
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
File: PyixvqC1iXcj6nxfu918zSlSsFw.mft (raw, json)
Hash identifier: 8HWOB4bNqxKuO5sYNmEn4MgaJ7VtYtYwsW9aJnr1DpY=
Subject key identifier: A0:B9:8C:F4:DC:73:FF:C1:28:38:98:15:8C:A5:6B:DC:58:4F:94:2C
Authority key identifier: 3F:28:B1:BE:A0:B5:89:77:23:EA:7C:5F:BB:DD:7C:CD:29:52:B0:5C
Certificate issuer: /CN=3f28b1bea0b5897723ea7c5fbbdd7ccd2952b05c
Certificate serial: 0199FEEBD8A2FED53D321E1E146425052580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
Manifest number: 07A9
Signing time: Mon 20 Oct 2025 00:01:33 +0000
Manifest this update: Mon 20 Oct 2025 00:01:33 +0000
Manifest next update: Tue 21 Oct 2025 00:01:33 +0000
Files and hashes: 1: 1F_TkFNUb-s2_7y4TclItI2rQso.roa (hash: CLIjr10SKvI8VikQ8I8lxU5GeLh25bWphMtR56ykfWg=)
2: PyixvqC1iXcj6nxfu918zSlSsFw.crl (hash: gYpXQLFDtcdDCQ+uvRsdlWh0SePNq/7ON0yjI4JE0Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:d8:a2:fe:d5:3d:32:1e:1e:14:64:25:05:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f28b1bea0b5897723ea7c5fbbdd7ccd2952b05c
Validity
Not Before: Oct 20 00:01:33 2025 GMT
Not After : Oct 21 00:01:33 2025 GMT
Subject: CN=a0b98cf4dc73ffc1283898158ca56bdc584f942c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e3:34:15:fd:e5:58:2b:61:d3:fe:19:1b:a7:
b7:14:d5:4a:8b:98:2c:36:5b:01:0c:a4:b1:73:b7:
65:bf:a4:b0:9e:c1:de:17:62:e8:b9:51:e8:6a:e5:
e1:e0:35:15:46:ac:07:90:b1:31:a0:8b:af:ef:a1:
2d:45:47:7f:ed:04:48:04:f5:2d:0f:13:a0:71:3e:
a0:b0:56:b2:26:01:8e:bc:13:7c:6d:3e:ea:cb:ca:
3d:74:ef:57:39:69:f7:b5:87:1b:cb:74:73:2b:39:
12:06:12:d2:e7:c2:49:96:d2:f9:2e:1a:50:6d:17:
79:3d:c3:a3:52:d2:a8:66:f0:2b:8a:cb:c5:59:54:
a2:82:e4:9c:7d:a4:64:eb:82:c6:06:cf:b6:a4:cd:
f4:63:75:38:34:d0:bb:3d:ef:a9:f0:19:7a:75:58:
c8:de:88:a8:d9:3c:ae:69:af:d5:ba:5d:44:d0:ad:
3a:03:48:db:5b:40:0e:84:00:6c:fd:6f:e5:3c:0b:
d5:c2:2f:68:a6:69:99:6c:60:df:82:b0:6c:d1:84:
86:82:c5:0b:fc:04:d3:1c:ea:20:d5:dc:a9:ad:17:
da:5a:d2:69:5c:89:1f:ba:3f:e4:08:a6:d2:00:52:
4f:1a:76:f5:b9:74:4d:bf:22:6c:a4:c6:15:a5:dc:
41:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B9:8C:F4:DC:73:FF:C1:28:38:98:15:8C:A5:6B:DC:58:4F:94:2C
X509v3 Authority Key Identifier:
keyid:3F:28:B1:BE:A0:B5:89:77:23:EA:7C:5F:BB:DD:7C:CD:29:52:B0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:46:05:c3:ac:ac:d3:3f:0a:d8:59:39:bc:09:c9:d4:4a:2d:
35:b7:d6:94:e6:ab:ad:2e:11:97:fc:14:37:62:03:e5:d1:ad:
3d:1a:d3:97:70:84:ce:43:6d:2b:26:a9:15:04:01:56:b6:d2:
c7:2a:1f:db:c9:ad:55:a6:58:31:1d:67:36:44:31:d3:3e:0b:
dd:4f:8f:ea:ec:83:88:2d:b2:38:30:1b:6b:b1:73:5e:64:39:
19:65:1f:a3:ab:65:f9:b8:ac:a4:59:0f:ac:9c:30:cd:e2:97:
19:e9:d5:8a:c1:61:82:16:6b:d1:b9:ca:11:db:57:ef:2d:5e:
b4:0a:23:13:d8:21:54:1d:d2:d8:60:f1:17:47:ec:2d:10:2d:
8b:1c:f8:44:ef:4a:63:6a:ef:58:06:e4:64:bc:10:a2:d5:97:
c8:48:e9:10:2d:06:09:5d:65:f6:9e:6e:80:d8:9d:42:a2:03:
f5:71:25:b5:d7:b0:71:54:16:ac:f9:3e:d3:5c:22:f2:7e:39:
1e:18:73:49:91:26:0a:4a:d9:ef:08:a2:f0:ff:3a:41:63:04:
36:bd:c9:93:29:3e:e9:11:fa:d6:90:71:bb:cf:2e:fb:8c:07:
1a:54:a8:7a:b0:34:73:e3:75:a9:72:d4:6f:30:a0:4e:5a:af:
8d:fc:0b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:43:45 2025 by rpki-client