Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
File: P3cnpBMI2bn25j3xsg6LnNgjgSA.mft (raw, json)
Hash identifier: codQb3LILjupN1IcBbn+XVyzrFNO1bXD+hsNTY7NSXU=
Subject key identifier: E4:E2:0F:32:6F:39:7F:31:60:43:1B:37:DE:39:25:BB:0F:83:76:CD
Authority key identifier: 3F:77:27:A4:13:08:D9:B9:F6:E6:3D:F1:B2:0E:8B:9C:D8:23:81:20
Certificate issuer: /CN=3f7727a41308d9b9f6e63df1b20e8b9cd8238120
Certificate serial: 0199FE4769E24954B703BC388DF84FF2A232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
Manifest number: 07DA
Signing time: Sun 19 Oct 2025 21:01:56 +0000
Manifest this update: Sun 19 Oct 2025 21:01:56 +0000
Manifest next update: Mon 20 Oct 2025 21:01:56 +0000
Files and hashes: 1: P3cnpBMI2bn25j3xsg6LnNgjgSA.crl (hash: UPAqqYBtd8EEK62ZyKM+HWjrvFQMqmxP9mBBJmbVQQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:69:e2:49:54:b7:03:bc:38:8d:f8:4f:f2:a2:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f7727a41308d9b9f6e63df1b20e8b9cd8238120
Validity
Not Before: Oct 19 21:01:56 2025 GMT
Not After : Oct 20 21:01:56 2025 GMT
Subject: CN=e4e20f326f397f3160431b37de3925bb0f8376cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6f:e1:14:4c:38:f4:62:56:49:99:60:9c:08:
39:b4:21:98:2d:bf:21:53:85:f8:36:8d:a5:a5:1d:
bc:6b:84:b7:88:f3:ea:28:33:df:86:e0:11:52:85:
13:36:7a:be:1b:89:40:b3:44:c2:ac:75:63:eb:c6:
25:26:88:20:ee:e7:4f:71:ad:70:09:c0:04:df:3b:
cb:0d:51:d0:8f:bd:b0:ab:71:11:18:f2:77:96:e8:
e4:d3:11:01:e2:6b:e7:93:00:55:bc:d4:22:69:c3:
09:39:f4:26:21:b1:04:d0:01:f3:71:e8:a9:bb:0a:
7d:2f:96:8e:e3:68:c8:3e:8c:6d:c5:30:2f:23:73:
33:7c:c2:7f:41:0c:13:88:ad:2c:23:60:fb:65:98:
ee:e5:d6:a5:da:26:1e:0e:7b:78:3d:de:9b:fc:f4:
fe:47:c3:b6:2e:86:b9:ea:94:15:63:3a:f7:9e:d1:
d5:58:38:fe:34:62:0f:f8:c1:02:52:25:7d:72:33:
b9:17:b4:ec:94:05:7f:9b:95:a1:db:cc:53:46:80:
9a:2f:0c:92:e5:38:68:43:dc:2c:4a:44:1f:e1:01:
17:27:b4:5e:4a:c1:3b:1f:60:8d:92:e7:14:00:fd:
4d:27:e3:ff:38:45:c4:7a:a6:28:c0:91:ca:02:70:
f6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E2:0F:32:6F:39:7F:31:60:43:1B:37:DE:39:25:BB:0F:83:76:CD
X509v3 Authority Key Identifier:
keyid:3F:77:27:A4:13:08:D9:B9:F6:E6:3D:F1:B2:0E:8B:9C:D8:23:81:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:66:49:a8:29:ea:83:c2:22:9a:c5:de:f5:2b:6b:78:9f:60:
88:b6:9a:10:b1:af:97:8a:1a:78:b2:11:2e:3a:5e:7e:07:fa:
4e:5c:dc:25:74:88:04:d4:0e:03:43:39:89:a4:0b:5b:9a:43:
04:a4:1f:70:ac:fd:dc:77:9a:38:58:a5:a7:9c:fd:38:d1:cf:
5e:86:87:e4:95:ee:9a:51:43:6b:70:e7:03:69:ea:5e:f9:63:
36:66:ab:a0:bc:27:ab:2b:c0:e3:9a:bf:73:f5:a2:dd:db:bc:
b8:5b:09:f4:1e:c6:2f:37:d8:fe:fa:52:1b:6b:59:18:e1:79:
6b:78:1e:7d:62:81:e0:80:30:7b:48:c7:06:ed:57:b4:46:6a:
39:a5:ea:e5:83:bb:55:0a:52:25:d2:ec:b5:07:5e:1a:84:d5:
f3:3f:32:05:ec:a3:54:10:b1:61:2c:2d:91:e0:9b:52:d9:22:
7c:b3:cb:24:2e:42:5a:05:b0:85:e3:06:3e:45:6d:c8:8f:7c:
92:81:0f:4b:c3:ec:53:70:4a:7e:62:ee:cf:32:6e:52:56:a9:
38:61:58:63:59:c7:91:ad:2f:fa:90:35:b3:a1:74:09:69:07:
fb:fa:0d:70:6f:84:7a:3e:e3:13:0b:29:08:44:0a:a1:b0:ec:
91:90:83:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:31:42 2025 by rpki-client