Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
File: P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft (raw, json)
Hash identifier: o0ixtZEjFMzOR8Rp1qbUTYVkKJPyR1sSXsVqu4P3pCk=
Subject key identifier: 98:9C:F1:2C:03:2E:B9:F5:95:E6:36:80:21:4D:41:CB:7D:4E:19:55
Authority key identifier: 3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA
Certificate issuer: /CN=3f46c351ee89c9f5558167530704885b8be46eaa
Certificate serial: 019A4E86738C98A8502FC6BB3EC204FDB9E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 11:00:25 +0000
Manifest this update: Tue 04 Nov 2025 11:00:25 +0000
Manifest next update: Wed 05 Nov 2025 11:00:25 +0000
Files and hashes: 1: P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl (hash: /3M/ROjjHS4VUrxpUkJY42ZBGG2Zz2El8ZjRBgdqprQ=)
2: QxahHBF5SSiTCKjSwe1FlEjpjhQ.roa (hash: d1pnjZFtEihgfo0iFcK4wvbFSZ9uzn9ZUOrv5mZKK8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:73:8c:98:a8:50:2f:c6:bb:3e:c2:04:fd:b9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f46c351ee89c9f5558167530704885b8be46eaa
Validity
Not Before: Nov 4 11:00:25 2025 GMT
Not After : Nov 5 11:00:25 2025 GMT
Subject: CN=989cf12c032eb9f595e63680214d41cb7d4e1955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ae:06:c0:6a:68:d5:5b:8c:5f:58:f5:0b:55:
ba:b5:d9:c6:bc:3e:83:02:e3:af:4f:6b:74:8f:87:
ac:b6:27:99:12:89:2d:80:06:3a:15:b7:8c:5a:a6:
1d:30:6d:e1:02:85:a0:c8:5b:1a:a2:a6:bf:2c:84:
02:14:02:0e:48:9f:9e:c7:e9:85:cf:53:a1:b9:7d:
b9:08:21:0a:8e:f2:0f:15:57:7c:e4:95:a7:df:ce:
5d:b2:2e:b6:01:c3:d7:fa:ba:b6:03:ff:50:d7:6a:
9c:a0:5b:fc:fb:84:71:c0:d0:a7:22:e1:d1:3e:82:
0c:f4:aa:ec:2c:93:35:3e:13:b4:4b:37:cb:47:9f:
4c:4d:72:37:d9:c3:7d:6a:78:ab:50:b4:62:d2:ca:
d7:d8:66:8a:1c:c0:f2:76:9e:1c:43:e7:84:f9:6d:
0e:61:3c:ac:f9:ca:bb:4f:38:d1:fb:95:dc:c2:6f:
c8:2a:96:c4:88:3b:9d:2f:44:dc:4e:d0:a7:12:be:
19:9d:54:44:d5:11:65:08:38:2e:c8:04:a8:1e:39:
d0:90:b0:7f:19:cd:36:f8:38:de:34:17:c3:4f:4c:
4b:45:7e:de:5b:0b:c5:82:d9:c3:79:4b:00:f8:e1:
50:67:b9:65:6c:61:fa:32:23:be:2e:62:c5:d5:c9:
92:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9C:F1:2C:03:2E:B9:F5:95:E6:36:80:21:4D:41:CB:7D:4E:19:55
X509v3 Authority Key Identifier:
keyid:3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:05:63:0e:40:87:58:60:b4:ca:aa:06:26:5d:9a:16:2e:24:
2e:04:a1:c2:0a:8f:b5:48:a9:ff:2a:e0:d5:55:99:c6:dc:1d:
3f:df:39:61:1c:61:fc:34:ea:77:71:7e:23:60:07:fb:a7:73:
41:7d:8d:78:d4:91:02:ba:8a:82:8d:c5:cd:f6:70:e9:9c:76:
8c:79:3f:c2:1e:f1:72:97:ce:46:83:7c:cc:63:ce:05:c8:43:
30:68:0e:7f:03:19:18:df:e5:95:66:a4:29:6e:fc:29:25:ff:
41:7f:35:18:80:5e:a3:f8:7a:23:3e:c5:b3:55:1e:a5:c5:aa:
e0:04:02:e7:26:f0:41:b3:48:a4:90:78:9f:b9:d3:f5:11:cd:
67:65:7e:ba:f3:ed:b5:53:52:89:b8:31:27:06:dd:df:95:01:
01:a1:7c:89:86:71:2d:ae:07:a1:72:29:7a:57:dd:08:d9:df:
e9:6b:ee:b0:86:06:cf:72:68:21:6e:f7:a0:97:4b:2e:94:60:
38:b4:e2:cf:e7:95:94:d9:3f:2e:53:25:78:78:d0:3e:8d:52:
c0:8f:9f:53:48:8d:6c:52:f5:04:d2:06:6f:dc:29:b7:25:bc:
0d:9d:ef:d1:a7:bf:79:9e:6a:bb:bb:8e:97:35:41:8f:7b:92:
99:8e:71:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:37 2025 by rpki-client