Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft
File: 6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft (raw, json)
Hash identifier: QzJIMQ7x3YuCnxUURRpEr+6XRZRj+aWhBQN7sAurGNs=
Subject key identifier: 2F:B1:12:EA:12:BB:2D:86:2A:19:2E:04:0A:DC:1B:1A:E2:63:20:49
Authority key identifier: E8:F9:9C:D8:84:FB:5C:BA:B3:F3:B3:4E:17:A8:0A:48:AD:EC:3F:E5
Certificate issuer: /CN=e8f99cd884fb5cbab3f3b34e17a80a48adec3fe5
Certificate serial: 019A50E2D0C1AB3EDB4BAD8ABD636F5C9EEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft
Manifest number: 0D8B
Signing time: Tue 04 Nov 2025 22:00:33 +0000
Manifest this update: Tue 04 Nov 2025 22:00:33 +0000
Manifest next update: Wed 05 Nov 2025 22:00:33 +0000
Files and hashes: 1: 6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl (hash: lzeLIzL4CwVMFvWdWO7zBC3F8HzFxJ1GHimoS2RgTZA=)
2: DD5wwVR4QntHgRvmQHrM5gRYoL0.roa (hash: +XZFURh1MsaKfVC7ehNqW8S6TsTBbdN2yMCWh0GcBWI=)
3: pBGZNx_OAmMdbFc_db_0hiPmyn0.roa (hash: QFrjKNE3vTim3+tyZdQRJX7MRvsrfcNJr7UDy9LbkxY=)
4: vgSjBdnlNw4PtVl7ZUje8-cR03s.roa (hash: H3OQmYWity24ih078EAoQ3E84gh3OSk8WYJH295c1kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:d0:c1:ab:3e:db:4b:ad:8a:bd:63:6f:5c:9e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8f99cd884fb5cbab3f3b34e17a80a48adec3fe5
Validity
Not Before: Nov 4 22:00:33 2025 GMT
Not After : Nov 5 22:00:33 2025 GMT
Subject: CN=2fb112ea12bb2d862a192e040adc1b1ae2632049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d5:22:1a:ed:81:4b:db:a4:1e:da:e2:61:24:
8d:78:bd:cd:1b:4e:88:bc:2b:87:72:76:59:65:07:
37:14:05:66:fe:7e:76:a9:59:38:b6:8e:f9:ce:d7:
84:7f:c5:9d:5a:bd:31:b1:85:16:f2:92:c0:72:43:
83:89:fd:7e:86:75:d7:54:57:61:5c:fb:63:62:a5:
7e:43:07:eb:68:e4:a1:1f:5b:e8:93:69:f4:dc:5c:
ec:18:38:1f:82:70:c1:41:e1:20:e7:04:ac:e3:ef:
1b:f5:4b:cf:9e:26:ad:af:ac:cb:21:6e:88:63:2a:
1a:66:66:8d:ed:58:e3:37:5a:38:e5:68:24:89:bd:
61:13:50:a0:dd:13:04:a2:88:4a:8d:00:d1:5a:cd:
57:bc:71:fc:33:c9:32:05:d8:0f:2f:e9:d5:cf:c1:
0d:43:64:71:40:52:1d:6b:1f:32:89:96:b6:ed:0b:
ed:b0:df:6f:2e:3e:0e:cf:ba:ed:5e:c7:5b:9e:68:
4c:d0:32:03:57:c9:d2:c2:62:e0:49:88:6f:ae:71:
f9:02:96:78:e4:8f:93:77:6a:cf:41:9f:d7:36:a0:
c6:3c:0c:ac:0b:48:19:82:c7:d4:9c:6c:0f:18:93:
1a:9d:09:81:7e:b6:a4:35:26:e9:66:91:b3:20:56:
62:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B1:12:EA:12:BB:2D:86:2A:19:2E:04:0A:DC:1B:1A:E2:63:20:49
X509v3 Authority Key Identifier:
keyid:E8:F9:9C:D8:84:FB:5C:BA:B3:F3:B3:4E:17:A8:0A:48:AD:EC:3F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b4:b5:7b:08:6d:fe:4d:d6:ff:be:54:96:c0:23:05:3e:88:
dd:97:c4:3a:e7:52:dd:45:a4:14:02:e2:5b:4c:6a:90:4a:b0:
ae:ce:6c:45:89:01:f1:0b:38:5b:9c:a3:0a:cf:74:99:25:71:
77:9a:d3:17:41:2b:28:d7:f9:2f:c2:bd:77:d7:31:d2:42:5a:
01:3f:f0:53:8f:c5:b8:c9:e1:63:c3:ad:c7:f1:a2:ca:b7:3e:
7a:cf:e3:5d:58:0f:d9:15:54:cc:0f:b5:1b:3a:f6:09:2e:b9:
4e:83:d5:72:2a:15:a7:06:e0:24:0c:4b:f2:47:54:7d:bc:39:
82:96:28:d7:79:12:61:6b:c6:95:ca:fc:dd:c0:8d:dd:65:c2:
7c:7d:70:a3:72:44:1f:ba:2f:26:14:aa:bd:08:88:e9:0c:53:
ab:2a:51:29:a9:c2:2f:7c:6c:13:b9:21:e5:dc:a6:29:4a:5d:
54:9e:fd:90:bc:f6:b3:57:29:fe:15:f0:e9:31:a4:3d:bd:fe:
b0:21:58:f4:47:f5:72:4e:ba:58:ae:6b:84:05:86:f3:b9:62:
a7:fe:9f:ce:7b:49:f9:9e:52:b9:e9:2a:35:17:bb:98:85:ab:
de:e6:e4:6b:ef:e2:dd:c7:cc:53:e0:74:fa:ec:8d:d5:05:be:
63:17:51:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:51:02 2025 by rpki-client