Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft
File: pxn9xw058Tw3hNMlrith8PPJn0g.mft (raw, json)
Hash identifier: KUweWZUK0v64PXMfnoWNHZfAe25EDeY0uvMu7vxHFVI=
Subject key identifier: D2:2F:39:3D:3D:81:87:80:51:84:1D:09:6B:0B:5D:8A:E3:A7:B3:0D
Authority key identifier: A7:19:FD:C7:0D:39:F1:3C:37:84:D3:25:AE:2B:61:F0:F3:C9:9F:48
Certificate issuer: /CN=a719fdc70d39f13c3784d325ae2b61f0f3c99f48
Certificate serial: 019A70A56DB626985EE109019819C44BEEA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 02:01:20 +0000
Manifest this update: Tue 11 Nov 2025 02:01:20 +0000
Manifest next update: Wed 12 Nov 2025 02:01:20 +0000
Files and hashes: 1: ldBjKa6qQD6NaVa0xAumkdWo3gI.roa (hash: 2YMpg6Ripbk87w4Re6g4mOYhXFU2yNWWD+lkjoRwRkM=)
2: pxn9xw058Tw3hNMlrith8PPJn0g.crl (hash: c5XZmCZYGs6eT6RjZx1YF0zPDkNOUk2r5qcJc7bvRwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:6d:b6:26:98:5e:e1:09:01:98:19:c4:4b:ee:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a719fdc70d39f13c3784d325ae2b61f0f3c99f48
Validity
Not Before: Nov 11 02:01:20 2025 GMT
Not After : Nov 12 02:01:20 2025 GMT
Subject: CN=d22f393d3d81878051841d096b0b5d8ae3a7b30d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ae:2b:38:a4:27:16:0f:2e:da:ae:97:22:eb:
43:1b:aa:80:31:27:50:d1:6c:f1:a7:32:57:e2:6f:
bc:6a:17:37:d3:5b:2b:2d:fa:d4:9a:8a:c3:57:9c:
43:80:40:5e:e5:a8:69:ed:3a:12:61:2b:eb:33:ec:
85:f3:ab:e1:82:5f:93:72:61:b6:96:b1:b9:65:f6:
81:24:1c:4b:49:b8:14:5d:f0:9f:54:e6:17:0a:fa:
04:88:28:5f:c1:bd:eb:63:66:d2:37:20:31:0c:78:
66:c6:d9:4a:26:5b:9c:36:81:f0:31:b6:91:23:6a:
19:d5:c1:a8:b9:21:be:15:4a:66:9f:a2:34:e2:59:
42:f9:9e:1c:1a:cd:66:bc:88:c1:40:2f:e8:e7:7f:
87:94:67:35:c9:be:97:d3:43:7a:1f:9b:02:02:4c:
3c:b2:d8:47:94:8a:8a:2f:24:55:df:51:dd:37:77:
af:2d:9c:fa:d2:97:6f:c7:d6:78:61:3c:5d:ba:8e:
9f:16:a9:c8:56:e8:21:e4:74:e2:aa:79:90:b7:07:
3b:c9:c3:39:3d:a4:c8:70:44:3c:3b:9c:d1:a3:63:
30:2e:7e:44:0e:72:ff:bc:d4:a7:31:b6:e1:a9:d0:
4d:29:da:03:1f:99:f0:dd:6e:1d:aa:77:44:28:97:
4d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2F:39:3D:3D:81:87:80:51:84:1D:09:6B:0B:5D:8A:E3:A7:B3:0D
X509v3 Authority Key Identifier:
keyid:A7:19:FD:C7:0D:39:F1:3C:37:84:D3:25:AE:2B:61:F0:F3:C9:9F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:8c:32:fc:cc:19:eb:e1:26:8f:cb:41:cb:32:11:41:e0:2e:
17:e8:0e:59:58:e1:aa:ab:17:ea:21:70:0d:37:3b:ec:20:14:
0b:3e:e0:cd:e3:63:e3:20:1c:65:d5:e3:9a:cc:93:f4:89:40:
8b:e4:2d:17:e1:d3:db:0f:2b:6e:04:60:7e:61:c5:94:98:90:
65:42:f6:11:13:94:93:6a:09:2f:4d:c5:fe:da:23:db:02:a1:
8b:94:de:b3:16:0d:f1:fd:13:a0:80:35:68:2d:6f:79:6e:29:
ce:6d:8d:4a:0d:ba:07:44:bd:af:f5:fd:19:70:96:71:56:5e:
e5:a9:c2:ed:50:cc:f7:97:f4:0f:ed:d3:d5:6a:95:23:29:37:
95:2c:f9:43:e3:b5:d4:e0:b9:e0:f4:85:10:5a:be:a8:f7:32:
12:0e:1b:55:2c:04:12:4d:d2:52:1c:9f:14:03:98:ef:f0:9a:
9f:31:83:b1:fe:ce:22:bf:4e:c3:b9:a6:23:e3:ab:69:6d:7a:
93:ff:59:35:ad:72:33:0a:20:10:6f:4a:37:c9:41:95:fd:c5:
21:30:5e:f8:83:f8:02:48:93:9a:1d:b7:34:fd:04:f7:11:e0:
33:7f:bf:e6:94:a6:82:59:2c:11:52:d3:cd:ad:6c:52:3e:ff:
cf:06:e3:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpW22Jphe4QkBmBnES+6hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MTlmZGM3MGQzOWYxM2MzNzg0ZDMyNWFlMmI2MWYwZjNj
OTlmNDgwHhcNMjUxMTExMDIwMTIwWhcNMjUxMTEyMDIwMTIwWjAzMTEwLwYDVQQD
EyhkMjJmMzkzZDNkODE4NzgwNTE4NDFkMDk2YjBiNWQ4YWUzYTdiMzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsq4rOKQnFg8u2q6XIutDG6qAMSdQ
0WzxpzJX4m+8ahc301srLfrUmorDV5xDgEBe5ahp7ToSYSvrM+yF86vhgl+TcmG2
lrG5ZfaBJBxLSbgUXfCfVOYXCvoEiChfwb3rY2bSNyAxDHhmxtlKJlucNoHwMbaR
I2oZ1cGouSG+FUpmn6I04llC+Z4cGs1mvIjBQC/o53+HlGc1yb6X00N6H5sCAkw8
sthHlIqKLyRV31HdN3evLZz60pdvx9Z4YTxduo6fFqnIVugh5HTiqnmQtwc7ycM5
PaTIcEQ8O5zRo2MwLn5EDnL/vNSnMbbhqdBNKdoDH5nw3W4dqndEKJdNqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIvOT09gYeAUYQdCWsLXYrjp7MNMB8GA1UdIwQY
MBaAFKcZ/ccNOfE8N4TTJa4rYfDzyZ9IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHhuOXh3MDU4VHczaE5NbHJpdGg4UFBKbjBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9kNzJiZjMtMWNhOS00MDIzLWFjZjUt
ZDVhNDIzNDQyZDM1LzEvcHhuOXh3MDU4VHczaE5NbHJpdGg4UFBKbjBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9kNzJiZjMtMWNhOS00MDIzLWFjZjUtZDVhNDIzNDQyZDM1
LzEvcHhuOXh3MDU4VHczaE5NbHJpdGg4UFBKbjBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASYwy/MwZ
6+Emj8tByzIRQeAuF+gOWVjhqqsX6iFwDTc77CAUCz7gzeNj4yAcZdXjmsyT9IlA
i+QtF+HT2w8rbgRgfmHFlJiQZUL2EROUk2oJL03F/toj2wKhi5TesxYN8f0ToIA1
aC1veW4pzm2NSg26B0S9r/X9GXCWcVZe5anC7VDM95f0D+3T1WqVIyk3lSz5Q+O1
1OC54PSFEFq+qPcyEg4bVSwEEk3SUhyfFAOY7/CanzGDsf7OIr9Ow7mmI+OraW16
k/9ZNa1yMwogEG9KN8lBlf3FITBe+IP4AkiTmh23NP0E9xHgM3+/5pSmglksEVLT
za1sUj7/zwbjOw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:53 2025 by rpki-client