Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft
File: PxyTi7IGo4ltBkwIUvqYhf8s69k.mft (raw, json)
Hash identifier: rdGokBoEjU8IDFh3kBiNCyEKuFyMwKy6JnxI3iNgEwY=
Subject key identifier: C4:03:B6:35:5B:66:A2:07:C7:C3:7D:D5:24:38:28:8B:81:CF:3B:C2
Authority key identifier: 3F:1C:93:8B:B2:06:A3:89:6D:06:4C:08:52:FA:98:85:FF:2C:EB:D9
Certificate issuer: /CN=3f1c938bb206a3896d064c0852fa9885ff2cebd9
Certificate serial: 0199FFC76068674942AD8CA1EB68D991AE0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxyTi7IGo4ltBkwIUvqYhf8s69k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft
Manifest number: 0413
Signing time: Mon 20 Oct 2025 04:01:20 +0000
Manifest this update: Mon 20 Oct 2025 04:01:20 +0000
Manifest next update: Tue 21 Oct 2025 04:01:20 +0000
Files and hashes: 1: PxyTi7IGo4ltBkwIUvqYhf8s69k.crl (hash: Zc/Wieth0ai9GQD333ydjjBnVov1E1nl1jDuLx3GeRY=)
2: Qtry2kaoKZp9d0kAKEVlWC9a8yA.roa (hash: 4P/5LEPA+7GLBNpRQSC8l1dlaoBUTtizVxJtdSJCc5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxyTi7IGo4ltBkwIUvqYhf8s69k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:60:68:67:49:42:ad:8c:a1:eb:68:d9:91:ae:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f1c938bb206a3896d064c0852fa9885ff2cebd9
Validity
Not Before: Oct 20 04:01:20 2025 GMT
Not After : Oct 21 04:01:20 2025 GMT
Subject: CN=c403b6355b66a207c7c37dd52438288b81cf3bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:97:9e:c0:16:e8:67:08:0b:74:75:57:10:17:
34:3e:79:9a:22:14:0a:f9:97:2b:dd:99:b5:37:9c:
17:52:a6:f7:b4:39:92:e1:1f:ec:e7:27:86:da:24:
c6:31:6f:24:35:5d:93:af:dc:a6:3f:cf:96:fe:2d:
5a:3a:8c:49:8d:4a:44:0b:e4:ba:00:62:23:88:1c:
30:d8:25:75:5d:31:cf:eb:4b:6c:9c:67:40:d1:ef:
05:cc:d7:16:c5:40:5d:a8:97:85:ab:9f:10:f1:d8:
be:46:9a:14:e0:8d:0b:c1:b6:a9:9e:a0:10:35:5a:
dc:5a:a1:8a:23:0d:db:e5:49:e4:17:a3:89:e4:68:
a8:27:42:fe:f4:8d:70:84:c1:33:b1:93:a5:f4:1f:
1b:20:33:6d:2f:46:f9:c5:5d:ae:15:9c:3c:c7:b0:
85:d3:93:f6:cf:eb:a9:6a:a7:bc:a6:1f:c8:34:f5:
da:7d:b9:32:e5:f2:4e:1c:af:e9:18:a7:cc:01:12:
3d:ab:46:6a:01:4b:be:9f:d1:47:4e:e6:af:c1:bd:
f7:58:db:d7:41:59:e4:05:1c:0d:44:3c:d1:c6:6f:
d9:c5:a3:ce:4f:b9:64:4b:77:76:fe:f0:39:b8:41:
7f:4f:98:cd:44:1f:14:f1:0a:71:b6:87:f9:4a:24:
95:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:03:B6:35:5B:66:A2:07:C7:C3:7D:D5:24:38:28:8B:81:CF:3B:C2
X509v3 Authority Key Identifier:
keyid:3F:1C:93:8B:B2:06:A3:89:6D:06:4C:08:52:FA:98:85:FF:2C:EB:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxyTi7IGo4ltBkwIUvqYhf8s69k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:8a:a0:86:f0:58:21:c4:d1:6a:46:f8:5a:a8:80:f6:7a:c4:
