Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
File: P6xJAcwjvke_qfEqYET6Y0USIQc.mft (raw, json)
Hash identifier: 3AImhOMf2NFbY1MwX53Y9gu7GR5NsM7W/PabW4NBFDk=
Subject key identifier: D6:D8:6C:00:81:B3:7F:20:82:6D:7F:69:19:5B:C4:DF:AC:BF:7A:5C
Authority key identifier: 3F:AC:49:01:CC:23:BE:47:BF:A9:F1:2A:60:44:FA:63:45:12:21:07
Certificate issuer: /CN=3fac4901cc23be47bfa9f12a6044fa6345122107
Certificate serial: 0199228CB8E913A0EBCF4BF88298A1E09ACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
Manifest number: 05AF
Signing time: Sun 07 Sep 2025 05:01:11 +0000
Manifest this update: Sun 07 Sep 2025 05:01:11 +0000
Manifest next update: Mon 08 Sep 2025 05:01:11 +0000
Files and hashes: 1: I2T3vW_f2hKmlZWnd51x-GtOD7M.roa (hash: oNoWZuXx4HX98BE5ZXv2y66gUnUeaQrrJOmk84paoXM=)
2: P6xJAcwjvke_qfEqYET6Y0USIQc.crl (hash: GaXkopTvEpPG262mIV51u4nXYrtC9GuG4s8Lpnc/nIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:b8:e9:13:a0:eb:cf:4b:f8:82:98:a1:e0:9a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fac4901cc23be47bfa9f12a6044fa6345122107
Validity
Not Before: Sep 7 05:01:11 2025 GMT
Not After : Sep 8 05:01:11 2025 GMT
Subject: CN=d6d86c0081b37f20826d7f69195bc4dfacbf7a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:69:52:c5:41:5b:e8:4d:e3:14:78:f5:50:3c:
78:dd:49:3f:58:c9:c5:e7:d8:27:02:bb:39:70:86:
da:09:d9:e5:6d:5d:28:df:83:21:76:58:40:67:e6:
4c:32:1b:04:0c:b8:aa:c9:0c:57:30:4b:9d:67:bd:
6e:eb:63:df:e6:27:c9:05:7a:8b:86:91:e0:09:00:
91:7f:ef:06:f6:52:f0:1d:f2:64:62:db:36:f5:8c:
20:b6:1c:3f:6c:1e:56:a7:66:55:00:97:05:c5:7d:
40:4c:65:b3:46:c8:ba:c9:dc:9c:cf:d0:af:c9:38:
e5:3e:b9:f3:68:5c:0c:ea:31:3e:ae:1c:37:0e:b4:
aa:c0:ef:24:0d:3c:6e:6b:23:df:6a:97:c2:ee:5f:
86:46:ca:69:4a:79:1f:02:7c:3f:2d:dc:11:c2:55:
b4:40:d6:86:59:02:1f:67:66:bd:5c:9e:d2:68:93:
b9:8b:c6:4c:1b:87:30:e0:7f:31:68:0d:d7:d9:6d:
7d:e5:d9:29:8e:c2:88:7d:4b:3c:89:52:e1:e4:25:
9c:4f:63:55:3f:f7:ef:15:17:44:23:51:2c:93:2c:
db:d3:ef:76:50:b1:56:af:58:10:0a:84:6c:83:07:
61:df:1b:8a:c6:d8:5c:ba:8e:80:7a:44:ee:da:df:
cc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D8:6C:00:81:B3:7F:20:82:6D:7F:69:19:5B:C4:DF:AC:BF:7A:5C
X509v3 Authority Key Identifier:
keyid:3F:AC:49:01:CC:23:BE:47:BF:A9:F1:2A:60:44:FA:63:45:12:21:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:42:ea:23:74:20:ff:e3:3b:cb:8c:e8:f3:db:96:8e:ff:3c:
42:6b:95:6d:55:9a:85:48:58:85:f8:02:33:8e:59:02:20:c5:
b6:17:14:5a:0f:a9:1a:32:f3:a8:bb:1c:08:50:8c:1d:23:54:
a3:44:c1:b5:ae:76:7e:37:60:32:98:15:20:a8:0c:6e:22:84:
84:4c:39:d6:ce:72:f4:c1:3b:e1:5d:ec:80:0d:1a:db:59:6c:
3b:93:c0:2d:0e:4c:8b:d4:94:ca:eb:7d:c2:ff:ec:c6:76:31:
19:82:46:e3:6e:b4:41:61:fe:8c:3d:4c:0d:61:6b:c4:da:6b:
7c:54:53:cf:8d:6a:7c:64:ad:e9:a6:e8:05:0f:99:a5:c2:1a:
9f:18:6c:8e:a8:7a:2a:ad:a1:11:a3:74:a7:73:bf:f8:82:cb:
4d:9a:a7:2d:2d:24:a2:21:48:79:2f:50:a6:fb:66:c2:f5:4e:
28:fa:e8:79:e2:fc:cb:34:f7:21:6d:12:04:a9:b6:cd:67:e2:
85:65:01:f6:16:40:cf:e4:6e:2e:f2:d9:1a:25:a9:4f:93:54:
1c:e3:42:2d:3a:42:28:9c:a3:be:b4:bf:7b:eb:bf:db:36:fd:
80:25:7b:f8:55:36:6c:3d:d8:e1:a7:ae:08:62:a1:53:3a:45:
bc:25:e6:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijLjpE6Drz0v4gpih4JrKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmYWM0OTAxY2MyM2JlNDdiZmE5ZjEyYTYwNDRmYTYzNDUx
MjIxMDcwHhcNMjUwOTA3MDUwMTExWhcNMjUwOTA4MDUwMTExWjAzMTEwLwYDVQQD
EyhkNmQ4NmMwMDgxYjM3ZjIwODI2ZDdmNjkxOTViYzRkZmFjYmY3YTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWlSxUFb6E3jFHj1UDx43Uk/WMnF
59gnArs5cIbaCdnlbV0o34MhdlhAZ+ZMMhsEDLiqyQxXMEudZ71u62Pf5ifJBXqL
hpHgCQCRf+8G9lLwHfJkYts29Ywgthw/bB5Wp2ZVAJcFxX1ATGWzRsi6ydycz9Cv
yTjlPrnzaFwM6jE+rhw3DrSqwO8kDTxuayPfapfC7l+GRsppSnkfAnw/LdwRwlW0
QNaGWQIfZ2a9XJ7SaJO5i8ZMG4cw4H8xaA3X2W195dkpjsKIfUs8iVLh5CWcT2NV
P/fvFRdEI1Eskyzb0+92ULFWr1gQCoRsgwdh3xuKxthcuo6AekTu2t/M9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbYbACBs38ggm1/aRlbxN+sv3pcMB8GA1UdIwQY
MBaAFD+sSQHMI75Hv6nxKmBE+mNFEiEHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDZ4SkFjd2p2a2VfcWZFcVlFVDZZMFVTSVFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wZmZkOTUtOThlNi00Mjc5LTk4N2Yt
NzNhNjM0MTU1ZWU5LzEvUDZ4SkFjd2p2a2VfcWZFcVlFVDZZMFVTSVFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8wZmZkOTUtOThlNi00Mjc5LTk4N2YtNzNhNjM0MTU1ZWU5
LzEvUDZ4SkFjd2p2a2VfcWZFcVlFVDZZMFVTSVFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF0LqI3Qg
/+M7y4zo89uWjv88QmuVbVWahUhYhfgCM45ZAiDFthcUWg+pGjLzqLscCFCMHSNU
o0TBta52fjdgMpgVIKgMbiKEhEw51s5y9ME74V3sgA0a21lsO5PALQ5Mi9SUyut9
wv/sxnYxGYJG4260QWH+jD1MDWFrxNprfFRTz41qfGSt6aboBQ+ZpcIanxhsjqh6
Kq2hEaN0p3O/+ILLTZqnLS0koiFIeS9QpvtmwvVOKProeeL8yzT3IW0SBKm2zWfi
hWUB9hZAz+RuLvLZGiWpT5NUHONCLTpCKJyjvrS/e+u/2zb9gCV7+FU2bD3Y4aeu
CGKhUzpFvCXmrw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:24:59 2025 by rpki-client