Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft
File: P6LWhQu8RyBVepF03LyXYK7MCxo.mft (raw, json)
Hash identifier: F7iQySYMXmsP4OMjIf6xThSljGqinc0jE8TzJv0zJy0=
Subject key identifier: 3A:6C:72:0A:7F:38:79:D2:42:72:AE:A9:18:97:F3:91:A1:C9:43:58
Authority key identifier: 3F:A2:D6:85:0B:BC:47:20:55:7A:91:74:DC:BC:97:60:AE:CC:0B:1A
Certificate issuer: /CN=3fa2d6850bbc4720557a9174dcbc9760aecc0b1a
Certificate serial: 01987C09402CC2753EF0EF1F9A7F29936668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6LWhQu8RyBVepF03LyXYK7MCxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft
Manifest number: 1327
Signing time: Tue 05 Aug 2025 21:00:37 +0000
Manifest this update: Tue 05 Aug 2025 21:00:37 +0000
Manifest next update: Wed 06 Aug 2025 21:00:37 +0000
Files and hashes: 1: GAO-zTi3etu6ipkvC2n1MQjAfa8.roa (hash: xkkdl+Sobv3rMi6edmSVvQinnG04ZdzSM/7er87DV0E=)
2: P6LWhQu8RyBVepF03LyXYK7MCxo.crl (hash: NhnM1l5lBoKNXkD/pIWdF4j/49qQgNEIqfKntcM98y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6LWhQu8RyBVepF03LyXYK7MCxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:40:2c:c2:75:3e:f0:ef:1f:9a:7f:29:93:66:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fa2d6850bbc4720557a9174dcbc9760aecc0b1a
Validity
Not Before: Aug 5 21:00:37 2025 GMT
Not After : Aug 6 21:00:37 2025 GMT
Subject: CN=3a6c720a7f3879d24272aea91897f391a1c94358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:88:be:07:df:5a:00:9e:b4:50:74:b1:a8:da:
f7:f6:a6:b0:86:ab:a4:7b:a2:22:24:e4:95:d7:5a:
da:ca:d8:3e:89:1a:d2:90:6d:e7:d4:25:f1:53:23:
a2:11:bb:a4:6a:3e:e0:e2:83:35:c6:8b:65:a1:24:
42:59:d9:a6:dc:20:7b:12:44:e8:33:97:48:9c:ca:
75:70:82:04:04:bd:79:1c:02:85:c1:63:c2:ce:1c:
17:41:f3:8b:9f:c2:d7:37:02:4e:b7:2b:89:f7:0a:
b4:a9:26:0f:7e:f5:a7:13:3d:b7:73:e3:24:ca:dc:
fc:f3:0a:2a:b4:b9:0c:c9:39:35:16:12:de:05:95:
48:e0:67:74:2b:16:0b:fa:3b:53:44:7c:d1:c5:d7:
29:f2:fa:71:9f:ec:fd:e0:1c:4a:66:99:42:26:cd:
c2:eb:42:99:47:c1:c9:31:29:d9:eb:e9:f3:5d:69:
40:e5:d4:a7:ea:51:94:05:cc:47:4b:57:94:27:3c:
25:b6:f6:f2:e8:f1:27:3d:a7:98:03:fa:70:25:06:
69:ad:92:f6:99:cd:bb:4d:99:a1:27:21:d2:08:02:
4d:e4:db:c2:f5:29:d9:c6:6a:a9:2d:0c:43:e1:17:
3e:c2:1d:4b:23:9e:2d:96:4f:9b:17:d1:82:f9:58:
7f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6C:72:0A:7F:38:79:D2:42:72:AE:A9:18:97:F3:91:A1:C9:43:58
X509v3 Authority Key Identifier:
keyid:3F:A2:D6:85:0B:BC:47:20:55:7A:91:74:DC:BC:97:60:AE:CC:0B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6LWhQu8RyBVepF03LyXYK7MCxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:6d:b5:e3:f3:98:53:a2:02:aa:15:95:0a:b2:c6:39:33:54:
