Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft
File: p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft (raw, json)
Hash identifier: 8Ec+7JUK7n95NNKRQTKTwvse0yUSjktMKFj3Z+4zUug=
Subject key identifier: 37:72:2D:4E:C0:67:D4:53:1E:E2:BE:9D:F6:BB:F5:FE:1A:0C:60:E2
Authority key identifier: A7:A7:06:27:BB:45:CD:6C:71:F2:20:19:22:6A:6A:18:95:22:2F:07
Certificate issuer: /CN=a7a70627bb45cd6c71f22019226a6a1895222f07
Certificate serial: 019A500759EC45FB1D487CB0D13793DA63B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6cGJ7tFzWxx8iAZImpqGJUiLwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft
Manifest number: 0679
Signing time: Tue 04 Nov 2025 18:00:50 +0000
Manifest this update: Tue 04 Nov 2025 18:00:50 +0000
Manifest next update: Wed 05 Nov 2025 18:00:50 +0000
Files and hashes: 1: EnZTRjVsyeH5YvN_IXdrjMInto8.roa (hash: dGNdfgQT3ZLKhZ/v9I6RHyrRDvkswkwt2I+OFKs6hJw=)
2: p6cGJ7tFzWxx8iAZImpqGJUiLwc.crl (hash: rUz5G30Nf3vBLbcXjVqcOVHlSmoTosyx2AhUM6aUx+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6cGJ7tFzWxx8iAZImpqGJUiLwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:59:ec:45:fb:1d:48:7c:b0:d1:37:93:da:63:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a70627bb45cd6c71f22019226a6a1895222f07
Validity
Not Before: Nov 4 18:00:50 2025 GMT
Not After : Nov 5 18:00:50 2025 GMT
Subject: CN=37722d4ec067d4531ee2be9df6bbf5fe1a0c60e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:28:e1:ff:93:d9:1f:33:b7:5b:56:cd:46:1e:
7f:00:0c:b8:af:2a:66:2d:85:5c:1f:f5:f6:4e:8b:
a5:22:b9:ea:e6:77:52:e6:3e:eb:97:b8:2d:9f:6a:
b7:d1:28:f7:4b:4c:84:4c:52:74:ab:78:6e:74:a8:
2c:d5:80:f4:a9:c7:5b:d8:64:b5:c3:3f:95:0a:64:
ea:2d:cb:59:89:02:b9:30:ec:f9:bc:6c:10:0d:06:
6c:c5:c1:de:13:24:5a:41:0b:c0:bc:a3:84:c3:17:
4d:65:59:89:1f:43:aa:8e:bf:37:a2:7c:59:73:9c:
79:1c:43:49:4a:0e:20:33:15:16:b9:f0:3f:d2:e3:
f2:c6:79:3f:85:bf:f3:56:af:bf:64:6a:a7:80:13:
52:5c:99:fd:30:9f:ea:26:a0:f9:83:3e:b3:77:7a:
dc:37:bf:58:ec:b1:d5:3a:79:40:64:25:5b:82:b8:
df:8a:e2:53:f2:50:39:ea:9b:60:cf:be:3a:33:c9:
39:21:42:74:a2:48:aa:79:b9:dd:e1:68:ea:09:6c:
b8:2f:7e:a7:3c:28:7b:06:18:5b:bf:9a:c2:98:b5:
18:e8:ba:e3:66:dc:a4:5e:8d:18:8e:25:23:51:31:
ea:7d:03:62:3a:eb:18:4d:81:b0:9b:f6:4b:b2:b8:
5e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:72:2D:4E:C0:67:D4:53:1E:E2:BE:9D:F6:BB:F5:FE:1A:0C:60:E2
X509v3 Authority Key Identifier:
keyid:A7:A7:06:27:BB:45:CD:6C:71:F2:20:19:22:6A:6A:18:95:22:2F:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6cGJ7tFzWxx8iAZImpqGJUiLwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:51:f1:4c:e9:8c:ed:bf:d5:a4:3d:f4:a8:b6:09:32:5e:88:
44:f6:9f:c9:19:78:0e:8e:d2:de:66:63:e0:2c:2a:7c:35:a7:
4e:19:31:97:cf:de:a9:e5:a8:7d:ea:e8:9b:8b:16:55:a2:7b:
c7:67:06:15:9a:81:08:16:19:d3:bb:69:61:33:4e:e2:66:5e:
7d:3b:20:d5:5d:97:d5:03:9d:75:4b:b8:e1:df:ac:f6:1d:5b:
a5:7d:5a:e3:73:f3:42:6e:8f:c1:8b:61:84:bd:56:28:92:2f:
cc:98:70:5b:96:1d:e1:f7:5e:1d:19:49:53:8f:11:93:11:44:
b4:61:00:2e:85:b7:34:02:e4:f7:a1:84:be:9a:76:05:08:8c:
79:ec:e8:3b:d3:55:59:a5:5d:b6:ce:ae:3c:37:a4:47:50:43:
85:ab:24:ae:70:e6:09:b5:86:ac:d2:32:3b:04:97:33:84:ff:
b4:cb:02:40:d8:73:18:a8:b9:66:4b:55:19:3a:7b:84:35:2a:
4c:aa:c0:8d:c0:be:a3:25:34:a5:ed:49:98:4f:ed:3d:8d:67:
08:a1:09:c3:0b:92:b2:43:e2:5f:f5:71:1e:05:d3:26:fa:12:
1c:2c:a3:d9:d2:ec:4d:d2:c1:28:2f:7a:28:63:36:66:c0:cf:
02:6d:1d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:41:30 2025 by rpki-client