Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.mft
File: P6xpra8ADdd6SwAYd8JYoh0f9qA.mft (raw, json)
Hash identifier: 2Z7aXNwRDb3kA6ZETZguPg23Em0+sxtqCDfWs5+GlSY=
Subject key identifier: 59:A6:CA:AD:50:B0:3E:2A:30:90:DA:3C:44:F4:67:26:D9:06:78:17
Authority key identifier: 3F:AC:69:AD:AF:00:0D:D7:7A:4B:00:18:77:C2:58:A2:1D:1F:F6:A0
Certificate issuer: /CN=3fac69adaf000dd77a4b001877c258a21d1ff6a0
Certificate serial: 019A722641553A293C845384FCEE56AA0A95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xpra8ADdd6SwAYd8JYoh0f9qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.mft
Manifest number: 101C
Signing time: Tue 11 Nov 2025 09:01:40 +0000
Manifest this update: Tue 11 Nov 2025 09:01:40 +0000
Manifest next update: Wed 12 Nov 2025 09:01:40 +0000
Files and hashes: 1: P6xpra8ADdd6SwAYd8JYoh0f9qA.crl (hash: thtRH50JJrENRY+f8W4URfAanqdkvv4COPWS2POXenA=)
2: pGti5NOwKPTLx4Ly3hXPkfnIdHY.roa (hash: hGj1ei60T0pZizrlmStFTjFUv40NzLgMUG+0J0UuEdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6xpra8ADdd6SwAYd8JYoh0f9qA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:41:55:3a:29:3c:84:53:84:fc:ee:56:aa:0a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fac69adaf000dd77a4b001877c258a21d1ff6a0
Validity
Not Before: Nov 11 09:01:40 2025 GMT
Not After : Nov 12 09:01:40 2025 GMT
Subject: CN=59a6caad50b03e2a3090da3c44f46726d9067817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c8:96:b4:20:2b:75:75:b3:41:ce:c6:db:e0:
57:47:65:3a:02:2d:16:eb:b9:2f:e6:69:ce:11:a7:
67:b9:91:45:89:40:4a:cd:42:f3:03:2c:ca:12:18:
fd:19:24:86:46:d6:70:7c:80:f2:11:c0:58:9e:c2:
35:58:90:0c:36:8c:28:49:e9:28:97:c7:88:16:d5:
fb:95:b6:6d:1f:f3:72:93:0b:37:15:f1:5d:5c:c9:
2e:4d:a9:b9:38:97:a6:00:f7:59:1c:19:a2:17:43:
89:39:68:22:9d:71:0b:63:60:2c:cf:f8:e7:93:bb:
b1:73:51:72:1a:8e:8c:0e:2b:81:79:07:ee:db:1f:
5e:be:8b:c4:e5:e5:b3:85:74:19:53:79:81:b7:e7:
d7:9b:29:ea:14:96:b8:31:aa:ca:6c:b1:d9:7b:95:
22:19:b9:8d:77:cc:b4:3d:b4:d5:55:54:5a:c3:30:
bd:34:68:52:4b:7d:67:ad:0d:e2:27:f3:f7:ce:52:
30:87:8d:a5:7f:2d:93:85:41:85:96:8d:a8:4a:8f:
c8:e7:ab:3b:6a:de:e4:5c:55:32:95:e7:8d:c2:4b:
da:37:d9:af:16:d5:4b:df:44:73:8a:cb:d3:8a:59:
5e:30:09:16:a8:aa:50:a5:90:3a:fa:63:71:80:17:
83:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A6:CA:AD:50:B0:3E:2A:30:90:DA:3C:44:F4:67:26:D9:06:78:17
X509v3 Authority Key Identifier:
keyid:3F:AC:69:AD:AF:00:0D:D7:7A:4B:00:18:77:C2:58:A2:1D:1F:F6:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xpra8ADdd6SwAYd8JYoh0f9qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:dd:7d:fd:fe:a1:6e:c4:54:54:f6:4c:08:56:00:16:15:5e:
89:1d:3f:43:c7:69:9c:c0:7f:28:55:5f:0a:c3:be:b8:00:03:
79:05:6b:3d:15:81:8d:40:47:f6:a1:37:26:56:ba:a9:ef:12:
49:7e:2b:a6:c1:7f:08:3a:4c:d1:8c:1a:9f:85:1d:62:df:b6:
d1:a6:b5:65:23:62:d2:63:bc:a6:68:68:7b:f1:81:f6:e0:07:
93:4e:db:72:77:43:c9:af:01:98:ec:d3:41:d9:6a:75:ba:df:
5c:a7:91:d6:86:c2:7b:e0:f6:4b:a1:c0:9f:42:0f:16:1a:32:
42:a1:84:04:9c:5c:2d:6d:38:41:b7:cb:91:c4:4b:12:75:b2:
82:6e:40:8a:1f:3b:32:cc:59:c9:58:4a:df:50:0d:94:6b:3f:
f6:ef:a0:6b:c8:1f:95:8f:86:2d:16:39:5d:0e:47:f5:3a:18:
b9:0d:75:e5:aa:1d:1c:84:ba:76:2a:f1:40:cd:98:7b:9b:a9:
90:7e:90:7f:46:c8:db:5a:2a:dc:7c:08:57:5b:26:fe:dd:9d:
87:2c:4c:fa:e7:9a:42:ba:dd:2a:75:40:f9:24:c1:da:58:9b:
d8:10:d2:f9:11:66:5b:e1:11:06:fa:f9:80:8d:01:d1:e3:d2:
a3:81:93:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:52 2025 by rpki-client