Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft
File: pxzA1YsWrbv3-lwv28Nln5xzx7o.mft (raw, json)
Hash identifier: ZKMkXMYFngHRrt5/UlfBvHm5MLmyS4gWTia93jWcLrA=
Subject key identifier: 0D:DE:20:B2:6B:3B:E0:14:60:FB:7D:5B:5F:BF:70:23:23:EC:2A:23
Authority key identifier: A7:1C:C0:D5:8B:16:AD:BB:F7:FA:5C:2F:DB:C3:65:9F:9C:73:C7:BA
Certificate issuer: /CN=a71cc0d58b16adbbf7fa5c2fdbc3659f9c73c7ba
Certificate serial: 0199FC8FB5F34425730DFEE1A4A1694DA901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft
Manifest number: 14B9
Signing time: Sun 19 Oct 2025 13:01:40 +0000
Manifest this update: Sun 19 Oct 2025 13:01:40 +0000
Manifest next update: Mon 20 Oct 2025 13:01:40 +0000
Files and hashes: 1: 3nrrtsZJ-IpATR6f6X0fXP8P3Ds.roa (hash: dHLYJp8vBdcpEI62KQkymjAsJXGywGpijB0UQKFJ6p4=)
2: b3rpvlrUc4F3iSwCht-ScFiNdQU.roa (hash: IxL38OMcTHb5h0kfUl/vgqGG9zstz9MS/9BQOovbMEE=)
3: o-IAHNtlfJTe0lrMjkAn3EfKWfQ.roa (hash: 4yZoP16QAdZ03Ygf8PchIKIjGuMurg8hghXjeARQmNw=)
4: pxzA1YsWrbv3-lwv28Nln5xzx7o.crl (hash: RavC1XdL7YjlMu1XN5LjBv+AmvdnTjc4Ayf5cFZA//o=)
5: z9pY0mNZw1275Un36HrGri4KO4o.roa (hash: YWMIyf15z9zL0EObbho/vFT6JF3XUpar4rPteqovYLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:b5:f3:44:25:73:0d:fe:e1:a4:a1:69:4d:a9:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71cc0d58b16adbbf7fa5c2fdbc3659f9c73c7ba
Validity
Not Before: Oct 19 13:01:40 2025 GMT
Not After : Oct 20 13:01:40 2025 GMT
Subject: CN=0dde20b26b3be01460fb7d5b5fbf702323ec2a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a7:89:f5:64:f6:b5:22:fe:74:7c:4f:6a:28:
a8:bd:66:1e:be:b1:95:c6:86:84:0f:57:22:19:e7:
f0:48:3f:3e:b5:25:03:6f:87:89:85:ea:d4:fc:03:
79:63:d6:15:dd:bd:25:fb:be:ad:5d:08:06:83:da:
77:d6:1d:50:fb:01:8a:5e:77:d3:48:3a:94:4e:82:
9d:b7:78:46:ea:9a:f3:96:f1:da:a9:cc:8c:df:9f:
d1:c9:5e:fb:8e:2f:d7:f2:bf:bd:9e:6c:0e:fa:d7:
a3:f9:63:35:87:90:d2:f7:cd:64:77:db:e8:aa:00:
72:bb:56:ee:3e:1f:fa:fc:1d:40:3d:c2:4a:b7:53:
52:51:51:be:ad:b8:1d:e9:b3:a5:33:5e:4f:f9:07:
87:e7:32:f0:d8:8c:c3:34:0d:15:fa:16:b5:52:c0:
7e:0f:55:ef:f8:7a:35:29:03:b1:27:a3:14:34:5f:
d6:c1:25:89:b0:df:0f:a3:8d:3d:f7:65:70:ef:65:
d8:82:f9:5a:fe:ee:9d:58:c8:d0:b0:b8:bd:ae:d7:
a8:7b:1e:7d:08:54:e4:95:8c:5e:63:52:9e:50:20:
78:c3:b2:99:07:94:97:a6:db:80:d9:a4:8d:29:65:
af:dc:9f:4e:a2:68:07:6c:82:dc:7b:ad:cf:49:f9:
20:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DE:20:B2:6B:3B:E0:14:60:FB:7D:5B:5F:BF:70:23:23:EC:2A:23
X509v3 Authority Key Identifier:
