1d:0a:72:
cb:98:67:c4:d8:17:f6:cf:ff:79:78:84:66:d5:39:1b:94:5c:
25:8f:91:50:f1:f3:43:23:10:0b:df:cb:a3:f6:82:6b:c1:99:
8c:9d:32:5b:5d:7b:25:0c:d8:8b:cc:2e:49:96:60:ae:25:fb:
a0:54:a9:94:e2:bf:34:d5:b9:66:d2:d1:ff:ac:f0:d0:c8:01:
5a:b4:89:6f:44:df:c6:37:48:8d:19:1e:6b:cb:27:3d:f3:7a:
a6:50:98:3c:3d:1c:3b:50:a5:20:e2:04:22:f3:9b:1f:47:d3:
b1:fc:01:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:59:42 2025 by rpki-client