Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
File: PxnYdtwluWxdxZi-Lb9uywZal18.mft (raw, json)
Hash identifier: f+DtIXMlBjb+GXPQa0i3Cthi/4rn0gWZ63ZvHm0BF40=
Subject key identifier: 1C:71:1C:CC:93:B3:34:E5:FF:B9:7D:41:91:A0:AB:00:EF:C3:54:7E
Authority key identifier: 3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
Certificate issuer: /CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Certificate serial: 0199FE100DA5C16D35FD6B9E851E38850389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
Manifest number: 0510
Signing time: Sun 19 Oct 2025 20:01:28 +0000
Manifest this update: Sun 19 Oct 2025 20:01:28 +0000
Manifest next update: Mon 20 Oct 2025 20:01:28 +0000
Files and hashes: 1: PxnYdtwluWxdxZi-Lb9uywZal18.crl (hash: ot/SuMdT9kvDivlNJNcxTWnZOVBNVa1GhRG4KZXdlrI=)
2: x8ghvFiQy8y7__Pm7K2GUSehU3A.roa (hash: 97TGydFeZ3RUDp9TsIz5UQ8MNV819kJP2yTvYQ+TbKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:0d:a5:c1:6d:35:fd:6b:9e:85:1e:38:85:03:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Validity
Not Before: Oct 19 20:01:28 2025 GMT
Not After : Oct 20 20:01:28 2025 GMT
Subject: CN=1c711ccc93b334e5ffb97d4191a0ab00efc3547e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1b:b3:5f:0f:fa:a6:3a:0e:5f:15:f9:86:21:
c8:af:a6:cc:4d:7d:89:4a:65:dc:76:fa:7a:37:76:
de:a5:b2:2c:0f:2c:ed:f1:e7:02:94:eb:0a:29:db:
dd:10:7b:95:bc:d8:7a:4e:23:73:a1:7f:ba:0a:8c:
be:76:8d:e5:4a:68:c4:e5:b8:99:47:0e:83:38:66:
40:1f:06:87:22:2b:62:17:ab:7d:2f:97:3c:1b:a6:
75:43:b8:0b:1d:98:61:1e:d9:85:1e:1d:1d:ae:63:
55:60:89:36:1d:3c:8f:87:50:54:4a:f5:00:db:41:
63:4d:ad:59:b5:96:ed:72:85:06:dd:ba:d5:f3:6d:
22:96:f2:38:29:6b:80:b1:0c:bc:77:d8:ca:ef:95:
06:70:bd:1b:16:1f:77:b9:1b:76:ea:40:89:67:69:
0f:9c:0a:56:7f:a4:26:50:6e:d8:00:ac:2d:48:65:
3c:8d:2a:46:60:f5:1d:8c:56:c7:e1:f2:25:38:50:
92:8d:bb:1f:00:81:cf:80:1a:ff:d8:a6:f4:fd:7d:
04:06:e7:c5:04:ac:56:f0:fc:80:54:48:06:66:90:
15:ae:71:14:45:ff:ce:0e:e9:bc:21:d0:23:24:97:
ae:c4:be:7c:1b:91:ad:36:82:bc:10:ea:3a:44:78:
8d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:71:1C:CC:93:B3:34:E5:FF:B9:7D:41:91:A0:AB:00:EF:C3:54:7E
X509v3 Authority Key Identifier:
keyid:3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:25:14:43:ef:a0:21:01:6f:e5:db:a8:f0:8b:69:13:aa:4f:
5d:a0:13:c2:c3:ea:f4:35:f1:0b:c7:87:a7:24:13:3f:0f:e3:
