Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
File: P6xJAcwjvke_qfEqYET6Y0USIQc.mft (raw, json)
Hash identifier: 6qCWpK/Q+WYoHyF5srILMooAWhO2n3TqeFNi1O1d+sA=
Subject key identifier: 62:A2:89:1A:65:40:94:E3:21:67:1A:A0:BD:C8:9A:33:4B:10:6D:E4
Authority key identifier: 3F:AC:49:01:CC:23:BE:47:BF:A9:F1:2A:60:44:FA:63:45:12:21:07
Certificate issuer: /CN=3fac4901cc23be47bfa9f12a6044fa6345122107
Certificate serial: 019A70A59695B616274ECC5039EBEF5F56E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
Manifest number: 065C
Signing time: Tue 11 Nov 2025 02:01:31 +0000
Manifest this update: Tue 11 Nov 2025 02:01:31 +0000
Manifest next update: Wed 12 Nov 2025 02:01:31 +0000
Files and hashes: 1: I2T3vW_f2hKmlZWnd51x-GtOD7M.roa (hash: oNoWZuXx4HX98BE5ZXv2y66gUnUeaQrrJOmk84paoXM=)
2: P6xJAcwjvke_qfEqYET6Y0USIQc.crl (hash: 3b0nM25CrXip/MpBShGbVM1WZeT06/zdXHIwHzRu8pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:96:95:b6:16:27:4e:cc:50:39:eb:ef:5f:56:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fac4901cc23be47bfa9f12a6044fa6345122107
Validity
Not Before: Nov 11 02:01:31 2025 GMT
Not After : Nov 12 02:01:31 2025 GMT
Subject: CN=62a2891a654094e321671aa0bdc89a334b106de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:76:48:a1:d0:6c:c8:c8:60:2d:cd:2f:e1:e7:
7e:50:d2:09:2d:0a:8d:38:f0:d6:6d:68:13:33:f9:
62:02:ec:e2:ca:f0:d2:80:e5:d8:62:c1:0f:14:ec:
a4:c4:87:fa:0a:e1:f6:d5:ad:27:00:a5:99:b5:2f:
40:04:01:67:c2:e6:33:0f:cf:20:20:f2:57:ec:98:
a3:2a:a3:55:a0:c6:e2:7f:cf:0a:02:09:9c:e5:a4:
89:9a:13:0d:86:c7:aa:af:1e:20:49:df:2c:bb:17:
9f:fa:84:f2:a4:ef:76:7f:d4:34:84:9d:ea:10:dd:
a8:85:36:e5:5d:78:e7:74:28:b9:9b:81:13:a9:b8:
4b:8d:15:6e:15:0f:f2:51:86:c1:4d:c0:58:78:82:
51:09:35:12:b5:80:40:82:5d:a7:3f:68:b1:01:fb:
5b:d2:04:14:81:96:1b:40:8e:30:26:2c:cd:cd:85:
d6:af:46:5f:df:b9:c0:c2:44:ae:7a:35:48:60:c6:
5b:96:0b:56:47:31:5c:ed:2e:4f:95:35:14:94:64:
5b:70:b7:d8:66:ed:20:55:03:ac:f3:db:8f:3d:cc:
04:b1:28:c2:f0:98:14:ac:f3:5f:1f:66:d2:5e:64:
5c:eb:39:5b:ef:6a:96:c8:10:df:98:6c:5a:0c:7f:
73:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A2:89:1A:65:40:94:E3:21:67:1A:A0:BD:C8:9A:33:4B:10:6D:E4
X509v3 Authority Key Identifier:
keyid:3F:AC:49:01:CC:23:BE:47:BF:A9:F1:2A:60:44:FA:63:45:12:21:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f0:ca:3b:5c:5d:76:fa:b8:1c:45:65:bd:9e:a2:0d:e9:31:
8d:45:d9:d1:ac:03:58:4b:e2:ac:a7:82:85:ee:ec:ab:4a:37:
ac:38:0a:0a:c3:0c:d1:b3:c2:2a:07:b3:a3:f3:79:97:57:32:
06:cb:ed:5d:81:3b:ce:67:fc:9b:1d:c5:47:27:69:a7:66:89:
a1:d5:a3:42:33:18:cb:f8:f5:82:12:ac:af:fb:49:09:65:36:
0b:a0:98:24:71:44:72:dd:ef:e2:6c:0b:57:6c:cf:3b:e4:95:
15:b6:69:68:5e:95:f7:e7:c9:52:18:ef:3e:11:f8:93:91:48:
be:b1:13:f9:e1:f6:93:94:1c:4a:51:a4:04:f2:50:19:45:4b:
90:64:1f:0d:f6:a5:f5:2b:57:b8:7c:cb:95:9c:45:53:65:74:
ad:92:aa:91:a4:e5:6e:7f:e7:80:cf:75:d6:96:f4:a6:cd:f8:
d6:f7:26:3f:cf:fb:5d:4b:f3:a7:b5:7c:1a:08:0b:3d:c2:6c:
91:62:04:85:60:69:9b:54:5b:db:24:cf:f8:f1:40:6e:75:ca:
66:54:61:6a:79:fc:a2:00:34:25:51:4f:e5:43:ac:b4:42:78:
39:5c:81:97:50:ff:ab:e2:17:e8:4b:1d:60:f2:98:56:38:85:
40:f4:1c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:08 2025 by rpki-client