Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft
File: p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft (raw, json)
Hash identifier: x/xQE1TM8JJ2XhtwPkw/ZjkcwzWyxE6qMONTcCXMPgw=
Subject key identifier: 16:01:53:8F:EA:7D:28:EC:51:F8:F7:B0:7B:FD:87:A1:97:A0:63:7F
Authority key identifier: A7:A7:06:27:BB:45:CD:6C:71:F2:20:19:22:6A:6A:18:95:22:2F:07
Certificate issuer: /CN=a7a70627bb45cd6c71f22019226a6a1895222f07
Certificate serial: 019A72CABA2EE11C043668D8F78359AEC4AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6cGJ7tFzWxx8iAZImpqGJUiLwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft
Manifest number: 068B
Signing time: Tue 11 Nov 2025 12:01:19 +0000
Manifest this update: Tue 11 Nov 2025 12:01:19 +0000
Manifest next update: Wed 12 Nov 2025 12:01:19 +0000
Files and hashes: 1: EnZTRjVsyeH5YvN_IXdrjMInto8.roa (hash: dGNdfgQT3ZLKhZ/v9I6RHyrRDvkswkwt2I+OFKs6hJw=)
2: p6cGJ7tFzWxx8iAZImpqGJUiLwc.crl (hash: Kf/JpqNfxUqKngWjOGdJjbcRE8QCfNM5LDFBOOI9Zi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6cGJ7tFzWxx8iAZImpqGJUiLwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:ba:2e:e1:1c:04:36:68:d8:f7:83:59:ae:c4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a70627bb45cd6c71f22019226a6a1895222f07
Validity
Not Before: Nov 11 12:01:19 2025 GMT
Not After : Nov 12 12:01:19 2025 GMT
Subject: CN=1601538fea7d28ec51f8f7b07bfd87a197a0637f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:07:cd:a7:77:18:0e:cf:c7:78:54:22:6f:01:
c6:f5:10:13:4a:23:99:76:e2:36:bb:31:6a:f9:10:
7c:a7:6e:99:26:67:d0:64:20:d7:cc:ec:85:eb:58:
83:0c:d8:d4:6c:ab:56:83:f0:b7:46:57:7e:6a:9c:
4a:36:db:99:75:e0:ef:26:c3:35:e1:ba:3d:3a:f0:
d4:6e:94:b4:7b:94:d2:bf:ce:3b:e1:cf:4b:ed:76:
e9:3c:f7:38:77:81:b2:ea:5c:9e:92:7b:57:06:44:
5d:a2:c1:9c:79:6c:0c:9f:4e:b2:98:35:eb:75:ca:
db:fd:a8:24:6d:82:58:75:30:b4:51:18:04:a2:32:
73:11:5f:51:3a:36:93:41:f1:7e:e8:43:fe:a3:97:
31:f3:6e:17:40:a2:7a:16:cf:59:e7:97:f2:62:2b:
a0:f2:df:3d:28:88:ea:78:2c:06:cd:fb:24:86:37:
ed:8d:b5:99:e7:21:fc:be:8e:4b:ec:41:a8:74:13:
cd:8f:b5:1a:3f:be:cd:ef:90:7b:86:c1:00:08:d2:
64:be:8a:c5:75:0f:f9:12:39:a1:1c:4b:60:67:22:
0e:0d:21:a6:44:21:e5:d3:24:e5:7c:a4:f3:f7:a9:
31:cf:61:45:16:fc:09:4f:b0:46:17:13:2d:0d:e0:
b7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:01:53:8F:EA:7D:28:EC:51:F8:F7:B0:7B:FD:87:A1:97:A0:63:7F
X509v3 Authority Key Identifier:
keyid:A7:A7:06:27:BB:45:CD:6C:71:F2:20:19:22:6A:6A:18:95:22:2F:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6cGJ7tFzWxx8iAZImpqGJUiLwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:83:17:f3:cd:6a:41:45:7e:7b:20:05:c4:dc:52:b1:a2:a0:
d0:d9:25:80:5e:7d:20:57:33:91:9e:f5:75:a7:b2:e2:ed:4b:
66:43:0d:95:63:3d:e2:90:22:85:83:ea:0c:65:ca:03:db:07:
77:57:5e:ae:4b:19:12:57:b9:12:64:4f:cb:a4:1a:f1:27:56:
08:17:c9:9a:e0:ad:5f:ea:be:da:07:2f:20:7f:53:e5:93:ff:
d3:f2:77:f9:0c:1d:41:ef:de:01:04:f1:c0:48:39:aa:17:b5:
82:77:b4:a8:ff:10:8c:f6:41:00:fb:24:db:bc:7e:63:2c:20:
bf:79:16:85:16:7a:80:21:89:92:ba:ef:90:ed:e4:48:54:da:
cc:81:a4:62:17:35:c8:7d:4a:0d:74:42:50:53:60:89:11:49:
69:e9:e2:94:55:91:38:62:a7:69:8c:20:60:a9:74:f2:1a:11:
2f:f3:fe:4d:c1:93:26:a5:78:d6:9b:cb:f2:57:fd:12:80:2f:
57:18:36:6a:ff:02:2a:19:0b:13:dd:d7:91:7c:bd:03:2f:7f:
6e:2f:8d:d9:e4:fb:64:df:f0:00:5d:74:df:6f:47:39:46:5d:
14:59:da:56:ac:b7:3b:0e:aa:8c:e4:70:20:fe:fd:a9:c2:4b:
59:30:79:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyyrou4RwENmjY94NZrsStMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3YTcwNjI3YmI0NWNkNmM3MWYyMjAxOTIyNmE2YTE4OTUy
MjJmMDcwHhcNMjUxMTExMTIwMTE5WhcNMjUxMTEyMTIwMTE5WjAzMTEwLwYDVQQD
EygxNjAxNTM4ZmVhN2QyOGVjNTFmOGY3YjA3YmZkODdhMTk3YTA2MzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QfNp3cYDs/HeFQibwHG9RATSiOZ
duI2uzFq+RB8p26ZJmfQZCDXzOyF61iDDNjUbKtWg/C3Rld+apxKNtuZdeDvJsM1
4bo9OvDUbpS0e5TSv8474c9L7XbpPPc4d4Gy6lyekntXBkRdosGceWwMn06ymDXr
dcrb/agkbYJYdTC0URgEojJzEV9ROjaTQfF+6EP+o5cx824XQKJ6Fs9Z55fyYiug
8t89KIjqeCwGzfskhjftjbWZ5yH8vo5L7EGodBPNj7UaP77N75B7hsEACNJkvorF
dQ/5EjmhHEtgZyIODSGmRCHl0yTlfKTz96kxz2FFFvwJT7BGFxMtDeC3HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYBU4/qfSjsUfj3sHv9h6GXoGN/MB8GA1UdIwQY
MBaAFKenBie7Rc1scfIgGSJqahiVIi8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDZjR0o3dEZ6V3h4OGlBWkltcHFHSlVpTHdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81ZDA3NGEtNGUxMi00ZTljLWIzNTQt
YmRkNzlmODYzMmU5LzEvcDZjR0o3dEZ6V3h4OGlBWkltcHFHSlVpTHdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81ZDA3NGEtNGUxMi00ZTljLWIzNTQtYmRkNzlmODYzMmU5
LzEvcDZjR0o3dEZ6V3h4OGlBWkltcHFHSlVpTHdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAloMX881q
QUV+eyAFxNxSsaKg0NklgF59IFczkZ71daey4u1LZkMNlWM94pAihYPqDGXKA9sH
d1derksZEle5EmRPy6Qa8SdWCBfJmuCtX+q+2gcvIH9T5ZP/0/J3+QwdQe/eAQTx
wEg5qhe1gne0qP8QjPZBAPsk27x+Yywgv3kWhRZ6gCGJkrrvkO3kSFTazIGkYhc1
yH1KDXRCUFNgiRFJaenilFWROGKnaYwgYKl08hoRL/P+TcGTJqV41pvL8lf9EoAv
Vxg2av8CKhkLE93XkXy9Ay9/bi+N2eT7ZN/wAF10329HOUZdFFnaVqy3Ow6qjORw
IP79qcJLWTB5lw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:34:53 2025 by rpki-client