Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
File: PxckOVmdfaUleXiZvyE7jmNVSRQ.mft (raw, json)
Hash identifier: BZuohIoYuAZqtrbjS/RZuiM6+IQmtl0+m5fV5edD8Vc=
Subject key identifier: 70:08:B9:31:D1:DE:76:6D:BF:32:5B:C4:70:27:F9:C3:29:27:60:52
Authority key identifier: 3F:17:24:39:59:9D:7D:A5:25:79:78:99:BF:21:3B:8E:63:55:49:14
Certificate issuer: /CN=3f172439599d7da525797899bf213b8e63554914
Certificate serial: 0199FB7C6DCDD4731079FB96ED3784ECAFE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
Manifest number: 1673
Signing time: Sun 19 Oct 2025 08:00:59 +0000
Manifest this update: Sun 19 Oct 2025 08:00:59 +0000
Manifest next update: Mon 20 Oct 2025 08:00:59 +0000
Files and hashes: 1: ET0yOb6N2KPn9sEOeciwveLzfFQ.roa (hash: 5UaUVXzPjnKQ9N0meCwxNszuKgkyrbDITbh3/+eJ6rg=)
2: PxckOVmdfaUleXiZvyE7jmNVSRQ.crl (hash: UJCHqAR92IZJLyDxh0Sy/d+dxrioDqjmYSMcnUL6Hsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:6d:cd:d4:73:10:79:fb:96:ed:37:84:ec:af:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f172439599d7da525797899bf213b8e63554914
Validity
Not Before: Oct 19 08:00:59 2025 GMT
Not After : Oct 20 08:00:59 2025 GMT
Subject: CN=7008b931d1de766dbf325bc47027f9c329276052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:0a:47:e0:c0:2e:3e:dc:bf:bb:c0:d7:ca:d2:
5a:2b:19:07:c7:85:16:99:6d:18:80:56:68:f3:cb:
60:95:9c:0d:f0:19:02:54:e9:53:d7:27:c9:98:5b:
66:b7:a2:cc:39:0a:0c:ba:27:c4:70:f4:0d:65:a4:
2c:ca:39:9c:16:fb:3f:19:79:d7:d5:ca:1d:22:35:
02:ac:ca:71:b4:38:83:b6:82:aa:13:16:2c:a3:22:
2b:ee:d6:b9:aa:39:76:a1:f4:34:22:41:0c:ac:03:
40:7f:fd:7e:de:c5:e0:eb:1d:de:fb:09:90:af:2a:
2b:2b:f7:91:89:36:4c:b0:e3:ac:87:c3:8e:2e:a7:
3a:ef:ba:17:d8:96:44:bd:e6:12:76:09:be:32:39:
af:fc:31:f6:a2:6b:38:e1:01:d4:cc:d6:84:14:2b:
84:4d:fc:76:b9:80:b7:4d:38:1a:0a:ae:2f:ff:7f:
5e:d5:c0:3f:ce:97:cc:93:ba:4c:55:b7:75:64:ef:
4a:87:43:e3:fb:51:b6:86:fe:56:a1:aa:c2:b0:cb:
a5:24:29:3d:c9:d3:e5:b6:f7:99:bf:2c:3a:9a:65:
1f:b0:0f:16:68:13:01:0e:c7:f6:45:27:fd:30:8b:
6d:13:79:fa:5b:51:56:1d:1a:98:70:de:dc:66:12:
2f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:08:B9:31:D1:DE:76:6D:BF:32:5B:C4:70:27:F9:C3:29:27:60:52
X509v3 Authority Key Identifier:
keyid:3F:17:24:39:59:9D:7D:A5:25:79:78:99:BF:21:3B:8E:63:55:49:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d2:18:0b:c0:82:81:70:d3:b1:3e:18:c7:74:30:2b:85:90:
5d:fb:20:5d:f6:16:64:dd:1d:92:45:c0:60:c3:44:c1:df:d3:
33:86:eb:ab:5b:36:bd:0f:4e:07:4d:e7:aa:4e:cb:16:1e:8e:
41:fe:b4:76:d7:87:b6:8d:29:9b:57:10:86:75:b8:08:f5:f9:
f7:ae:cc:00:e9:80:11:84:69:77:dd:de:c5:bb:6f:6b:42:ff:
a3:b6:e8:e1:16:24:07:dd:14:2a:1b:0e:0a:81:b5:cc:b1:a3:
66:e7:6c:d4:e5:66:b9:4c:e8:6c:17:d7:9f:17:84:5f:71:e2:
5b:d3:7c:ce:56:91:1d:6b:e2:c7:a3:b5:a8:63:5c:be:0e:c0:
7c:ca:fc:1c:02:f7:1c:20:dc:00:1f:69:ab:f8:c5:1a:9d:42:
2b:ce:5c:f5:56:5c:8c:11:f4:45:d1:8d:d4:d6:de:33:26:b8:
0c:ba:88:ae:3d:48:e5:6c:b0:bf:d9:aa:25:86:d5:da:57:0e:
82:51:e5:6f:c8:d0:59:63:07:b8:9f:2a:ba:53:4d:36:ba:5c:
62:ff:8d:31:ee:fb:34:fe:05:6d:61:9e:dd:ce:8f:83:e0:cf:
89:66:e0:a5:26:33:ca:b2:41:88:f7:b5:94:83:0e:ac:82:5a:
33:04:bc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:43 2025 by rpki-client