Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
File: PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft (raw, json)
Hash identifier: 2RwDCAzkRgwtngrCPanq7HQTnz1R1yZkIL0J1NoQLKc=
Subject key identifier: 32:0C:6B:78:BE:CD:EF:98:0B:10:96:35:DD:F2:AC:CF:68:1C:9E:51
Authority key identifier: 3C:45:CE:40:85:F0:2E:B8:A0:ED:1A:FD:2B:79:91:A8:AA:99:83:34
Certificate issuer: /CN=3c45ce4085f02eb8a0ed1afd2b7991a8aa998334
Certificate serial: 019A4D7406FC8B3650A8A171E498724CE261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 06:00:40 +0000
Manifest this update: Tue 04 Nov 2025 06:00:40 +0000
Manifest next update: Wed 05 Nov 2025 06:00:40 +0000
Files and hashes: 1: B29MvHY6zeEvGzG4mIu0G_C1t3k.roa (hash: 2w6PM7Xh404gJeZoq9hPqo7jK8P7Uk4U1TIQbaY+1sM=)
2: PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl (hash: Y48vg5w4sSC/KUgkbB7hjT4oqMWmDTOEIFIEskF/aMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:06:fc:8b:36:50:a8:a1:71:e4:98:72:4c:e2:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c45ce4085f02eb8a0ed1afd2b7991a8aa998334
Validity
Not Before: Nov 4 06:00:40 2025 GMT
Not After : Nov 5 06:00:40 2025 GMT
Subject: CN=320c6b78becdef980b109635ddf2accf681c9e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3a:0a:ee:7d:c7:11:7e:13:a7:28:f9:5c:11:
a3:08:f5:55:91:2a:49:0c:5a:66:c7:77:b2:9e:9b:
d2:1d:78:6b:69:73:61:c2:44:21:76:7e:8b:23:95:
7a:8a:91:e3:43:c1:45:65:4a:ec:58:a4:3a:56:7b:
7e:88:11:82:91:53:16:92:67:2a:05:e9:f3:0e:33:
a3:35:82:c9:c0:7c:29:f3:66:bc:6f:f6:4f:1a:5a:
0b:d8:07:de:64:af:96:d8:12:ed:58:d6:7a:84:31:
d2:44:85:a4:33:f5:20:a5:67:ca:f6:07:8e:03:09:
73:d1:30:0c:ab:04:ca:88:a0:ac:45:6a:ce:34:77:
72:ed:b6:d8:4f:a6:82:27:98:7d:49:0a:a4:fb:e2:
f6:1e:c5:43:61:94:71:52:3d:e1:cf:e9:59:4f:58:
f7:7d:cc:af:3e:1f:57:40:c8:40:71:1e:ca:eb:4d:
60:0f:19:91:c7:04:96:0b:8e:86:e5:13:1c:20:5d:
87:35:95:ae:7e:90:36:29:35:58:5d:12:68:86:84:
c1:a2:6d:ee:d3:78:d5:b0:b1:e5:d1:dd:36:22:76:
64:91:bb:0d:74:5a:76:1b:48:a9:29:7d:c0:c8:a0:
ce:d8:dc:5f:ce:33:3e:bf:e3:38:50:59:fd:d0:a0:
91:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0C:6B:78:BE:CD:EF:98:0B:10:96:35:DD:F2:AC:CF:68:1C:9E:51
X509v3 Authority Key Identifier:
keyid:3C:45:CE:40:85:F0:2E:B8:A0:ED:1A:FD:2B:79:91:A8:AA:99:83:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b2:01:82:3b:ee:f5:ce:75:c5:db:73:b1:bc:c4:64:02:91:
8c:e7:a6:0a:26:86:c2:af:44:d6:05:5c:b4:ec:7f:a5:5e:c7:
d0:84:3b:af:9c:56:fd:84:24:ea:f1:0f:6a:49:08:1f:ba:bd:
7a:8c:b2:e8:df:ce:13:e7:d2:6b:ca:cc:19:67:fa:08:10:0b:
30:39:d6:49:37:72:ce:e5:7e:e0:36:41:60:5e:1f:1c:8e:1e:
51:88:29:70:e5:00:8d:60:a3:c9:b4:8c:af:41:06:77:74:dd:
9d:a3:6b:f9:76:ce:35:77:54:7f:dd:d8:03:d9:2d:f9:de:95:
c9:3c:d8:d3:38:8d:46:aa:10:00:da:48:f1:30:e4:fb:d0:00:
12:d8:f6:32:a9:f1:2f:78:5d:a6:d7:0e:17:9b:40:62:e7:5b:
5e:a4:e2:3b:02:cf:7d:1e:e3:dc:a8:ff:91:63:67:0c:18:2c:
21:37:be:4e:39:89:81:5a:4c:c9:a5:08:85:de:cf:a4:57:1a:
8f:d9:2e:c2:15:fd:ad:31:b6:f2:1d:49:cb:f0:73:f6:3a:06:
76:35:03:f4:84:70:6f:a7:47:de:fb:f1:d0:ec:dd:dc:5e:d6:
38:ec:43:99:a8:d2:d0:22:4f:39:18:3e:29:89:49:2a:2f:92:
0f:16:a3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:44 2025 by rpki-client