Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
File: P6xJAcwjvke_qfEqYET6Y0USIQc.mft (raw, json)
Hash identifier: fymJbTbzJPZr+Hpd9nXUnrb2jljNqSiKmCjwHNxBYMU=
Subject key identifier: C9:15:41:22:F0:76:FA:C1:68:E4:7C:81:C6:B2:7F:F5:AD:77:10:1C
Authority key identifier: 3F:AC:49:01:CC:23:BE:47:BF:A9:F1:2A:60:44:FA:63:45:12:21:07
Certificate issuer: /CN=3fac4901cc23be47bfa9f12a6044fa6345122107
Certificate serial: 0199FCC6B152346AE62266B79956957DB7CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
Manifest number: 0620
Signing time: Sun 19 Oct 2025 14:01:43 +0000
Manifest this update: Sun 19 Oct 2025 14:01:43 +0000
Manifest next update: Mon 20 Oct 2025 14:01:43 +0000
Files and hashes: 1: I2T3vW_f2hKmlZWnd51x-GtOD7M.roa (hash: oNoWZuXx4HX98BE5ZXv2y66gUnUeaQrrJOmk84paoXM=)
2: P6xJAcwjvke_qfEqYET6Y0USIQc.crl (hash: D3CQa/h8yYnWQB+T/byxITM2IAl7bZK4S6pF1Fo5afU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:b1:52:34:6a:e6:22:66:b7:99:56:95:7d:b7:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fac4901cc23be47bfa9f12a6044fa6345122107
Validity
Not Before: Oct 19 14:01:43 2025 GMT
Not After : Oct 20 14:01:43 2025 GMT
Subject: CN=c9154122f076fac168e47c81c6b27ff5ad77101c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:01:ec:14:e1:1e:17:d3:64:55:e0:02:d1:0e:
e6:82:9b:31:db:aa:fa:8b:d9:1a:05:f3:e4:13:e6:
78:a3:8e:15:5f:4f:59:a7:18:28:d5:5b:99:9f:e2:
7b:b2:ab:a1:36:af:d7:49:92:18:d0:19:7d:d1:6a:
85:c1:79:e7:74:64:95:bb:03:02:6e:b3:2f:70:72:
66:43:47:1a:5d:8e:02:b1:7c:d9:97:0a:7c:db:a8:
8f:93:70:ab:e5:ad:5d:3a:e7:0b:f0:43:41:15:07:
49:15:c1:a1:9e:da:5d:35:10:ff:91:7d:42:08:77:
14:f8:79:9f:fe:48:21:9b:ab:a2:9f:be:2e:7f:ff:
6c:e6:b0:5b:5f:24:a5:b8:f8:9b:42:93:b6:fa:d7:
17:1d:4c:50:05:ad:4e:d0:06:7c:27:49:10:f4:8a:
7c:33:e2:d6:30:b7:34:17:3d:44:51:af:c3:cd:9d:
dc:0a:47:5d:98:c9:ad:c9:41:34:96:73:53:92:b9:
05:e4:d9:47:58:e6:91:b8:2d:2d:4c:4d:f4:6e:80:
00:af:16:8c:03:21:ba:cd:94:f7:1b:89:18:ca:a7:
94:90:ed:03:2c:32:8c:b5:a4:7e:79:ff:81:c6:1e:
11:c9:ef:e4:83:52:ca:d0:f5:c1:23:fa:e5:92:4a:
3a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:15:41:22:F0:76:FA:C1:68:E4:7C:81:C6:B2:7F:F5:AD:77:10:1C
X509v3 Authority Key Identifier:
keyid:3F:AC:49:01:CC:23:BE:47:BF:A9:F1:2A:60:44:FA:63:45:12:21:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:7c:cf:6d:63:a9:c4:28:5c:4a:de:e9:bd:c5:ea:a4:bb:fa:
