Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
File: P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft (raw, json)
Hash identifier: D0lVTSzHR5GBJyNrh+qo9L30UvJWkeNSVqqt4ocXL88=
Subject key identifier: CC:9C:F3:2B:16:1D:C2:BD:34:78:FE:75:C8:F1:B3:6F:DA:D1:74:15
Authority key identifier: 3F:DA:63:02:13:CD:42:38:80:F9:FE:F1:6D:78:FB:43:6E:08:F2:47
Certificate issuer: /CN=3fda630213cd423880f9fef16d78fb436e08f247
Certificate serial: 01989FA7BBCA80512B5486DEEA9E0C1F53AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
Manifest number: 0D0E
Signing time: Tue 12 Aug 2025 19:00:26 +0000
Manifest this update: Tue 12 Aug 2025 19:00:26 +0000
Manifest next update: Wed 13 Aug 2025 19:00:26 +0000
Files and hashes: 1: P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl (hash: 4S9Rw6KxULrkNe0JcozIAga/2A/1uTPRsvxBnqV9Okc=)
2: gDeneKJTQtX9OIr5MlGy6dCHOYA.roa (hash: 3GvtE0X7YdCyMroXXNh2AEtxzHBHmy4owPJWbBMbbzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 19:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:a7:bb:ca:80:51:2b:54:86:de:ea:9e:0c:1f:53:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fda630213cd423880f9fef16d78fb436e08f247
Validity
Not Before: Aug 12 19:00:26 2025 GMT
Not After : Aug 13 19:00:26 2025 GMT
Subject: CN=cc9cf32b161dc2bd3478fe75c8f1b36fdad17415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bf:72:ea:04:1a:c5:be:55:4a:7e:c8:9f:9c:
21:fc:2a:14:b1:01:32:f9:66:2f:dc:fc:a9:f4:79:
ee:03:4b:ea:9e:1e:2a:b4:8b:66:4d:8a:b0:bb:49:
ca:8b:67:72:0a:88:9f:96:c3:60:3e:43:ce:ba:d7:
ca:71:a8:0d:b3:f0:ab:dc:ba:94:69:ca:5e:3e:c2:
ff:03:21:7b:c7:e2:59:5d:6c:9f:5c:85:04:5a:60:
a2:1f:47:28:e0:7e:68:98:0d:31:f6:87:5c:2a:d7:
95:88:f6:16:ab:73:bd:0b:2d:31:ed:a5:1b:b0:ac:
8d:27:93:b8:3f:cf:b1:f6:c3:2c:00:39:f8:2c:2e:
ed:77:ab:09:8c:7b:c8:a5:5e:5c:b5:04:21:52:47:
79:68:4c:93:b8:0f:19:ae:ac:cf:c9:99:a7:33:77:
df:d8:cd:47:f3:de:aa:80:55:b6:2e:82:47:7f:e8:
e6:42:5b:a4:25:7a:2f:1a:60:b4:67:a5:7d:21:01:
1a:2e:f4:95:39:5d:b7:43:93:cc:95:85:21:1c:47:
57:b1:ec:ad:a8:d6:87:a7:a1:04:1b:cd:31:c1:30:
1c:07:0a:ac:f3:e3:f2:4f:d2:25:8f:1d:39:4f:ab:
a5:eb:2c:ce:41:3a:5f:56:47:bb:0b:82:34:34:82:
76:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9C:F3:2B:16:1D:C2:BD:34:78:FE:75:C8:F1:B3:6F:DA:D1:74:15
X509v3 Authority Key Identifier:
keyid:3F:DA:63:02:13:CD:42:38:80:F9:FE:F1:6D:78:FB:43:6E:08:F2:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:7a:46:fa:b4:ff:f4:3b:57:8e:81:09:d6:ce:50:9c:fb:77:
ec:ae:6c:03:02:bf:87:8a:19:7f:be:38:a9:3f:07:36:ab:9b:
25:2d:98:3b:f5:54:66:b4:69:16:08:22:9f:5f:3f:91:72:90:
2c:32:7d:2c:ee:3e:1e:e0:dc:ed:e4:ba:bd:2e:d0:5e:b0:bb:
83:45:a2:4f:47:19:00:c3:8a:26:04:3b:da:c7:48:19:2c:d5:
11:7d:cb:98:ad:28:b7:f8:66:0c:33:d8:0a:66:0a:ee:d9:74:
a4:2f:26:bc:1a:c6:a6:54:69:a8:ae:42:5e:ac:29:88:a4:6c:
67:d6:9e:08:34:cb:98:a0:d8:a6:3e:0a:07:0d:33:f3:d1:ef:
8d:85:b0:e3:03:28:34:c0:b2:41:bd:94:38:1e:26:81:23:f3:
f5:04:20:69:0a:d2:b1:aa:9d:a5:89:41:5e:b8:48:26:9e:4b:
01:ea:c1:d2:0d:e6:ce:bf:ae:08:31:01:2a:f3:ee:f3:ce:8b:
9c:ef:ed:79:43:2e:df:4d:e3:d6:b4:77:59:47:d8:5e:42:3a:
28:f2:08:50:1d:a9:71:03:4c:ba:29:08:04:b7:10:d1:3d:a6:
cf:51:e4:0d:a7:03:27:df:82:53:d7:c4:0f:3c:50:e8:da:ac:
2f:38:22:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:47:32 2025 by rpki-client