Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.mft
File: PtW83-CttrlBURh__axK6PMRpvE.mft (raw, json)
Hash identifier: 0T7iq3HbQLqbZOM4IrU7HwBgzvgf0tCiV1gP5HkHVgg=
Subject key identifier: 00:5F:E3:8A:77:33:D9:46:41:D5:A9:22:3D:60:27:50:63:6B:D8:C9
Authority key identifier: 3E:D5:BC:DF:E0:AD:B6:B9:41:51:18:7F:FD:AC:4A:E8:F3:11:A6:F1
Certificate issuer: /CN=3ed5bcdfe0adb6b94151187ffdac4ae8f311a6f1
Certificate serial: 019A503DCB98929097078CD2CB40C18DDD75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtW83-CttrlBURh__axK6PMRpvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.mft
Manifest number: 16A2
Signing time: Tue 04 Nov 2025 19:00:18 +0000
Manifest this update: Tue 04 Nov 2025 19:00:18 +0000
Manifest next update: Wed 05 Nov 2025 19:00:18 +0000
Files and hashes: 1: Hg8kBZfVcKLuM_k8GGnGJeVAvdc.roa (hash: ziqa3QYWLFKgPT8ZERs4WMz6NaXL6vju070csDXblpM=)
2: PtW83-CttrlBURh__axK6PMRpvE.crl (hash: mEiUPYI4725qEFWO4jdaXEb8ENHefcpqb+5TUKBPrFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PtW83-CttrlBURh__axK6PMRpvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:cb:98:92:90:97:07:8c:d2:cb:40:c1:8d:dd:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ed5bcdfe0adb6b94151187ffdac4ae8f311a6f1
Validity
Not Before: Nov 4 19:00:18 2025 GMT
Not After : Nov 5 19:00:18 2025 GMT
Subject: CN=005fe38a7733d94641d5a9223d602750636bd8c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:33:0b:6e:79:7f:98:5d:77:4e:2e:e5:2e:45:
91:7f:00:75:98:a9:19:54:58:18:c3:62:76:12:58:
1f:7b:81:41:f0:3d:a2:85:52:f3:5b:29:a8:cc:bf:
c1:2d:3f:47:1f:8b:02:8f:e3:bc:ab:03:13:8a:1d:
82:d3:be:97:00:49:d7:9d:ff:17:63:fe:79:d9:63:
9d:d5:c2:ef:7a:c2:eb:9f:23:18:37:12:94:fe:2e:
88:f1:67:93:23:f8:5b:f0:39:58:38:2a:04:19:f5:
04:72:77:d1:96:a6:fb:77:9f:ae:1e:26:70:f0:61:
7a:af:d2:9f:fb:b9:b0:97:6d:19:72:ed:aa:35:fa:
22:50:66:8a:43:8b:7d:61:8b:fc:2d:0d:d4:5a:71:
e4:64:35:cc:aa:fd:c1:77:2d:b1:fb:9a:d2:b0:5e:
e6:41:da:3f:b3:98:00:d5:34:67:95:b2:15:91:1d:
3d:31:56:2a:82:29:80:79:6f:63:ab:6f:5d:5c:ed:
06:46:32:d3:e7:65:96:85:78:70:ca:d0:be:57:0a:
a9:31:99:7d:c5:7e:fc:6e:35:72:61:57:58:b8:a2:
f0:29:ed:66:2a:74:2e:53:28:6e:5f:5e:08:53:bb:
55:18:de:07:b4:05:11:8c:69:5c:dd:e2:0f:18:0e:
76:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5F:E3:8A:77:33:D9:46:41:D5:A9:22:3D:60:27:50:63:6B:D8:C9
X509v3 Authority Key Identifier:
keyid:3E:D5:BC:DF:E0:AD:B6:B9:41:51:18:7F:FD:AC:4A:E8:F3:11:A6:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtW83-CttrlBURh__axK6PMRpvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:31:89:70:0a:cd:84:f3:d1:dd:e0:79:f9:6c:70:5a:1a:59:
97:ad:cc:c9:4f:ef:da:01:47:80:e7:57:5d:ae:61:b9:ad:ef:
89:d2:be:c7:d2:67:78:51:06:8f:3a:8e:49:65:44:df:9c:db:
d5:e5:62:fb:a7:e6:34:55:a6:fb:93:22:6c:f8:71:1b:66:b9:
51:de:b7:dd:12:16:7f:0a:e9:4d:ae:f5:20:32:08:ce:27:97:
7f:a1:46:f8:4b:bc:0c:6b:a8:c2:d9:97:1c:f3:b7:6b:71:fd:
5b:09:ce:da:23:f0:09:b5:be:66:af:b7:5d:e4:a7:ce:b6:df:
7f:00:63:af:ae:44:06:58:7a:bd:18:74:17:c7:d1:6d:86:4c:
85:1c:62:f3:77:9e:63:59:30:b1:bf:50:b6:7f:24:79:22:c9:
3d:c1:19:42:32:bf:dc:f0:ae:bf:3f:c1:f6:36:a0:c2:ac:47:
70:3c:39:35:e7:fb:a2:eb:16:9b:4e:5d:cf:28:e8:62:16:17:
1b:ec:c0:e2:b8:06:98:2f:36:20:67:3e:cb:c8:c7:c7:4e:e8:
23:e0:a8:b5:df:e1:d1:a9:53:11:22:db:32:e3:f4:7b:41:02:
5c:c4:a5:4e:ab:47:e2:8b:1c:7b:3d:d8:77:01:5c:ce:70:65:
bc:32:c8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:54:00 2025 by rpki-client