Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
File: P6xo-RIFxE5zAzbmALYzT4yB6MI.mft (raw, json)
Hash identifier: D8xAtplLQ10E5CTMKLvYU/ERvvhuEf13u5btTGce+fs=
Subject key identifier: 78:F7:7A:8D:53:36:F0:08:6F:02:D5:D6:18:5E:B9:27:F4:5F:0E:08
Authority key identifier: 3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
Certificate issuer: /CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Certificate serial: 0197B6D7A3D0DAAA20736153DDDD558B6294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
Manifest number: 01A6
Signing time: Sat 28 Jun 2025 14:01:14 +0000
Manifest this update: Sat 28 Jun 2025 14:01:14 +0000
Manifest next update: Sun 29 Jun 2025 14:01:14 +0000
Files and hashes: 1: EiOlPx07xu7VkFJ-Fp9Fuqy8TzU.roa (hash: YTkNQ57L/BsF8+52AnZs1f7V2wA4xa87/fYc1vwFoig=)
2: GU1YI3vRymC8okEmp-zZRparjfs.roa (hash: q/QbAyjmOhWo1JcjW3JwZIKUXCaSn/iJ6pmWpIOWSpI=)
3: P6xo-RIFxE5zAzbmALYzT4yB6MI.crl (hash: HRbgESyUpM9iki3KBBML184tWjw5XMa+m3bUKf5UOy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:a3:d0:da:aa:20:73:61:53:dd:dd:55:8b:62:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Validity
Not Before: Jun 28 14:01:14 2025 GMT
Not After : Jun 29 14:01:14 2025 GMT
Subject: CN=78f77a8d5336f0086f02d5d6185eb927f45f0e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:33:18:1f:38:b1:3e:47:12:ce:8d:d8:59:50:
77:69:87:99:09:cc:23:5d:0f:89:55:31:ca:d4:79:
4d:c5:4b:38:fc:8d:6e:cc:22:62:9b:a0:14:cd:2c:
56:0b:d2:fd:48:61:09:fd:57:b6:74:3d:1d:df:eb:
39:97:7b:31:78:26:28:f5:af:60:47:d7:59:c1:72:
ec:b3:f2:47:47:4c:9c:04:e9:df:ce:35:15:60:61:
50:19:5c:9c:94:7f:87:bf:df:50:df:65:f5:00:6e:
23:cc:1b:a9:7d:19:6e:6b:9a:1d:59:7b:e9:e0:b6:
74:ec:79:8f:22:d1:93:c3:e7:d3:fd:c1:28:44:e1:
6d:b0:9f:0b:9a:04:f9:5f:c0:b9:18:36:f8:6c:bd:
00:46:9f:91:a5:cb:80:9f:19:9d:0e:11:55:dc:e8:
5b:86:d9:6e:e0:7c:d5:a2:fd:c1:84:ff:00:68:18:
39:c5:23:7f:24:d0:18:d9:df:5a:39:69:fb:ff:b0:
14:10:be:06:57:e4:90:19:72:8c:98:c2:fb:b4:db:
d3:3f:56:9d:37:ee:2f:54:c8:4f:23:1a:28:f5:36:
29:c6:dd:46:c5:0c:96:d3:9f:a5:ac:0f:c9:8b:0d:
06:65:ce:46:be:4a:bd:ef:2f:81:64:c7:92:bf:20:
8d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F7:7A:8D:53:36:F0:08:6F:02:D5:D6:18:5E:B9:27:F4:5F:0E:08
X509v3 Authority Key Identifier:
keyid:3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:53:65:60:c6:af:f7:43:73:da:30:b4:c1:15:33:53:38:40:
aa:b5:e5:fc:77:49:17:65:6a:10:6b:54:10:80:af:b9:86:8c:
4e:fa:b4:22:39:2c:e1:7c:e9:dc:df:cd:11:ae:8e:6e:73:fc:
5b:12:de:68:70:2d:95:ed:ad:cd:46:3d:bf:7f:e0:6f:34:ee:
16:ac:ca:25:f3:40:e0:0f:15:ac:c7:bc:32:ed:54:f4:5c:d8:
d4:86:63:e4:40:b0:0b:c2:11:ce:26:36:19:68:78:6f:d1:d1:
08:e3:16:d0:f5:73:c9:5f:11:32:29:7d:ff:0c:cb:56:ee:25:
54:4f:d4:d7:d7:9f:6d:3e:b1:ad:ca:4e:42:9f:88:87:99:8b:
80:ec:4f:e3:dc:0e:2c:da:d4:3d:66:3b:d7:e9:66:b0:06:46:
40:a9:75:c6:a3:da:73:da:57:9a:bc:e6:a2:4c:b3:c8:c7:75:
d7:63:66:35:48:e0:43:a2:48:81:12:8f:29:9e:bb:7a:12:1a:
32:5a:f9:ae:20:2b:03:ce:de:f9:04:bb:9b:25:e9:9c:06:00:
7e:ce:65:18:23:16:be:de:a5:b7:d3:ba:82:15:ed:66:a6:24:
73:12:fc:b9:9c:71:88:d9:4f:98:7b:fe:06:9d:9e:90:fe:e1:
92:83:a1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:45:12 2025 by rpki-client