Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
File: pW4itGIL0EL3OiqWIfDJJH1RJIo.mft (raw, json)
Hash identifier: XGpbpaIQFj4ePIK4CeCS91NurO+rxXHbRjwwLUFba3g=
Subject key identifier: 90:3E:C6:87:87:06:E5:7D:B6:6A:1E:1E:64:B1:7B:0C:CA:CE:EF:3B
Authority key identifier: A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A
Certificate issuer: /CN=a56e22b4620bd042f73a2a9621f0c9247d51248a
Certificate serial: 0199FDD8E6E129EB8890F960471E1A4F419C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
Manifest number: 0106
Signing time: Sun 19 Oct 2025 19:01:14 +0000
Manifest this update: Sun 19 Oct 2025 19:01:14 +0000
Manifest next update: Mon 20 Oct 2025 19:01:14 +0000
Files and hashes: 1: nzgTTwbAHjDz2-zsShiAXUCqJOU.roa (hash: GBnP7tc+zXd9JtLmcvpJOSz2ArIIJJ/9cimz8hGmRDA=)
2: pW4itGIL0EL3OiqWIfDJJH1RJIo.crl (hash: 0mvJAM82M7zAv8sHwxbRHSs2ULF1l8QAidMTKuMLcLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:e6:e1:29:eb:88:90:f9:60:47:1e:1a:4f:41:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a56e22b4620bd042f73a2a9621f0c9247d51248a
Validity
Not Before: Oct 19 19:01:14 2025 GMT
Not After : Oct 20 19:01:14 2025 GMT
Subject: CN=903ec6878706e57db66a1e1e64b17b0ccaceef3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:17:db:a9:b5:17:d4:e8:34:66:e8:4c:b5:e1:
5a:27:e3:b9:07:82:02:7b:00:8f:42:b6:2d:a5:93:
8a:8d:e4:b3:5c:2f:9b:41:71:c4:de:e3:b4:5c:06:
5b:f8:0d:37:74:03:3f:80:b9:a6:68:ca:77:c7:e8:
e7:92:63:56:fe:5b:3d:b7:fe:be:37:c3:92:48:34:
34:a0:fa:82:4c:a2:f5:57:ff:69:75:5e:21:84:8b:
cd:6c:6d:3f:83:7b:9d:b7:9b:16:1f:1f:fc:ba:c2:
d6:37:77:be:aa:20:4b:80:f1:3a:a4:33:6f:2c:e9:
ab:7b:0d:3a:7a:64:a1:c2:25:06:d7:ab:bb:30:62:
d2:29:7b:81:23:da:9a:ea:e0:73:1c:e3:ea:98:03:
3e:d0:2d:07:bd:69:b8:be:7d:33:79:f8:2b:eb:bf:
73:ae:4a:b6:fd:ef:c6:a7:51:5c:13:98:bb:ea:aa:
cb:ba:df:2a:f6:01:1a:73:40:4b:95:e4:96:01:13:
26:ed:c4:2b:dd:9a:59:94:12:5e:cf:4d:64:40:6f:
2b:77:24:72:f7:a9:a1:8e:5b:65:dc:f0:9d:4d:2a:
c7:62:c7:8b:de:60:e3:8a:0f:d2:92:cc:a4:46:f0:
a7:a8:9d:93:f2:2c:a3:f4:5a:a4:1a:23:ec:b3:c7:
e0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3E:C6:87:87:06:E5:7D:B6:6A:1E:1E:64:B1:7B:0C:CA:CE:EF:3B
X509v3 Authority Key Identifier:
keyid:A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:c4:37:9a:2f:f0:a0:c0:1b:ef:47:92:44:32:cf:18:ca:f3:
b5:ea:60:5b:4e:6a:d7:05:0a:9c:fe:37:f9:c9:f2:80:8c:4d:
