Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
File: P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft (raw, json)
Hash identifier: M6cP0unaMUm27c0Jle0XqXgpGgEvE9M7aU3l/3hhma0=
Subject key identifier: 15:46:CE:75:64:63:E4:87:B6:C3:88:C5:D4:71:BA:A1:C4:F3:E5:4E
Authority key identifier: 3F:A4:0F:CF:A8:36:BB:0B:5B:3E:12:94:04:CB:31:E8:52:50:B0:1F
Certificate issuer: /CN=3fa40fcfa836bb0b5b3e129404cb31e85250b01f
Certificate serial: 019A71136E49EA852AF3F8209B7D3E6B54FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 04:01:30 +0000
Manifest this update: Tue 11 Nov 2025 04:01:30 +0000
Manifest next update: Wed 12 Nov 2025 04:01:30 +0000
Files and hashes: 1: P6QPz6g2uwtbPhKUBMsx6FJQsB8.crl (hash: LH/vTqZ9+lea8JMySJ4jlBS+ZpB4SvTnfMLqzyhuPrY=)
2: nJCyjIsWdPchQmqQbO_MPjGVVDE.roa (hash: Cr0JPO8tp2KrCcxC2yxuo3jq4OH+RZvqc/vb9Mmb68M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:6e:49:ea:85:2a:f3:f8:20:9b:7d:3e:6b:54:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fa40fcfa836bb0b5b3e129404cb31e85250b01f
Validity
Not Before: Nov 11 04:01:30 2025 GMT
Not After : Nov 12 04:01:30 2025 GMT
Subject: CN=1546ce756463e487b6c388c5d471baa1c4f3e54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e1:b4:c7:a0:14:e4:a5:c5:58:c1:d0:fa:86:
d8:03:d1:80:9c:b0:5e:4e:bc:54:0e:11:e1:37:a3:
09:61:b2:0f:88:cf:d2:25:ac:be:5d:e8:46:a4:31:
a0:c3:f2:f3:6a:b8:02:86:8a:ef:32:b4:f1:4e:69:
73:e1:ce:91:89:b8:68:6e:6c:a6:19:5e:aa:e0:5a:
72:fb:0f:00:1d:31:e2:45:2e:57:23:7d:f7:4f:e3:
2a:05:2d:48:f1:cc:49:3e:1c:50:f6:a3:c5:51:0e:
6d:c8:46:33:e1:45:c6:4d:6b:fd:75:ec:54:06:2f:
ea:07:a6:1c:84:3d:5b:03:1a:a3:3b:d2:9f:4a:d2:
c8:0b:c8:1d:e3:1c:a4:57:b7:ef:24:73:00:98:18:
11:9e:74:5c:16:95:86:4a:a8:79:65:dc:b7:f6:6a:
22:b4:19:79:64:2d:c3:ab:3a:d7:57:5f:a8:b2:58:
39:d4:fe:b3:ab:6d:24:a4:e7:9c:f7:c9:d0:96:c3:
7d:c0:39:c9:29:ff:f0:12:f6:1d:c5:97:27:04:8a:
e7:c0:37:1d:f7:5c:4a:8f:47:93:3b:43:76:93:0a:
35:fa:fc:b2:1a:19:31:39:e6:57:06:6f:b5:d4:80:
17:22:1c:f2:ab:5a:e0:5c:e6:5f:53:53:24:54:07:
ac:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:46:CE:75:64:63:E4:87:B6:C3:88:C5:D4:71:BA:A1:C4:F3:E5:4E
X509v3 Authority Key Identifier:
keyid:3F:A4:0F:CF:A8:36:BB:0B:5B:3E:12:94:04:CB:31:E8:52:50:B0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:cb:e8:77:c0:78:2e:a1:9c:ec:2f:33:7f:b6:1b:76:ed:4a:
6c:05:55:cb:04:db:7a:14:42:e4:af:19:b6:e5:ce:94:49:0b:
15:8d:29:a1:19:50:61:bc:da:fb:7a:72:99:c0:ea:30:d1:7d:
a6:5b:f6:fc:4e:72:37:38:a2:e0:0a:31:3d:62:3b:d7:86:79:
e0:42:46:29:3f:23:dd:05:a6:b6:cb:1d:e9:5d:f3:7c:a1:b6:
e5:57:75:61:e3:d3:7b:95:4c:4e:a8:b6:39:67:7d:5d:22:d2:
b3:3b:07:28:b6:43:6b:86:a4:96:f1:d9:65:0d:f7:95:50:d7:
b9:1b:25:46:0b:e7:54:22:5a:80:9a:98:05:69:66:33:1c:18:
2b:55:5d:ea:ac:4c:3f:3e:ec:d8:58:b8:43:42:3e:ad:a1:7d:
de:fc:df:ce:3b:26:7f:9b:e7:b8:4f:fa:94:72:67:06:46:a3:
8e:69:91:52:f8:15:74:df:3b:65:5e:bd:63:be:3d:81:89:0b:
ef:ce:02:1d:3e:cf:4e:b6:7a:5e:a3:ef:3f:e6:e9:ce:c1:f9:
7a:0c:d3:96:93:ac:43:6e:49:a8:d6:b9:d3:35:f9:69:e4:3a:
d3:61:17:48:57:b3:b9:ce:4c:7f:ae:e9:de:d3:31:8e:86:b7:
07:fa:94:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxE25J6oUq8/ggm30+a1T9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmYTQwZmNmYTgzNmJiMGI1YjNlMTI5NDA0Y2IzMWU4NTI1
MGIwMWYwHhcNMjUxMTExMDQwMTMwWhcNMjUxMTEyMDQwMTMwWjAzMTEwLwYDVQQD
EygxNTQ2Y2U3NTY0NjNlNDg3YjZjMzg4YzVkNDcxYmFhMWM0ZjNlNTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteG0x6AU5KXFWMHQ+obYA9GAnLBe
TrxUDhHhN6MJYbIPiM/SJay+XehGpDGgw/LzargChorvMrTxTmlz4c6Ribhobmym
GV6q4Fpy+w8AHTHiRS5XI333T+MqBS1I8cxJPhxQ9qPFUQ5tyEYz4UXGTWv9dexU
Bi/qB6YchD1bAxqjO9KfStLIC8gd4xykV7fvJHMAmBgRnnRcFpWGSqh5Zdy39moi
tBl5ZC3DqzrXV1+oslg51P6zq20kpOec98nQlsN9wDnJKf/wEvYdxZcnBIrnwDcd
91xKj0eTO0N2kwo1+vyyGhkxOeZXBm+11IAXIhzyq1rgXOZfU1MkVAesLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBVGznVkY+SHtsOIxdRxuqHE8+VOMB8GA1UdIwQY
MBaAFD+kD8+oNrsLWz4SlATLMehSULAfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDZRUHo2ZzJ1d3RiUGhLVUJNc3g2RkpRc0I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9lMjEwYjktN2EzZi00MTBiLWJhNTYt
MDcyNDA4OTI4OWJiLzEvUDZRUHo2ZzJ1d3RiUGhLVUJNc3g2RkpRc0I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9lMjEwYjktN2EzZi00MTBiLWJhNTYtMDcyNDA4OTI4OWJi
LzEvUDZRUHo2ZzJ1d3RiUGhLVUJNc3g2RkpRc0I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcMvod8B4
LqGc7C8zf7Ybdu1KbAVVywTbehRC5K8ZtuXOlEkLFY0poRlQYbza+3pymcDqMNF9
plv2/E5yNzii4AoxPWI714Z54EJGKT8j3QWmtssd6V3zfKG25Vd1YePTe5VMTqi2
OWd9XSLSszsHKLZDa4aklvHZZQ33lVDXuRslRgvnVCJagJqYBWlmMxwYK1Vd6qxM
Pz7s2Fi4Q0I+raF93vzfzjsmf5vnuE/6lHJnBkajjmmRUvgVdN87ZV69Y749gYkL
784CHT7PTrZ6XqPvP+bpzsH5egzTlpOsQ25JqNa50zX5aeQ602EXSFezuc5Mf67p
3tMxjoa3B/qUkw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:57 2025 by rpki-client