
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
File: P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft (raw, json)
Hash identifier: L9w9tstf6Ad4mkMCPQqiFrCeB2zrGyfWe582iw0oiVk=
Subject key identifier: 25:A4:D1:62:57:88:C8:56:31:28:82:F5:52:58:35:57:2A:26:DA:7C
Authority key identifier: 3F:A4:0F:CF:A8:36:BB:0B:5B:3E:12:94:04:CB:31:E8:52:50:B0:1F
Certificate issuer: /CN=3fa40fcfa836bb0b5b3e129404cb31e85250b01f
Certificate serial: 01988A698F073CBD482CBFAA8A56FEC5E9FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
Manifest number: 1625
Signing time: Fri 08 Aug 2025 16:00:30 +0000
Manifest this update: Fri 08 Aug 2025 16:00:30 +0000
Manifest next update: Sat 09 Aug 2025 16:00:30 +0000
Files and hashes: 1: P6QPz6g2uwtbPhKUBMsx6FJQsB8.crl (hash: rC+L5FxRCQ2oP3gPiRVD2QGtdsIkjaIl+Woynbhlhzs=)
2: nJCyjIsWdPchQmqQbO_MPjGVVDE.roa (hash: Cr0JPO8tp2KrCcxC2yxuo3jq4OH+RZvqc/vb9Mmb68M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:69:8f:07:3c:bd:48:2c:bf:aa:8a:56:fe:c5:e9:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fa40fcfa836bb0b5b3e129404cb31e85250b01f
Validity
Not Before: Aug 8 16:00:30 2025 GMT
Not After : Aug 9 16:00:30 2025 GMT
Subject: CN=25a4d1625788c856312882f5525835572a26da7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7e:3c:89:f4:08:86:7d:8f:fa:47:bf:6a:25:
aa:7c:44:db:7b:0f:88:f2:cd:10:1b:b6:69:fe:fc:
b1:46:28:f3:e4:0a:32:8c:d8:5b:23:06:ba:2d:f3:
69:54:7d:36:9b:b2:84:24:53:4c:f3:57:08:7e:fb:
65:2a:76:8d:a6:bf:d1:49:cd:f0:82:00:40:fe:60:
54:1a:6c:e2:7f:50:dd:4e:e3:43:13:9f:32:a5:97:
05:19:82:7d:9e:05:bc:d8:d8:08:d3:e9:d4:7a:60:
8f:3e:93:78:09:96:26:90:b9:94:f1:03:56:d8:c8:
91:c4:87:13:7d:8a:9d:b0:f7:1b:af:02:a3:1d:9e:
48:5f:fa:f9:e5:08:77:fe:3f:5f:66:4f:32:6e:57:
bd:eb:9c:2e:f9:3f:de:a7:83:91:0c:78:4b:b2:4b:
0e:a3:fc:a6:48:0a:6c:7c:e3:56:00:67:f9:14:99:
41:ed:4c:07:4c:d3:3f:46:a6:cb:3c:31:d3:ea:14:
25:83:e0:56:26:db:99:cd:9a:e8:50:18:d0:e2:d5:
e1:06:6e:ca:64:b0:f9:00:6b:76:73:d7:b9:b0:8a:
00:3f:c2:ca:cb:c0:fa:81:03:57:37:dd:e2:13:ab:
c5:a2:75:d7:84:fe:7e:da:07:8e:64:71:f1:fe:ee:
52:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A4:D1:62:57:88:C8:56:31:28:82:F5:52:58:35:57:2A:26:DA:7C
X509v3 Authority Key Identifier:
keyid:3F:A4:0F:CF:A8:36:BB:0B:5B:3E:12:94:04:CB:31:E8:52:50:B0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:0e:1b:6b:bb:1b:87:98:8f:78:f9:d7:89:cb:31:2f:8b:b3:
89:59:db:8d:ed:6b:a3:0f:a5:1d:00:05:83:f2:8d:84:b7:6a:
ca:8c:57:76:b5:b5:18:7b:ef:67:a4:84:3e:9d:ae:20:2c:08:
83:5e:09:ef:53:41:64:54:cc:1b:3c:18:40:a7:81:b1:fb:39:
1c:fa:17:89:ba:80:2a:9f:ed:0d:49:7d:a0:7e:cf:6e:75:6e:
9d:7c:f6:d7:f2:a6:84:09:94:74:6e:89:4c:2b:4b:aa:9f:79:
57:df:61:73:8d:64:74:fb:4e:46:a3:46:f4:47:5c:9f:0f:9a:
1e:c5:1d:aa:dc:a6:66:89:c4:ff:4f:77:7b:9c:4e:75:97:1a:
79:a6:97:d5:91:65:5c:22:fd:2b:79:3a:1b:0d:a0:e4:90:ef:
af:75:ba:9f:7d:20:23:c5:7a:4f:11:b2:88:7f:14:5a:99:78:
4c:f4:df:30:73:23:c6:c3:a7:44:80:64:e8:84:7a:7d:2b:65:
fc:91:29:c9:6c:29:84:d0:51:ed:70:d5:a4:2e:be:36:08:91:
1b:8c:7f:e5:c5:5e:97:39:99:cb:01:99:59:17:f8:bd:b5:e4:
f4:fc:88:5b:c0:f3:c0:19:ea:a5:d3:85:52:04:9e:ae:59:9d:
c7:9a:2e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:25:54 2025 by rpki-client