a8:df:1f:45:0e:83:32:ec:4e:18:65:97:26:d0:00:be:a3:b8:
a5:43:fa:79:b2:c2:56:15:4d:41:2b:02:73:46:9e:43:55:56:
1b:25:79:2e:f5:dd:5b:d8:d8:2e:ca:45:35:57:55:b2:7b:05:
0a:80:31:a3:5c:e8:8a:f3:20:1e:2d:d8:30:20:21:06:f3:09:
ca:61:6a:b0:63:fc:2c:66:9c:86:41:0e:80:05:d3:ac:a9:cc:
70:29:84:d8:2d:43:32:6f:65:18:00:9f:60:e3:57:45:78:0f:
1b:e2:19:9b:7e:38:2a:fa:bf:d6:78:b8:1e:4c:aa:2f:ca:24:
3e:85:d2:e5:5c:6a:67:c7:fb:61:fe:ee:24:ce:b3:1c:a5:2e:
4a:d6:03:b9:67:a3:2d:fb:5e:14:4b:9e:37:63:16:94:e5:0a:
89:12:b0:b3:70:4e:ff:ba:89:95:7d:3e:22:06:dc:ff:eb:26:
1b:5d:e6:d7:39:23:22:0b:21:ba:53:cd:19:f2:13:8c:07:87:
7f:75:36:8f:68:5a:70:f4:1f:e7:6a:29:0d:e7:c5:72:af:e8:
bf:a7:33:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92ObhKeuIkPlgRx4aT0GcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NmUyMmI0NjIwYmQwNDJmNzNhMmE5NjIxZjBjOTI0N2Q1
MTI0OGEwHhcNMjUxMDE5MTkwMTE0WhcNMjUxMDIwMTkwMTE0WjAzMTEwLwYDVQQD
Eyg5MDNlYzY4Nzg3MDZlNTdkYjY2YTFlMWU2NGIxN2IwY2NhY2VlZjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRfbqbUX1Og0ZuhMteFaJ+O5B4IC
ewCPQrYtpZOKjeSzXC+bQXHE3uO0XAZb+A03dAM/gLmmaMp3x+jnkmNW/ls9t/6+
N8OSSDQ0oPqCTKL1V/9pdV4hhIvNbG0/g3udt5sWHx/8usLWN3e+qiBLgPE6pDNv
LOmrew06emShwiUG16u7MGLSKXuBI9qa6uBzHOPqmAM+0C0HvWm4vn0zefgr679z
rkq2/e/Gp1FcE5i76qrLut8q9gEac0BLleSWARMm7cQr3ZpZlBJez01kQG8rdyRy
96mhjltl3PCdTSrHYseL3mDjig/SksykRvCnqJ2T8iyj9FqkGiPss8fg/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJA+xoeHBuV9tmoeHmSxewzKzu87MB8GA1UdIwQY
MBaAFKVuIrRiC9BC9zoqliHwySR9USSKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFc0aXRHSUwwRUwzT2lxV0lmREpKSDFSSklvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9iNzgxOGQtMzI5OC00MDY5LTgyOTAt
YzZlMWNmZDYwNjYxLzEvcFc0aXRHSUwwRUwzT2lxV0lmREpKSDFSSklvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9iNzgxOGQtMzI5OC00MDY5LTgyOTAtYzZlMWNmZDYwNjYx
LzEvcFc0aXRHSUwwRUwzT2lxV0lmREpKSDFSSklvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIMQ3mi/w
oMAb70eSRDLPGMrztepgW05q1wUKnP43+cnygIxNqN8fRQ6DMuxOGGWXJtAAvqO4
pUP6ebLCVhVNQSsCc0aeQ1VWGyV5LvXdW9jYLspFNVdVsnsFCoAxo1zoivMgHi3Y
MCAhBvMJymFqsGP8LGachkEOgAXTrKnMcCmE2C1DMm9lGACfYONXRXgPG+IZm344
Kvq/1ni4HkyqL8okPoXS5VxqZ8f7Yf7uJM6zHKUuStYDuWejLfteFEueN2MWlOUK
iRKws3BO/7qJlX0+Igbc/+smG13m1zkjIgshulPNGfITjAeHf3U2j2hacPQf52op
DefFcq/ov6czaw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:58:44 2025 by rpki-client