Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.mft
File: PtW83-CttrlBURh__axK6PMRpvE.mft (raw, json)
Hash identifier: d6TXW0fNXsXJWjir9UdWZEKtRnzGcEdCYIPHBJdU1pw=
Subject key identifier: 01:06:36:E3:50:01:59:A7:AB:5B:F4:3E:AD:32:11:BA:A0:69:E1:BA
Authority key identifier: 3E:D5:BC:DF:E0:AD:B6:B9:41:51:18:7F:FD:AC:4A:E8:F3:11:A6:F1
Certificate issuer: /CN=3ed5bcdfe0adb6b94151187ffdac4ae8f311a6f1
Certificate serial: 019A2B8CF57A9D792843D87F1B4F21A5C24C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtW83-CttrlBURh__axK6PMRpvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.mft
Manifest number: 168F
Signing time: Tue 28 Oct 2025 16:00:49 +0000
Manifest this update: Tue 28 Oct 2025 16:00:49 +0000
Manifest next update: Wed 29 Oct 2025 16:00:49 +0000
Files and hashes: 1: Hg8kBZfVcKLuM_k8GGnGJeVAvdc.roa (hash: ziqa3QYWLFKgPT8ZERs4WMz6NaXL6vju070csDXblpM=)
2: PtW83-CttrlBURh__axK6PMRpvE.crl (hash: kRMvURZkG8mYutmbkWZ+Lu1KBOXYorqMitjPWFE5ttE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PtW83-CttrlBURh__axK6PMRpvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:8c:f5:7a:9d:79:28:43:d8:7f:1b:4f:21:a5:c2:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ed5bcdfe0adb6b94151187ffdac4ae8f311a6f1
Validity
Not Before: Oct 28 16:00:49 2025 GMT
Not After : Oct 29 16:00:49 2025 GMT
Subject: CN=010636e3500159a7ab5bf43ead3211baa069e1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:4e:89:2b:12:d8:28:35:e7:30:22:7a:34:11:
02:cc:b1:0f:3e:2a:c8:42:54:65:57:01:45:fb:67:
7c:da:65:62:43:18:94:5b:ff:0a:b3:d3:41:a7:f7:
ff:4a:ae:be:84:01:4e:68:10:3b:6e:08:1a:b3:ec:
9f:88:97:62:05:c3:2c:9e:10:7e:a4:cc:18:e3:e6:
8b:7d:e0:9f:7e:ee:57:b7:ca:46:b2:ad:9f:85:5d:
5b:15:d5:1b:fb:1b:50:68:69:7b:9d:ed:51:63:c9:
e8:5f:36:3c:3f:b5:de:7b:21:27:6c:89:6d:86:a3:
cf:52:fe:81:66:96:24:21:49:c9:d3:bb:d9:3d:9b:
63:e0:00:1e:0c:0e:f0:af:9b:b7:fd:33:92:10:28:
3a:6e:12:15:8f:58:2d:d2:a2:be:4a:52:8e:a7:a8:
2e:53:b8:d7:c1:d4:77:fd:68:f7:4c:1b:22:a6:dd:
3e:ee:ba:29:95:5b:13:73:b6:34:44:d8:06:0d:72:
0e:02:a0:49:c7:23:94:0f:50:27:8c:43:b0:64:18:
30:49:b3:6d:83:b3:1c:54:77:a8:a3:85:f0:23:13:
39:3b:d5:74:64:b7:a7:17:94:ad:47:ed:8a:f1:27:
d3:39:39:f9:96:cc:05:f2:75:f4:9b:28:41:7a:fc:
7b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:06:36:E3:50:01:59:A7:AB:5B:F4:3E:AD:32:11:BA:A0:69:E1:BA
X509v3 Authority Key Identifier:
keyid:3E:D5:BC:DF:E0:AD:B6:B9:41:51:18:7F:FD:AC:4A:E8:F3:11:A6:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtW83-CttrlBURh__axK6PMRpvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:89:ce:75:14:26:5d:9f:93:4c:bf:48:76:41:bc:d2:60:2f:
5d:38:fb:80:ac:4b:5f:b8:e0:07:ee:97:22:a0:cb:e2:bf:b2:
93:37:c3:ab:f1:7f:55:f9:0c:b7:fd:12:d3:11:57:a0:b2:61:
ad:5b:12:6e:6e:96:79:90:bb:2c:87:0f:90:b4:6a:4d:5f:ff:
74:4a:08:f0:e0:0f:be:40:0a:0e:51:26:62:cc:aa:5a:42:0c:
ed:41:74:54:12:bd:44:0b:32:f8:02:3f:d3:6c:58:88:29:6d:
1e:c0:ac:5a:fe:8b:bc:17:e5:2b:40:e1:fe:d6:63:de:25:3b:
35:02:98:09:cc:64:a8:1a:59:79:8f:68:42:16:7e:74:b2:77:
c6:d4:a7:ef:f9:52:05:a6:34:67:5d:77:2b:cc:d2:b3:97:c8:
3a:62:c9:79:57:aa:75:d9:f2:8c:65:2a:fd:71:ea:df:c7:13:
4e:a8:3e:69:bb:14:82:e5:16:8d:39:31:17:ff:0a:d8:17:1a:
7d:94:b9:78:71:be:05:84:c8:06:3b:2f:c0:03:dd:f6:f1:34:
f8:97:56:46:92:e8:b8:f3:ad:1e:19:19:08:fb:fa:12:85:b1:
e0:e9:38:0a:c3:3b:71:dc:5c:78:0f:c7:2f:9c:ef:d2:8d:e9:
3a:45:ba:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 21:22:44 2025 by rpki-client