Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
File: PyixvqC1iXcj6nxfu918zSlSsFw.mft (raw, json)
Hash identifier: pQf/kJqfoESIv2zZnK4d137fMhPMeVpERGG6V/dnd6A=
Subject key identifier: 1F:15:25:E7:B8:19:A2:C8:56:E6:B0:71:C7:CF:3D:F7:F2:3A:03:01
Authority key identifier: 3F:28:B1:BE:A0:B5:89:77:23:EA:7C:5F:BB:DD:7C:CD:29:52:B0:5C
Certificate issuer: /CN=3f28b1bea0b5897723ea7c5fbbdd7ccd2952b05c
Certificate serial: 019A51F53E925AF830E3AD4765D30F90A093
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
Manifest number: 07D4
Signing time: Wed 05 Nov 2025 03:00:18 +0000
Manifest this update: Wed 05 Nov 2025 03:00:18 +0000
Manifest next update: Thu 06 Nov 2025 03:00:18 +0000
Files and hashes: 1: 1F_TkFNUb-s2_7y4TclItI2rQso.roa (hash: CLIjr10SKvI8VikQ8I8lxU5GeLh25bWphMtR56ykfWg=)
2: PyixvqC1iXcj6nxfu918zSlSsFw.crl (hash: XiQ6czCjIJaVqaNE63QPuOYSHzavVITXCaL91UtgY4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:3e:92:5a:f8:30:e3:ad:47:65:d3:0f:90:a0:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f28b1bea0b5897723ea7c5fbbdd7ccd2952b05c
Validity
Not Before: Nov 5 03:00:18 2025 GMT
Not After : Nov 6 03:00:18 2025 GMT
Subject: CN=1f1525e7b819a2c856e6b071c7cf3df7f23a0301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8f:23:b5:66:db:0b:81:c8:84:76:6d:a6:27:
cd:a0:ba:15:47:ea:dd:e1:a1:ed:48:73:0b:05:8b:
c4:c5:3c:3d:2e:6c:2d:f4:66:d7:33:ed:a1:f5:6a:
74:04:a5:44:9a:79:fa:cd:03:3f:b2:4f:6d:11:0c:
f3:42:ab:4f:16:5a:9d:6c:bb:1b:8d:4b:e8:cc:4d:
31:62:40:9c:a0:9d:58:69:5e:e1:86:8c:5b:ed:24:
f9:d8:34:0c:9a:61:a2:ce:22:db:ca:f8:02:d4:83:
98:f5:20:b5:2c:c1:60:39:39:e2:59:b2:90:f8:95:
a9:37:de:47:5d:73:bc:47:d3:70:65:27:4e:a0:8d:
eb:83:4e:d8:11:8f:d1:09:ef:ec:d4:d5:3e:54:42:
3c:93:52:e7:39:83:15:2c:64:6e:cd:c5:f0:2b:3a:
ff:53:60:7e:04:e4:10:75:3c:57:92:1d:b7:e5:8e:
0e:2c:10:65:94:d4:5e:da:74:d6:f3:41:68:29:9d:
31:ac:1e:4a:3f:95:f0:38:04:20:38:2f:99:16:d2:
58:6e:03:8a:d5:a8:1d:e8:6d:71:06:43:1d:06:0f:
5f:81:ce:67:91:3b:81:c7:78:8f:a7:d1:b1:9d:5b:
d6:c4:b1:38:97:ff:39:b0:4d:d5:d0:12:a9:fc:6e:
89:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:15:25:E7:B8:19:A2:C8:56:E6:B0:71:C7:CF:3D:F7:F2:3A:03:01
X509v3 Authority Key Identifier:
keyid:3F:28:B1:BE:A0:B5:89:77:23:EA:7C:5F:BB:DD:7C:CD:29:52:B0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:0e:0d:a6:c9:a7:c1:ed:d8:6a:e2:85:37:93:23:a5:d7:eb:
f0:78:57:a1:ee:51:53:75:b1:10:04:d6:a3:e9:ae:a4:cc:fa:
c0:3a:0e:f1:cb:b4:5d:3b:d4:5d:40:d8:1b:3a:e8:2c:fc:56:
32:6b:a3:5d:30:d2:1f:2a:07:f1:f6:b5:68:f4:4f:28:89:ec:
31:bb:21:16:77:70:ab:ad:da:9b:88:29:ed:e3:20:06:dd:6a:
b5:05:8a:01:2a:39:b9:02:2b:3e:f2:bc:4a:d1:ff:f8:5d:76:
3e:44:85:83:12:f6:3a:47:b2:48:44:12:18:0a:c3:6b:f1:8f:
9f:24:10:28:bd:ab:56:1e:7c:52:36:47:53:c1:3d:0a:bf:e0:
62:60:77:aa:fc:2e:56:ed:6a:91:13:17:3c:45:e2:66:a8:5d:
29:d9:39:ad:2f:c9:60:9c:3e:d6:98:e5:5f:c6:cc:06:d4:42:
33:6a:91:02:fb:30:30:84:5e:c2:81:a4:bb:80:dc:06:2f:b7:
b9:d3:8e:79:24:d0:f4:24:af:e0:d0:57:b1:10:5f:04:11:41:
5e:c7:16:c2:d5:ef:b3:e9:e4:d5:64:63:ea:d8:12:1f:3a:b1:
b1:18:7b:e1:5e:3d:21:2d:6d:2c:8f:c7:8f:42:6d:4d:c2:75:
38:3b:ca:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:45:41 2025 by rpki-client