keyid:A7:1C:C0:D5:8B:16:AD:BB:F7:FA:5C:2F:DB:C3:65:9F:9C:73:C7:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:18:d6:03:fa:e2:16:6d:a8:ee:1d:25:09:86:55:61:39:de:
12:a1:66:6e:94:af:e1:0e:2d:ef:a0:cf:2b:be:d5:6d:96:16:
8b:14:e2:48:bd:c5:83:17:0d:1f:ed:80:f9:6d:e3:5c:c8:6e:
ea:b0:e4:2c:b3:47:ad:37:d7:57:21:ee:66:97:0f:77:d8:02:
0e:1f:95:af:2d:2c:d0:40:74:4d:b8:41:11:17:14:49:e0:41:
76:90:95:07:30:65:c0:e7:3b:3a:83:b2:54:e7:d9:b5:57:53:
30:9c:f3:e3:ab:d7:35:ec:76:93:1b:5b:01:71:b8:18:4a:ac:
f1:7d:59:65:a2:40:28:18:7f:bc:48:41:be:6b:a6:92:30:d5:
0e:c7:a9:84:5f:83:f1:d9:31:8a:a1:e1:8a:9f:d3:97:2b:7e:
ac:7e:40:8a:e2:86:2e:c1:15:25:c5:fc:cb:10:4d:0e:2d:76:
55:7d:dd:d2:16:a9:9a:ce:75:a9:67:32:0d:4f:59:99:6c:89:
e2:3b:a3:69:76:e0:ec:d2:59:ce:32:66:cb:45:8a:8c:f0:4f:
08:51:83:db:47:1b:b5:cf:9d:c3:f7:4d:26:43:3c:76:1f:b6:
02:27:6c:29:28:91:1d:03:c6:b4:fb:f5:51:d3:c8:92:df:d0:
b4:8e:6b:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j7XzRCVzDf7hpKFpTakBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MWNjMGQ1OGIxNmFkYmJmN2ZhNWMyZmRiYzM2NTlmOWM3
M2M3YmEwHhcNMjUxMDE5MTMwMTQwWhcNMjUxMDIwMTMwMTQwWjAzMTEwLwYDVQQD
EygwZGRlMjBiMjZiM2JlMDE0NjBmYjdkNWI1ZmJmNzAyMzIzZWMyYTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKeJ9WT2tSL+dHxPaiiovWYevrGV
xoaED1ciGefwSD8+tSUDb4eJherU/AN5Y9YV3b0l+76tXQgGg9p31h1Q+wGKXnfT
SDqUToKdt3hG6przlvHaqcyM35/RyV77ji/X8r+9nmwO+tej+WM1h5DS981kd9vo
qgByu1buPh/6/B1APcJKt1NSUVG+rbgd6bOlM15P+QeH5zLw2IzDNA0V+ha1UsB+
D1Xv+Ho1KQOxJ6MUNF/WwSWJsN8Po40992Vw72XYgvla/u6dWMjQsLi9rteoex59
CFTklYxeY1KeUCB4w7KZB5SXptuA2aSNKWWv3J9OomgHbILce63PSfkgcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3eILJrO+AUYPt9W1+/cCMj7CojMB8GA1UdIwQY
MBaAFKccwNWLFq279/pcL9vDZZ+cc8e6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHh6QTFZc1dyYnYzLWx3djI4TmxuNXh6eDdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS81ZjVhNjAtOTAyNi00YjY2LWJhYWEt
ZGU2NDBkMDEyMDY1LzEvcHh6QTFZc1dyYnYzLWx3djI4TmxuNXh6eDdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS81ZjVhNjAtOTAyNi00YjY2LWJhYWEtZGU2NDBkMDEyMDY1
LzEvcHh6QTFZc1dyYnYzLWx3djI4TmxuNXh6eDdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHxjWA/ri
Fm2o7h0lCYZVYTneEqFmbpSv4Q4t76DPK77VbZYWixTiSL3FgxcNH+2A+W3jXMhu
6rDkLLNHrTfXVyHuZpcPd9gCDh+Vry0s0EB0TbhBERcUSeBBdpCVBzBlwOc7OoOy
VOfZtVdTMJzz46vXNex2kxtbAXG4GEqs8X1ZZaJAKBh/vEhBvmumkjDVDsephF+D
8dkxiqHhip/Tlyt+rH5AiuKGLsEVJcX8yxBNDi12VX3d0hapms51qWcyDU9ZmWyJ
4jujaXbg7NJZzjJmy0WKjPBPCFGD20cbtc+dw/dNJkM8dh+2AidsKSiRHQPGtPv1
UdPIkt/QtI5rWg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:51 2025 by rpki-client