Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
File: P3cnpBMI2bn25j3xsg6LnNgjgSA.mft (raw, json)
Hash identifier: gj+SBguMuNqg0SbUyKz/SJgJVAt14QIF3LNysCY+ico=
Subject key identifier: 52:1B:EB:B5:C2:2E:B5:0C:98:47:15:A6:43:0D:4D:16:F2:B0:21:DC
Authority key identifier: 3F:77:27:A4:13:08:D9:B9:F6:E6:3D:F1:B2:0E:8B:9C:D8:23:81:20
Certificate issuer: /CN=3f7727a41308d9b9f6e63df1b20e8b9cd8238120
Certificate serial: 01988D6AD2BF4D7CDA87AC769FE9B280E5E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
Manifest number: 071B
Signing time: Sat 09 Aug 2025 06:00:44 +0000
Manifest this update: Sat 09 Aug 2025 06:00:44 +0000
Manifest next update: Sun 10 Aug 2025 06:00:44 +0000
Files and hashes: 1: P3cnpBMI2bn25j3xsg6LnNgjgSA.crl (hash: yN9qaHbqlQxXrW7okzXzoteLv/r95B0r7mKu3Ph9KyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6a:d2:bf:4d:7c:da:87:ac:76:9f:e9:b2:80:e5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f7727a41308d9b9f6e63df1b20e8b9cd8238120
Validity
Not Before: Aug 9 06:00:44 2025 GMT
Not After : Aug 10 06:00:44 2025 GMT
Subject: CN=521bebb5c22eb50c984715a6430d4d16f2b021dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:fd:bc:77:8b:17:59:4e:b1:8d:60:e7:37:01:
ad:9b:15:a8:bf:3c:78:71:dc:2c:62:21:4c:42:35:
8b:2d:1a:4a:c5:21:f0:1a:0c:0d:43:0c:1a:56:9c:
a4:17:9e:89:84:0a:51:56:93:e2:3f:83:29:f1:b4:
ff:13:06:a0:97:2f:1e:b2:9f:ba:76:5c:80:a1:e3:
7c:05:77:85:94:bc:99:be:60:37:8c:96:a5:92:4c:
48:27:de:d6:b4:30:7b:43:50:9c:f0:ce:9c:69:77:
09:ce:48:1a:5f:10:92:b5:00:e3:62:39:76:6d:52:
a8:e6:e8:3a:dd:cb:04:b4:b2:1a:9e:1c:41:ff:d8:
58:9a:c4:79:74:b1:5a:8b:44:68:cb:04:90:11:ba:
5b:5c:eb:88:cd:d4:8d:b1:45:cf:5b:8a:4c:d2:3c:
ea:ea:00:df:b5:11:33:de:51:72:b5:3c:45:6c:63:
cb:ca:30:f8:db:06:ac:8a:e5:3d:b4:89:e8:9f:9e:
ca:0c:91:d7:38:99:67:ad:56:7e:ef:af:b6:d1:fe:
79:90:3d:10:9f:f0:05:9b:1f:e6:90:74:a1:51:90:
0f:13:73:0e:45:d1:ee:18:d8:56:ff:27:23:79:23:
0c:41:0f:ca:ac:b8:eb:1d:31:1b:91:5b:5e:e7:00:
ad:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1B:EB:B5:C2:2E:B5:0C:98:47:15:A6:43:0D:4D:16:F2:B0:21:DC
X509v3 Authority Key Identifier:
keyid:3F:77:27:A4:13:08:D9:B9:F6:E6:3D:F1:B2:0E:8B:9C:D8:23:81:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e6:a5:a6:73:75:a9:b7:89:b9:e4:f0:89:a3:f2:a6:7d:48:
60:32:c9:cf:d2:21:9d:de:f4:e0:6d:c4:60:10:03:6f:c9:1b:
bb:ce:76:86:5f:e0:c8:ab:10:c3:e6:d2:79:f4:01:5e:46:ae:
d4:1a:3a:0c:f0:86:af:ca:96:15:d4:c3:66:38:94:00:31:b6:
d3:bb:9e:1d:b0:0c:0a:96:79:f9:9b:8f:47:b5:73:5e:86:75:
cd:b8:0b:dd:ba:c2:a3:e0:bd:96:44:12:2c:e4:cf:24:e1:f7:
11:1e:d6:2f:35:b1:88:d9:4d:ca:90:2d:4f:37:d4:84:59:b5:
81:23:a1:02:c3:c1:ae:cc:a8:64:01:a1:0e:34:c7:cb:59:8d:
3e:ce:08:b2:c2:ea:e9:88:18:1c:9c:23:7e:49:b6:08:83:dc:
64:25:66:f2:4d:11:29:fb:93:1b:5c:be:b3:3c:5d:50:a7:37:
77:61:3a:1d:f0:7f:de:a2:c9:81:f7:d1:08:be:cc:b9:3f:3d:
0a:0e:dd:ac:69:2d:77:34:19:b7:fe:60:dd:af:21:e0:66:58:
d4:0b:01:49:23:e2:e3:a2:24:7e:e1:e0:59:d2:44:e0:9f:3a:
03:86:96:50:a0:63:88:19:cc:70:7e:d0:27:00:0f:f9:b7:94:
51:eb:08:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiNatK/TXzah6x2n+mygOXjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmNzcyN2E0MTMwOGQ5YjlmNmU2M2RmMWIyMGU4YjljZDgy
MzgxMjAwHhcNMjUwODA5MDYwMDQ0WhcNMjUwODEwMDYwMDQ0WjAzMTEwLwYDVQQD
Eyg1MjFiZWJiNWMyMmViNTBjOTg0NzE1YTY0MzBkNGQxNmYyYjAyMWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9v28d4sXWU6xjWDnNwGtmxWovzx4
cdwsYiFMQjWLLRpKxSHwGgwNQwwaVpykF56JhApRVpPiP4Mp8bT/Ewagly8esp+6
dlyAoeN8BXeFlLyZvmA3jJalkkxIJ97WtDB7Q1Cc8M6caXcJzkgaXxCStQDjYjl2
bVKo5ug63csEtLIanhxB/9hYmsR5dLFai0RoywSQEbpbXOuIzdSNsUXPW4pM0jzq
6gDftREz3lFytTxFbGPLyjD42wasiuU9tInon57KDJHXOJlnrVZ+76+20f55kD0Q
n/AFmx/mkHShUZAPE3MORdHuGNhW/ycjeSMMQQ/KrLjrHTEbkVte5wCtNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFIb67XCLrUMmEcVpkMNTRbysCHcMB8GA1UdIwQY
MBaAFD93J6QTCNm59uY98bIOi5zYI4EgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDNjbnBCTUkyYm4yNWozeHNnNkxuTmdqZ1NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hODhmMzAtNmUxYy00YzI4LWIwNzkt
OTdlY2MwNzA2YmYwLzEvUDNjbnBCTUkyYm4yNWozeHNnNkxuTmdqZ1NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9hODhmMzAtNmUxYy00YzI4LWIwNzktOTdlY2MwNzA2YmYw
LzEvUDNjbnBCTUkyYm4yNWozeHNnNkxuTmdqZ1NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASOalpnN1
qbeJueTwiaPypn1IYDLJz9Ihnd704G3EYBADb8kbu852hl/gyKsQw+bSefQBXkau
1Bo6DPCGr8qWFdTDZjiUADG207ueHbAMCpZ5+ZuPR7VzXoZ1zbgL3brCo+C9lkQS
LOTPJOH3ER7WLzWxiNlNypAtTzfUhFm1gSOhAsPBrsyoZAGhDjTHy1mNPs4IssLq
6YgYHJwjfkm2CIPcZCVm8k0RKfuTG1y+szxdUKc3d2E6HfB/3qLJgffRCL7MuT89
Cg7drGktdzQZt/5g3a8h4GZY1AsBSSPi46IkfuHgWdJE4J86A4aWUKBjiBnMcH7Q
JwAP+beUUesIlw==
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:34:41 2025 by rpki-client