Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
File: PXud_6rjPsLPGbWtTknB6esdnWQ.mft (raw, json)
Hash identifier: retWbb5UQol9h/w2Ri3hZiUSge+SktiJEKA1CXvH3Wg=
Subject key identifier: 4A:26:8C:8B:37:A9:04:73:36:18:28:9D:F1:F3:08:C2:AD:26:78:6B
Authority key identifier: 3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
Certificate issuer: /CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Certificate serial: 0199FD346371A5A2B9F17CA106C5D758F206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
Manifest number: 032C
Signing time: Sun 19 Oct 2025 16:01:32 +0000
Manifest this update: Sun 19 Oct 2025 16:01:32 +0000
Manifest next update: Mon 20 Oct 2025 16:01:32 +0000
Files and hashes: 1: 7MAR8ldskj16F5kzBhniowMVmU4.roa (hash: mAbacv2iYcdMB2GMEDPPh1FDDClOu0PIdLu6x7Tl3MY=)
2: Cu_tMI7PQ6xbwC801ON2UpFh-7U.roa (hash: GIgBSdweK8qeTSk0k9hGLBlRLULkx2CFmhF3qwcGbl0=)
3: FmkKEcHCN4SKkKjvm4wbiP2rqGc.roa (hash: BxDXl5Xd1DRGy1evvpUKKCLNhtBpKlkHYmd1XWHZ6n8=)
4: N8UiZC6ekKP1es4B_Bk3APFkdxc.roa (hash: tgQGNuurT5CnHai6yz0N+Wra1nyaeCzvPS5Kjtxbyvk=)
5: PXud_6rjPsLPGbWtTknB6esdnWQ.crl (hash: 6luxOD7iqYvda7toYJErxJk0gpI36aJvRIqjRpHaKBE=)
6: k4yKqIR7cQItxrDu_gDWC-myYX0.roa (hash: xhdvsy13/3L8cbu2Dvi5ab7FoTe57YZRZZmouEau4sA=)
7: lThuEEXjbOk9kIBiQn4XNJSri60.roa (hash: saUcIO3Pzwx9suP3W1g5k4dgT0dO1lpuD0PTK3qh6JE=)
8: pWtbtMqs_9aJQ0KT8UAl4XExZLI.roa (hash: WNvv2z5ka9H0FOvY11NFaV4Er6oN7s2ejAsfJawgadw=)
9: rBORiVnjaTLo34wXgk56Wdk6L40.roa (hash: ilIiHrBuCknqXlqYLmYdfV8RuudQEzNokXG+7gARkUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:63:71:a5:a2:b9:f1:7c:a1:06:c5:d7:58:f2:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Validity
Not Before: Oct 19 16:01:32 2025 GMT
Not After : Oct 20 16:01:32 2025 GMT
Subject: CN=4a268c8b37a904733618289df1f308c2ad26786b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fe:a3:0a:16:b6:1e:e0:7f:4c:29:c6:e7:a3:
4d:53:60:68:53:40:93:60:d8:ae:b4:fc:7d:d9:f0:
a7:d7:bb:09:3d:9a:e9:44:64:4a:04:13:bd:b7:1f:
dd:23:36:23:b3:d0:54:f4:15:ce:eb:cd:25:c7:ec:
0a:40:28:c8:40:71:ff:dd:a3:5f:02:ad:64:a2:6f:
b2:cd:af:ad:0b:4f:2f:41:cb:5b:d6:00:ec:85:6b:
95:37:89:13:99:f3:2f:15:dd:41:ca:79:dc:89:f4:
6c:a2:a0:76:d3:4c:0a:13:79:ff:2e:27:06:90:38:
f4:38:a9:3b:23:e6:ff:f2:83:dc:36:ee:29:7b:7f:
7c:42:4b:8b:53:ac:c1:ff:cb:b7:0c:4f:e3:85:a0:
5f:9b:2a:13:25:f1:29:c1:42:74:30:8d:c8:7a:d7:
aa:06:28:5a:08:89:ae:4a:9e:5f:c9:63:ae:ff:6b:
61:49:dc:29:c5:13:d0:ab:9a:c7:12:16:20:dd:7d:
65:41:ea:c5:82:6c:f0:6d:5a:62:8c:7d:49:33:47:
36:29:c4:39:03:46:96:af:16:f4:39:23:99:f6:03:
4f:02:45:2c:f1:4e:40:c0:68:e8:07:da:de:67:b6:
ca:b2:0b:ed:8e:c7:ba:d1:50:a3:1d:d9:2a:0c:8a:
e4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:26:8C:8B:37:A9:04:73:36:18:28:9D:F1:F3:08:C2:AD:26:78:6B
X509v3 Authority Key Identifier:
keyid:3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:cc:a3:78:d1:72:ad:4f:b2:c4:9e:06:58:dc:49:6b:e1:f2:
d8:88:d5:97:9d:c0:0b:10:5e:39:57:4b:0c:c9:f4:5d:82:02:
c5:9d:35:3b:54:44:db:4d:d0:a1:5f:c6:6f:71:46:c1:5f:f4:
24:6d:72:5a:5a:9f:97:c8:1a:2d:29:a4:36:1a:12:77:a4:c9:
97:44:50:0e:ff:5e:9b:fd:3c:05:53:3c:45:a0:86:9c:13:da:
19:b5:dd:3a:b6:ab:76:5c:77:5a:53:a6:23:22:1f:e1:54:f4:
af:70:8b:10:58:c0:f6:1b:57:4d:25:b2:4f:55:9d:93:6d:a3:
61:61:c1:34:8a:24:ea:cd:59:78:d5:f0:76:77:60:d2:16:f1:
80:cd:67:68:fd:04:3d:ac:93:73:51:97:02:59:75:dc:03:99:
8b:80:32:ef:71:d6:27:f1:8a:ab:aa:6a:62:49:0b:70:52:ad:
4d:23:1a:9b:8e:14:47:0e:74:68:78:74:a4:c0:74:de:9a:9b:
97:ad:0a:f6:7a:91:47:73:1e:bd:57:cf:90:a1:87:08:58:db:
ac:c5:e2:9a:03:20:05:51:b2:a5:17:93:55:db:f7:e5:11:48:
49:2c:36:a8:a8:f5:f7:cd:1d:11:74:a9:d6:b0:9f:b2:9f:2a:
9e:b5:7c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:11 2025 by rpki-client