Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft
File: pxn9xw058Tw3hNMlrith8PPJn0g.mft (raw, json)
Hash identifier: VwI3B2LNrisyVn/iTwgIWtIj4IQbDwRyoB+4L3Ojzys=
Subject key identifier: D9:16:20:2F:BD:08:AA:FB:6D:5F:F7:C0:C7:BB:47:EE:3C:50:9A:A4
Authority key identifier: A7:19:FD:C7:0D:39:F1:3C:37:84:D3:25:AE:2B:61:F0:F3:C9:9F:48
Certificate issuer: /CN=a719fdc70d39f13c3784d325ae2b61f0f3c99f48
Certificate serial: 0199FCC66868E9919EC66FFC0A76C97A8E21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 14:01:25 +0000
Manifest this update: Sun 19 Oct 2025 14:01:25 +0000
Manifest next update: Mon 20 Oct 2025 14:01:25 +0000
Files and hashes: 1: ldBjKa6qQD6NaVa0xAumkdWo3gI.roa (hash: 2YMpg6Ripbk87w4Re6g4mOYhXFU2yNWWD+lkjoRwRkM=)
2: pxn9xw058Tw3hNMlrith8PPJn0g.crl (hash: tglNJcrEVk6vYO2XIS/5pkHnroYK6IUJaLn5YeZ4Nac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:68:68:e9:91:9e:c6:6f:fc:0a:76:c9:7a:8e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a719fdc70d39f13c3784d325ae2b61f0f3c99f48
Validity
Not Before: Oct 19 14:01:25 2025 GMT
Not After : Oct 20 14:01:25 2025 GMT
Subject: CN=d916202fbd08aafb6d5ff7c0c7bb47ee3c509aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:46:28:be:d0:63:a7:ee:b3:10:c5:15:0f:16:
65:d3:33:ae:aa:ec:33:c6:b1:06:eb:64:b6:4f:13:
ac:2e:04:50:e1:63:fb:ab:41:f7:fe:c2:52:4f:3b:
55:c8:67:c3:fb:5d:3e:52:14:88:af:73:36:1c:41:
3a:9d:8c:b0:be:29:f8:81:de:84:85:f4:db:a6:78:
e1:2c:5e:ed:fc:ac:6f:7d:2d:fb:7d:f1:ce:67:98:
35:9a:91:3a:83:39:ab:4e:97:c3:c7:26:56:bb:1e:
02:d5:9d:3b:ad:07:b1:27:9b:83:ac:6b:ea:0a:5c:
73:4d:c0:f5:a5:41:e1:54:aa:69:82:66:32:5d:e8:
7f:1f:0a:04:67:f8:80:ee:46:78:bd:1f:6b:a6:99:
95:ce:d2:d8:dd:b4:f4:90:ce:9d:67:7a:d7:c5:9e:
d8:94:92:a4:e0:80:1d:ba:a2:91:20:18:7e:fc:fb:
0b:07:3a:73:37:fd:ff:9d:7e:93:2a:8f:6c:b6:a6:
43:c6:2e:03:ca:fd:ce:a6:89:63:c9:12:0a:30:fb:
b3:c3:07:c5:90:34:d7:ce:17:48:97:5c:4d:15:b3:
6c:ab:fa:61:35:d4:da:72:5e:eb:46:a0:86:20:1e:
81:19:1e:6c:00:19:d4:b7:81:f5:6e:74:50:f2:40:
69:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:16:20:2F:BD:08:AA:FB:6D:5F:F7:C0:C7:BB:47:EE:3C:50:9A:A4
X509v3 Authority Key Identifier:
keyid:A7:19:FD:C7:0D:39:F1:3C:37:84:D3:25:AE:2B:61:F0:F3:C9:9F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b2:30:dc:87:7b:78:e8:19:71:81:d7:01:7d:cf:83:7e:de:
b2:23:45:5c:00:67:71:a7:a4:95:f6:b4:12:a5:b4:92:d9:d3:
36:21:d3:4a:9f:ab:ba:cc:d4:17:90:e9:a4:0e:db:0f:fd:e9:
9e:f3:9e:66:a6:32:ed:8f:1b:85:fa:a6:eb:55:5a:7f:d6:fd:
3d:69:47:65:87:90:55:4b:75:05:1a:87:84:75:a3:21:39:f8:
08:25:4c:0f:56:e9:be:8d:68:d9:99:fb:44:d1:e3:3f:ae:24:
db:e4:fa:32:f0:b8:be:d0:a3:8f:3a:8a:64:11:81:d8:10:3c:
ac:68:10:91:11:a4:3c:32:bc:d8:64:a1:69:a7:0a:55:cf:2e:
5c:31:f1:d9:f0:7e:5c:2d:d5:e0:c0:c6:01:c1:66:99:f1:c5:
ee:72:19:dc:7d:d6:fd:81:37:9f:f1:cd:62:61:e9:42:85:23:
e7:e9:ec:dd:63:9e:22:72:8f:cc:5e:ba:6e:46:1f:90:9b:bf:
ba:ae:85:8a:80:9c:c8:59:f9:9c:5f:48:55:ad:0b:dc:ca:5b:
03:9b:6b:6b:33:26:e0:41:e6:24:d5:2e:5d:10:e2:17:7f:6c:
ce:e2:43:02:5a:e9:43:7a:e0:a3:c2:22:de:09:bc:98:02:cc:
37:b6:78:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:25 2025 by rpki-client