Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
File: P6xo-RIFxE5zAzbmALYzT4yB6MI.mft (raw, json)
Hash identifier: tgC/woUNWQ4S4+o+lqgVyzOswO5rokXTKv0B0lcZLu8=
Subject key identifier: 14:50:D2:13:71:B0:56:38:4D:29:68:60:B9:03:A1:9A:3D:A8:E5:95
Authority key identifier: 3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
Certificate issuer: /CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Certificate serial: 019A24AEC915CB4B36A114A59F27295E0443
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
Manifest number: 02E8
Signing time: Mon 27 Oct 2025 08:00:25 +0000
Manifest this update: Mon 27 Oct 2025 08:00:25 +0000
Manifest next update: Tue 28 Oct 2025 08:00:25 +0000
Files and hashes: 1: EiOlPx07xu7VkFJ-Fp9Fuqy8TzU.roa (hash: YTkNQ57L/BsF8+52AnZs1f7V2wA4xa87/fYc1vwFoig=)
2: GU1YI3vRymC8okEmp-zZRparjfs.roa (hash: q/QbAyjmOhWo1JcjW3JwZIKUXCaSn/iJ6pmWpIOWSpI=)
3: P6xo-RIFxE5zAzbmALYzT4yB6MI.crl (hash: wJJkPKxkuuumTxZ3STYkHzN2hAuT6saZVRA/mfi9NiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:ae:c9:15:cb:4b:36:a1:14:a5:9f:27:29:5e:04:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Validity
Not Before: Oct 27 08:00:25 2025 GMT
Not After : Oct 28 08:00:25 2025 GMT
Subject: CN=1450d21371b056384d296860b903a19a3da8e595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:24:a6:a8:4c:10:96:bf:ac:76:11:ce:2c:9b:
a4:e8:64:52:af:10:b7:a5:45:27:02:a3:f4:d6:40:
21:4b:e7:b8:ef:91:5e:1e:c2:a2:f2:f9:34:35:40:
4c:37:ab:d8:0c:4e:1c:09:b0:9d:4e:ef:63:9a:6a:
20:bb:dc:23:3c:17:92:60:09:76:64:ee:42:c5:8a:
92:3a:c6:35:bd:fa:1d:44:65:bf:ee:01:ec:19:b1:
7c:f5:87:d1:a5:ed:7e:25:ea:3d:04:15:32:36:77:
e3:00:7f:b8:13:9f:3a:50:06:d7:c0:3b:f3:d9:cf:
75:8b:66:b4:30:18:b1:bb:8b:c1:d3:57:a2:9f:f7:
f8:0c:e2:0c:14:c6:0b:85:29:f1:8d:31:35:4c:9c:
e5:51:93:4f:42:c2:7b:0c:65:5f:99:b0:1c:ca:a7:
44:87:96:c8:c2:bd:79:b9:f4:2f:1e:17:79:39:4a:
a8:3c:f0:79:1d:f7:f4:19:cf:2f:46:b4:d5:44:3c:
75:c5:9d:62:fa:fc:ee:36:a7:44:d1:93:29:eb:47:
0b:44:0a:45:46:0a:8b:aa:9b:2b:d1:fb:f1:47:ad:
ca:5b:74:0f:69:ff:ef:80:92:b5:09:e1:e4:ce:ee:
f4:f4:38:ca:e0:0a:1c:9c:8e:82:56:6d:39:7f:cf:
5c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:50:D2:13:71:B0:56:38:4D:29:68:60:B9:03:A1:9A:3D:A8:E5:95
X509v3 Authority Key Identifier:
keyid:3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:83:3c:e1:22:df:4e:40:5a:b3:83:86:e7:fa:3a:15:ea:c5:
2f:e4:7f:7a:26:42:69:04:07:32:07:2c:d4:a2:dd:62:62:ea:
f3:ee:37:35:47:35:8c:f9:a3:b6:ad:d3:2e:f3:99:86:b6:22:
fa:48:ba:56:32:5b:35:2b:37:8e:16:cb:67:0d:f7:ba:40:91:
f0:71:03:44:98:c2:d9:eb:71:3b:02:be:51:c0:a3:23:23:2c:
23:33:82:fc:8d:8d:f9:95:ae:6d:5d:a7:af:fd:17:4c:9f:2d:
20:c0:90:c6:90:35:6d:70:9f:e5:60:8f:ee:1f:5c:c1:f0:d2:
c3:04:04:3d:6e:f3:a5:2b:92:8e:5a:ce:7d:6e:59:ee:35:14:
55:28:38:e1:bc:9d:29:b8:a2:5f:b0:43:bc:2b:76:ad:7b:98:
d3:06:f1:d9:11:fd:78:50:95:24:19:5d:2b:ae:94:e1:2f:48:
00:2d:ce:74:ae:dd:14:67:0d:77:8a:ae:80:51:00:86:2f:c8:
36:5a:2f:c9:6c:24:df:f0:3e:2f:26:99:48:11:d0:6e:dd:0d:
74:c3:9f:fa:d8:73:a3:8e:4f:91:09:55:97:cb:cd:74:e7:67:
f1:94:34:c2:36:7f:26:c1:09:0e:b3:65:87:01:6e:f7:1e:50:
62:42:61:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZokrskVy0s2oRSlnycpXgRDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmYWM2OGY5MTIwNWM0NGU3MzAzMzZlNjAwYjYzMzRmOGM4
MWU4YzIwHhcNMjUxMDI3MDgwMDI1WhcNMjUxMDI4MDgwMDI1WjAzMTEwLwYDVQQD
EygxNDUwZDIxMzcxYjA1NjM4NGQyOTY4NjBiOTAzYTE5YTNkYThlNTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSSmqEwQlr+sdhHOLJuk6GRSrxC3
pUUnAqP01kAhS+e475FeHsKi8vk0NUBMN6vYDE4cCbCdTu9jmmogu9wjPBeSYAl2
ZO5CxYqSOsY1vfodRGW/7gHsGbF89YfRpe1+Jeo9BBUyNnfjAH+4E586UAbXwDvz
2c91i2a0MBixu4vB01ein/f4DOIMFMYLhSnxjTE1TJzlUZNPQsJ7DGVfmbAcyqdE
h5bIwr15ufQvHhd5OUqoPPB5Hff0Gc8vRrTVRDx1xZ1i+vzuNqdE0ZMp60cLRApF
RgqLqpsr0fvxR63KW3QPaf/vgJK1CeHkzu709DjK4AocnI6CVm05f89clwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRQ0hNxsFY4TSloYLkDoZo9qOWVMB8GA1UdIwQY
MBaAFD+saPkSBcROcwM25gC2M0+MgejCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDZ4by1SSUZ4RTV6QXpibUFMWXpUNHlCNk1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9lM2U0MGYtMTUwNS00MmU5LTk2ZjEt
ZmVhNzRlODEwNTFhLzEvUDZ4by1SSUZ4RTV6QXpibUFMWXpUNHlCNk1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9lM2U0MGYtMTUwNS00MmU5LTk2ZjEtZmVhNzRlODEwNTFh
LzEvUDZ4by1SSUZ4RTV6QXpibUFMWXpUNHlCNk1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALoM84SLf
TkBas4OG5/o6FerFL+R/eiZCaQQHMgcs1KLdYmLq8+43NUc1jPmjtq3TLvOZhrYi
+ki6VjJbNSs3jhbLZw33ukCR8HEDRJjC2etxOwK+UcCjIyMsIzOC/I2N+ZWubV2n
r/0XTJ8tIMCQxpA1bXCf5WCP7h9cwfDSwwQEPW7zpSuSjlrOfW5Z7jUUVSg44byd
KbiiX7BDvCt2rXuY0wbx2RH9eFCVJBldK66U4S9IAC3OdK7dFGcNd4qugFEAhi/I
NlovyWwk3/A+LyaZSBHQbt0NdMOf+thzo45PkQlVl8vNdOdn8ZQ0wjZ/JsEJDrNl
hwFu9x5QYkJhDQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 16:27:53 2025 by rpki-client