
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.mft
File: P6_QfcCG3X_uxp5k4JTe5fSc6n0.mft (raw, json)
Hash identifier: QxHiAhX0zw9kXcEVyDNdi2ZvXnsJhZofe3Ogyvz/dKU=
Subject key identifier: 3B:18:41:A9:E4:D1:D6:31:C7:A2:1D:04:F7:7F:C6:06:09:74:68:52
Authority key identifier: 3F:AF:D0:7D:C0:86:DD:7F:EE:C6:9E:64:E0:94:DE:E5:F4:9C:EA:7D
Certificate issuer: /CN=3fafd07dc086dd7feec69e64e094dee5f49cea7d
Certificate serial: 0199FBEC1B0ABF02C89D4BF12D9EAAF3A4CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6_QfcCG3X_uxp5k4JTe5fSc6n0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.mft
Manifest number: 13F7
Signing time: Sun 19 Oct 2025 10:02:58 +0000
Manifest this update: Sun 19 Oct 2025 10:02:58 +0000
Manifest next update: Mon 20 Oct 2025 10:02:58 +0000
Files and hashes: 1: BfNexY5OqoQ7WOolPlzeDpCCs5M.roa (hash: rSm9EPZuoDpFIDuTgtzeM5a6uFOK9MrJk+o4deyRBsw=)
2: P6_QfcCG3X_uxp5k4JTe5fSc6n0.crl (hash: 2KFHssJvViJ/d2GeKcyuVvvnNLW8FI8rwn+LuP7o1sk=)
3: uq8LGKG3oEbowZ7v4iuP9ClmWdw.roa (hash: hgRaSL//DCXKQ88iWICAvE3iKVN2MVceZAG3WSssG0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6_QfcCG3X_uxp5k4JTe5fSc6n0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:1b:0a:bf:02:c8:9d:4b:f1:2d:9e:aa:f3:a4:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fafd07dc086dd7feec69e64e094dee5f49cea7d
Validity
Not Before: Oct 19 10:02:58 2025 GMT
Not After : Oct 20 10:02:58 2025 GMT
Subject: CN=3b1841a9e4d1d631c7a21d04f77fc60609746852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:15:c8:07:48:fd:3c:4b:53:2d:51:12:b0:3d:
b1:bf:58:09:cf:07:ad:4f:92:e9:f6:b0:41:22:6b:
17:0d:47:49:ae:e6:d7:f3:e5:2e:0e:27:74:a1:ea:
10:96:71:02:9f:e4:ed:d5:bf:40:3b:e0:9d:2f:06:
00:ff:6e:8c:28:43:42:cb:29:2a:c6:3a:f1:b2:c5:
0e:30:16:73:08:77:46:49:42:b7:ea:92:47:e7:d6:
82:da:b2:8d:06:8a:8f:30:d3:35:2e:9c:8e:2d:50:
b9:6b:d3:1e:8b:1f:8e:aa:97:ab:75:9f:a5:2a:10:
16:0c:d5:57:73:5a:f1:83:0b:f8:6e:06:4e:ff:b4:
ac:13:96:d0:fb:6c:53:1a:4e:a4:87:11:6a:bd:17:
53:11:ff:36:be:fe:e6:f4:c6:e9:bd:f4:60:c1:9f:
d8:9a:4e:9d:f1:09:41:bf:b3:f2:fa:6c:df:00:fc:
b3:ab:89:f4:3d:0a:6f:76:1a:ae:3d:90:a8:59:37:
e4:30:57:94:d5:22:8d:d2:1c:08:91:c6:94:5a:a8:
a6:ac:3f:3f:39:0f:11:bb:03:d1:8c:6e:f7:54:4b:
22:5b:12:dd:3d:fa:f6:f2:38:5a:7d:1f:74:74:7a:
7b:a6:97:68:3f:ca:8b:f5:69:2f:05:e5:c8:24:6a:
a5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:18:41:A9:E4:D1:D6:31:C7:A2:1D:04:F7:7F:C6:06:09:74:68:52
X509v3 Authority Key Identifier:
keyid:3F:AF:D0:7D:C0:86:DD:7F:EE:C6:9E:64:E0:94:DE:E5:F4:9C:EA:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6_QfcCG3X_uxp5k4JTe5fSc6n0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ec:80:56:96:00:90:dc:0b:b7:52:38:b2:a9:bd:0f:06:82:
80:89:c1:19:d9:c1:4e:40:dd:c3:a4:9d:a4:59:3a:a4:c7:9f:
93:92:ae:2a:1d:ed:53:c6:ae:fd:27:39:ef:71:fd:2c:72:6b:
b2:3e:c6:f3:df:1e:de:b3:b7:3d:bb:15:68:ff:99:ad:d8:9b:
09:4b:96:74:e8:b7:af:f0:fa:ca:92:4d:0e:ec:27:03:ce:87:
6d:4d:52:0f:6a:6c:f7:07:ec:82:3a:0e:7c:a0:f7:0f:bc:7c:
2f:5e:62:f5:60:c3:42:fe:b3:1a:a1:ef:ac:f6:84:fd:22:fd:
10:77:59:a4:aa:f9:0b:f3:06:1d:c2:20:3f:28:20:23:e6:b9:
19:6a:3b:68:f8:69:03:1b:ba:48:d5:1d:fa:06:80:03:fa:d5:
75:9e:ba:85:3d:c8:f1:a9:a4:b8:6c:4f:93:60:b0:b7:16:05:
1e:11:96:d2:13:16:b6:ea:7a:34:03:d2:e6:80:97:79:63:78:
fe:d9:90:87:ce:74:fd:df:f8:08:88:97:37:2e:41:44:78:8d:
a7:81:e4:fe:84:8f:33:13:7b:c3:ae:9b:9a:2d:5f:40:67:9e:
59:95:ac:60:92:7e:fe:3a:0e:3c:b7:85:ce:78:cb:dc:6e:92:
6d:b5:a6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:20 2025 by rpki-client