Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
File: P6xJAcwjvke_qfEqYET6Y0USIQc.mft (raw, json)
Hash identifier: 1QubfL84EUkl4F1Snc6QYybb2CIP7UZ2TVmznESjL68=
Subject key identifier: E3:EA:E3:06:7F:83:ED:AE:C8:5C:95:47:AF:2A:58:85:EC:F8:87:1F
Authority key identifier: 3F:AC:49:01:CC:23:BE:47:BF:A9:F1:2A:60:44:FA:63:45:12:21:07
Certificate issuer: /CN=3fac4901cc23be47bfa9f12a6044fa6345122107
Certificate serial: 019A4FD04C694B59CE27AB2734F000E392F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
Manifest number: 064B
Signing time: Tue 04 Nov 2025 17:00:42 +0000
Manifest this update: Tue 04 Nov 2025 17:00:42 +0000
Manifest next update: Wed 05 Nov 2025 17:00:42 +0000
Files and hashes: 1: I2T3vW_f2hKmlZWnd51x-GtOD7M.roa (hash: oNoWZuXx4HX98BE5ZXv2y66gUnUeaQrrJOmk84paoXM=)
2: P6xJAcwjvke_qfEqYET6Y0USIQc.crl (hash: sRJQqIyj+nwx6b330BjcQS5FOBEiET/sPamKIQafXq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:4c:69:4b:59:ce:27:ab:27:34:f0:00:e3:92:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fac4901cc23be47bfa9f12a6044fa6345122107
Validity
Not Before: Nov 4 17:00:42 2025 GMT
Not After : Nov 5 17:00:42 2025 GMT
Subject: CN=e3eae3067f83edaec85c9547af2a5885ecf8871f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:59:81:16:12:8d:91:70:0a:e5:f3:68:ef:fc:
f9:f7:e7:6d:58:83:c1:3b:09:1a:0b:ca:3e:f2:82:
81:4c:58:32:97:9b:89:3b:5c:c8:f1:9f:5c:a6:17:
57:57:cf:6b:0e:5e:d4:2a:27:71:dd:cb:d5:c5:e2:
bf:00:c5:4d:a3:72:8a:52:15:11:09:cb:68:d1:1d:
bb:bd:85:c4:e4:57:54:2b:65:04:9d:11:e7:3c:b2:
e2:0f:51:1e:cf:7d:45:72:eb:3b:c2:0f:54:02:64:
18:88:19:8e:54:64:51:34:cb:55:7f:dc:11:57:23:
66:95:2a:33:ba:41:e5:b3:6c:92:ba:d3:1e:38:b5:
e1:34:0e:fd:ab:68:b8:a3:0e:1e:9b:b1:ad:46:fd:
49:b6:85:c0:f5:fe:c7:78:a4:18:b7:0e:8f:6d:93:
df:b8:8a:4d:63:14:37:79:b3:39:75:a0:98:0a:2a:
c9:10:b0:e0:76:31:b8:fd:31:aa:9e:4c:40:bd:5e:
15:fc:6d:6a:ec:9c:42:1b:2e:ba:83:04:56:99:04:
4f:9b:0b:f8:f2:43:01:7c:ce:16:87:4f:81:a5:c5:
0c:cd:65:1c:fd:c0:0b:87:84:e7:61:4e:12:e9:a8:
cb:dc:03:78:f8:28:38:ad:53:81:0d:9a:64:af:12:
f3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:EA:E3:06:7F:83:ED:AE:C8:5C:95:47:AF:2A:58:85:EC:F8:87:1F
X509v3 Authority Key Identifier:
keyid:3F:AC:49:01:CC:23:BE:47:BF:A9:F1:2A:60:44:FA:63:45:12:21:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:fd:42:af:da:cb:97:b3:19:64:7b:21:67:54:d8:f7:f2:12:
d7:95:54:75:a4:7f:6d:e2:b1:eb:75:af:59:4d:36:72:10:e5:
96:da:f3:8c:c9:ad:a7:1b:90:39:eb:91:84:f7:c4:6b:9c:9f:
d8:48:12:4c:ac:19:b7:53:80:bc:00:fa:ad:4c:dc:83:f0:17:
e9:e3:30:51:e0:4f:ff:f3:da:9a:10:eb:c8:ad:a0:50:62:5a:
77:75:c3:ba:b0:63:16:ea:81:8d:12:fc:35:90:fe:2f:be:c3:
cf:0a:e6:22:4a:52:24:b8:56:ea:a0:8d:51:f4:08:be:bf:18:
c5:8e:58:57:5c:62:df:92:dc:bc:ed:a7:ea:47:a8:77:21:a6:
bf:68:f8:45:d0:47:73:fe:ff:64:9d:4f:f3:b1:81:bb:e4:21:
15:0e:07:23:ec:62:7f:f4:a6:5d:d8:92:11:de:f7:e8:56:a8:
11:37:e9:6e:4e:bd:b8:30:7f:91:02:98:39:53:e3:00:45:40:
73:df:bb:44:f5:9b:24:3c:66:8b:a9:08:d8:9f:76:40:46:86:
5e:f9:6c:10:47:92:ff:e1:18:e5:14:15:7f:10:77:e1:6b:cc:
c0:16:4a:c8:e8:1b:f3:2b:41:0d:4f:c7:2f:7d:6d:d4:f0:88:
14:6e:08:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:21:52 2025 by rpki-client