Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft
File: p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft (raw, json)
Hash identifier: BhzEPEzwCl4fEr/KRAjmUyuftuTKbtGp7Gu/rkjFFtk=
Subject key identifier: 4F:8B:EB:9F:B9:B6:F4:F4:61:85:23:1A:1D:0C:E6:8B:1E:6E:C1:91
Authority key identifier: A7:77:20:C7:DC:1D:C3:ED:D1:D0:D4:7F:92:3B:CD:83:3F:06:AF:36
Certificate issuer: /CN=a77720c7dc1dc3edd1d0d47f923bcd833f06af36
Certificate serial: 0199FBB36EA51A700B8CE6446C2012256C0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft
Manifest number: 06E8
Signing time: Sun 19 Oct 2025 09:01:04 +0000
Manifest this update: Sun 19 Oct 2025 09:01:04 +0000
Manifest next update: Mon 20 Oct 2025 09:01:04 +0000
Files and hashes: 1: hq-hZy5eF6T-32Mpp_MYYMTh_lo.roa (hash: svp2ZTIwxVMxeppEarQFFUCvZlDSIQbyXGekSzDFCRo=)
2: oe0ViHcJehxm3wVuZHtIwUX00hU.roa (hash: RwLw3XJajb9LZZAlaGbGSJVNCQJewc1VgXJkyuKlD8Q=)
3: p3cgx9wdw-3R0NR_kjvNgz8GrzY.crl (hash: U2nyQ6cHShdIeIjmOUxlbXEBLtqOkMSIitzDTixkJY4=)
4: wsmN0GUZsWjC_T-MselV4vkxQWc.roa (hash: yTPdTeVo9RosDc+EbxC7mvYcTFyk5tLkcD8SHn8y0Zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:6e:a5:1a:70:0b:8c:e6:44:6c:20:12:25:6c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a77720c7dc1dc3edd1d0d47f923bcd833f06af36
Validity
Not Before: Oct 19 09:01:04 2025 GMT
Not After : Oct 20 09:01:04 2025 GMT
Subject: CN=4f8beb9fb9b6f4f46185231a1d0ce68b1e6ec191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:16:d2:0d:bf:6f:f2:f2:c8:99:be:d3:39:7b:
97:4e:13:61:6b:5e:15:f4:a8:fe:4e:c2:ef:df:fa:
e2:a8:bd:65:03:7e:be:ff:c3:15:95:e5:e2:a2:34:
f9:70:6e:d6:54:10:65:72:85:34:8b:9c:9a:d0:64:
db:e5:5f:7d:71:6f:71:64:f2:58:bb:d3:31:2f:3c:
9d:9e:2d:66:ec:65:4e:d0:b1:e3:44:fe:1c:b0:3f:
1c:db:ff:ae:02:4b:a5:e8:cb:ea:4a:f1:74:2c:0b:
eb:48:ac:90:1c:83:b4:f8:6f:a4:e3:ec:b7:99:f8:
66:5a:16:ff:11:a8:9e:d1:41:ae:6a:8f:f5:ba:ef:
20:c1:c7:aa:e0:9a:0d:24:e0:52:61:0b:14:d0:d5:
36:ce:5f:42:00:df:a6:63:87:98:59:3a:6d:fb:8c:
92:36:c6:7f:26:66:35:aa:ce:ed:ad:00:9b:4b:60:
50:d2:7c:d7:0e:71:9d:ff:8d:d5:38:5d:58:18:ba:
2b:68:66:c3:da:40:6f:22:4f:46:3f:e6:31:75:57:
d3:84:56:e9:cf:9b:50:2a:16:2d:f0:7e:9a:84:1c:
eb:48:fb:71:f0:bc:a2:3d:1d:dd:8a:43:3d:71:79:
6d:e1:24:11:e3:95:e9:57:a0:21:82:e6:97:5f:54:
2e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8B:EB:9F:B9:B6:F4:F4:61:85:23:1A:1D:0C:E6:8B:1E:6E:C1:91
X509v3 Authority Key Identifier:
keyid:A7:77:20:C7:DC:1D:C3:ED:D1:D0:D4:7F:92:3B:CD:83:3F:06:AF:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:62:53:98:0e:fd:c4:cf:1e:ae:4c:61:d6:72:7e:55:87:e9:
d5:af:e6:4e:4f:3c:b4:d1:b5:80:e4:33:88:e6:b8:7e:52:f6:
7d:0f:2f:1a:0e:51:7c:ec:21:96:83:51:c4:3e:9e:48:6b:fe:
29:8f:b3:e7:6c:aa:75:23:f4:50:33:b0:57:2d:3b:0e:76:36:
1d:d9:73:4e:a5:a9:c3:71:c5:48:f6:56:34:05:a7:b0:aa:67:
bf:ba:1c:74:56:9f:88:02:cb:39:e9:c4:67:76:6d:bf:15:26:
08:b0:72:4d:4c:c5:b9:95:3b:06:5e:95:7e:dd:17:73:87:99:
9f:d1:a1:1d:a8:81:dd:a7:b1:b7:18:f4:e0:e7:4f:d4:5b:12:
3a:a6:5f:39:a7:5d:3b:0a:bb:fa:be:13:68:1c:2a:78:48:c6:
2c:64:85:08:85:b6:08:d5:13:d8:a5:2e:f7:43:59:14:5d:12:
3c:48:8b:41:19:d6:8a:b9:9a:6e:61:52:f4:45:97:12:dd:61:
5e:a2:27:44:91:c6:7b:cf:d1:7b:59:97:2e:63:2d:60:fa:5f:
6d:1d:e3:16:71:96:09:89:74:1e:57:8e:fc:5e:be:73:03:99:
1a:35:8c:3a:04:4b:7f:e9:e1:17:2e:f0:4d:c0:d8:53:da:fc:
68:51:23:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:30:02 2025 by rpki-client