Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
File: P6xo-RIFxE5zAzbmALYzT4yB6MI.mft (raw, json)
Hash identifier: kTcAYuKuSF1CAVvTFzxb8B6a6do3vI6lI0id7woQwZo=
Subject key identifier: E5:03:12:A1:D9:FE:73:50:DF:B3:E7:1A:A3:66:30:27:83:9F:E5:BE
Authority key identifier: 3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
Certificate issuer: /CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Certificate serial: 01987418BD6458A4A27704DBC892FF7D170C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
Manifest number: 0208
Signing time: Mon 04 Aug 2025 08:00:35 +0000
Manifest this update: Mon 04 Aug 2025 08:00:35 +0000
Manifest next update: Tue 05 Aug 2025 08:00:35 +0000
Files and hashes: 1: EiOlPx07xu7VkFJ-Fp9Fuqy8TzU.roa (hash: YTkNQ57L/BsF8+52AnZs1f7V2wA4xa87/fYc1vwFoig=)
2: GU1YI3vRymC8okEmp-zZRparjfs.roa (hash: q/QbAyjmOhWo1JcjW3JwZIKUXCaSn/iJ6pmWpIOWSpI=)
3: P6xo-RIFxE5zAzbmALYzT4yB6MI.crl (hash: jX7SFToiWPtxyUE4IeZKmjM3gl7I+X1hVTzcT/GrMDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:bd:64:58:a4:a2:77:04:db:c8:92:ff:7d:17:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Validity
Not Before: Aug 4 08:00:35 2025 GMT
Not After : Aug 5 08:00:35 2025 GMT
Subject: CN=e50312a1d9fe7350dfb3e71aa3663027839fe5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a7:3c:88:8f:ca:47:f4:e1:7d:72:24:65:35:
6f:bb:5d:58:22:21:8b:e4:f0:b4:f7:7c:d8:38:41:
23:6e:d4:4b:4e:06:62:d6:dd:43:c8:c1:10:64:c7:
70:cf:36:67:4c:40:a7:bd:30:1b:ae:03:26:ac:b1:
d6:ed:5d:f4:c1:f5:e1:63:5f:15:ec:7a:94:41:49:
62:9d:25:45:4a:09:f9:28:6e:51:75:01:12:9a:11:
88:de:b1:cb:23:6c:4b:a9:ef:4e:7c:0f:d4:28:29:
ad:02:79:c0:99:f5:55:49:10:3f:06:01:c7:13:30:
aa:35:5e:37:42:2f:9c:cf:c1:af:1c:0b:d5:43:2d:
a7:10:94:dd:df:47:b5:e8:2d:2d:32:a6:45:20:8c:
c1:0d:e7:29:67:6b:8e:09:14:a3:bd:10:8d:fc:70:
1c:93:21:ea:8c:f1:72:c9:dc:7f:43:1f:57:e4:0d:
63:a3:c0:7a:e6:b5:ef:d0:68:c9:dc:13:a0:93:da:
d4:1f:fa:34:cf:ed:93:4b:58:e7:a0:84:a3:ce:24:
bc:38:a8:b9:23:ea:29:0a:0c:9b:5f:22:e8:f8:7e:
59:66:94:70:8d:a8:05:50:ba:ba:99:dd:86:26:93:
e9:67:11:9c:3d:6f:c3:ce:3a:82:ec:cf:e5:64:26:
91:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:03:12:A1:D9:FE:73:50:DF:B3:E7:1A:A3:66:30:27:83:9F:E5:BE
X509v3 Authority Key Identifier:
keyid:3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b9:94:9a:59:b6:03:76:14:68:7b:91:4e:10:aa:92:69:4d:
60:07:20:28:5e:b5:0f:63:cf:e9:d7:96:d7:fe:05:dd:65:4b:
51:a6:d6:27:f9:1e:90:12:26:98:a7:52:81:61:95:1f:22:60:
3c:c3:f5:a2:ab:4a:6f:a1:73:9b:b5:25:90:75:dd:b5:1b:eb:
9d:19:57:41:52:ed:7b:0f:1f:a5:10:19:49:51:1c:90:1d:c8:
d8:c1:1c:8e:19:a4:16:43:93:82:47:e1:4d:ac:a7:4f:c5:12:
35:46:b5:7f:7b:65:ba:1f:f4:ba:eb:43:f1:1a:da:db:40:5a:
20:72:29:c2:8f:ef:55:2d:d1:e1:6e:d4:46:d3:89:e3:e5:fb:
85:8e:17:e8:cf:01:7d:ef:e2:98:a6:92:d3:3c:76:2c:0f:f6:
b9:68:35:f1:ea:07:b0:62:39:5f:25:21:6b:28:77:e6:40:39:
56:4b:e7:1d:16:5c:b4:22:07:73:ca:3a:e9:68:8f:23:22:e0:
40:08:dc:3d:b0:bf:8b:c3:db:d4:58:ce:27:e4:93:05:47:13:
c3:b3:0e:c3:80:65:c0:44:6e:b3:06:dc:7b:4d:62:62:3f:a1:
4f:60:20:23:04:63:38:b7:95:d0:f2:f9:c3:35:0b:3e:90:8b:
bf:74:23:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:08 2025 by rpki-client