Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.mft
File: P6_QfcCG3X_uxp5k4JTe5fSc6n0.mft (raw, json)
Hash identifier: onNi/NnHr5ZejMb8NLdfRG4itAputQKCdRhOmuMTevo=
Subject key identifier: 6A:15:51:43:CD:B4:54:34:C2:15:8F:A5:65:78:85:53:98:BD:ED:C1
Authority key identifier: 3F:AF:D0:7D:C0:86:DD:7F:EE:C6:9E:64:E0:94:DE:E5:F4:9C:EA:7D
Certificate issuer: /CN=3fafd07dc086dd7feec69e64e094dee5f49cea7d
Certificate serial: 019A4EF5DECDA5A35E6E969FE68432C38C58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6_QfcCG3X_uxp5k4JTe5fSc6n0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.mft
Manifest number: 1422
Signing time: Tue 04 Nov 2025 13:02:07 +0000
Manifest this update: Tue 04 Nov 2025 13:02:07 +0000
Manifest next update: Wed 05 Nov 2025 13:02:07 +0000
Files and hashes: 1: BfNexY5OqoQ7WOolPlzeDpCCs5M.roa (hash: rSm9EPZuoDpFIDuTgtzeM5a6uFOK9MrJk+o4deyRBsw=)
2: P6_QfcCG3X_uxp5k4JTe5fSc6n0.crl (hash: xq1PfcP4El2aDydDRKYlVgWp4RifWD3HaPpcdfTTQQ0=)
3: uq8LGKG3oEbowZ7v4iuP9ClmWdw.roa (hash: hgRaSL//DCXKQ88iWICAvE3iKVN2MVceZAG3WSssG0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6_QfcCG3X_uxp5k4JTe5fSc6n0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:de:cd:a5:a3:5e:6e:96:9f:e6:84:32:c3:8c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fafd07dc086dd7feec69e64e094dee5f49cea7d
Validity
Not Before: Nov 4 13:02:07 2025 GMT
Not After : Nov 5 13:02:07 2025 GMT
Subject: CN=6a155143cdb45434c2158fa56578855398bdedc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:56:bc:7c:2d:28:7d:46:0b:1d:a3:ec:20:ef:
91:b5:f1:fe:05:a5:c3:7d:af:c9:49:84:7c:a3:3c:
c9:8d:5f:a6:65:53:5f:20:ce:ee:b4:38:a4:08:cd:
62:27:0b:d0:5b:84:10:9a:ab:77:4e:da:70:3a:54:
b4:35:31:e5:9d:d1:a8:ea:8f:71:35:1c:90:1a:3b:
48:13:05:9a:a6:7f:b6:a8:36:9f:86:00:30:44:a7:
e1:37:e6:db:ed:39:5a:de:7e:c4:d0:3e:c7:1b:8a:
9d:5c:db:d5:db:1d:92:df:96:43:5a:72:24:0e:e0:
75:42:be:99:b3:64:bf:f3:49:93:02:e7:65:c3:e0:
7e:e7:ec:68:ee:59:28:a5:69:42:72:7a:a6:aa:7e:
bf:ed:83:64:61:5e:ed:a2:a4:81:47:9f:0e:5d:8d:
bd:83:e4:09:5f:67:e1:3f:9b:12:97:28:01:c0:5b:
2d:01:77:a3:0f:98:0b:c2:81:bf:f9:80:6a:6a:fc:
f3:fa:19:85:cc:f7:07:cf:be:2e:cd:38:0e:65:62:
77:81:a5:8b:e6:70:ef:01:db:29:d6:1d:61:4c:34:
0c:52:64:53:70:e4:f3:e3:d2:3f:27:05:57:92:c4:
0b:78:bb:de:c4:33:ba:ef:75:7b:8d:cd:d5:48:62:
9e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:15:51:43:CD:B4:54:34:C2:15:8F:A5:65:78:85:53:98:BD:ED:C1
X509v3 Authority Key Identifier:
keyid:3F:AF:D0:7D:C0:86:DD:7F:EE:C6:9E:64:E0:94:DE:E5:F4:9C:EA:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6_QfcCG3X_uxp5k4JTe5fSc6n0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:22:24:95:26:16:c3:3e:a6:8a:84:cd:f9:49:55:44:66:50:
1e:eb:87:24:27:3b:8a:f8:1f:83:ac:79:fc:19:92:d9:8a:49:
e0:22:83:a4:99:4a:6a:dc:93:1b:a0:92:6c:f8:26:3b:9e:03:
36:7d:ef:82:58:3a:8b:68:f5:5f:19:bc:10:e9:43:b6:28:77:
71:db:d8:02:1b:6e:6b:cd:75:8c:be:34:6c:d8:27:91:be:06:
27:65:4d:9f:a5:57:12:47:1f:d6:e8:16:8a:ce:29:a2:3d:85:
3f:62:67:a1:94:82:da:2a:32:63:ed:d1:38:5a:00:39:7f:22:
71:93:55:83:35:ea:6d:1c:fe:37:71:1e:1e:f9:19:c2:04:d5:
e0:a6:5f:17:e6:16:16:c3:6d:4b:c1:dc:00:a5:18:21:d2:2d:
84:0f:e8:f9:00:7d:77:e6:9c:ef:2e:88:40:f4:d9:b9:1b:15:
b3:68:56:97:09:02:2e:9a:58:39:79:39:b2:33:07:9a:0a:41:
a4:b0:2f:a7:42:55:0c:c6:ca:d8:d9:37:db:9d:d5:e6:e4:c3:
2b:5e:17:50:cd:ef:2c:36:8c:57:e6:9d:fc:1c:7c:d2:ff:19:
ae:20:bd:03:88:ea:94:d6:8c:7a:18:37:7d:7d:98:a0:a7:4e:
e0:d5:7b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:58:14 2025 by rpki-client