Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
File: P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft (raw, json)
Hash identifier: ck46Dtmz+PcX8XgexbPZXk2ea86rynVJon3NT9mCs4Q=
Subject key identifier: 74:E7:BB:D7:7D:48:FD:4C:BB:AF:5D:1C:DB:65:16:FA:B0:C3:DE:96
Authority key identifier: 3F:DA:63:02:13:CD:42:38:80:F9:FE:F1:6D:78:FB:43:6E:08:F2:47
Certificate issuer: /CN=3fda630213cd423880f9fef16d78fb436e08f247
Certificate serial: 019A503E405CF3D33D5ED5180848F5C9A308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
Manifest number: 0DEE
Signing time: Tue 04 Nov 2025 19:00:48 +0000
Manifest this update: Tue 04 Nov 2025 19:00:48 +0000
Manifest next update: Wed 05 Nov 2025 19:00:48 +0000
Files and hashes: 1: P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl (hash: aECVOxpLn/xEckWvb/bb5CgnW7+K8DVok/imyz4n13o=)
2: gDeneKJTQtX9OIr5MlGy6dCHOYA.roa (hash: 3GvtE0X7YdCyMroXXNh2AEtxzHBHmy4owPJWbBMbbzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:40:5c:f3:d3:3d:5e:d5:18:08:48:f5:c9:a3:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fda630213cd423880f9fef16d78fb436e08f247
Validity
Not Before: Nov 4 19:00:48 2025 GMT
Not After : Nov 5 19:00:48 2025 GMT
Subject: CN=74e7bbd77d48fd4cbbaf5d1cdb6516fab0c3de96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c2:33:bd:86:36:34:85:de:d0:07:5c:8d:65:
78:10:f5:45:75:29:54:3d:82:1d:66:a0:2f:d5:37:
d5:31:d8:bb:74:0d:48:f2:a3:e1:41:c2:67:5f:70:
3c:1b:a8:09:b6:68:7a:72:b2:64:9b:29:77:20:3c:
66:29:0d:4e:34:0a:fa:09:56:75:67:73:f6:b3:cd:
e0:d7:64:a7:65:2a:77:87:a2:b6:1b:92:a3:4b:24:
bf:cf:0b:5f:de:97:f0:44:c3:0b:0c:0e:d1:26:98:
03:36:e3:03:1c:d3:00:d6:c8:f2:1b:af:f1:6c:a0:
fa:7c:86:9a:66:9b:c3:94:bd:90:d8:6d:c5:b1:34:
17:09:a5:df:44:ef:7c:55:d3:96:94:e6:cc:be:1d:
67:cb:94:17:6c:23:d5:32:25:ea:11:29:bf:b4:4f:
e4:bd:c1:41:3a:eb:23:f4:a0:e0:95:94:71:41:2c:
40:4a:17:af:99:a8:ae:83:88:b4:b5:93:2f:22:d8:
b0:30:93:08:97:1c:bf:b4:a9:67:42:8c:61:c2:ee:
13:b8:b9:cf:75:7e:5b:b8:5a:29:57:c6:01:92:3c:
ad:ee:89:c7:b9:84:fc:58:94:3d:79:b8:fe:0f:f5:
84:ac:f6:84:7f:28:e6:40:26:80:c7:04:35:a1:79:
45:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E7:BB:D7:7D:48:FD:4C:BB:AF:5D:1C:DB:65:16:FA:B0:C3:DE:96
X509v3 Authority Key Identifier:
keyid:3F:DA:63:02:13:CD:42:38:80:F9:FE:F1:6D:78:FB:43:6E:08:F2:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:65:74:25:0d:f1:2a:bd:c6:e1:6a:f2:67:06:d2:14:db:7a:
d7:8d:27:6c:0e:68:ec:bd:e9:3e:8b:90:8c:c8:fc:df:30:8b:
0d:b6:a3:b8:28:47:b5:6f:8d:1e:cc:a1:66:4b:e5:08:fc:22:
20:51:cd:1e:fd:2a:0a:02:fd:b1:b6:84:a8:50:21:7a:e7:91:
35:f5:5a:89:ce:fa:71:ea:1a:9d:f5:dd:a7:3f:b8:75:38:68:
7f:b2:1d:2d:37:90:aa:e8:16:22:4d:94:da:9b:02:e5:2c:f0:
28:78:66:5e:d3:d8:ca:bc:0c:61:aa:fc:94:6d:3e:c1:fb:80:
00:37:18:42:df:96:da:2f:ea:22:a2:cc:2c:88:b5:7e:eb:f9:
dc:0c:58:cb:e0:a3:08:05:9c:bb:2d:2d:e5:c8:d5:76:fa:e1:
ad:db:b4:ee:f8:62:cf:dc:29:1e:53:74:6a:91:cd:fb:35:b6:
60:05:c2:b3:5f:7f:fd:bc:a3:37:1e:26:d5:e7:7a:11:04:d3:
bd:cf:8b:a4:bc:bf:84:41:46:68:5d:29:29:a1:71:05:63:a1:
78:04:fb:59:03:5a:fe:2b:7a:f5:d9:72:ae:fb:d1:12:d0:26:
72:51:8c:07:c2:ab:66:1e:b4:81:0f:b1:be:de:0d:0e:ab:79:
4a:ca:81:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:20:52 2025 by rpki-client