cd:fe:48:62:16:61:c9:51:9f:fd:14:8d:c5:48:b3:9e:62:43:
71:6a:b0:3a:e0:91:cf:ef:c8:bb:4b:5f:e0:cb:74:43:73:b9:
01:07:03:37:b0:d3:78:af:bf:e5:e5:98:73:3e:cf:9e:e2:d9:
b2:7b:32:29:2a:86:3d:ca:e8:61:05:f9:f9:01:53:a8:f8:f2:
73:e2:3f:64:fe:c9:0b:51:98:45:c9:73:59:f6:19:8b:fd:4b:
92:5b:8d:8e:c7:54:5f:a6:9a:98:b7:4e:21:d6:68:23:c0:c3:
44:b0:04:7f:d1:5c:56:56:e4:48:2a:01:23:83:88:e4:1c:16:
e9:e0:ea:e7:96:09:b4:7d:e5:7c:4a:02:15:eb:fd:b1:67:f5:
f0:ca:62:84:e8:9c:1d:1c:10:ae:83:34:c6:5d:64:3d:76:fc:
38:0a:45:54:45:a5:26:4b:52:65:00:84:e9:29:9d:c7:36:c4:
56:11:10:c2:54:21:1a:d4:e2:49:b0:fc:80:dd:c1:ef:77:11:
ab:55:e2:09:61:07:c9:e1:cd:e1:6f:b6:c6:64:e9:72:74:71:
db:8d:7e:66:08:d4:e0:9f:ff:6d:3e:44:83:4e:41:a8:39:a2:
d8:95:3d:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/x2BoZ0lCrYyh62jZka4MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMWM5MzhiYjIwNmEzODk2ZDA2NGMwODUyZmE5ODg1ZmYy
Y2ViZDkwHhcNMjUxMDIwMDQwMTIwWhcNMjUxMDIxMDQwMTIwWjAzMTEwLwYDVQQD
EyhjNDAzYjYzNTViNjZhMjA3YzdjMzdkZDUyNDM4Mjg4YjgxY2YzYmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJeewBboZwgLdHVXEBc0PnmaIhQK
+Zcr3Zm1N5wXUqb3tDmS4R/s5yeG2iTGMW8kNV2Tr9ymP8+W/i1aOoxJjUpEC+S6
AGIjiBww2CV1XTHP60tsnGdA0e8FzNcWxUBdqJeFq58Q8di+RpoU4I0LwbapnqAQ
NVrcWqGKIw3b5UnkF6OJ5GioJ0L+9I1whMEzsZOl9B8bIDNtL0b5xV2uFZw8x7CF
05P2z+upaqe8ph/INPXafbky5fJOHK/pGKfMARI9q0ZqAUu+n9FHTuavwb33WNvX
QVnkBRwNRDzRxm/ZxaPOT7lkS3d2/vA5uEF/T5jNRB8U8Qpxtof5SiSV6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQDtjVbZqIHx8N91SQ4KIuBzzvCMB8GA1UdIwQY
MBaAFD8ck4uyBqOJbQZMCFL6mIX/LOvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHh5VGk3SUdvNGx0Qmt3SVV2cVloZjhzNjlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zYjI0OWMtYjQwZS00ZmI5LThmZjQt
ZTA1MjYwMzNhNDg0LzEvUHh5VGk3SUdvNGx0Qmt3SVV2cVloZjhzNjlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8zYjI0OWMtYjQwZS00ZmI5LThmZjQtZTA1MjYwMzNhNDg0
LzEvUHh5VGk3SUdvNGx0Qmt3SVV2cVloZjhzNjlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMIqghvBY
IcTRakb4WqiA9nrEzf5IYhZhyVGf/RSNxUiznmJDcWqwOuCRz+/Iu0tf4Mt0Q3O5
AQcDN7DTeK+/5eWYcz7PnuLZsnsyKSqGPcroYQX5+QFTqPjyc+I/ZP7JC1GYRclz
WfYZi/1LkluNjsdUX6aamLdOIdZoI8DDRLAEf9FcVlbkSCoBI4OI5BwW6eDq55YJ
tH3lfEoCFev9sWf18MpihOicHRwQroM0xl1kPXb8OApFVEWlJktSZQCE6SmdxzbE
VhEQwlQhGtTiSbD8gN3B73cRq1XiCWEHyeHN4W+2xmTpcnRx241+ZgjU4J//bT5E
g05BqDmi2JU9UQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:08:56 2025 by rpki-client