Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
File: pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft (raw, json)
Hash identifier: NuQRCOXEPAMrcA70sq27RcHmOtB4Wmi41uQadJLjlok=
Subject key identifier: A3:25:DA:09:47:AE:A3:72:F3:80:0E:82:BA:B8:F8:84:CC:6A:9F:E6
Authority key identifier: A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
Certificate issuer: /CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Certificate serial: 019A4F9979E6E0253D053687BD19A5C914AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
Manifest number: 171A
Signing time: Tue 04 Nov 2025 16:00:49 +0000
Manifest this update: Tue 04 Nov 2025 16:00:49 +0000
Manifest next update: Wed 05 Nov 2025 16:00:49 +0000
Files and hashes: 1: Clf1O67BMO2Rhs6Zi3d5eqYtS78.roa (hash: gEsGT+BkcxrPL5LEXQ9nd6Eso8OhYDY6ncvwiqyMT9o=)
2: pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl (hash: EY9Jy7MnfA3dIiOTjZOEgeuKwdTQUivfxgjqnVWuvyo=)
3: y4LRZvQWH9l19-R4kCc6PgUW78w.roa (hash: 2GDs3fd+T8RC8u9/aToLiIMcmZgcmmJt7vgNbq6rFsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:79:e6:e0:25:3d:05:36:87:bd:19:a5:c9:14:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Validity
Not Before: Nov 4 16:00:49 2025 GMT
Not After : Nov 5 16:00:49 2025 GMT
Subject: CN=a325da0947aea372f3800e82bab8f884cc6a9fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e8:79:d4:0a:5f:5c:97:5d:95:b0:a5:2a:a2:
4d:2a:b0:79:df:06:8e:05:c2:5b:67:a4:39:c6:e0:
92:b6:ed:e1:a6:5a:59:47:f6:4a:e1:0d:6f:26:7a:
d6:1a:59:06:93:db:c0:43:78:e8:aa:3b:b5:d1:80:
d8:48:f0:0d:3f:07:0f:d2:22:8a:9b:1c:5e:77:e7:
06:5e:da:7a:6c:04:3a:36:0e:ba:d4:36:44:aa:9d:
86:34:ed:35:a3:ae:1a:ef:6f:10:ab:88:91:74:e1:
60:22:66:1a:a0:2a:9e:c9:20:2a:d7:e3:43:d1:86:
ff:67:17:fd:ad:60:96:a0:17:75:fb:c3:9f:58:5f:
89:b9:4a:5a:46:e8:54:03:4f:78:f8:1f:f8:a0:27:
62:a0:00:23:29:ea:38:af:bf:77:26:db:5e:f8:60:
41:2a:ea:14:d9:79:c3:77:08:3a:42:21:08:08:f5:
91:94:47:f8:91:83:18:de:b0:31:bd:ca:e6:42:d0:
d4:19:1b:a4:dd:5f:b3:78:36:70:ee:ac:32:3d:0b:
0e:ec:fa:24:c0:c7:94:47:e2:d3:a7:d7:1d:68:fb:
82:a2:dc:0a:cf:e8:1c:76:c3:98:fd:41:3b:89:63:
ff:27:3e:c4:50:31:8f:d4:5b:3f:39:1d:fb:ec:0b:
e2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:25:DA:09:47:AE:A3:72:F3:80:0E:82:BA:B8:F8:84:CC:6A:9F:E6
X509v3 Authority Key Identifier:
keyid:A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:60:4b:5b:df:6d:e5:60:52:24:10:94:ec:b4:76:2c:aa:77:
a5:7b:f0:a3:00:f3:05:5e:07:98:05:e4:b2:b2:19:f3:f6:00:
28:51:78:d3:52:84:c0:dc:99:1f:b6:b4:aa:70:15:55:b4:2a:
4c:a2:33:87:d7:83:cd:e0:16:da:c6:2e:fe:2f:86:28:80:0b:
9c:05:4d:23:6c:ec:26:72:af:f9:70:75:52:46:8e:26:22:18:
0b:ee:c6:f9:c0:b6:a8:ec:61:af:b6:fd:32:e0:5e:db:a6:33:
c3:d0:00:4a:12:29:f1:c0:d6:da:16:9e:21:04:8d:bb:7a:dc:
bf:a6:80:ed:c1:23:aa:5f:1c:ea:c0:c4:60:26:89:5a:94:d6:
c4:e6:bf:d3:dc:44:66:20:15:a3:b2:a3:e9:65:43:24:0b:f2:
ea:96:21:9a:1a:46:bc:a5:c1:4d:66:34:30:46:9c:fc:68:72:
aa:ec:80:0a:88:30:2a:7b:35:1c:87:6c:1d:84:7a:78:20:2c:
2b:c6:9a:64:78:9e:f2:c5:10:7f:00:35:18:76:77:a1:73:ed:
98:9a:bf:f4:43:0c:7c:f7:61:b6:ce:ce:64:32:10:78:72:42:
1d:43:a1:b8:ce:6b:b8:74:fe:08:2f:d8:14:91:b2:8a:ac:af:
3e:d2:2d:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmXnm4CU9BTaHvRmlyRSqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MWEyYTJkYjRkNzQxOGU5YmY0ZjkzYzhjMDQ2YTAxNjE2
NjNjNjIwHhcNMjUxMTA0MTYwMDQ5WhcNMjUxMTA1MTYwMDQ5WjAzMTEwLwYDVQQD
EyhhMzI1ZGEwOTQ3YWVhMzcyZjM4MDBlODJiYWI4Zjg4NGNjNmE5ZmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+h51ApfXJddlbClKqJNKrB53waO
BcJbZ6Q5xuCStu3hplpZR/ZK4Q1vJnrWGlkGk9vAQ3joqju10YDYSPANPwcP0iKK
mxxed+cGXtp6bAQ6Ng661DZEqp2GNO01o64a728Qq4iRdOFgImYaoCqeySAq1+ND
0Yb/Zxf9rWCWoBd1+8OfWF+JuUpaRuhUA094+B/4oCdioAAjKeo4r793Jtte+GBB
KuoU2XnDdwg6QiEICPWRlEf4kYMY3rAxvcrmQtDUGRuk3V+zeDZw7qwyPQsO7Pok
wMeUR+LTp9cdaPuCotwKz+gcdsOY/UE7iWP/Jz7EUDGP1Fs/OR377AvikwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMl2glHrqNy84AOgrq4+ITMap/mMB8GA1UdIwQY
MBaAFKcaKi2010GOm/T5PIwEagFhZjxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHhvcUxiVFhRWTZiOVBrOGpBUnFBV0ZtUEdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9iN2FiZGYtM2JlMS00NjQyLTlmM2Ut
ZjFmMGI5NTk4ZjMyLzEvcHhvcUxiVFhRWTZiOVBrOGpBUnFBV0ZtUEdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9iN2FiZGYtM2JlMS00NjQyLTlmM2UtZjFmMGI5NTk4ZjMy
LzEvcHhvcUxiVFhRWTZiOVBrOGpBUnFBV0ZtUEdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYGBLW99t
5WBSJBCU7LR2LKp3pXvwowDzBV4HmAXksrIZ8/YAKFF401KEwNyZH7a0qnAVVbQq
TKIzh9eDzeAW2sYu/i+GKIALnAVNI2zsJnKv+XB1UkaOJiIYC+7G+cC2qOxhr7b9
MuBe26Yzw9AAShIp8cDW2haeIQSNu3rcv6aA7cEjql8c6sDEYCaJWpTWxOa/09xE
ZiAVo7Kj6WVDJAvy6pYhmhpGvKXBTWY0MEac/GhyquyACogwKns1HIdsHYR6eCAs
K8aaZHie8sUQfwA1GHZ3oXPtmJq/9EMMfPdhts7OZDIQeHJCHUOhuM5ruHT+CC/Y
FJGyiqyvPtItxA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:41:15 2025 by rpki-client