Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
File: PXud_6rjPsLPGbWtTknB6esdnWQ.mft (raw, json)
Hash identifier: dJ4TeOH30drZMQ12Bfgt/AvNYIMNFN/eEmmqRR9y5Z8=
Subject key identifier: 3B:5F:D7:30:72:6E:EA:C4:B4:65:83:2C:77:67:4F:9D:CE:0B:5B:7C
Authority key identifier: 3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
Certificate issuer: /CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Certificate serial: 019A503E415DA4F3CC7E2B8A7AF908AB39A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
Manifest number: 0357
Signing time: Tue 04 Nov 2025 19:00:48 +0000
Manifest this update: Tue 04 Nov 2025 19:00:48 +0000
Manifest next update: Wed 05 Nov 2025 19:00:48 +0000
Files and hashes: 1: 7MAR8ldskj16F5kzBhniowMVmU4.roa (hash: mAbacv2iYcdMB2GMEDPPh1FDDClOu0PIdLu6x7Tl3MY=)
2: Cu_tMI7PQ6xbwC801ON2UpFh-7U.roa (hash: GIgBSdweK8qeTSk0k9hGLBlRLULkx2CFmhF3qwcGbl0=)
3: FmkKEcHCN4SKkKjvm4wbiP2rqGc.roa (hash: BxDXl5Xd1DRGy1evvpUKKCLNhtBpKlkHYmd1XWHZ6n8=)
4: N8UiZC6ekKP1es4B_Bk3APFkdxc.roa (hash: tgQGNuurT5CnHai6yz0N+Wra1nyaeCzvPS5Kjtxbyvk=)
5: PXud_6rjPsLPGbWtTknB6esdnWQ.crl (hash: kL/e7PlJBihTz69PTNVmdq3k1GzObUPNfetjf/cc26o=)
6: k4yKqIR7cQItxrDu_gDWC-myYX0.roa (hash: xhdvsy13/3L8cbu2Dvi5ab7FoTe57YZRZZmouEau4sA=)
7: lThuEEXjbOk9kIBiQn4XNJSri60.roa (hash: saUcIO3Pzwx9suP3W1g5k4dgT0dO1lpuD0PTK3qh6JE=)
8: pWtbtMqs_9aJQ0KT8UAl4XExZLI.roa (hash: WNvv2z5ka9H0FOvY11NFaV4Er6oN7s2ejAsfJawgadw=)
9: rBORiVnjaTLo34wXgk56Wdk6L40.roa (hash: ilIiHrBuCknqXlqYLmYdfV8RuudQEzNokXG+7gARkUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:41:5d:a4:f3:cc:7e:2b:8a:7a:f9:08:ab:39:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Validity
Not Before: Nov 4 19:00:48 2025 GMT
Not After : Nov 5 19:00:48 2025 GMT
Subject: CN=3b5fd730726eeac4b465832c77674f9dce0b5b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:65:cb:70:a5:49:17:6a:e0:f1:e7:47:a5:37:
f4:fe:d5:a2:1c:44:a0:40:8c:1f:9f:e1:72:b6:5a:
52:09:74:55:6c:12:d8:f5:fe:fc:6d:a6:d0:b4:bf:
8b:03:ef:c0:4a:54:d1:c8:f9:64:c1:0b:aa:ad:9b:
30:ad:11:00:5d:b4:44:ae:45:7e:e0:cd:6e:50:aa:
a2:c3:aa:a1:2d:20:7d:ac:51:42:d7:64:01:b9:d2:
fc:c7:cd:f2:19:df:0e:0f:5c:75:0b:7d:3e:05:cc:
b7:29:27:dd:9a:fd:79:ef:b1:71:d3:db:45:3f:ff:
35:a0:45:1a:89:ff:a2:0c:0c:1a:31:e6:fc:81:9e:
e5:7a:8e:53:4a:3c:fe:33:e8:36:08:28:7d:8e:af:
4c:d8:b7:ee:e4:03:b7:e1:cb:95:e5:2f:6a:3b:3e:
c2:c8:a7:fa:33:4e:52:e2:df:ec:9b:3a:e3:b9:ea:
9f:b5:c2:5c:22:49:01:f4:cf:c8:d3:8d:f5:ce:0e:
6b:30:06:c4:5f:b8:e6:2a:5e:f0:2b:b8:66:67:00:
4f:63:f1:85:ce:ef:69:c0:5f:21:46:de:6a:4e:b6:
4c:7b:7b:46:83:4d:36:61:b9:14:a7:22:8e:20:3a:
5f:28:79:22:e5:3f:55:c8:f9:22:74:24:32:fc:cd:
58:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5F:D7:30:72:6E:EA:C4:B4:65:83:2C:77:67:4F:9D:CE:0B:5B:7C
X509v3 Authority Key Identifier:
keyid:3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:54:8b:bd:2f:49:7f:a8:05:ba:a8:19:cb:de:ff:59:88:f2:
b7:20:fc:ba:b9:9c:5f:dd:c6:55:2c:fe:74:6f:29:6a:1f:c4:
53:ba:f4:f9:cd:26:c7:e5:af:cb:b8:52:8f:82:f9:75:fe:8a:
56:05:3b:97:68:b8:ee:26:7d:af:60:71:34:9c:c1:0b:04:56:
f2:04:d8:7f:3f:a8:81:b2:7a:85:94:fe:71:e0:53:df:bd:36:
46:3a:2a:8e:f8:32:50:4d:e8:ad:82:64:d9:60:7e:fc:c2:f2:
92:1c:2b:a6:94:4d:e3:92:7c:67:70:9f:86:50:07:e0:55:bd:
be:3b:1e:7b:e1:56:6f:a7:29:23:c5:30:bd:35:92:e0:3e:79:
56:aa:51:99:fc:e1:4f:2c:cc:04:a8:61:db:36:24:f0:83:a3:
04:5c:3b:89:54:a8:ea:91:d3:33:a6:57:0a:69:61:99:29:1d:
12:da:27:2f:6d:76:e2:1c:0f:ef:57:f6:d5:a0:01:42:20:de:
cb:36:7e:10:d7:11:6f:06:86:b6:5c:dd:ab:61:03:28:9c:8c:
46:d4:a0:8b:89:31:9b:f9:d7:5a:88:92:4a:24:1d:43:fe:9f:
2b:7e:01:75:83:34:d7:79:3f:f9:4a:c0:a1:58:b1:4b:52:ad:
a2:9b:e4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:45 2025 by rpki-client