Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
File: pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft (raw, json)
Hash identifier: glQaNa1dMJqvSI/f4+JUk/hDvcea8YqoUr119ey2p9Y=
Subject key identifier: E8:44:30:74:70:DC:68:01:C7:25:20:4D:42:CD:42:EB:54:C8:2C:67
Authority key identifier: A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
Certificate issuer: /CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Certificate serial: 0199FC8F4CC6628E429CA34B9DA84AC5037A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
Manifest number: 16EF
Signing time: Sun 19 Oct 2025 13:01:13 +0000
Manifest this update: Sun 19 Oct 2025 13:01:13 +0000
Manifest next update: Mon 20 Oct 2025 13:01:13 +0000
Files and hashes: 1: Clf1O67BMO2Rhs6Zi3d5eqYtS78.roa (hash: gEsGT+BkcxrPL5LEXQ9nd6Eso8OhYDY6ncvwiqyMT9o=)
2: pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl (hash: WgmXX5Ackbu25zbG4VNKmDtSJGXrXBAOFBFShcDRZx0=)
3: y4LRZvQWH9l19-R4kCc6PgUW78w.roa (hash: 2GDs3fd+T8RC8u9/aToLiIMcmZgcmmJt7vgNbq6rFsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:4c:c6:62:8e:42:9c:a3:4b:9d:a8:4a:c5:03:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Validity
Not Before: Oct 19 13:01:13 2025 GMT
Not After : Oct 20 13:01:13 2025 GMT
Subject: CN=e844307470dc6801c725204d42cd42eb54c82c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e4:f3:ee:72:b4:30:5e:76:77:fa:7f:82:c2:
38:cc:3b:de:3d:b6:4e:39:31:90:f4:45:50:4c:79:
4b:68:67:ac:b4:35:83:2b:a6:c3:40:01:dd:b2:28:
a3:e1:fc:6c:c7:ab:1c:9b:60:96:2e:45:f2:ee:91:
aa:82:d2:c0:b5:1a:a5:42:d9:a8:b9:84:7a:28:ca:
67:1d:d2:db:c4:8e:6f:8d:f8:56:8d:5f:a5:46:38:
e1:76:da:1e:00:ef:dc:ff:cc:88:74:b5:4a:4a:a2:
5e:da:c9:38:20:7d:62:da:c8:7b:df:d2:48:35:46:
4c:29:af:d1:07:c4:6c:be:79:7c:1b:d7:e5:ab:a2:
63:a0:44:60:6e:5b:cf:d8:87:0b:92:d5:eb:93:33:
65:55:0a:6b:54:6f:40:94:89:d6:61:f0:d7:2d:25:
69:6e:a2:23:e0:1e:c9:89:e6:65:f5:ae:07:b2:c6:
ec:de:3b:3f:31:f0:d1:31:71:2e:28:5d:6d:28:60:
90:48:19:52:48:47:bd:6e:45:e3:4e:af:c8:d0:25:
0a:03:a2:62:b9:75:c5:e1:35:e4:01:33:1d:29:59:
00:41:2c:fe:16:18:2f:08:a0:f1:4e:39:40:a1:52:
84:2e:52:91:82:b6:92:3b:2b:74:7e:2b:fc:91:5e:
8a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:44:30:74:70:DC:68:01:C7:25:20:4D:42:CD:42:EB:54:C8:2C:67
X509v3 Authority Key Identifier:
keyid:A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ed:d8:b7:76:db:68:9b:23:05:26:49:da:06:ac:51:ca:77:
08:79:ff:b8:6f:90:5a:d3:a3:50:ca:fb:13:18:fc:90:ab:ac:
21:d7:78:e4:ed:e9:86:c0:a4:1b:41:50:91:c7:b9:37:61:5a:
01:8d:5d:53:fd:44:cb:5e:43:16:76:39:67:f5:8c:86:48:5b:
16:b0:da:58:84:29:06:f6:93:9c:44:6d:e1:e6:34:c8:84:36:
bd:3e:5d:b1:05:01:a4:3a:38:a7:f9:8e:b0:41:e6:43:1a:65:
fc:1d:a5:d6:b3:f1:22:8f:29:7b:bb:ed:31:02:c8:34:3b:3f:
93:71:a3:fc:41:af:56:80:b3:e7:53:ea:4c:25:1a:c4:d5:23:
63:b1:a3:a0:c1:66:90:75:04:b7:5e:8c:6e:95:da:49:84:9d:
be:c3:f3:24:68:31:7a:42:61:8e:61:46:78:90:cc:81:2b:d2:
11:69:1a:57:24:e1:9f:78:4f:41:14:b8:77:0f:bb:1b:be:b5:
ac:71:90:d8:9e:d8:93:4f:ca:7a:cc:3e:32:b8:64:b4:1b:17:
db:dc:16:c7:36:1f:42:fc:38:33:65:5d:67:5a:14:04:d3:f0:
d6:5a:7b:d5:7b:8e:b7:95:eb:b7:f7:29:5c:35:e8:91:d3:4a:
10:97:73:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:38:05 2025 by rpki-client