Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
File: PxnYdtwluWxdxZi-Lb9uywZal18.mft (raw, json)
Hash identifier: gVsRQ4ttieNH9uU2XfUIHy8qS9bGoAqiVn0TidK/aKM=
Subject key identifier: 2B:72:B7:2C:32:A1:9E:DF:9D:0A:DB:81:E5:B9:E0:86:93:34:B9:76
Authority key identifier: 3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
Certificate issuer: /CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Certificate serial: 01992DB54AF32B433D3AC12DF9692AE0402A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
Manifest number: 04A4
Signing time: Tue 09 Sep 2025 09:01:19 +0000
Manifest this update: Tue 09 Sep 2025 09:01:19 +0000
Manifest next update: Wed 10 Sep 2025 09:01:19 +0000
Files and hashes: 1: PxnYdtwluWxdxZi-Lb9uywZal18.crl (hash: qycI1mlFWwar8yqHwyZvAWSJgzMos/ODUdApapNTj9g=)
2: x8ghvFiQy8y7__Pm7K2GUSehU3A.roa (hash: 97TGydFeZ3RUDp9TsIz5UQ8MNV819kJP2yTvYQ+TbKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:b5:4a:f3:2b:43:3d:3a:c1:2d:f9:69:2a:e0:40:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Validity
Not Before: Sep 9 09:01:19 2025 GMT
Not After : Sep 10 09:01:19 2025 GMT
Subject: CN=2b72b72c32a19edf9d0adb81e5b9e0869334b976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b9:d4:cc:59:47:d6:70:69:b8:cc:5e:39:b7:
a7:08:05:ed:08:fc:a5:0c:10:f6:8e:8c:70:4f:9e:
7a:bd:56:92:80:ce:da:4d:75:11:ed:23:3a:13:3f:
75:1b:47:00:7f:fe:39:d8:5a:35:ac:6b:70:32:90:
88:85:50:83:2e:dc:2c:6d:7e:ff:0d:6e:cf:60:e8:
38:22:5a:06:57:c9:a2:fe:70:56:7a:f1:82:b8:68:
7c:eb:85:4d:ee:1d:21:98:88:ae:c7:f2:a0:76:64:
85:ee:64:c9:34:00:66:0c:76:ca:45:ff:cb:90:2e:
ac:2a:62:d8:d7:13:4a:4c:5a:93:38:74:52:b0:b9:
41:c1:fc:a9:19:de:8d:fe:6c:7f:9b:7a:51:bd:f1:
17:bf:20:c2:4a:70:74:30:6d:2f:15:bb:41:ba:6d:
71:9a:f7:f7:fa:57:69:61:7d:43:10:f3:b3:69:85:
30:65:1a:25:e2:2c:ba:25:7a:9a:74:53:d9:9f:29:
e2:3e:f2:97:55:3c:a2:75:64:10:52:c3:51:e3:f9:
a3:1c:09:5c:00:cd:04:fc:33:75:d4:bc:f1:62:af:
8c:04:e4:e2:c3:fd:93:e8:5d:bf:e4:65:5c:fb:e6:
b7:8f:99:53:cb:2f:ca:2f:5e:84:ae:03:0f:90:44:
b5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:72:B7:2C:32:A1:9E:DF:9D:0A:DB:81:E5:B9:E0:86:93:34:B9:76
X509v3 Authority Key Identifier:
keyid:3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:f2:01:28:7a:93:88:00:2a:56:40:08:45:72:8e:09:71:21:
b7:f6:48:d4:24:5b:c4:a3:26:d5:fe:81:2e:1b:75:a4:56:03:
