Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft
File: 6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft (raw, json)
Hash identifier: wP1whGocVfhKaRw1BUdWCY6QY+bw86THRVNBXMlAuE8=
Subject key identifier: A6:7B:A7:B7:A1:36:F7:28:06:A0:F2:D4:63:3A:E0:09:B0:47:2B:F3
Authority key identifier: E8:F9:9C:D8:84:FB:5C:BA:B3:F3:B3:4E:17:A8:0A:48:AD:EC:3F:E5
Certificate issuer: /CN=e8f99cd884fb5cbab3f3b34e17a80a48adec3fe5
Certificate serial: 019A52D14DFE6B86BDEA4731E1AD8A0B3194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft
Manifest number: 0D8C
Signing time: Wed 05 Nov 2025 07:00:39 +0000
Manifest this update: Wed 05 Nov 2025 07:00:39 +0000
Manifest next update: Thu 06 Nov 2025 07:00:39 +0000
Files and hashes: 1: 6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl (hash: soodAIvksMcTEpmZBZDlY/c/xByRI3ev4SVFV2rU3J0=)
2: DD5wwVR4QntHgRvmQHrM5gRYoL0.roa (hash: +XZFURh1MsaKfVC7ehNqW8S6TsTBbdN2yMCWh0GcBWI=)
3: pBGZNx_OAmMdbFc_db_0hiPmyn0.roa (hash: QFrjKNE3vTim3+tyZdQRJX7MRvsrfcNJr7UDy9LbkxY=)
4: vgSjBdnlNw4PtVl7ZUje8-cR03s.roa (hash: H3OQmYWity24ih078EAoQ3E84gh3OSk8WYJH295c1kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:4d:fe:6b:86:bd:ea:47:31:e1:ad:8a:0b:31:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8f99cd884fb5cbab3f3b34e17a80a48adec3fe5
Validity
Not Before: Nov 5 07:00:39 2025 GMT
Not After : Nov 6 07:00:39 2025 GMT
Subject: CN=a67ba7b7a136f72806a0f2d4633ae009b0472bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:72:67:dc:9d:99:6a:ab:e4:a5:ca:4a:4c:01:
b6:19:c3:c7:ca:45:ae:73:c7:62:39:2d:73:4e:5b:
66:59:34:bd:bc:f7:6e:b4:07:de:cc:40:f5:f9:45:
11:04:b1:5b:cf:c8:59:fc:ab:af:51:5b:82:67:6e:
d5:f3:ae:a9:e4:5a:2d:13:ea:78:23:12:79:86:ee:
c9:cc:53:8b:18:0f:10:76:c2:ec:e7:3a:1d:bc:3f:
5a:14:71:b0:54:cc:11:f2:22:50:ad:7c:60:15:54:
bc:7e:7a:a1:83:f2:97:35:ee:bf:8d:6f:7a:9a:af:
ee:68:ff:a9:c2:e2:9a:ce:51:00:b9:d8:79:5b:23:
6b:1d:12:c2:08:20:37:4a:80:9d:9d:58:a8:f0:71:
cb:7d:0d:91:bc:c7:72:04:1a:67:11:52:e2:3d:e6:
e6:2d:56:73:2f:c6:69:6f:01:b1:a8:70:7c:de:75:
2a:a4:79:3d:bb:2f:af:55:8f:2a:9a:58:48:2c:5b:
4d:e2:d5:b6:6f:d5:2e:74:8e:c0:c3:38:c5:47:cb:
88:a0:5a:bc:08:c5:9b:3c:22:7e:0f:99:2f:6f:9b:
db:0a:58:e2:16:7f:f8:d7:59:a5:bc:a1:61:01:65:
d3:58:a1:6f:26:0a:19:61:34:fb:8d:ea:c5:f9:08:
ac:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7B:A7:B7:A1:36:F7:28:06:A0:F2:D4:63:3A:E0:09:B0:47:2B:F3
X509v3 Authority Key Identifier:
keyid:E8:F9:9C:D8:84:FB:5C:BA:B3:F3:B3:4E:17:A8:0A:48:AD:EC:3F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:85:b0:0e:35:eb:99:46:91:14:e5:22:3c:c2:16:17:89:12:
f4:36:81:e8:9e:15:c5:ee:a6:2f:fe:24:12:4e:bd:84:81:8e:
35:c3:71:03:6a:cf:c1:ec:9b:49:45:98:93:38:52:60:b3:53:
53:50:ef:79:3c:35:fe:f0:12:c3:a2:38:a0:ee:36:7e:0e:dd:
21:31:41:89:b0:ce:ef:08:ec:b7:a1:06:41:a1:88:8c:d9:2e:
b2:95:68:ab:86:e7:a1:7e:74:e8:b5:ef:bb:c7:bc:06:9d:f0:
ae:e1:98:8c:ae:e8:83:6d:cb:ab:9a:0e:be:2e:6a:ea:15:1d:
15:41:46:84:20:e5:92:1c:72:2c:5d:a4:8b:d7:e4:df:63:5b:
5a:60:42:58:5c:03:4b:d1:12:b5:b2:14:4b:08:0c:97:83:e4:
f2:6e:9c:dd:1f:15:fb:96:1f:a4:86:04:8f:74:91:93:a1:bc:
20:cd:27:e8:c3:32:23:82:5b:dc:1a:90:9e:14:8b:3a:93:37:
0a:c7:cf:70:07:35:43:89:ae:99:da:ae:b7:0f:f7:82:e1:04:
ba:d2:6b:3d:9b:43:99:67:94:e7:3a:f1:f8:0e:f4:61:b4:b7:
ea:0c:c5:04:3c:2b:b9:5d:9e:06:c8:51:e4:2b:d1:d4:6f:e1:
20:c0:8a:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0U3+a4a96kcx4a2KCzGUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4Zjk5Y2Q4ODRmYjVjYmFiM2YzYjM0ZTE3YTgwYTQ4YWRl
YzNmZTUwHhcNMjUxMTA1MDcwMDM5WhcNMjUxMTA2MDcwMDM5WjAzMTEwLwYDVQQD
EyhhNjdiYTdiN2ExMzZmNzI4MDZhMGYyZDQ2MzNhZTAwOWIwNDcyYmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnJn3J2ZaqvkpcpKTAG2GcPHykWu
c8diOS1zTltmWTS9vPdutAfezED1+UURBLFbz8hZ/KuvUVuCZ27V866p5FotE+p4
IxJ5hu7JzFOLGA8QdsLs5zodvD9aFHGwVMwR8iJQrXxgFVS8fnqhg/KXNe6/jW96
mq/uaP+pwuKazlEAudh5WyNrHRLCCCA3SoCdnVio8HHLfQ2RvMdyBBpnEVLiPebm
LVZzL8ZpbwGxqHB83nUqpHk9uy+vVY8qmlhILFtN4tW2b9UudI7AwzjFR8uIoFq8
CMWbPCJ+D5kvb5vbCljiFn/411mlvKFhAWXTWKFvJgoZYTT7jerF+QisVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZ7p7ehNvcoBqDy1GM64AmwRyvzMB8GA1UdIwQY
MBaAFOj5nNiE+1y6s/OzTheoCkit7D/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlBtYzJJVDdYTHF6ODdOT0Y2Z0tTSzNzUC1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9kODViYzctNThhNi00MDdhLThhY2It
NzUwOWY3ZjRjNWE2LzEvNlBtYzJJVDdYTHF6ODdOT0Y2Z0tTSzNzUC1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9kODViYzctNThhNi00MDdhLThhY2ItNzUwOWY3ZjRjNWE2
LzEvNlBtYzJJVDdYTHF6ODdOT0Y2Z0tTSzNzUC1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXYWwDjXr
mUaRFOUiPMIWF4kS9DaB6J4Vxe6mL/4kEk69hIGONcNxA2rPweybSUWYkzhSYLNT
U1DveTw1/vASw6I4oO42fg7dITFBibDO7wjst6EGQaGIjNkuspVoq4bnoX506LXv
u8e8Bp3wruGYjK7og23Lq5oOvi5q6hUdFUFGhCDlkhxyLF2ki9fk32NbWmBCWFwD
S9EStbIUSwgMl4Pk8m6c3R8V+5YfpIYEj3SRk6G8IM0n6MMyI4Jb3BqQnhSLOpM3
CsfPcAc1Q4mumdqutw/3guEEutJrPZtDmWeU5zrx+A70YbS36gzFBDwruV2eBshR
5CvR1G/hIMCK3w==
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:18:44 2025 by rpki-client