Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
File: PxnYdtwluWxdxZi-Lb9uywZal18.mft (raw, json)
Hash identifier: tcd+AZWCUhvJAXPBtOPReSi/r0J7LiynWRqfCNj4/Pk=
Subject key identifier: 50:69:2C:38:FB:F5:BE:78:5B:56:F1:62:2D:A3:25:7A:21:4F:66:60
Authority key identifier: 3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
Certificate issuer: /CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Certificate serial: 019A4F2AFCCA7AD69157FA4B601B820090F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
Manifest number: 053A
Signing time: Tue 04 Nov 2025 14:00:08 +0000
Manifest this update: Tue 04 Nov 2025 14:00:08 +0000
Manifest next update: Wed 05 Nov 2025 14:00:08 +0000
Files and hashes: 1: PxnYdtwluWxdxZi-Lb9uywZal18.crl (hash: TfX2jOnWvrF0/ZPQLEJ/gd2BMwZCNG5XJgKdhI3cnbw=)
2: x8ghvFiQy8y7__Pm7K2GUSehU3A.roa (hash: 97TGydFeZ3RUDp9TsIz5UQ8MNV819kJP2yTvYQ+TbKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2a:fc:ca:7a:d6:91:57:fa:4b:60:1b:82:00:90:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Validity
Not Before: Nov 4 14:00:08 2025 GMT
Not After : Nov 5 14:00:08 2025 GMT
Subject: CN=50692c38fbf5be785b56f1622da3257a214f6660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:07:f7:c6:45:f4:8e:8b:1c:29:fd:63:ce:d2:
d6:1c:b7:14:c8:b1:74:2e:96:57:5e:fb:cd:a4:dd:
6c:57:94:38:2c:01:64:75:a9:84:a7:fa:7f:58:c4:
31:e9:15:13:a4:10:35:e1:64:d3:e6:fb:1f:63:63:
56:dd:7f:25:8d:fd:e4:f6:73:c9:6d:65:db:25:1b:
8c:88:97:2b:db:39:0a:9a:57:42:a0:ec:d7:4f:87:
fb:21:1d:f6:5a:b3:bd:1d:0b:79:e4:f6:cb:43:0d:
35:01:b9:b8:20:e2:3b:d8:ac:e8:2c:b6:a8:59:12:
16:e5:3d:ec:a8:1b:3e:8a:99:eb:61:e4:ba:fd:81:
eb:bd:92:f7:81:42:cb:6c:be:31:a3:16:59:1b:ef:
8c:1d:25:51:af:65:a8:51:24:1d:66:d2:df:eb:24:
ec:1f:d3:2e:3a:33:fc:01:44:45:56:f5:5a:56:39:
1f:f4:a7:16:04:c3:42:4b:c9:a6:16:3c:9f:73:af:
28:ff:e9:d0:ba:0c:63:4d:ee:d2:60:7a:5b:b4:38:
b2:5d:af:b3:14:c7:2f:5b:70:e6:85:1e:d5:70:21:
c1:a6:54:a7:24:8a:6a:5b:4d:e4:6f:b7:2a:c3:30:
a8:be:3e:87:26:fd:64:f4:b3:c8:47:80:95:89:73:
fc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:69:2C:38:FB:F5:BE:78:5B:56:F1:62:2D:A3:25:7A:21:4F:66:60
X509v3 Authority Key Identifier:
keyid:3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:80:af:41:ec:62:d6:9f:11:b9:a2:a7:48:5a:b2:3e:17:01:
4e:9d:32:64:36:10:64:92:21:8c:db:60:13:61:2b:09:4d:d8:
f1:b8:07:f9:6f:43:b0:99:e0:e1:f4:4a:48:c0:ba:ea:9a:af:
30:69:be:98:28:99:59:05:ea:f1:0e:5d:f6:5b:af:3b:28:9b:
dc:1c:02:2f:fd:89:e8:7f:98:83:6c:69:5a:d5:43:45:07:9b:
87:dc:00:55:43:60:c8:b9:67:f3:98:be:d3:0c:97:ef:dc:52:
15:b2:86:50:f9:9a:6c:83:3a:ff:99:8e:3f:d6:06:eb:cd:3c:
c1:c3:fa:94:7f:64:42:25:90:3e:a9:9a:f7:f0:67:3b:18:94:
56:a4:b0:23:59:e8:fd:54:c2:c9:5b:6b:c8:67:48:4c:2d:54:
ed:bb:a5:55:eb:5b:c2:ff:8e:20:21:d3:90:70:10:31:50:c2:
bd:4c:48:70:c5:9f:fb:92:f6:5f:e6:70:f8:8b:dc:2f:c8:b1:
52:08:33:94:0b:c7:d6:d1:10:11:df:a8:c6:c3:7a:a9:07:b2:
b9:a5:8e:a9:df:25:91:0e:d0:83:4f:10:80:d5:f2:49:e2:6d:
de:79:bb:51:22:c5:7f:6e:f4:dd:a2:83:92:ff:1a:8e:65:52:
f2:20:6f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:36 2025 by rpki-client