Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
File: P_xs3-GW1bOdLqYOkMldtwRF2bk.mft (raw, json)
Hash identifier: MNg0NbyjJzEAvquIHlfjPqI5PzhPNGWe4V/4PDvaLWg=
Subject key identifier: 50:EA:D2:D8:35:98:05:74:ED:1B:DF:D0:8E:CB:3A:B8:58:F0:24:F3
Authority key identifier: 3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
Certificate issuer: /CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Certificate serial: 019A541B26E507D7C47BDC7A3A9096426DB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
Manifest number: 0224
Signing time: Wed 05 Nov 2025 13:00:56 +0000
Manifest this update: Wed 05 Nov 2025 13:00:56 +0000
Manifest next update: Thu 06 Nov 2025 13:00:56 +0000
Files and hashes: 1: P_xs3-GW1bOdLqYOkMldtwRF2bk.crl (hash: 12Osa6VToXov7iiRXpHIqZx1ZI58YBrJEJVstSEUhu0=)
2: STi4I8sG96eo3VPJ65NFCI64EAE.roa (hash: /qNhRrl9OQMqxbMusKPE+tUs21JHJCDgrFTNmZwrYmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1b:26:e5:07:d7:c4:7b:dc:7a:3a:90:96:42:6d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Validity
Not Before: Nov 5 13:00:56 2025 GMT
Not After : Nov 6 13:00:56 2025 GMT
Subject: CN=50ead2d835980574ed1bdfd08ecb3ab858f024f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a4:b4:5d:d4:4a:78:ca:2a:f4:6c:d1:64:bc:
0b:b0:5c:d8:e8:7f:34:c5:ab:0a:71:da:f1:1f:f3:
9a:74:fd:5f:cc:0e:6c:4f:0e:c4:1a:ce:0f:00:46:
dd:1a:9d:14:89:03:d1:88:6d:01:a0:20:f0:52:92:
17:2c:ea:2b:6a:68:97:27:75:d1:00:e9:ce:b4:13:
db:12:97:d6:45:a8:15:6d:d3:29:fe:3e:f1:b9:4f:
46:62:2d:84:4d:e7:df:c5:70:36:a3:00:c6:16:9e:
8a:8d:2f:63:ba:23:0a:58:a7:12:fc:b2:14:fc:50:
26:c3:a1:87:f5:58:fe:99:26:73:60:b9:70:d4:54:
18:d2:79:11:83:27:39:46:d2:4b:6e:f6:ba:3b:12:
09:c7:1b:b1:7c:21:fc:b6:8b:53:7e:30:05:8a:46:
48:03:23:b2:1e:e2:72:7f:75:f7:12:ee:49:0e:40:
8d:35:e5:63:85:fc:41:09:63:10:53:d4:6a:8d:e5:
cc:bc:20:5b:e2:52:50:3c:99:7f:6a:c3:c5:bb:b3:
b7:5b:5f:fc:6d:53:7a:85:ee:dd:22:4e:80:cd:46:
74:28:9a:de:88:2f:e3:07:12:4b:46:7e:ac:09:f1:
f4:96:d2:46:d5:27:19:b8:2d:4e:8a:85:eb:2f:76:
e4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:EA:D2:D8:35:98:05:74:ED:1B:DF:D0:8E:CB:3A:B8:58:F0:24:F3
X509v3 Authority Key Identifier:
keyid:3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:86:84:d0:b0:8b:65:62:b4:64:53:a6:47:74:6b:9b:e0:9b:
1f:41:67:ce:47:e6:c1:fb:c2:a9:b9:1a:38:d3:5b:69:50:fb:
f7:1b:db:17:5d:94:d3:1b:a1:d1:bc:32:6a:01:61:b0:48:a3:
8d:d6:6c:2c:bb:6e:3a:7c:b0:b1:65:0e:6a:7c:87:3c:ca:be:
a2:e0:39:0b:42:4b:d6:f7:fa:7c:7a:7b:8b:02:fa:77:62:a6:
68:5e:33:e6:81:ed:56:90:8a:a0:d4:d3:f7:ba:9d:c8:77:90:
28:b6:06:a5:30:ba:da:b1:91:73:db:73:ea:18:27:40:fb:a9:
6b:18:3c:51:30:b8:9b:90:39:d3:8d:ad:67:2c:d3:d2:84:4e:
60:05:65:cd:9f:5c:3e:b4:32:ea:8e:23:c8:1b:1b:f9:3a:e6:
18:21:c6:76:81:0c:8e:eb:c5:ef:14:85:b1:59:0b:01:66:b0:
bb:41:0c:6e:cc:04:69:72:64:74:a2:b0:f5:77:9e:68:cf:63:
c2:65:5c:0d:fa:11:ef:04:cf:1d:c0:e9:52:ed:8c:10:07:df:
2e:3d:ae:e8:61:02:26:78:31:5c:da:da:0e:41:90:5c:51:f1:
55:af:22:30:dc:b6:17:28:08:c0:b3:ed:62:e2:29:56:2e:5d:
f0:b3:f2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:51:47 2025 by rpki-client