Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
File: PT-Hu394dKp-Fc_sm79qrjyc4zo.mft (raw, json)
Hash identifier: /yNFixzW+uEXA2WgjpIzndFZYlJFBK/q63yqR7oKKfQ=
Subject key identifier: 4A:AD:F9:7A:32:E4:A4:4C:8C:6B:4B:77:CF:AE:4C:EB:B1:A2:CE:22
Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
Certificate issuer: /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Certificate serial: 0199FC2163D388D5233042B65C5AD910CC99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
Manifest number: 1063
Signing time: Sun 19 Oct 2025 11:01:10 +0000
Manifest this update: Sun 19 Oct 2025 11:01:10 +0000
Manifest next update: Mon 20 Oct 2025 11:01:10 +0000
Files and hashes: 1: 5W1H_E66w8rreTv-sH39ih7Q9Kc.roa (hash: ds103SAEhzJEdHJkH+426YBLHIwGf7CU7ARmWBMf450=)
2: PT-Hu394dKp-Fc_sm79qrjyc4zo.crl (hash: QqWHA1auso2iyJ3znvWyGUhgACXBUqXXdUh4EY8+NwA=)
3: Tsid8gfkYRwmSvUBez-ZQcWUur8.roa (hash: msvAp4jHrZw21tVBTpGpRqFg3CGocyYoBz7jW2toIuQ=)
4: VnPSleeMHT-jEDZJvcj7wswo-uc.roa (hash: J8mE9CeDpgMjScDrMhJ4WgvJMldlEykT+vy+lBJjBdk=)
5: VyJNQqph-KXg7u6RUzzJN3rupCA.roa (hash: LooQO9Bq7ra/KCVGLYawPG8pRB8eBgj1f03IAunPvdE=)
6: Xy7X7Y7n1dwT-JcABr_7kk_W05o.roa (hash: AQ2x/CDJ1G+4qJ9b94DvcRRy4bmdLPUtpu6pmkV+OCs=)
7: _mV-RGY-pv2pFTbkkb6uI5Oje_I.roa (hash: p4eENjI/cwmo6qgfAyd3PHUV1z0BYeTGomC/74ioJaI=)
8: b-VhFar5Bob8wl8OUu2ZPN9DNEQ.roa (hash: tvCO5UR2+v1lg6StGj4o6eWVSuPQeXT3DDeXMyH7vLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:63:d3:88:d5:23:30:42:b6:5c:5a:d9:10:cc:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Validity
Not Before: Oct 19 11:01:10 2025 GMT
Not After : Oct 20 11:01:10 2025 GMT
Subject: CN=4aadf97a32e4a44c8c6b4b77cfae4cebb1a2ce22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:34:1f:ea:e7:cf:30:c4:18:df:56:bc:45:20:
26:d0:ab:42:19:6f:60:33:05:e0:2a:0f:37:a0:f8:
04:4f:70:9a:b4:11:05:d6:bf:ed:dd:da:09:72:08:
d5:02:56:df:4e:0f:1a:73:6d:b7:a8:ba:0d:67:a7:
7a:e6:b7:20:09:70:24:16:dd:b6:56:87:49:48:f0:
02:7f:3a:e5:cd:01:79:a8:bc:81:98:1e:d2:72:a8:
97:87:19:ec:8d:0c:a4:dd:23:14:8e:5c:2b:8b:9f:
1a:87:71:7c:d9:b7:83:b3:d7:2b:53:7a:bc:87:df:
bb:cb:8b:cb:f8:c7:7c:f7:ff:d2:37:d8:99:2d:cb:
a6:26:a4:bf:6e:89:18:2b:32:c9:ae:fa:ae:3a:84:
bc:22:13:31:94:2d:b3:e8:85:e0:f5:b0:fd:00:c9:
f4:f1:6c:8f:78:44:7d:e0:5f:66:05:fd:8f:25:79:
1a:aa:dc:0e:59:4d:c2:1a:fa:29:c3:92:fd:af:3d:
f7:82:fa:90:03:f6:03:57:0a:33:22:c7:81:89:f3:
fe:13:76:5c:84:f5:fa:d9:7b:a7:f7:7a:33:ce:3f:
ec:a8:ea:0e:a5:cb:2e:52:6e:53:d0:8a:f5:f8:7e:
13:d0:a0:17:72:af:2e:b9:55:31:a7:30:03:45:2c:
5d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AD:F9:7A:32:E4:A4:4C:8C:6B:4B:77:CF:AE:4C:EB:B1:A2:CE:22
X509v3 Authority Key Identifier:
keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:3e:19:3c:6a:2a:9c:98:87:90:26:0e:4b:bf:a2:e5:9e:c5:
7d:1b:ef:ca:f9:9d:76:29:08:0a:1f:b7:27:74:a3:ef:76:5c:
04:05:16:7f:4f:c2:86:bd:f9:00:bd:e0:da:c8:73:0b:70:68:
27:70:0f:7a:e0:b0:65:c7:e3:d6:c3:e2:bf:0b:f8:d7:cd:58:
3a:28:13:67:19:2a:7b:5b:a5:81:68:dd:55:d4:c9:d1:c1:34:
d6:3b:c6:d8:ae:ee:23:4a:84:e4:d4:64:78:6d:7c:5c:99:70:
5c:11:67:fc:64:90:90:30:9e:64:7c:ef:40:51:cd:c4:d6:3b:
b9:de:1b:79:af:e4:dc:8f:04:21:f9:ea:53:24:92:97:a0:96:
16:c8:00:9b:96:57:8f:21:1d:6c:9f:a4:78:9b:cc:a6:32:c3:
77:0a:36:55:ad:ae:a1:8c:f3:f4:06:ce:7b:59:57:25:80:8b:
25:55:9a:c3:9e:4c:51:d7:cf:b8:1e:f3:e8:d7:58:05:84:a9:
35:a8:e3:ff:ee:04:da:5d:61:da:d2:c9:a9:b9:af:82:f5:8a:
df:2e:db:0e:6b:49:44:d7:e4:43:25:9e:31:66:0e:02:e3:68:
56:d6:77:40:01:1c:ba:1e:11:c6:59:3b:e5:8c:55:be:79:54:
9f:72:64:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IWPTiNUjMEK2XFrZEMyZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkM2Y4N2JiN2Y3ODc0YWE3ZTE1Y2ZlYzliYmY2YWFlM2M5
Y2UzM2EwHhcNMjUxMDE5MTEwMTEwWhcNMjUxMDIwMTEwMTEwWjAzMTEwLwYDVQQD
Eyg0YWFkZjk3YTMyZTRhNDRjOGM2YjRiNzdjZmFlNGNlYmIxYTJjZTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDQf6ufPMMQY31a8RSAm0KtCGW9g
MwXgKg83oPgET3CatBEF1r/t3doJcgjVAlbfTg8ac223qLoNZ6d65rcgCXAkFt22
VodJSPACfzrlzQF5qLyBmB7ScqiXhxnsjQyk3SMUjlwri58ah3F82beDs9crU3q8
h9+7y4vL+Md89//SN9iZLcumJqS/bokYKzLJrvquOoS8IhMxlC2z6IXg9bD9AMn0
8WyPeER94F9mBf2PJXkaqtwOWU3CGvopw5L9rz33gvqQA/YDVwozIseBifP+E3Zc
hPX62Xun93ozzj/sqOoOpcsuUm5T0Ir1+H4T0KAXcq8uuVUxpzADRSxdMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqt+Xoy5KRMjGtLd8+uTOuxos4iMB8GA1UdIwQY
MBaAFD0/h7t/eHSqfhXP7Ju/aq48nOM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MTAxNWEtMTFiZS00NzFlLTk1OTIt
NjJiZTUzNDI1Njc2LzEvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC83MTAxNWEtMTFiZS00NzFlLTk1OTItNjJiZTUzNDI1Njc2
LzEvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHj4ZPGoq
nJiHkCYOS7+i5Z7FfRvvyvmddikICh+3J3Sj73ZcBAUWf0/Chr35AL3g2shzC3Bo
J3APeuCwZcfj1sPivwv4181YOigTZxkqe1ulgWjdVdTJ0cE01jvG2K7uI0qE5NRk
eG18XJlwXBFn/GSQkDCeZHzvQFHNxNY7ud4bea/k3I8EIfnqUySSl6CWFsgAm5ZX
jyEdbJ+keJvMpjLDdwo2Va2uoYzz9AbOe1lXJYCLJVWaw55MUdfPuB7z6NdYBYSp
Najj/+4E2l1h2tLJqbmvgvWK3y7bDmtJRNfkQyWeMWYOAuNoVtZ3QAEcuh4Rxlk7
5YxVvnlUn3JkbA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:46 2025 by rpki-client