
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
File: P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft (raw, json)
Hash identifier: 69Z0QRSb9JUqnHpWozE2SWrn4acwbWQnYmnVjzzb0Iw=
Subject key identifier: 97:CD:D5:B0:83:E0:8D:FE:85:DE:F3:84:17:88:B3:C4:53:70:84:46
Authority key identifier: 3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA
Certificate issuer: /CN=3f46c351ee89c9f5558167530704885b8be46eaa
Certificate serial: 01989FDF103C319740C98586CC7731780014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
Manifest number: 162E
Signing time: Tue 12 Aug 2025 20:00:52 +0000
Manifest this update: Tue 12 Aug 2025 20:00:52 +0000
Manifest next update: Wed 13 Aug 2025 20:00:52 +0000
Files and hashes: 1: P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl (hash: naYMlfp95YV77erzhTZo5hpzQDhngEJrc/G7FHm5CyA=)
2: QxahHBF5SSiTCKjSwe1FlEjpjhQ.roa (hash: d1pnjZFtEihgfo0iFcK4wvbFSZ9uzn9ZUOrv5mZKK8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 20:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:df:10:3c:31:97:40:c9:85:86:cc:77:31:78:00:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f46c351ee89c9f5558167530704885b8be46eaa
Validity
Not Before: Aug 12 20:00:52 2025 GMT
Not After : Aug 13 20:00:52 2025 GMT
Subject: CN=97cdd5b083e08dfe85def3841788b3c453708446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1f:84:77:e7:22:05:63:d4:cd:d0:22:35:14:
97:77:04:47:06:ee:06:c5:a6:68:4d:74:88:83:d5:
f6:6f:77:19:b4:e4:fc:1a:2e:f3:a2:a2:82:dd:ee:
ca:2d:26:da:1e:9c:62:b9:b6:ce:b0:ea:f0:08:72:
9a:c8:f7:53:bb:16:43:e6:db:fb:29:3b:0b:a2:b1:
4c:3a:1c:55:25:9a:ad:a6:70:c0:76:ea:73:d1:20:
92:d7:97:74:32:f4:20:21:fa:10:be:c8:fc:2e:ee:
13:56:26:39:ac:c9:60:07:3f:b8:c7:f4:a3:ab:ab:
c3:aa:b1:d9:6e:ab:31:69:55:15:a6:94:c0:fa:6a:
e0:c1:d0:2d:b7:65:cc:22:88:d4:fb:60:f9:f6:2d:
b1:5c:6b:2e:75:5a:f6:df:60:c5:63:4d:a4:6e:8a:
c0:c0:f3:92:07:5f:a8:b8:15:a9:ce:bf:01:ae:19:
27:b6:b5:e8:54:d4:a4:d6:a7:ad:5e:36:2f:66:b6:
94:84:31:04:30:fd:40:1a:33:08:fd:b1:e0:b7:d5:
b3:81:a0:91:3e:5b:7d:0d:28:dd:45:08:67:0a:e6:
9f:90:3b:58:16:aa:02:a2:30:99:08:f0:6e:5b:ce:
4b:0e:e1:47:15:b4:f3:be:f3:2f:0c:09:e4:c1:b6:
c3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CD:D5:B0:83:E0:8D:FE:85:DE:F3:84:17:88:B3:C4:53:70:84:46
X509v3 Authority Key Identifier:
keyid:3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d1:21:7d:06:26:48:81:ce:7e:9c:04:f2:47:2a:57:9a:fe:
35:8d:86:eb:8e:2c:9f:aa:0b:d6:c2:7d:36:26:12:78:3c:13:
25:f4:9d:95:4b:04:2a:2d:c2:a0:d0:fe:ba:d5:fa:58:62:ff:
09:30:35:44:c6:5c:59:b4:59:13:52:1e:36:e0:3c:81:c8:3d:
9c:05:2b:4a:ef:65:44:9d:f7:f8:5a:02:2b:64:1d:5a:20:0d:
1d:d2:e8:8f:af:9e:bb:88:f4:a7:96:84:1e:7e:24:e9:fd:20:
56:f7:f4:59:f9:37:00:31:c6:4f:a4:71:b4:6b:af:5a:45:74:
80:44:93:e5:51:f4:e9:79:7b:4f:33:52:fc:6d:a8:91:2a:ca:
2b:58:db:66:5c:4c:ae:0b:30:09:54:df:1f:b4:1c:96:5e:40:
57:c2:52:b4:04:56:84:7a:e8:35:61:21:15:ae:43:78:d3:ad:
75:8b:02:48:e7:45:2a:47:55:6c:59:0e:b3:11:0e:13:ba:e2:
5a:f7:ce:b6:79:95:f2:89:e8:d8:de:4d:eb:f9:cf:5d:a3:fa:
4c:35:df:8e:cb:bb:86:50:0f:38:31:f6:14:42:7d:19:8b:8c:
fa:30:c4:e3:a0:73:db:f2:1d:51:12:6b:d5:73:ab:4d:2a:df:
9e:78:b6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:43:06 2025 by rpki-client