Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
File: P6xo-RIFxE5zAzbmALYzT4yB6MI.mft (raw, json)
Hash identifier: I6UtrLLF+IAXma/wSdKxMo5UwhW8J7Mp1/nxqk6n0VE=
Subject key identifier: AF:8C:91:C8:1D:01:AD:8D:78:FD:24:9A:EB:06:94:75:14:6B:80:60
Authority key identifier: 3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
Certificate issuer: /CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Certificate serial: 019845BF36CED882DD2653A0C85C3DD151B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
Manifest number: 01F0
Signing time: Sat 26 Jul 2025 08:00:15 +0000
Manifest this update: Sat 26 Jul 2025 08:00:15 +0000
Manifest next update: Sun 27 Jul 2025 08:00:15 +0000
Files and hashes: 1: EiOlPx07xu7VkFJ-Fp9Fuqy8TzU.roa (hash: YTkNQ57L/BsF8+52AnZs1f7V2wA4xa87/fYc1vwFoig=)
2: GU1YI3vRymC8okEmp-zZRparjfs.roa (hash: q/QbAyjmOhWo1JcjW3JwZIKUXCaSn/iJ6pmWpIOWSpI=)
3: P6xo-RIFxE5zAzbmALYzT4yB6MI.crl (hash: hv0Ah5mNZd6q9l8Mf7qOFoR6c/bxiEuVp5WQaA6AtcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:bf:36:ce:d8:82:dd:26:53:a0:c8:5c:3d:d1:51:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Validity
Not Before: Jul 26 08:00:15 2025 GMT
Not After : Jul 27 08:00:15 2025 GMT
Subject: CN=af8c91c81d01ad8d78fd249aeb069475146b8060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:da:ce:e4:64:50:af:b0:48:62:d1:56:8d:f4:
19:54:54:dc:5c:97:00:cd:3f:ed:31:a5:57:59:e3:
aa:cd:43:59:21:4d:14:eb:1f:4c:0d:09:d2:f3:4a:
36:77:2f:1b:50:1b:73:f6:57:45:fb:70:19:44:5f:
60:3e:0f:83:51:87:d3:cb:54:e3:10:c6:5a:40:84:
0a:f6:39:01:38:7b:34:f1:e8:7f:96:f0:5b:14:ce:
f0:15:e1:54:95:2e:0f:e6:5b:64:dc:67:8c:8d:28:
98:9d:52:e2:92:35:6f:26:02:94:04:a6:44:72:75:
06:a2:36:9a:e5:32:a5:01:86:5b:1b:ba:a0:0a:0e:
24:67:14:7e:d7:d9:35:75:e0:6d:a2:dc:0e:42:60:
0c:77:e2:6d:0d:81:4a:e6:b4:c4:8a:52:ab:2b:26:
f4:ad:ff:94:fe:0a:db:76:55:1c:88:ad:2b:ac:86:
5e:c5:7e:ca:e3:35:01:6c:73:26:bd:02:0a:74:78:
a2:98:a3:07:df:74:8e:16:9b:87:56:69:f5:a1:46:
f6:79:f8:9e:fd:01:91:7f:7a:39:76:4d:ad:8b:bf:
63:03:08:1f:ce:44:d8:f8:9b:04:0a:5e:30:ed:1e:
c6:18:c7:dc:6f:a5:b3:be:67:9b:1e:b7:ca:a8:17:
9d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8C:91:C8:1D:01:AD:8D:78:FD:24:9A:EB:06:94:75:14:6B:80:60
X509v3 Authority Key Identifier:
keyid:3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:77:e2:c0:28:53:e7:b7:8d:20:d7:0b:77:b1:9e:39:ba:56:
5c:fc:1b:86:4d:5b:f5:10:87:e3:6e:ef:be:81:b6:86:8e:55:
2c:7a:9f:0f:92:ef:8d:84:fe:17:0e:24:32:8e:4b:1f:c1:57:
a7:97:78:c7:3a:43:fb:cd:f4:08:bf:cc:13:d4:a3:1d:7a:f2:
77:b2:11:7f:31:e5:e5:24:fc:90:c3:74:3f:f1:e5:dc:a0:4c:
e3:0d:1e:62:b7:45:2b:15:f7:17:81:30:32:53:39:4f:fa:af:
92:17:f5:be:3a:20:a6:3a:df:31:b4:f6:7f:a7:3d:24:0c:e7:
76:7e:8f:4a:19:06:cd:b7:78:fc:e4:33:d7:3f:99:b7:f0:c1:
37:78:11:0d:7d:28:4c:ad:75:92:0b:2d:99:ad:aa:27:15:9f:
18:db:44:23:d0:35:ed:c4:1e:30:ff:7b:63:01:b4:7e:30:33:
01:f6:1e:89:40:ca:0d:ec:f8:7b:2e:7f:a1:40:a0:80:88:66:
ea:2b:46:7a:43:32:66:4d:a8:98:b9:a1:c7:82:e6:ca:25:79:
fe:b7:b7:d4:68:2c:a1:90:fc:a9:01:5d:8f:dd:0d:c7:d6:ff:
0f:f4:83:4d:a7:25:9b:a5:eb:e7:b4:83:63:cd:c9:5f:33:6e:
19:82:88:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:28:42 2025 by rpki-client