Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
File: P6xo-RIFxE5zAzbmALYzT4yB6MI.mft (raw, json)
Hash identifier: 7l1BrNmsSNmxKf/Zvae6c2m78xvNYQtVjmWw750L5gw=
Subject key identifier: BC:3D:2E:EE:C1:3C:11:02:FD:4B:2D:C3:38:72:03:6E:12:2A:A8:B3
Authority key identifier: 3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
Certificate issuer: /CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Certificate serial: 01992D7E1A8EB6716C3B9DEBBFD228377798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
Manifest number: 0268
Signing time: Tue 09 Sep 2025 08:01:03 +0000
Manifest this update: Tue 09 Sep 2025 08:01:03 +0000
Manifest next update: Wed 10 Sep 2025 08:01:03 +0000
Files and hashes: 1: EiOlPx07xu7VkFJ-Fp9Fuqy8TzU.roa (hash: YTkNQ57L/BsF8+52AnZs1f7V2wA4xa87/fYc1vwFoig=)
2: GU1YI3vRymC8okEmp-zZRparjfs.roa (hash: q/QbAyjmOhWo1JcjW3JwZIKUXCaSn/iJ6pmWpIOWSpI=)
3: P6xo-RIFxE5zAzbmALYzT4yB6MI.crl (hash: RYpKl05Ncyc+e4jSCvtD06UGDL9w2tQCNW05c/g8nog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:7e:1a:8e:b6:71:6c:3b:9d:eb:bf:d2:28:37:77:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Validity
Not Before: Sep 9 08:01:03 2025 GMT
Not After : Sep 10 08:01:03 2025 GMT
Subject: CN=bc3d2eeec13c1102fd4b2dc33872036e122aa8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:88:93:c7:51:4d:12:ac:67:53:ed:80:31:61:
c8:38:fa:2f:b3:16:a8:16:a1:87:c7:5e:a7:85:db:
1a:92:1a:1c:9d:d2:c4:ed:37:f1:37:9a:70:cb:47:
60:30:12:3b:14:24:a1:dc:d0:71:99:cf:e6:29:31:
8a:6c:72:7f:54:70:e8:c1:e1:36:5a:a2:e9:11:8d:
0d:20:c3:cf:b4:0e:b4:e6:13:70:bb:c8:7d:f8:ab:
3d:9b:0a:2c:34:03:12:2a:7a:68:2e:a6:b3:73:5f:
03:69:34:e8:46:ac:c8:6b:5b:e8:f7:fc:85:3d:fa:
e3:b5:6d:e8:47:9f:d2:38:a8:15:e5:40:0c:09:59:
ca:e9:1a:22:4c:b4:76:d4:6c:4d:b9:3a:52:b0:19:
dd:10:24:3e:7a:fe:9f:d8:eb:26:3d:7c:19:d4:05:
93:4e:a5:f1:f8:8d:30:d1:47:6d:7e:0b:e3:cd:84:
cb:53:bb:fc:bc:25:45:d4:e1:27:1a:b1:f3:f7:40:
84:25:ca:89:f7:ae:4c:f9:56:f2:d6:f8:e0:81:b9:
e6:a3:13:9d:16:8d:48:bd:ff:8d:f1:e8:0d:fb:18:
f9:d0:c5:de:a2:4d:15:52:84:57:87:ce:b4:8e:53:
a4:05:76:51:d8:43:6a:c7:dc:c3:0a:60:f0:7f:94:
f9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3D:2E:EE:C1:3C:11:02:FD:4B:2D:C3:38:72:03:6E:12:2A:A8:B3
X509v3 Authority Key Identifier:
keyid:3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:15:83:63:86:ae:e8:fe:01:27:f8:7d:74:d7:c8:5b:5b:21:
80:e7:69:65:91:64:22:78:2d:c2:e4:75:6c:6f:6d:8c:ba:74:
f4:5e:c9:91:84:42:2e:29:e5:0e:55:16:7e:3b:6d:c5:1d:ea:
16:ad:55:2a:e1:65:2e:94:93:d5:96:85:7d:9c:75:d4:27:01:
02:f9:f7:2a:3d:7d:29:fe:c1:e5:a9:cd:e5:eb:ae:ad:fa:b3:
b7:28:90:3a:ed:a5:f3:aa:9b:7f:1f:14:10:55:4a:e1:99:21:
94:a9:13:4e:a9:e4:85:1b:33:b6:77:81:6c:aa:0e:2e:00:f7:
4b:b1:5d:78:25:da:64:f7:b8:f6:2c:c7:47:f9:37:55:cc:86:
71:7f:c7:26:06:b2:b4:6a:91:0d:38:58:65:6c:04:7d:a3:19:
b0:2f:07:06:fe:6d:51:bd:ce:ff:0b:9f:98:26:eb:cb:db:2d:
8b:c5:c5:4f:a2:d0:e9:6d:13:c6:37:87:70:e0:69:a4:83:8b:
06:51:95:d0:a7:9f:41:6e:72:f3:47:3d:31:6c:2b:fa:94:c9:
32:52:4a:8c:fd:9c:09:a1:d7:96:5c:45:bd:77:d0:da:a9:f8:
8d:70:bb:fe:52:0c:92:57:e2:46:d8:0b:c1:39:41:32:92:68:
40:77:66:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 15:26:27 2025 by rpki-client