Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
File: PXD-HXX32nbS49w0T7HwsLad4AE.mft (raw, json)
Hash identifier: M/MWocjaU8K35Qsi4tOAlpJ9MHp26R3susu2qvucgP0=
Subject key identifier: 22:12:A3:85:78:2C:7A:B8:16:13:A5:2F:BC:71:F6:CF:60:AB:04:01
Authority key identifier: 3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
Certificate issuer: /CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Certificate serial: 019A4EF45F078C64AEC0F2C6ED6D52C474AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
Manifest number: 167B
Signing time: Tue 04 Nov 2025 13:00:29 +0000
Manifest this update: Tue 04 Nov 2025 13:00:29 +0000
Manifest next update: Wed 05 Nov 2025 13:00:29 +0000
Files and hashes: 1: PXD-HXX32nbS49w0T7HwsLad4AE.crl (hash: eedUY3LhO6VBroL5ViN0hNIfQEl34T6VUZrr2zPF6j4=)
2: qcINREJGIFWN3YXOgtNuqjCBfnY.roa (hash: 1gG5XU0DGFtKFXRvNOA96XCA/EPC9XB/rEykj9F+ocs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:5f:07:8c:64:ae:c0:f2:c6:ed:6d:52:c4:74:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Validity
Not Before: Nov 4 13:00:29 2025 GMT
Not After : Nov 5 13:00:29 2025 GMT
Subject: CN=2212a385782c7ab81613a52fbc71f6cf60ab0401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:37:46:8d:98:b1:92:f0:33:66:8c:a2:a9:92:
6f:9f:ad:5c:0a:64:3d:68:ab:e6:a1:d3:eb:b4:6c:
4c:b2:5e:3d:e4:e7:d4:f1:e8:b8:17:ff:43:bd:40:
50:23:a7:be:c3:a4:cc:39:b8:64:9b:76:a9:db:14:
a7:e2:ce:4d:ab:6b:0c:4f:d7:f6:19:a4:b9:e6:fc:
84:9b:26:7c:c6:47:fb:c8:8f:4b:47:41:0c:ab:19:
e5:4f:f2:69:4a:08:ee:57:8b:fa:bf:46:ca:a6:8b:
af:ce:14:24:29:e5:c4:1a:66:6a:89:25:73:da:b9:
6c:b0:44:c0:09:48:52:41:02:45:f0:9b:ba:b9:22:
cf:d9:04:00:67:73:c4:dd:fd:f4:cc:cf:d7:29:ad:
49:48:b8:01:05:6a:53:af:f1:db:a4:29:48:81:c6:
c1:53:0e:36:9a:c0:71:e0:7c:1c:a5:1b:e0:1a:bc:
e5:0f:8f:d2:20:6a:fe:7d:3b:17:1d:bc:c9:42:9d:
e1:35:c4:b8:ee:87:d5:b3:27:da:db:9d:ba:80:0b:
36:c7:bb:46:08:91:01:5b:02:99:d5:88:dc:3f:9b:
9f:1f:7c:3b:6c:1a:98:53:d4:d3:73:4d:18:dd:30:
88:32:49:6e:2d:f3:f3:4e:63:23:38:ee:9c:92:a0:
ff:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:12:A3:85:78:2C:7A:B8:16:13:A5:2F:BC:71:F6:CF:60:AB:04:01
X509v3 Authority Key Identifier:
keyid:3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:eb:32:3b:56:ef:16:e2:4a:09:2d:7f:16:4b:95:0a:58:95:
c1:41:4f:f2:f7:f1:1f:ed:7c:d7:7b:be:70:db:2c:d8:69:88:
a5:48:8f:4e:39:8e:81:30:20:f2:88:4e:b2:87:c6:01:1a:2f:
6e:5f:cb:44:d5:b1:a3:8e:5e:02:2c:04:67:47:56:24:28:4a:
e8:25:89:30:71:68:71:da:0f:99:c6:f2:60:6d:35:06:5f:4a:
92:8e:2a:f6:5c:b7:07:fc:23:41:3c:7f:35:d0:07:dd:cb:80:
24:ff:3b:42:42:4a:27:31:f6:7d:66:52:91:90:d8:ca:75:a9:
8f:d8:d3:b8:e6:19:ea:f7:30:db:d3:a0:7d:6f:3e:a4:bd:f3:
34:f8:57:db:9d:4d:e5:3a:eb:15:bd:7c:b4:9d:c1:1c:d9:22:
63:3c:3c:98:3a:87:b0:96:29:ce:46:f3:5f:24:d7:6f:38:29:
74:36:1b:95:5c:cd:1e:89:56:f6:22:4b:cf:d9:59:8d:63:ca:
83:82:ed:c4:ef:6f:bf:1a:20:72:7d:82:c0:29:89:68:3b:2e:
85:09:c1:58:4d:f3:51:ea:6c:bd:88:39:62:8c:fe:18:79:27:
5f:e1:a3:5d:7e:45:2f:28:a2:00:3b:c0:b8:f4:86:3e:7b:fb:
9a:31:37:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:27 2025 by rpki-client