Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
File: pqxtBp2PtzL0_pK04TzX3E05OkI.mft (raw, json)
Hash identifier: LjGYZwyP7Dsyq+EjHb6eigegPJOryQV5yRcP77nwIAI=
Subject key identifier: D3:91:45:7A:5D:E6:E0:42:A8:8C:60:95:67:0D:A6:57:92:C0:85:60
Authority key identifier: A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42
Certificate issuer: /CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42
Certificate serial: 0199FE470DE05D2BA42F78DEBCB03606B647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
Manifest number: 0C56
Signing time: Sun 19 Oct 2025 21:01:33 +0000
Manifest this update: Sun 19 Oct 2025 21:01:33 +0000
Manifest next update: Mon 20 Oct 2025 21:01:33 +0000
Files and hashes: 1: kORzGbUwfQz_reUfKxE-VKML1Ko.roa (hash: LJNSK27C7NQtNI1BCy3DsB/OzJxofkAzOY3Bw0ai+Lk=)
2: pqxtBp2PtzL0_pK04TzX3E05OkI.crl (hash: lhfX6J1auEejNPtWTkDhXXI/2A6Q2GGU2qcMh033ztw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:0d:e0:5d:2b:a4:2f:78:de:bc:b0:36:06:b6:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42
Validity
Not Before: Oct 19 21:01:33 2025 GMT
Not After : Oct 20 21:01:33 2025 GMT
Subject: CN=d391457a5de6e042a88c6095670da65792c08560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e4:57:7c:a5:24:ab:6e:53:f0:92:0e:98:bb:
f1:23:21:2b:75:f5:10:cf:3c:6e:83:c6:80:2c:d0:
3f:2a:29:57:cf:4b:e8:e2:79:e5:29:6e:f1:75:da:
d4:c8:f6:3f:eb:b9:ea:c4:b5:87:f0:3a:92:09:56:
1c:80:8b:24:90:49:17:ee:16:e8:2b:74:9e:a9:c2:
9b:11:e0:4f:0c:f5:63:35:a2:cc:40:0b:8e:9b:cd:
30:ed:48:74:f1:8f:fb:a5:e6:44:63:19:2f:01:7d:
5b:1f:ef:5f:42:61:4c:03:7f:08:d6:43:10:ff:3c:
12:e6:31:ed:98:81:f9:fa:e7:4c:75:dd:4d:bf:d8:
32:27:cb:52:a8:a3:7e:73:15:88:84:e2:6a:73:91:
fc:6d:6f:ef:ff:c2:d4:31:cf:6b:74:ff:81:3a:98:
13:4f:18:d8:88:42:a9:3e:0f:f5:2a:16:66:6b:a0:
40:e7:f6:8f:cb:4f:79:21:72:7a:4b:50:d0:f5:48:
72:61:0d:1c:96:db:c3:3f:46:24:e9:74:20:1b:97:
9c:30:79:75:16:eb:02:fd:21:3b:a2:09:69:94:b0:
c9:05:f9:5e:c5:9f:b0:4a:6c:28:df:2b:d9:95:31:
8e:93:23:0d:e3:33:16:cf:e1:e4:4f:34:03:f3:a7:
75:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:91:45:7A:5D:E6:E0:42:A8:8C:60:95:67:0D:A6:57:92:C0:85:60
X509v3 Authority Key Identifier:
keyid:A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c4:cf:d2:86:f0:37:0e:f4:29:6b:29:6a:f2:7e:3b:45:25:
29:17:3a:b9:db:0b:0b:bb:c8:24:9a:b7:24:5f:5e:51:3b:7e:
73:55:98:6f:03:66:ed:0e:df:df:14:1a:a3:e9:a8:ee:11:54:
18:f4:57:76:4e:1c:1b:bb:e7:51:de:6a:2d:9f:13:a2:af:4d:
d9:54:ab:55:16:8b:bf:cb:d8:dc:b2:6f:67:9a:f6:ac:95:bf:
62:b2:6f:76:9c:f7:9d:0d:d0:0f:83:7e:d6:43:c6:74:9d:35:
1d:95:e9:91:90:50:4c:a7:85:6e:ba:89:79:b1:b0:24:09:8d:
b4:53:ac:b6:35:54:9f:9f:3e:59:ee:a3:e6:7e:32:89:e7:ec:
ac:19:e1:cb:41:85:75:a4:ac:4b:a6:71:6b:fb:1b:da:7d:8f:
0c:aa:4f:6b:71:da:7b:6e:98:b0:eb:ab:c1:1b:fc:7e:fa:ef:
1e:e1:58:37:10:71:ab:02:56:d6:53:a9:ea:f0:cb:03:e1:b3:
42:bc:4a:5d:64:8e:d0:4f:ec:9c:9e:af:d9:07:fb:49:8a:fa:
87:32:f3:f6:fb:6a:de:fa:66:f8:b4:c1:98:90:f6:17:6c:82:
b8:0e:fe:73:51:6b:fe:35:a4:61:42:14:58:97:94:cc:ea:e6:
dc:7d:58:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:16:36 2025 by rpki-client