bc:f3:c0:58:c7:4a:64:bd:9d:66:bd:64:da:a0:ac:7a:8e:48:
bd:9b:e0:89:45:8e:43:6a:88:34:dd:cf:60:8b:6f:07:2a:d6:
29:fd:42:cf:b7:75:ff:66:b9:ae:45:fa:a4:49:07:57:55:81:
de:6d:de:dd:ef:25:f1:34:03:d2:91:90:ca:eb:51:ab:fc:cb:
bd:3b:cf:54:fd:26:6f:00:ec:53:90:e6:07:8e:b2:2f:b0:0e:
d9:78:69:27:43:16:a4:16:27:69:30:f7:44:b2:05:54:fd:e2:
27:dd:3e:42:b8:3b:e0:c1:a8:e9:8d:46:11:ba:b9:0f:c8:f5:
bd:5a:5d:60:da:d7:14:c6:fe:7f:56:1c:4f:05:9e:32:06:5d:
00:aa:ce:cc:43:fd:2e:cd:6b:b0:78:83:1c:41:3e:b5:dc:00:
79:bb:a1:38:12:af:22:2d:41:47:50:aa:39:2d:ae:6d:f6:12:
cd:c8:83:15:4d:39:ff:82:f6:48:e3:93:80:54:7f:44:f7:60:
0e:c4:c7:04:7a:e9:d0:96:27:7e:46:9c:ea:61:69:2c:4d:d1:
d2:f4:98:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+EA2lwW01/WuehR44hQOJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMTlkODc2ZGMyNWI5NmM1ZGM1OThiZTJkYmY2ZWNiMDY1
YTk3NWYwHhcNMjUxMDE5MjAwMTI4WhcNMjUxMDIwMjAwMTI4WjAzMTEwLwYDVQQD
EygxYzcxMWNjYzkzYjMzNGU1ZmZiOTdkNDE5MWEwYWIwMGVmYzM1NDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRuzXw/6pjoOXxX5hiHIr6bMTX2J
SmXcdvp6N3bepbIsDyzt8ecClOsKKdvdEHuVvNh6TiNzoX+6Coy+do3lSmjE5biZ
Rw6DOGZAHwaHIitiF6t9L5c8G6Z1Q7gLHZhhHtmFHh0drmNVYIk2HTyPh1BUSvUA
20FjTa1ZtZbtcoUG3brV820ilvI4KWuAsQy8d9jK75UGcL0bFh93uRt26kCJZ2kP
nApWf6QmUG7YAKwtSGU8jSpGYPUdjFbH4fIlOFCSjbsfAIHPgBr/2Kb0/X0EBufF
BKxW8PyAVEgGZpAVrnEURf/ODum8IdAjJJeuxL58G5GtNoK8EOo6RHiNdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxxHMyTszTl/7l9QZGgqwDvw1R+MB8GA1UdIwQY
MBaAFD8Z2HbcJblsXcWYvi2/bssGWpdfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHhuWWR0d2x1V3hkeFppLUxiOXV5d1phbDE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yMjY0NTUtMTdhMC00NjNjLTg5NTkt
MGZiMTM5MWI1NGViLzEvUHhuWWR0d2x1V3hkeFppLUxiOXV5d1phbDE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8yMjY0NTUtMTdhMC00NjNjLTg5NTktMGZiMTM5MWI1NGVi
LzEvUHhuWWR0d2x1V3hkeFppLUxiOXV5d1phbDE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkyUUQ++g
IQFv5duo8ItpE6pPXaATwsPq9DXxC8eHpyQTPw/jvPPAWMdKZL2dZr1k2qCseo5I
vZvgiUWOQ2qINN3PYItvByrWKf1Cz7d1/2a5rkX6pEkHV1WB3m3e3e8l8TQD0pGQ
yutRq/zLvTvPVP0mbwDsU5DmB46yL7AO2XhpJ0MWpBYnaTD3RLIFVP3iJ90+Qrg7
4MGo6Y1GEbq5D8j1vVpdYNrXFMb+f1YcTwWeMgZdAKrOzEP9Ls1rsHiDHEE+tdwA
ebuhOBKvIi1BR1CqOS2ubfYSzciDFU05/4L2SOOTgFR/RPdgDsTHBHrp0JYnfkac
6mFpLE3R0vSYzg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:17 2025 by rpki-client