Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
File: P6xo-RIFxE5zAzbmALYzT4yB6MI.mft (raw, json)
Hash identifier: Y7n+NHZ8L4F+nPFhWVj8I0yT7AT2enWNKG2j8pVzCPs=
Subject key identifier: 2A:5E:AD:CE:C4:28:2F:8F:10:90:57:B3:65:91:8C:E6:73:4F:FB:D2
Authority key identifier: 3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
Certificate issuer: /CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Certificate serial: 0198D4A84226E43D46F5CEC5B74F00B71E5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
Manifest number: 023A
Signing time: Sat 23 Aug 2025 02:00:53 +0000
Manifest this update: Sat 23 Aug 2025 02:00:53 +0000
Manifest next update: Sun 24 Aug 2025 02:00:53 +0000
Files and hashes: 1: EiOlPx07xu7VkFJ-Fp9Fuqy8TzU.roa (hash: YTkNQ57L/BsF8+52AnZs1f7V2wA4xa87/fYc1vwFoig=)
2: GU1YI3vRymC8okEmp-zZRparjfs.roa (hash: q/QbAyjmOhWo1JcjW3JwZIKUXCaSn/iJ6pmWpIOWSpI=)
3: P6xo-RIFxE5zAzbmALYzT4yB6MI.crl (hash: dMBwU7NF5GNCp3Eu+Dhz6d6527ysTOkfMiI7r7l37L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:42:26:e4:3d:46:f5:ce:c5:b7:4f:00:b7:1e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Validity
Not Before: Aug 23 02:00:53 2025 GMT
Not After : Aug 24 02:00:53 2025 GMT
Subject: CN=2a5eadcec4282f8f109057b365918ce6734ffbd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9a:ac:f0:6f:46:3b:87:79:bf:5a:e9:19:f1:
de:31:0c:d3:cd:48:28:2d:26:ad:4f:e4:01:18:2e:
3b:d2:2c:bf:76:5b:e7:53:57:c7:19:92:45:2d:41:
ba:fb:61:b9:0e:9c:aa:a3:36:ce:cf:47:9c:99:40:
6d:87:78:7a:23:d8:a3:40:53:30:71:97:9c:60:97:
08:02:c6:fd:ca:9f:54:e8:00:a9:94:7c:b0:b1:86:
a2:2c:64:2c:aa:2e:ec:b9:ba:72:5c:7a:f4:d5:ad:
be:10:80:b8:1b:09:0b:69:ae:7b:a1:6b:b6:44:75:
31:3d:a8:bb:17:ad:40:50:ea:4d:90:79:91:2a:d5:
60:53:51:a6:8c:98:e5:3a:ec:44:c5:36:ea:1d:b5:
6a:5d:31:7b:8a:b5:21:8e:63:b1:41:33:1d:f4:84:
c3:5d:35:5c:aa:92:1d:a9:bc:ce:dc:fe:82:ff:e3:
0c:8d:0b:e3:8c:a8:9d:15:25:c0:5a:9d:1d:e8:58:
d1:c8:63:b0:58:21:74:6a:50:27:17:fc:61:28:55:
82:32:df:f0:31:64:96:ed:6b:3a:1a:7a:06:4a:72:
56:f1:7f:04:54:df:69:89:83:61:25:8b:12:c2:0c:
95:5e:bc:69:79:49:b0:81:89:a2:a1:18:7a:7c:5f:
cf:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5E:AD:CE:C4:28:2F:8F:10:90:57:B3:65:91:8C:E6:73:4F:FB:D2
X509v3 Authority Key Identifier:
keyid:3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:97:67:2e:44:b9:e2:56:4c:0b:a5:5c:c6:c2:3f:9d:dd:41:
6f:79:f5:74:88:71:14:35:5a:b1:6b:91:22:29:35:2d:52:f5:
4e:27:d6:fb:cb:55:6c:04:7b:8b:22:53:63:13:ce:91:d5:46:
43:b0:bf:e6:10:25:ca:fd:14:bb:42:f4:08:80:49:88:71:be:
39:ea:23:d3:c2:8e:38:94:6d:fc:f4:9a:f6:2a:74:1b:9c:ad:
80:63:af:77:3d:32:9a:ee:fe:79:d8:8e:6a:d8:d8:f1:42:d2:
ae:f9:f0:8b:62:7d:b3:47:7f:60:cc:98:e1:7b:8a:7c:bd:e1:
22:ed:7d:83:13:59:75:a9:3c:13:c4:a1:10:c4:2f:b3:ff:ae:
ee:b8:c9:62:dc:30:b7:a2:2a:47:10:3f:27:c2:6c:a2:4d:5f:
d7:51:83:e2:9b:8d:c6:9c:ba:3a:27:7e:38:4b:c0:93:dc:6d:
1a:78:dc:05:4a:51:d6:1a:e7:55:01:0b:28:63:ec:2a:70:16:
17:34:fe:e0:58:98:85:49:09:78:15:4a:08:4f:77:cd:e0:df:
16:96:ca:18:54:13:6a:b9:ca:a4:f7:18:14:2f:76:a8:bc:48:
fe:bf:a5:70:40:87:cc:37:5b:06:1f:cf:73:e7:42:27:ae:6e:
84:87:f8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:11:05 2025 by rpki-client