Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
File: PXD-HXX32nbS49w0T7HwsLad4AE.mft (raw, json)
Hash identifier: xI7Q9ggYUa3SXAI92oNOAqrhACj9HoqJeo+ZKqybdxI=
Subject key identifier: C9:E9:9F:B6:D5:B3:6C:08:AF:C9:35:F7:B0:C0:EB:4D:F5:ED:D6:5C
Authority key identifier: 3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
Certificate issuer: /CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Certificate serial: 0199FFC80D55A3A3CAB4D471FD8E8E2E0887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
Manifest number: 1652
Signing time: Mon 20 Oct 2025 04:02:04 +0000
Manifest this update: Mon 20 Oct 2025 04:02:04 +0000
Manifest next update: Tue 21 Oct 2025 04:02:04 +0000
Files and hashes: 1: PXD-HXX32nbS49w0T7HwsLad4AE.crl (hash: QASNrE7LkPP71a4oUuBgpP2Rdp9XusiAdSbqpFBBf8o=)
2: qcINREJGIFWN3YXOgtNuqjCBfnY.roa (hash: 1gG5XU0DGFtKFXRvNOA96XCA/EPC9XB/rEykj9F+ocs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:0d:55:a3:a3:ca:b4:d4:71:fd:8e:8e:2e:08:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Validity
Not Before: Oct 20 04:02:04 2025 GMT
Not After : Oct 21 04:02:04 2025 GMT
Subject: CN=c9e99fb6d5b36c08afc935f7b0c0eb4df5edd65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:23:62:67:cc:69:50:e4:ac:d3:65:3d:3b:fe:
7f:e3:18:a1:22:a7:aa:cd:33:af:17:8b:21:dd:49:
ed:f0:8b:5a:d8:5f:6a:1d:e4:fa:34:b5:7a:63:83:
69:db:e9:75:e3:bc:c8:fb:e7:80:47:13:fa:18:5a:
f4:00:6f:93:b7:66:89:1c:e0:a0:d7:b3:2f:f2:d1:
5a:b8:d7:8c:79:ec:84:1b:d2:5d:2c:e7:fa:ff:50:
5a:06:e3:c7:b4:a5:26:6e:2a:d9:06:ed:80:e2:33:
e9:03:f5:ca:c9:95:b9:04:2f:af:16:81:78:96:dc:
32:a7:a9:48:84:7f:19:15:16:69:88:0f:22:0e:18:
33:25:8f:58:28:10:1e:ea:e4:ed:d9:8f:4d:1f:76:
62:d5:3d:5b:9d:54:8d:45:d7:9c:77:36:20:2e:11:
40:89:e4:4a:1c:dd:f4:9c:06:da:55:95:df:0b:22:
8b:bb:5a:cf:b5:f9:be:82:b3:5b:45:7a:e9:e2:ae:
70:d0:12:8a:6e:49:26:88:46:7d:67:27:0a:2a:0b:
32:ef:39:c7:29:39:33:da:fc:6f:93:d9:af:3c:77:
d4:f9:dc:86:a7:7d:fb:81:13:2d:01:49:82:ef:6d:
27:10:31:00:b8:6b:da:bf:44:b5:2b:0c:2f:45:8a:
d9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E9:9F:B6:D5:B3:6C:08:AF:C9:35:F7:B0:C0:EB:4D:F5:ED:D6:5C
X509v3 Authority Key Identifier:
keyid:3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c5:c9:a9:03:9b:b5:65:a4:e2:77:2e:ff:01:9c:62:e9:6f:
33:05:6d:04:25:3b:7b:24:11:aa:1e:c4:28:9f:fc:d1:b6:67:
b1:7b:ef:27:b6:64:bf:9c:81:6e:31:5a:f9:a8:ed:fe:75:97:
5c:29:65:df:45:6a:db:c7:72:c1:11:86:ea:8d:62:11:60:ef:
12:1b:a2:65:9d:d5:81:a9:42:6d:f1:f6:58:8c:d5:14:76:20:
c5:5a:18:72:79:15:18:62:bb:ff:a1:ef:1c:4c:00:87:32:11:
65:96:bf:29:a7:30:2d:6d:ee:64:98:34:6b:4e:7b:11:c5:84:
f7:7d:fe:1e:2d:94:19:7c:b5:e9:14:bb:59:65:5b:c7:ca:35:
de:0c:89:9f:0a:ed:b1:13:28:98:95:b7:50:92:2b:72:d1:67:
1a:48:04:51:86:ea:4d:ef:ba:64:1e:48:54:45:8a:f2:b4:fb:
48:63:9f:f4:b4:ff:8d:95:f7:b7:aa:b5:a9:a2:30:63:f7:31:
d6:05:ed:a1:1b:64:a8:5a:06:e3:d4:6f:16:1a:ea:c9:41:ff:
58:5b:45:2e:2c:da:38:23:0b:f6:4a:55:90:b0:8f:bc:88:94:
80:c1:f6:c7:f1:87:fe:13:82:b4:af:dd:02:47:ca:34:e8:47:
be:73:d4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:42 2025 by rpki-client