Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
File: P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft (raw, json)
Hash identifier: 9YdL1VHRZjvuorPcbkN5CDLVD3Y8EgXqESIuFdEmrkY=
Subject key identifier: 23:47:DA:3B:F6:5A:1F:B5:32:32:73:AB:9A:90:48:FA:CD:DD:A5:38
Authority key identifier: 3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4
Certificate issuer: /CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4
Certificate serial: 019A51F5AD0D5DD302081ED80E0004770EC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
Manifest number: 0739
Signing time: Wed 05 Nov 2025 03:00:46 +0000
Manifest this update: Wed 05 Nov 2025 03:00:46 +0000
Manifest next update: Thu 06 Nov 2025 03:00:46 +0000
Files and hashes: 1: P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl (hash: kkr1AtdG0XDW90AoV3aFjNoFjOZDCPECqOIfftLXPns=)
2: gZtu_mvpfnIEYpfX3O3Zhm8l3oY.roa (hash: eNPnQnlHd8yy83e7BBZ3vW4/qWGTiwqTNCUFgABwjBU=)
3: tJp6RAZ2Y3Z3o2R75yur_W5Ex-w.roa (hash: GGPR+7RZv9vuHEdD+t//WBPxSiCJToRwFhnk1FKFqWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:ad:0d:5d:d3:02:08:1e:d8:0e:00:04:77:0e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4
Validity
Not Before: Nov 5 03:00:46 2025 GMT
Not After : Nov 6 03:00:46 2025 GMT
Subject: CN=2347da3bf65a1fb5323273ab9a9048facddda538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9b:f9:e9:e5:00:d3:f6:59:f8:7a:cf:8d:d0:
ac:da:a9:c8:91:a4:a4:02:0b:80:ee:27:81:d7:84:
f8:b4:3b:c0:33:62:81:5a:7b:8d:84:15:8c:d7:3f:
c5:f7:ba:c1:8e:ed:50:c5:75:77:07:49:53:29:0f:
9f:67:80:4e:a4:e4:c4:b8:6e:1a:c0:6f:0c:b9:45:
c8:0b:51:49:af:ee:c3:04:1e:73:bd:33:cc:54:6d:
1d:4a:94:8a:9d:a9:18:72:40:5b:34:7e:8f:46:47:
f7:81:2d:b5:f2:de:e2:d2:76:58:9e:92:23:5f:fe:
a4:c6:77:fa:30:2e:47:1e:e5:72:35:1b:ef:74:42:
8c:07:42:69:96:f1:94:39:37:cb:1e:75:ef:eb:4d:
f9:39:ae:9d:dd:31:67:72:28:a3:60:32:63:01:f9:
5f:a8:f8:53:35:ac:7c:a3:82:5e:46:29:a4:13:c3:
33:c7:f3:d1:d1:9a:85:1d:e4:87:a6:49:af:01:93:
e5:aa:a4:8a:5a:65:c9:99:b4:36:51:a2:7f:70:b9:
5e:17:87:99:c8:0d:00:5a:c2:81:87:2c:64:a7:4b:
77:df:15:16:19:63:2a:6f:70:f5:22:b5:04:88:fa:
08:ac:30:8f:fe:c5:a1:7c:69:01:8c:10:b0:ab:6f:
96:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:47:DA:3B:F6:5A:1F:B5:32:32:73:AB:9A:90:48:FA:CD:DD:A5:38
X509v3 Authority Key Identifier:
keyid:3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:74:74:b5:48:a7:de:59:68:69:68:18:a3:8d:46:24:97:2a:
0f:95:ba:02:ed:00:aa:fd:b9:cf:7e:8e:83:02:a5:e4:08:5b:
1f:da:ea:5c:e8:57:6a:e1:7e:50:2d:a7:0b:fe:59:87:01:d2:
23:cf:f3:36:ac:28:05:54:8d:e6:27:f6:70:9e:fe:d1:4a:7d:
c5:98:a5:27:9b:12:70:a3:34:59:f4:9b:2f:f2:b3:08:b5:59:
2e:a3:5d:17:76:9d:5e:2e:a9:8b:11:75:cc:b7:63:43:e4:47:
b5:5a:b2:04:5a:46:37:c3:82:bd:a9:a7:89:01:95:b1:e3:c1:
aa:5b:ee:ee:45:bc:0b:9e:a0:d2:60:ab:53:17:a7:11:93:ef:
4e:9f:fe:4b:7f:10:08:e7:fc:1f:f6:26:5f:15:f2:bd:6f:bc:
0b:29:24:88:5c:39:e7:8e:d5:d6:b0:29:12:4a:a3:12:4c:b8:
f6:f9:f0:d8:da:9c:22:68:33:21:56:2a:01:29:ed:c1:c1:6a:
f9:84:92:6f:23:9d:38:46:19:f6:8e:7c:2c:25:7c:bc:bc:65:
ef:cf:34:5f:88:c2:19:c1:0f:c0:ab:78:3d:f4:44:cd:02:6a:
d3:75:db:77:0c:da:d1:39:48:c9:44:24:c5:b4:1d:e5:83:34:
6f:14:b3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:04:56 2025 by rpki-client