bb:05:4c:7f:dd:37:a7:a0:75:01:60:0f:7c:45:04:23:7a:ec:
1b:57:76:2b:27:95:03:61:e8:ad:c2:36:97:66:43:bc:4f:6a:
a2:0e:fe:c7:b1:19:8b:15:2a:37:47:6c:78:ff:f4:09:ba:51:
d3:68:bc:8b:f8:d5:f6:d9:fa:4f:59:87:20:66:05:f5:70:ce:
08:15:ca:18:37:1f:74:ea:ee:b1:3e:87:e6:ae:b9:65:3e:fe:
0f:a6:1f:19:0d:23:65:3c:ac:07:15:4e:33:0d:7c:4c:0a:5b:
5c:3f:09:3e:8b:af:dc:12:de:02:35:aa:33:bc:9c:f8:b4:ef:
8b:84:7d:3e:35:62:5a:60:cf:07:ff:61:6f:fa:a1:af:68:7f:
4d:c0:4e:96:5d:c2:34:35:e2:fb:d8:05:28:f3:13:cc:1c:b0:
2e:10:ac:7f:48:ef:77:3b:e2:89:92:b3:be:94:bf:04:d4:34:
12:77:a8:9f:01:ef:86:96:6d:ca:a2:aa:fd:bf:32:25:5b:3e:
49:c8:19:61:b5:07:84:fd:25:21:88:e1:bd:c2:cd:06:9d:59:
22:43:e1:f8:88:b6:44:52:df:3a:fc:e7:68:f9:07:c0:f7:f8:
01:96:fd:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xrFSNGrmIma3mVaVfbfPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmYWM0OTAxY2MyM2JlNDdiZmE5ZjEyYTYwNDRmYTYzNDUx
MjIxMDcwHhcNMjUxMDE5MTQwMTQzWhcNMjUxMDIwMTQwMTQzWjAzMTEwLwYDVQQD
EyhjOTE1NDEyMmYwNzZmYWMxNjhlNDdjODFjNmIyN2ZmNWFkNzcxMDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngHsFOEeF9NkVeAC0Q7mgpsx26r6
i9kaBfPkE+Z4o44VX09Zpxgo1VuZn+J7squhNq/XSZIY0Bl90WqFwXnndGSVuwMC
brMvcHJmQ0caXY4CsXzZlwp826iPk3Cr5a1dOucL8ENBFQdJFcGhntpdNRD/kX1C
CHcU+Hmf/kghm6uin74uf/9s5rBbXySluPibQpO2+tcXHUxQBa1O0AZ8J0kQ9Ip8
M+LWMLc0Fz1EUa/DzZ3cCkddmMmtyUE0lnNTkrkF5NlHWOaRuC0tTE30boAArxaM
AyG6zZT3G4kYyqeUkO0DLDKMtaR+ef+Bxh4Rye/kg1LK0PXBI/rlkko6vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMkVQSLwdvrBaOR8gcayf/WtdxAcMB8GA1UdIwQY
MBaAFD+sSQHMI75Hv6nxKmBE+mNFEiEHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDZ4SkFjd2p2a2VfcWZFcVlFVDZZMFVTSVFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wZmZkOTUtOThlNi00Mjc5LTk4N2Yt
NzNhNjM0MTU1ZWU5LzEvUDZ4SkFjd2p2a2VfcWZFcVlFVDZZMFVTSVFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8wZmZkOTUtOThlNi00Mjc5LTk4N2YtNzNhNjM0MTU1ZWU5
LzEvUDZ4SkFjd2p2a2VfcWZFcVlFVDZZMFVTSVFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADHzPbWOp
xChcSt7pvcXqpLv6uwVMf903p6B1AWAPfEUEI3rsG1d2KyeVA2HorcI2l2ZDvE9q
og7+x7EZixUqN0dseP/0CbpR02i8i/jV9tn6T1mHIGYF9XDOCBXKGDcfdOrusT6H
5q65ZT7+D6YfGQ0jZTysBxVOMw18TApbXD8JPouv3BLeAjWqM7yc+LTvi4R9PjVi
WmDPB/9hb/qhr2h/TcBOll3CNDXi+9gFKPMTzBywLhCsf0jvdzviiZKzvpS/BNQ0
EneonwHvhpZtyqKq/b8yJVs+ScgZYbUHhP0lIYjhvcLNBp1ZIkPh+Ii2RFLfOvzn
aPkHwPf4AZb9jQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:58:51 2025 by rpki-client