4f:c5:5a:89:58:32:8a:da:96:4b:f9:3e:6b:75:9b:85:36:8a:
86:dc:6a:9a:97:23:1c:ee:e7:ac:ee:67:bd:64:39:9d:10:f9:
ea:41:6d:09:ae:7a:99:00:7e:a9:db:ad:ed:e0:99:94:5a:86:
f3:de:29:ff:23:1e:1d:f9:ac:a9:dc:77:8e:16:73:35:a1:20:
3b:ea:3f:44:89:2f:a8:65:23:ba:7a:50:d0:f8:c4:b7:5f:cb:
69:89:b5:a4:8d:3e:14:63:25:9d:0e:a0:a8:ea:21:97:72:26:
d7:61:6c:73:13:c3:d6:d8:c0:77:f5:57:c2:62:e6:1e:94:29:
1d:ee:98:51:20:65:e4:2a:45:e2:3e:3d:02:5f:e0:00:e7:51:
68:c8:0d:ef:03:06:31:50:6e:84:33:7e:94:f4:47:5d:9b:da:
b5:1b:ae:9a:ab:42:95:94:2f:4c:50:f4:83:40:ad:06:8d:8b:
b4:89:95:a8:44:ca:e2:4e:a0:d7:41:bd:76:c9:cd:bf:4d:cb:
b9:8e:84:a2:34:5f:2a:d5:6f:50:61:1b:7e:4e:71:36:fc:d5:
75:03:6c:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkttUrzK0M9OsEt+Wkq4EAqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMTlkODc2ZGMyNWI5NmM1ZGM1OThiZTJkYmY2ZWNiMDY1
YTk3NWYwHhcNMjUwOTA5MDkwMTE5WhcNMjUwOTEwMDkwMTE5WjAzMTEwLwYDVQQD
EygyYjcyYjcyYzMyYTE5ZWRmOWQwYWRiODFlNWI5ZTA4NjkzMzRiOTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrnUzFlH1nBpuMxeObenCAXtCPyl
DBD2joxwT556vVaSgM7aTXUR7SM6Ez91G0cAf/452Fo1rGtwMpCIhVCDLtwsbX7/
DW7PYOg4IloGV8mi/nBWevGCuGh864VN7h0hmIiux/KgdmSF7mTJNABmDHbKRf/L
kC6sKmLY1xNKTFqTOHRSsLlBwfypGd6N/mx/m3pRvfEXvyDCSnB0MG0vFbtBum1x
mvf3+ldpYX1DEPOzaYUwZRol4iy6JXqadFPZnyniPvKXVTyidWQQUsNR4/mjHAlc
AM0E/DN11LzxYq+MBOTiw/2T6F2/5GVc++a3j5lTyy/KL16ErgMPkES19QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtytywyoZ7fnQrbgeW54IaTNLl2MB8GA1UdIwQY
MBaAFD8Z2HbcJblsXcWYvi2/bssGWpdfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHhuWWR0d2x1V3hkeFppLUxiOXV5d1phbDE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yMjY0NTUtMTdhMC00NjNjLTg5NTkt
MGZiMTM5MWI1NGViLzEvUHhuWWR0d2x1V3hkeFppLUxiOXV5d1phbDE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8yMjY0NTUtMTdhMC00NjNjLTg5NTktMGZiMTM5MWI1NGVi
LzEvUHhuWWR0d2x1V3hkeFppLUxiOXV5d1phbDE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvPIBKHqT
iAAqVkAIRXKOCXEht/ZI1CRbxKMm1f6BLht1pFYDT8VaiVgyitqWS/k+a3WbhTaK
htxqmpcjHO7nrO5nvWQ5nRD56kFtCa56mQB+qdut7eCZlFqG894p/yMeHfmsqdx3
jhZzNaEgO+o/RIkvqGUjunpQ0PjEt1/LaYm1pI0+FGMlnQ6gqOohl3Im12FscxPD
1tjAd/VXwmLmHpQpHe6YUSBl5CpF4j49Al/gAOdRaMgN7wMGMVBuhDN+lPRHXZva
tRuumqtClZQvTFD0g0CtBo2LtImVqETK4k6g10G9dsnNv03LuY6EojRfKtVvUGEb
fk5xNvzVdQNshw==
-----END CERTIFICATE-----
Generated at Tue Sep 9 13:36:54 2025 by rpki-client