Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
File: pXtgj8zzIw5EXJg_nja1DhH3LPI.mft (raw, json)
Hash identifier: 1MBwazkHBSQl4157k9QMTHFHRxcmZ+t2QSleqlAxy1M=
Subject key identifier: 3C:8E:9F:9E:41:6E:B0:D5:44:9D:B9:E5:55:BE:43:7B:7A:10:4E:D6
Authority key identifier: A5:7B:60:8F:CC:F3:23:0E:44:5C:98:3F:9E:36:B5:0E:11:F7:2C:F2
Certificate issuer: /CN=a57b608fccf3230e445c983f9e36b50e11f72cf2
Certificate serial: 019A4D3D1ACE51575E7E37C77B1E829B428F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
Manifest number: 1197
Signing time: Tue 04 Nov 2025 05:00:41 +0000
Manifest this update: Tue 04 Nov 2025 05:00:41 +0000
Manifest next update: Wed 05 Nov 2025 05:00:41 +0000
Files and hashes: 1: NhJBxI5W8KC_WePH5ss0tv9aU5U.roa (hash: /CWlrfID9lQOxgVeBTFIGSk2eqixT2ZM3bIGkRsAuOA=)
2: pXtgj8zzIw5EXJg_nja1DhH3LPI.crl (hash: QuY4NJxY9M0X/tSLJy8DxLhhvHdVChw7HnkBFX5XgSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:1a:ce:51:57:5e:7e:37:c7:7b:1e:82:9b:42:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57b608fccf3230e445c983f9e36b50e11f72cf2
Validity
Not Before: Nov 4 05:00:41 2025 GMT
Not After : Nov 5 05:00:41 2025 GMT
Subject: CN=3c8e9f9e416eb0d5449db9e555be437b7a104ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2b:d2:39:86:8d:91:ec:0b:74:d2:19:54:8c:
0b:29:fb:7a:4e:a7:a7:3d:15:45:cd:42:39:81:a1:
4f:c6:9c:a1:92:9b:25:91:19:d5:b1:de:ef:43:ea:
7b:83:78:02:7b:0d:99:9c:dc:80:77:30:3c:07:42:
a3:87:9e:49:a1:b2:f5:e5:ef:a4:f0:46:93:ee:5c:
cb:b8:86:24:8b:bc:c2:a1:ba:5e:ed:f1:99:04:77:
d8:99:cd:f3:97:45:62:b9:67:9e:c1:2e:b8:6c:96:
be:34:fb:16:3e:de:f3:39:ac:a5:8b:63:8b:5f:6a:
e9:4f:93:9e:69:46:2e:bc:c3:c9:58:06:01:5e:3d:
86:e7:61:e3:84:56:3f:3b:71:0f:17:4d:9d:51:e8:
79:fb:5f:4c:a7:6c:65:ff:46:0f:76:de:b4:b8:93:
ef:f1:06:bd:2c:d4:f5:6b:d1:8f:b4:d5:1d:c7:d3:
9f:fa:8e:cc:d4:72:b7:cb:12:44:42:6f:20:0f:ae:
54:69:6e:0c:c7:aa:e6:22:b1:6a:eb:5d:41:8d:b3:
cf:fb:e4:61:e6:c0:41:ea:a6:c2:c0:db:de:ee:77:
94:ee:b7:b9:d4:6c:dd:ee:58:22:52:fa:69:cd:ca:
b0:d1:10:52:db:33:29:2b:8a:92:0c:69:89:48:17:
31:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8E:9F:9E:41:6E:B0:D5:44:9D:B9:E5:55:BE:43:7B:7A:10:4E:D6
X509v3 Authority Key Identifier:
keyid:A5:7B:60:8F:CC:F3:23:0E:44:5C:98:3F:9E:36:B5:0E:11:F7:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:64:38:fe:c3:6a:91:df:6a:50:01:9e:f7:31:d9:b7:41:f3:
4e:9f:d0:df:cf:3b:ab:88:c0:ce:f1:c9:ed:3d:23:32:9b:22:
31:6d:c8:77:f8:be:a3:46:8c:7e:85:7b:d8:36:9e:cd:9f:a4:
23:99:be:a8:c5:ec:91:ad:de:0e:61:ca:da:62:55:cf:33:60:
ff:7a:d7:46:84:01:da:a2:da:df:9f:a5:b9:13:c1:8f:eb:99:
40:a1:94:76:97:90:0c:29:21:b5:4c:70:33:e2:3b:32:36:1b:
95:d0:90:f3:6e:0b:9c:79:49:36:03:c3:ac:d9:4d:ca:42:dc:
f5:a4:c6:91:5a:b8:1a:c6:13:a7:dc:95:2a:f1:e7:8c:38:cd:
f1:95:ea:f6:b8:85:65:0e:c8:49:c2:4c:41:52:8b:24:5e:5e:
d9:e1:2d:dc:5d:0c:c2:38:29:12:07:d9:88:d3:fd:24:a1:35:
f0:9f:b3:bb:73:5f:5c:14:8a:ac:c7:0a:f3:51:f2:56:92:60:
5b:95:35:7d:bc:6a:70:fe:a6:40:43:1a:1e:03:b4:5c:28:5f:
4e:e9:4e:56:51:bf:07:42:02:17:8e:2e:d7:86:48:2b:d0:19:
29:cc:82:6a:75:99:9d:f9:23:a2:91:87:ad:47:f1:ad:40:1d:
c1:05:72:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPRrOUVdefjfHex6Cm0KPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1N2I2MDhmY2NmMzIzMGU0NDVjOTgzZjllMzZiNTBlMTFm
NzJjZjIwHhcNMjUxMTA0MDUwMDQxWhcNMjUxMTA1MDUwMDQxWjAzMTEwLwYDVQQD
EygzYzhlOWY5ZTQxNmViMGQ1NDQ5ZGI5ZTU1NWJlNDM3YjdhMTA0ZWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoivSOYaNkewLdNIZVIwLKft6Tqen
PRVFzUI5gaFPxpyhkpslkRnVsd7vQ+p7g3gCew2ZnNyAdzA8B0Kjh55JobL15e+k
8EaT7lzLuIYki7zCobpe7fGZBHfYmc3zl0ViuWeewS64bJa+NPsWPt7zOayli2OL
X2rpT5OeaUYuvMPJWAYBXj2G52HjhFY/O3EPF02dUeh5+19Mp2xl/0YPdt60uJPv
8Qa9LNT1a9GPtNUdx9Of+o7M1HK3yxJEQm8gD65UaW4Mx6rmIrFq611BjbPP++Rh
5sBB6qbCwNve7neU7re51Gzd7lgiUvppzcqw0RBS2zMpK4qSDGmJSBcxoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDyOn55BbrDVRJ255VW+Q3t6EE7WMB8GA1UdIwQY
MBaAFKV7YI/M8yMORFyYP542tQ4R9yzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFh0Z2o4enpJdzVFWEpnX25qYTFEaEgzTFBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC82MjE2MjktZWQzZC00OWFmLWJmMzkt
ODVhMzdjZjFiMmVhLzEvcFh0Z2o4enpJdzVFWEpnX25qYTFEaEgzTFBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC82MjE2MjktZWQzZC00OWFmLWJmMzktODVhMzdjZjFiMmVh
LzEvcFh0Z2o4enpJdzVFWEpnX25qYTFEaEgzTFBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASWQ4/sNq
kd9qUAGe9zHZt0HzTp/Q3887q4jAzvHJ7T0jMpsiMW3Id/i+o0aMfoV72DaezZ+k
I5m+qMXska3eDmHK2mJVzzNg/3rXRoQB2qLa35+luRPBj+uZQKGUdpeQDCkhtUxw
M+I7MjYbldCQ824LnHlJNgPDrNlNykLc9aTGkVq4GsYTp9yVKvHnjDjN8ZXq9riF
ZQ7IScJMQVKLJF5e2eEt3F0MwjgpEgfZiNP9JKE18J+zu3NfXBSKrMcK81HyVpJg
W5U1fbxqcP6mQEMaHgO0XChfTulOVlG/B0ICF44u14ZIK9AZKcyCanWZnfkjopGH
rUfxrUAdwQVynA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:52 2025 by rpki-client