Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
File: P3cnpBMI2bn25j3xsg6LnNgjgSA.mft (raw, json)
Hash identifier: cAU6DwsGrB3WdLnPOVftOinzMWYeDIR/BdxcO15ClPw=
Subject key identifier: 7B:60:29:EA:8C:87:9E:31:12:91:F8:51:81:AD:8C:EE:EA:8C:80:BC
Authority key identifier: 3F:77:27:A4:13:08:D9:B9:F6:E6:3D:F1:B2:0E:8B:9C:D8:23:81:20
Certificate issuer: /CN=3f7727a41308d9b9f6e63df1b20e8b9cd8238120
Certificate serial: 019A4F629D3156CF4A52DA22B0F1CCA3BE2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
Manifest number: 0804
Signing time: Tue 04 Nov 2025 15:00:53 +0000
Manifest this update: Tue 04 Nov 2025 15:00:53 +0000
Manifest next update: Wed 05 Nov 2025 15:00:53 +0000
Files and hashes: 1: P3cnpBMI2bn25j3xsg6LnNgjgSA.crl (hash: LZEtxGLHEhqtX/QW6rER6ZLWFePv/CcSn5merGZ8mUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:9d:31:56:cf:4a:52:da:22:b0:f1:cc:a3:be:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f7727a41308d9b9f6e63df1b20e8b9cd8238120
Validity
Not Before: Nov 4 15:00:53 2025 GMT
Not After : Nov 5 15:00:53 2025 GMT
Subject: CN=7b6029ea8c879e311291f85181ad8ceeea8c80bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:91:f6:c7:35:01:b4:87:59:a1:54:13:a5:6e:
b5:2a:6c:e8:8e:41:c5:1c:99:3d:40:95:bf:7e:c2:
35:90:d3:62:a3:d9:d5:98:1c:3e:f6:bc:67:bb:56:
ae:be:05:a7:ae:60:f8:7d:0c:a8:9b:46:f0:52:9c:
5b:9b:9d:0b:68:7f:8f:fc:56:58:0c:36:91:0b:ec:
b7:73:67:3f:84:31:d5:8e:1e:c2:ad:3b:5c:a7:73:
d5:ae:55:4a:35:39:62:d5:47:e4:65:2f:a7:f9:4f:
6d:32:43:c6:95:98:74:68:15:26:67:69:74:6b:92:
1c:2c:a4:21:98:59:4b:ec:4a:00:50:18:1d:c8:e7:
7f:7d:a2:33:5a:3f:3e:35:9a:0e:f9:d8:1e:a7:47:
c2:38:2d:62:b3:ef:03:ad:16:aa:d3:7d:62:de:9e:
08:95:c7:32:ea:2c:32:64:1a:ed:2c:d3:40:ec:16:
c6:28:a0:7a:e2:59:cd:d2:3a:39:16:eb:46:d1:78:
3a:8e:ae:c2:f2:6e:db:57:cc:04:ac:77:82:f1:04:
9e:5f:2d:fb:5d:00:20:b4:93:64:39:72:b4:c2:53:
72:e1:e0:90:d6:8c:33:b7:bd:64:44:01:44:e2:0a:
b9:9d:4a:18:6b:c4:a1:ce:9c:e1:3b:ac:a8:ff:67:
05:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:60:29:EA:8C:87:9E:31:12:91:F8:51:81:AD:8C:EE:EA:8C:80:BC
X509v3 Authority Key Identifier:
keyid:3F:77:27:A4:13:08:D9:B9:F6:E6:3D:F1:B2:0E:8B:9C:D8:23:81:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b8:b5:26:72:bc:51:e7:ed:fc:df:bb:b9:fa:b5:82:f6:52:
45:ee:e5:98:32:6a:38:90:df:f9:e4:8a:d7:06:bf:b8:d1:fb:
2a:9a:33:2d:0c:bb:66:2a:31:f2:aa:d7:91:19:a4:dc:02:36:
42:34:67:57:55:4a:24:86:72:3b:0d:15:54:17:ab:fe:67:93:
fe:e8:22:ac:6d:03:b9:fe:b0:5e:9e:eb:9f:d9:03:52:76:81:
2e:71:de:61:ee:da:eb:19:df:76:10:34:fc:21:84:e8:78:86:
f5:36:f1:41:67:69:da:1e:5e:05:6c:3f:6d:18:79:98:42:9f:
bd:98:9c:57:6b:b0:45:cf:ad:5b:b7:7e:2b:24:14:12:78:36:
1d:f5:84:2a:04:b1:ff:71:12:69:6b:0e:34:f4:8e:6a:73:20:
d9:b6:c7:8f:4e:9f:80:ab:88:73:2f:99:7a:11:a8:d4:ad:12:
d7:96:68:6a:9e:49:83:ca:08:cc:19:83:f1:c2:c2:f1:d4:fa:
70:a0:5b:8f:42:69:e5:34:50:54:45:ea:67:f4:9a:20:f3:3d:
2a:97:be:27:bd:4d:31:33:09:f2:a4:97:fd:9d:cb:3c:27:d8:
b9:e4:e9:2b:5e:e8:2a:95:5f:e6:d1:06:37:21:43:48:a0:1c:
f5:e2:51:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:38 2025 by rpki-client