d9:93:18:4f:6e:3a:65:ee:1f:fd:9a:93:f2:da:e6:95:78:e4:
12:a6:93:9d:8e:ce:08:a7:1c:04:1a:c6:91:c5:0e:f2:94:66:
72:6d:b7:66:c5:32:2d:48:cc:94:8f:a7:d5:92:39:74:1c:4a:
cf:c9:3a:71:26:4c:db:17:87:10:ac:28:a5:14:bb:56:f2:60:
96:57:8b:db:ab:87:f6:57:02:84:0f:d1:3c:00:23:3c:6c:55:
5d:38:ad:70:65:48:3f:75:34:06:f2:fb:24:5c:58:3b:72:46:
be:57:e2:46:d2:d4:a1:3c:4a:62:5b:6e:55:a4:3c:dc:14:94:
46:11:7e:30:4b:bf:0a:30:86:bb:8b:a3:80:4d:6d:cc:6c:e1:
ee:38:33:35:e7:96:64:9e:72:8e:8b:6b:69:7c:e9:db:0a:ff:
67:20:b9:f1:64:38:e6:61:bd:24:42:22:36:c2:e6:75:40:5b:
00:64:2a:37:09:1b:9d:ba:3f:0f:df:da:9a:ca:20:d8:bd:33:
55:3c:ed:0b:6c:35:74:7d:ae:c9:40:d8:6d:02:ee:7f:51:0a:
9c:35:ea:1c:e6:c5:bd:9e:0a:9b:b3:d1:48:ed:37:f6:cf:c6:
b4:6b:79:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8CUAswnU+8O8fmn8pk2ZoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmYTJkNjg1MGJiYzQ3MjA1NTdhOTE3NGRjYmM5NzYwYWVj
YzBiMWEwHhcNMjUwODA1MjEwMDM3WhcNMjUwODA2MjEwMDM3WjAzMTEwLwYDVQQD
EygzYTZjNzIwYTdmMzg3OWQyNDI3MmFlYTkxODk3ZjM5MWExYzk0MzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIi+B99aAJ60UHSxqNr39qawhquk
e6IiJOSV11raytg+iRrSkG3n1CXxUyOiEbukaj7g4oM1xotloSRCWdmm3CB7EkTo
M5dInMp1cIIEBL15HAKFwWPCzhwXQfOLn8LXNwJOtyuJ9wq0qSYPfvWnEz23c+Mk
ytz88woqtLkMyTk1FhLeBZVI4Gd0KxYL+jtTRHzRxdcp8vpxn+z94BxKZplCJs3C
60KZR8HJMSnZ6+nzXWlA5dSn6lGUBcxHS1eUJzwltvby6PEnPaeYA/pwJQZprZL2
mc27TZmhJyHSCAJN5NvC9SnZxmqpLQxD4Rc+wh1LI54tlk+bF9GC+Vh/eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpscgp/OHnSQnKuqRiX85GhyUNYMB8GA1UdIwQY
MBaAFD+i1oULvEcgVXqRdNy8l2CuzAsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDZMV2hRdThSeUJWZXBGMDNMeVhZSzdNQ3hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9jM2M3NTgtYTI1My00OTg5LWFlMmQt
OWM2NWQxODhlNTRlLzEvUDZMV2hRdThSeUJWZXBGMDNMeVhZSzdNQ3hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9jM2M3NTgtYTI1My00OTg5LWFlMmQtOWM2NWQxODhlNTRl
LzEvUDZMV2hRdThSeUJWZXBGMDNMeVhZSzdNQ3hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnW214/OY
U6ICqhWVCrLGOTNU2ZMYT246Ze4f/ZqT8trmlXjkEqaTnY7OCKccBBrGkcUO8pRm
cm23ZsUyLUjMlI+n1ZI5dBxKz8k6cSZM2xeHEKwopRS7VvJglleL26uH9lcChA/R
PAAjPGxVXTitcGVIP3U0BvL7JFxYO3JGvlfiRtLUoTxKYltuVaQ83BSURhF+MEu/
CjCGu4ujgE1tzGzh7jgzNeeWZJ5yjotraXzp2wr/ZyC58WQ45mG9JEIiNsLmdUBb
AGQqNwkbnbo/D9/amsog2L0zVTztC2w1dH2uyUDYbQLuf1EKnDXqHObFvZ4Km7PR
SO039s/GtGt53A==
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:48:48 2025 by rpki-client