Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft
File: pxzA1YsWrbv3-lwv28Nln5xzx7o.mft (raw, json)
Hash identifier: K9ZROILAry877IA4VHWrkVQUUtgd2SkwrhPtbk47qJ8=
Subject key identifier: 50:28:1F:47:45:F2:5F:05:80:E4:75:82:2F:B0:D2:3A:C7:AE:4F:E2
Authority key identifier: A7:1C:C0:D5:8B:16:AD:BB:F7:FA:5C:2F:DB:C3:65:9F:9C:73:C7:BA
Certificate issuer: /CN=a71cc0d58b16adbbf7fa5c2fdbc3659f9c73c7ba
Certificate serial: 019A5187DC549EE6B2B71168D779F567CC57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft
Manifest number: 14E5
Signing time: Wed 05 Nov 2025 01:00:49 +0000
Manifest this update: Wed 05 Nov 2025 01:00:49 +0000
Manifest next update: Thu 06 Nov 2025 01:00:49 +0000
Files and hashes: 1: 3nrrtsZJ-IpATR6f6X0fXP8P3Ds.roa (hash: dHLYJp8vBdcpEI62KQkymjAsJXGywGpijB0UQKFJ6p4=)
2: b3rpvlrUc4F3iSwCht-ScFiNdQU.roa (hash: IxL38OMcTHb5h0kfUl/vgqGG9zstz9MS/9BQOovbMEE=)
3: o-IAHNtlfJTe0lrMjkAn3EfKWfQ.roa (hash: 4yZoP16QAdZ03Ygf8PchIKIjGuMurg8hghXjeARQmNw=)
4: pxzA1YsWrbv3-lwv28Nln5xzx7o.crl (hash: nBUHJ8aSLTb13+oXWCDkXou6wBpEiw4z4/vSyWVGxZw=)
5: z9pY0mNZw1275Un36HrGri4KO4o.roa (hash: YWMIyf15z9zL0EObbho/vFT6JF3XUpar4rPteqovYLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:dc:54:9e:e6:b2:b7:11:68:d7:79:f5:67:cc:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71cc0d58b16adbbf7fa5c2fdbc3659f9c73c7ba
Validity
Not Before: Nov 5 01:00:49 2025 GMT
Not After : Nov 6 01:00:49 2025 GMT
Subject: CN=50281f4745f25f0580e475822fb0d23ac7ae4fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:10:68:6c:c5:14:b3:d9:3e:c9:e8:e6:0f:f5:
b9:97:9e:19:e6:f1:05:65:23:7c:f0:5f:63:ca:25:
cb:08:cd:44:ab:59:5c:64:60:d9:b5:fb:22:69:f0:
9b:e6:58:b0:85:72:6d:96:42:ba:5c:5a:90:7b:4b:
db:5a:e4:f7:93:5e:38:09:6c:97:13:db:3c:9d:f0:
af:fb:f6:5a:90:bb:ae:29:8d:23:ff:e2:33:ae:4c:
c7:fe:22:b3:8d:34:66:c6:e2:ef:51:79:2e:68:7f:
62:d1:a0:81:7d:92:0e:0e:b2:30:c1:aa:bb:a2:a3:
0e:d3:14:94:6a:f0:44:da:76:21:7e:46:e4:2e:74:
1a:55:14:21:05:89:eb:e1:a2:76:34:7f:4e:62:7d:
88:b8:f6:61:17:bc:f9:5a:fc:b6:59:cc:b2:be:0d:
ec:77:b2:ef:f4:c8:0f:d1:5e:2b:40:fc:ef:13:7e:
24:3c:28:ca:9d:54:bd:30:26:63:ea:97:2d:68:a0:
43:ba:55:65:c6:c9:7e:61:e1:06:f2:71:17:3d:f7:
4f:02:0d:df:e8:0e:50:02:e7:f2:33:3d:53:21:70:
86:ff:7e:47:5f:6e:95:31:f4:48:46:d9:f6:87:26:
65:6b:b8:5a:8b:09:dc:a6:81:b4:4c:74:c0:3d:c3:
a3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:28:1F:47:45:F2:5F:05:80:E4:75:82:2F:B0:D2:3A:C7:AE:4F:E2
X509v3 Authority Key Identifier:
keyid:A7:1C:C0:D5:8B:16:AD:BB:F7:FA:5C:2F:DB:C3:65:9F:9C:73:C7:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:5e:9e:5e:e6:1a:d3:e3:af:34:d2:f0:15:88:68:37:95:cc:
fc:d7:e5:cf:07:47:30:c9:c6:ca:8b:42:24:37:a2:87:b5:97:
ae:56:48:05:1e:59:26:b0:f4:b1:90:66:bc:57:c6:57:71:31:
cb:4d:89:63:87:50:34:d7:8a:5f:36:9f:75:c3:03:fe:6a:99:
a5:2d:80:3c:bd:42:08:61:da:92:49:a3:37:3e:f8:09:62:e9:
6b:5b:d5:35:b1:3a:2f:7f:4c:59:08:7e:3f:a1:ed:77:be:dd:
77:c2:17:5f:a1:39:1f:a1:0d:61:3d:65:b0:35:b9:d7:ca:2e:
e3:0e:bf:53:c6:4a:c7:36:00:a2:57:29:ce:9a:b8:d3:37:b9:
31:74:d3:02:a0:3a:f2:de:3a:b2:be:dd:b2:8d:9c:e4:93:76:
54:0d:7f:3d:d8:1c:24:52:ed:17:ae:da:46:29:61:20:13:3f:
b2:cc:43:8d:fa:b5:7f:33:64:8b:40:d6:be:25:d1:c6:ac:49:
a9:ce:e9:d3:f7:92:d6:10:85:85:d6:3b:83:8b:69:1a:48:74:
9c:0f:e4:b8:eb:4e:0d:8f:64:cb:60:a2:02:49:77:28:ea:39:
b3:0a:01:1b:ee:80:d4:35:aa:fd:64:08:14:ab:2f:4c:02:f7:
c3:43:93:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRh9xUnuaytxFo13n1Z8xXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MWNjMGQ1OGIxNmFkYmJmN2ZhNWMyZmRiYzM2NTlmOWM3
M2M3YmEwHhcNMjUxMTA1MDEwMDQ5WhcNMjUxMTA2MDEwMDQ5WjAzMTEwLwYDVQQD
Eyg1MDI4MWY0NzQ1ZjI1ZjA1ODBlNDc1ODIyZmIwZDIzYWM3YWU0ZmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBBobMUUs9k+yejmD/W5l54Z5vEF
ZSN88F9jyiXLCM1Eq1lcZGDZtfsiafCb5liwhXJtlkK6XFqQe0vbWuT3k144CWyX
E9s8nfCv+/ZakLuuKY0j/+IzrkzH/iKzjTRmxuLvUXkuaH9i0aCBfZIODrIwwaq7
oqMO0xSUavBE2nYhfkbkLnQaVRQhBYnr4aJ2NH9OYn2IuPZhF7z5Wvy2Wcyyvg3s
d7Lv9MgP0V4rQPzvE34kPCjKnVS9MCZj6pctaKBDulVlxsl+YeEG8nEXPfdPAg3f
6A5QAufyMz1TIXCG/35HX26VMfRIRtn2hyZla7haiwncpoG0THTAPcOjVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFAoH0dF8l8FgOR1gi+w0jrHrk/iMB8GA1UdIwQY
MBaAFKccwNWLFq279/pcL9vDZZ+cc8e6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHh6QTFZc1dyYnYzLWx3djI4TmxuNXh6eDdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS81ZjVhNjAtOTAyNi00YjY2LWJhYWEt
ZGU2NDBkMDEyMDY1LzEvcHh6QTFZc1dyYnYzLWx3djI4TmxuNXh6eDdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS81ZjVhNjAtOTAyNi00YjY2LWJhYWEtZGU2NDBkMDEyMDY1
LzEvcHh6QTFZc1dyYnYzLWx3djI4TmxuNXh6eDdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWF6eXuYa
0+OvNNLwFYhoN5XM/NflzwdHMMnGyotCJDeih7WXrlZIBR5ZJrD0sZBmvFfGV3Ex
y02JY4dQNNeKXzafdcMD/mqZpS2APL1CCGHakkmjNz74CWLpa1vVNbE6L39MWQh+
P6Htd77dd8IXX6E5H6ENYT1lsDW518ou4w6/U8ZKxzYAolcpzpq40ze5MXTTAqA6
8t46sr7dso2c5JN2VA1/PdgcJFLtF67aRilhIBM/ssxDjfq1fzNki0DWviXRxqxJ
qc7p0/eS1hCFhdY7g4tpGkh0nA/kuOtODY9ky2CiAkl3KOo5swoBG+6A1DWq/WQI
FKsvTAL3w0OTNw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:17:25 2025 by rpki-client