Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
File: P6xo-RIFxE5zAzbmALYzT4yB6MI.mft (raw, json)
Hash identifier: BOyA5hAoHHXgRHEvjNhbSXMjSzeIhgWFDadU9je6HXI=
Subject key identifier: 03:4B:9E:9D:6F:6E:F5:D2:81:F8:4F:5F:38:FB:18:39:40:AB:25:73
Authority key identifier: 3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
Certificate issuer: /CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Certificate serial: 019A4D3CEAD0269AC0106A242C705597FAF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
Manifest number: 02FD
Signing time: Tue 04 Nov 2025 05:00:29 +0000
Manifest this update: Tue 04 Nov 2025 05:00:29 +0000
Manifest next update: Wed 05 Nov 2025 05:00:29 +0000
Files and hashes: 1: EiOlPx07xu7VkFJ-Fp9Fuqy8TzU.roa (hash: YTkNQ57L/BsF8+52AnZs1f7V2wA4xa87/fYc1vwFoig=)
2: GU1YI3vRymC8okEmp-zZRparjfs.roa (hash: q/QbAyjmOhWo1JcjW3JwZIKUXCaSn/iJ6pmWpIOWSpI=)
3: P6xo-RIFxE5zAzbmALYzT4yB6MI.crl (hash: mU0r2MR00noQaxBdXE2MC64nggPncuqfoxfE2q60amU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:ea:d0:26:9a:c0:10:6a:24:2c:70:55:97:fa:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Validity
Not Before: Nov 4 05:00:29 2025 GMT
Not After : Nov 5 05:00:29 2025 GMT
Subject: CN=034b9e9d6f6ef5d281f84f5f38fb183940ab2573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8a:c1:4d:5c:33:7f:b6:32:e0:48:81:d8:ba:
a8:ea:cd:e1:8c:36:0d:d3:a1:2e:ee:e8:61:87:9d:
fa:3e:b3:db:69:ea:b0:b8:7c:54:0e:60:0b:d4:c7:
03:87:c6:12:3c:89:98:47:c0:f8:b3:18:67:10:cc:
cf:16:d8:1c:7b:2a:22:ae:89:6e:f8:dd:b2:5a:11:
30:13:5a:69:8c:6f:1d:ee:f7:cd:e8:55:e9:ed:b2:
20:f8:b1:3e:c6:25:eb:a2:82:78:25:77:a6:12:9e:
75:81:b8:61:33:f0:7c:80:50:66:e3:39:d7:74:78:
a6:3f:f8:73:4a:40:fc:9f:c3:84:1d:4c:ba:3b:eb:
c5:68:56:8e:c8:f8:9d:bc:00:38:6a:ba:d1:92:c8:
e1:fb:12:bf:e7:db:46:55:d6:d4:4a:9e:07:2b:63:
b3:ec:ad:b2:1f:92:83:7a:0b:5c:e8:e6:01:19:37:
f8:a9:6d:4d:22:e0:01:12:fa:c9:4d:2b:91:d5:d2:
b5:7f:70:d1:6d:cd:76:c5:a9:25:8d:23:fa:f4:43:
56:aa:09:4e:ea:da:3c:bf:12:4c:72:bd:ae:8f:10:
eb:21:81:df:fb:88:c6:c8:8a:67:0a:18:e5:5f:5e:
b4:dd:2c:97:6a:7d:58:26:89:71:08:3a:82:5b:2a:
4c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4B:9E:9D:6F:6E:F5:D2:81:F8:4F:5F:38:FB:18:39:40:AB:25:73
X509v3 Authority Key Identifier:
keyid:3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:32:1f:8a:6b:cf:9d:ea:dc:1a:12:55:26:1e:4a:69:e0:25:
3c:79:9e:f1:86:80:e7:74:6f:89:af:28:5d:0e:60:22:58:c0:
fd:b7:df:91:c4:ff:98:bc:88:30:d2:da:1a:5b:f6:4a:56:cd:
fc:3f:f1:c8:fd:19:fd:be:be:83:af:6e:bb:2d:8b:e8:d2:ee:
c9:2d:1c:0c:0b:0d:cb:56:cb:c9:3e:9c:25:ad:76:c1:24:1a:
bf:21:16:37:63:89:6f:bb:21:d9:b8:24:44:a4:8a:ce:b3:d3:
67:3f:dc:e3:d6:25:35:3a:a6:00:d3:00:e8:f2:ac:28:e8:c4:
9c:94:52:90:7d:2b:24:ae:4d:53:41:5e:5e:d3:94:0d:59:d0:
42:50:df:46:e6:a0:a7:49:28:f0:38:47:bc:50:40:44:f2:6a:
bf:67:5e:83:5a:9a:60:2f:96:7b:a3:b7:bf:17:8c:41:21:6b:
44:c3:8b:fc:77:43:e3:10:6e:52:67:4c:b4:16:0e:6a:35:47:
3e:ca:26:39:56:16:9c:11:9e:a8:5f:6c:da:f7:e1:95:2f:ae:
b4:58:5b:b1:07:8e:af:69:a6:31:f9:34:e6:a9:75:45:72:8f:
e0:0d:54:d3:47:c0:b4:31:63:cf:24:ae:c2:d1:83:b9:aa:34:
5a:ea:08:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:10 2025 by rpki-client