Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.mft
File: P6E212Q_3A0_sdU0Z9irspm3kXE.mft (raw, json)
Hash identifier: cDFFnMbX3uMSBelNTflVrTO5EzGdFjlQupkBgQnX4W8=
Subject key identifier: C3:B4:84:5E:0B:47:FE:49:C3:93:8D:8F:34:49:C3:BD:9E:E4:1D:40
Authority key identifier: 3F:A1:36:D7:64:3F:DC:0D:3F:B1:D5:34:67:D8:AB:B2:99:B7:91:71
Certificate issuer: /CN=3fa136d7643fdc0d3fb1d53467d8abb299b79171
Certificate serial: 019A209AD87F24609CA6D6DAB9AB8F82B757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6E212Q_3A0_sdU0Z9irspm3kXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.mft
Manifest number: 06DF
Signing time: Sun 26 Oct 2025 13:00:10 +0000
Manifest this update: Sun 26 Oct 2025 13:00:10 +0000
Manifest next update: Mon 27 Oct 2025 13:00:10 +0000
Files and hashes: 1: P6E212Q_3A0_sdU0Z9irspm3kXE.crl (hash: KXrIBdLVxaeDJV/6GYgBgo4LpYLNzKmvOYmSluwOpKI=)
2: aQLWCmdbg9aMVtpUr6kgFp-kl8g.roa (hash: MaYzTmKmtA6VMd+7uLB1yAAfoDrTIUYoMrGwKo2T4Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6E212Q_3A0_sdU0Z9irspm3kXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9a:d8:7f:24:60:9c:a6:d6:da:b9:ab:8f:82:b7:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fa136d7643fdc0d3fb1d53467d8abb299b79171
Validity
Not Before: Oct 26 13:00:10 2025 GMT
Not After : Oct 27 13:00:10 2025 GMT
Subject: CN=c3b4845e0b47fe49c3938d8f3449c3bd9ee41d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:da:e1:36:8a:60:d6:3e:d7:72:b9:f0:a5:24:
0a:1e:b7:72:1f:f6:cb:37:65:a5:66:24:7c:54:6e:
84:2d:2b:69:cc:fc:ef:c2:a8:60:0b:c3:5f:e1:c8:
6a:40:05:79:bc:7f:e3:cf:e2:d5:ca:35:12:a1:9f:
d5:ce:46:9e:fb:f0:1a:68:d1:ed:71:ae:30:98:7d:
72:f8:2c:db:5b:b1:af:89:6f:1c:cd:75:04:b8:ac:
0f:a0:66:08:5d:e5:11:07:95:bc:c1:ee:f9:a9:a4:
b8:13:6d:b8:6e:c6:45:60:3d:fc:39:91:d3:b4:63:
a8:14:ac:b0:df:69:ea:d5:d8:a0:ef:3c:d6:c4:08:
81:31:cb:42:57:c7:f1:0e:c9:7b:a1:e8:17:b5:c4:
82:97:d4:00:fa:7d:e1:fe:90:67:24:c3:a5:35:45:
3f:d9:32:95:ee:98:c6:19:42:71:e1:27:a5:96:b6:
96:b1:b7:3b:b9:b5:5d:9f:67:c7:a2:34:db:21:20:
fa:32:0e:36:6f:df:4b:a3:29:a0:9e:2e:03:9a:95:
1b:98:58:eb:8f:87:2d:79:e3:ac:d2:d7:dd:39:f2:
0f:9c:a8:6f:e7:fb:e6:58:17:d8:88:e2:eb:f4:f6:
1f:c4:98:54:8d:76:65:32:99:61:e6:4a:4f:a3:45:
1d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B4:84:5E:0B:47:FE:49:C3:93:8D:8F:34:49:C3:BD:9E:E4:1D:40
X509v3 Authority Key Identifier:
keyid:3F:A1:36:D7:64:3F:DC:0D:3F:B1:D5:34:67:D8:AB:B2:99:B7:91:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6E212Q_3A0_sdU0Z9irspm3kXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:2b:91:b7:99:b9:ad:e8:d1:2a:35:ed:2f:c1:f2:19:d2:12:
37:24:ac:92:df:55:fc:79:77:de:34:3a:59:ce:c3:01:45:75:
f2:ae:d9:df:ac:22:4b:b7:6c:df:7e:aa:6c:0c:49:e4:63:cf:
2e:52:0e:21:4c:9e:92:45:b2:60:48:8e:67:3d:1b:8a:fe:d6:
be:8d:0b:a7:24:d9:f3:35:2a:94:eb:be:02:e2:26:46:7d:09:
31:e3:f1:e8:bf:58:ed:c6:61:9a:ba:61:48:7d:c4:4d:20:61:
52:03:73:b7:c8:3e:e2:6b:07:ce:77:c0:6e:1e:ce:4f:c8:cd:
63:b4:86:57:c3:81:07:9e:4b:13:48:18:f7:50:a4:59:05:6b:
c0:df:50:bb:a3:43:11:c2:84:27:b3:39:03:93:99:61:f3:18:
24:f5:f0:73:89:ee:73:78:a3:fc:b2:a3:8c:60:9d:29:32:c5:
7a:b9:7d:c2:2a:ab:fa:19:9b:2d:6f:de:c5:3b:8b:c2:83:91:
d8:68:d7:91:c3:2a:0e:f7:fa:45:74:34:8f:52:54:08:b8:ab:
2a:64:41:53:19:cd:27:34:a5:45:f1:06:23:d1:25:b4:b2:b2:
0f:f3:55:b3:71:6c:8a:fb:4b:30:86:8c:cf:4e:f6:a5:04:49:
f1:fb:56:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:25:58 2025 by rpki-client