Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.mft
File: PXZ9X-fvPyKL3b3loOXBgAb3VAg.mft (raw, json)
Hash identifier: NzS+W5ioSP72hK1Jv53j4qRe5BWrTAZcASNa42/ascw=
Subject key identifier: 1B:90:2F:A9:2F:AD:34:ED:3D:FB:8D:79:66:0D:52:78:13:1B:3E:9A
Authority key identifier: 3D:76:7D:5F:E7:EF:3F:22:8B:DD:BD:E5:A0:E5:C1:80:06:F7:54:08
Certificate issuer: /CN=3d767d5fe7ef3f228bddbde5a0e5c18006f75408
Certificate serial: 019A00DA6C0FEFCB888D5B6710EEC1A22969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXZ9X-fvPyKL3b3loOXBgAb3VAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.mft
Manifest number: 0F6B
Signing time: Mon 20 Oct 2025 09:01:45 +0000
Manifest this update: Mon 20 Oct 2025 09:01:45 +0000
Manifest next update: Tue 21 Oct 2025 09:01:45 +0000
Files and hashes: 1: J60Pw4hyKKjQhqi1eSTzFtauoi0.roa (hash: Pts66hPVy/S0JFZfVc88DLunALgdL+k1upaL/I3M97g=)
2: PXZ9X-fvPyKL3b3loOXBgAb3VAg.crl (hash: vm4TxUkT/32inZSCvowTL3DkUoxtRCSUnZ7PG00eqy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXZ9X-fvPyKL3b3loOXBgAb3VAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:6c:0f:ef:cb:88:8d:5b:67:10:ee:c1:a2:29:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d767d5fe7ef3f228bddbde5a0e5c18006f75408
Validity
Not Before: Oct 20 09:01:45 2025 GMT
Not After : Oct 21 09:01:45 2025 GMT
Subject: CN=1b902fa92fad34ed3dfb8d79660d5278131b3e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:21:f3:7d:df:57:5b:4f:a6:87:32:9f:a8:9d:
cd:a2:14:22:ff:67:75:e4:9b:c0:2e:0a:d9:ff:a9:
7d:82:c8:a5:be:80:85:b0:cc:da:4d:b1:1f:11:02:
91:67:12:3f:e1:19:c5:e1:f7:78:6f:58:6d:9c:b8:
03:9c:bc:69:2a:73:32:e5:8e:d1:16:56:9b:f4:05:
08:c4:27:99:5e:b8:92:76:de:65:ac:d4:6b:7f:59:
e1:74:5d:7b:ab:51:d9:ab:e2:b7:e5:4e:4f:61:d7:
11:49:fe:ce:3f:33:af:13:d4:8b:eb:7e:28:3e:6f:
54:32:db:22:72:41:9c:82:01:a4:3b:e5:7a:eb:76:
b0:21:9f:84:e9:58:e2:9a:bd:0f:41:63:8a:3c:3a:
b4:2e:b6:a1:6d:f3:6e:ba:a5:cd:ef:26:c3:e0:79:
c8:f1:7e:ac:bb:8c:6b:fb:c0:c3:39:1e:5c:d5:a9:
8e:7b:e9:e2:8f:7b:16:2a:fc:d6:c5:4e:33:45:4f:
be:8a:4d:0c:8a:3e:be:2b:3a:df:db:28:34:c6:b4:
4c:97:bf:10:26:ca:2a:9e:3c:28:d7:b5:01:00:1c:
38:22:9e:7a:f2:94:54:a3:fc:e7:21:c5:59:87:47:
0b:27:ab:fc:44:26:b2:9b:14:91:e0:09:c6:7e:44:
70:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:90:2F:A9:2F:AD:34:ED:3D:FB:8D:79:66:0D:52:78:13:1B:3E:9A
X509v3 Authority Key Identifier:
keyid:3D:76:7D:5F:E7:EF:3F:22:8B:DD:BD:E5:A0:E5:C1:80:06:F7:54:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXZ9X-fvPyKL3b3loOXBgAb3VAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:49:b9:24:0b:74:cc:24:6b:0f:e6:8d:df:98:2a:58:8b:6a:
e0:1b:73:fc:21:e7:40:0d:4b:94:b1:b7:52:9e:88:cf:bc:39:
73:7d:b3:81:9e:2f:67:49:40:86:00:8c:cf:18:74:8a:58:d3:
4a:b1:be:a8:4a:b2:5a:cf:8a:9b:77:ff:9d:bd:18:59:f7:44:
56:c9:28:8c:e2:b3:5d:c4:98:54:17:1f:96:25:32:49:c1:10:
5d:13:b2:64:d3:5e:67:5e:bd:de:22:85:f9:80:05:96:a1:2c:
dc:1c:99:ab:3f:90:eb:dc:10:25:d1:09:f1:cd:e4:96:20:88:
63:71:b3:87:e4:4a:0f:eb:14:21:0b:2f:d3:8f:42:04:aa:47:
c9:a8:43:44:8c:6e:84:c9:a2:0c:00:23:c4:4e:a5:22:d2:0b:
fe:0b:a7:57:17:63:5d:29:c7:55:1e:bd:39:15:e2:89:cf:7e:
dd:96:25:44:9e:50:ba:c3:85:bd:4c:65:68:44:ad:f4:0a:80:
31:60:b0:bb:b3:cd:52:a8:ca:c3:a8:a7:78:33:2a:a4:82:bc:
cd:d8:85:fe:75:f9:9d:3f:2f:0b:d5:a7:d0:93:83:94:a7:98:
bb:7a:ab:54:b0:2d:dc:4a:6c:d0:44:1f:07:25:15:50:6e:9a:
1b:47:29:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoA2mwP78uIjVtnEO7BoilpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkNzY3ZDVmZTdlZjNmMjI4YmRkYmRlNWEwZTVjMTgwMDZm
NzU0MDgwHhcNMjUxMDIwMDkwMTQ1WhcNMjUxMDIxMDkwMTQ1WjAzMTEwLwYDVQQD
EygxYjkwMmZhOTJmYWQzNGVkM2RmYjhkNzk2NjBkNTI3ODEzMWIzZTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSHzfd9XW0+mhzKfqJ3NohQi/2d1
5JvALgrZ/6l9gsilvoCFsMzaTbEfEQKRZxI/4RnF4fd4b1htnLgDnLxpKnMy5Y7R
Flab9AUIxCeZXriSdt5lrNRrf1nhdF17q1HZq+K35U5PYdcRSf7OPzOvE9SL634o
Pm9UMtsickGcggGkO+V663awIZ+E6Vjimr0PQWOKPDq0LrahbfNuuqXN7ybD4HnI
8X6su4xr+8DDOR5c1amOe+nij3sWKvzWxU4zRU++ik0Mij6+Kzrf2yg0xrRMl78Q
Jsoqnjwo17UBABw4Ip568pRUo/znIcVZh0cLJ6v8RCaymxSR4AnGfkRwOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBuQL6kvrTTtPfuNeWYNUngTGz6aMB8GA1UdIwQY
MBaAFD12fV/n7z8ii9295aDlwYAG91QIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFhaOVgtZnZQeUtMM2IzbG9PWEJnQWIzVkFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8wNzQ5ODItZGIwMS00NzQ3LTlkMTIt
ZmY3MmU0ZmE5M2E1LzEvUFhaOVgtZnZQeUtMM2IzbG9PWEJnQWIzVkFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS8wNzQ5ODItZGIwMS00NzQ3LTlkMTItZmY3MmU0ZmE5M2E1
LzEvUFhaOVgtZnZQeUtMM2IzbG9PWEJnQWIzVkFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOUm5JAt0
zCRrD+aN35gqWItq4Btz/CHnQA1LlLG3Up6Iz7w5c32zgZ4vZ0lAhgCMzxh0iljT
SrG+qEqyWs+Km3f/nb0YWfdEVskojOKzXcSYVBcfliUyScEQXROyZNNeZ1693iKF
+YAFlqEs3ByZqz+Q69wQJdEJ8c3kliCIY3Gzh+RKD+sUIQsv049CBKpHyahDRIxu
hMmiDAAjxE6lItIL/gunVxdjXSnHVR69ORXiic9+3ZYlRJ5QusOFvUxlaESt9AqA
MWCwu7PNUqjKw6ineDMqpIK8zdiF/nX5nT8vC9Wn0JODlKeYu3qrVLAt3Eps0EQf
ByUVUG6aG0cpAw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:51:46 2025 by rpki-client