Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
File: PgzNJQR7nLi28Bhnze3oJW9zSiM.mft (raw, json)
Hash identifier: C0//J7/P1WdgV6sCQSo6Vek+EXMDYHnBDEleKmKlbjs=
Subject key identifier: 59:CE:A4:2C:2D:6F:5D:51:5F:36:99:E6:74:04:45:88:AA:30:57:E7
Authority key identifier: 3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
Certificate issuer: /CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Certificate serial: 0199FCC62CE93740A61BCA05691191197348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
Manifest number: 0999
Signing time: Sun 19 Oct 2025 14:01:10 +0000
Manifest this update: Sun 19 Oct 2025 14:01:10 +0000
Manifest next update: Mon 20 Oct 2025 14:01:10 +0000
Files and hashes: 1: PgzNJQR7nLi28Bhnze3oJW9zSiM.crl (hash: y9HyIOoZVEhSRScrYKyS08+uaaJ1WwhJqj5lyi3VrOo=)
2: tNlE-RsS8yP8q3aEd77vtdKV4ao.roa (hash: 0s1wr6faxjcsfPekqZ/FFwhO5dh5LLtuhFGeIZLAT0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:2c:e9:37:40:a6:1b:ca:05:69:11:91:19:73:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Validity
Not Before: Oct 19 14:01:10 2025 GMT
Not After : Oct 20 14:01:10 2025 GMT
Subject: CN=59cea42c2d6f5d515f3699e674044588aa3057e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:31:af:49:be:8a:52:29:29:1f:f5:65:2d:09:
15:df:d0:4c:34:8d:c5:c5:62:08:77:ac:7d:38:f8:
50:8b:fb:1a:08:6c:85:76:24:28:04:d8:7c:62:23:
cf:81:7e:4d:34:19:f4:74:c4:ee:3b:3c:ad:30:9a:
23:71:73:d5:6e:a9:bb:a6:67:51:2b:0d:64:ab:f9:
a2:59:f5:b8:18:a9:eb:eb:cc:26:73:5c:6d:60:c8:
8d:ce:7f:6c:09:13:ce:4d:84:36:bc:53:51:12:48:
8b:41:0b:1c:53:c8:b8:88:b0:85:2d:d1:0d:cd:7c:
c6:f3:10:89:e7:02:a8:e6:ac:69:98:e7:25:f7:70:
fa:f7:f0:95:24:63:ff:36:d1:a1:52:be:cf:c3:96:
75:c0:37:ff:a6:02:42:08:f1:01:11:70:90:ca:59:
4f:ba:90:0a:73:2c:1c:72:bc:6f:44:5e:36:fa:a2:
5d:64:f8:77:34:ce:40:28:60:31:c2:0d:24:b3:01:
10:b7:6d:6f:b1:90:61:49:4f:ad:94:a5:15:13:67:
ef:22:5f:a6:f5:4b:23:70:b0:78:90:cc:1c:f9:f9:
0e:40:99:78:c5:50:48:60:95:2c:ae:fa:35:0b:63:
c2:9c:0d:12:0a:9e:20:54:f8:65:ae:56:53:da:98:
93:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CE:A4:2C:2D:6F:5D:51:5F:36:99:E6:74:04:45:88:AA:30:57:E7
X509v3 Authority Key Identifier:
keyid:3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:1d:d8:c3:d8:93:af:47:9b:b5:9b:6d:f4:e9:73:06:9e:b7:
f3:15:d9:27:08:fd:be:ab:07:d3:2a:5d:10:95:29:c0:d9:3b:
e0:89:71:e3:ec:e9:e7:1b:75:df:56:c8:2f:57:5c:2f:30:1d:
55:0b:93:a8:3c:2d:44:b4:40:5e:a0:b1:37:0f:41:49:a5:a3:
15:d8:72:9f:08:be:37:84:7d:88:9a:cd:1c:d3:28:79:73:30:
bf:d0:da:fb:5a:42:44:cb:3b:f7:93:c1:16:fb:2a:52:30:65:
e4:38:66:c0:fc:3f:94:96:cf:f8:ae:0e:be:94:d6:8a:17:31:
49:0f:d7:5a:4b:5b:d9:23:6f:34:64:d2:f0:ad:f2:ae:d6:c1:
64:be:c2:16:91:65:27:81:41:d7:a1:5c:37:16:d4:34:90:34:
d0:6d:de:46:cb:cb:df:4f:53:9d:b2:67:3d:10:89:6e:3e:a7:
8d:d8:75:41:5f:28:61:e9:71:e8:1f:42:6c:c2:ad:a1:91:87:
f9:7f:1c:59:88:bd:ad:8f:3c:77:b9:a0:45:ff:f2:c3:d0:e6:
40:69:d1:9b:de:ce:b0:4b:b8:da:29:77:8b:26:42:eb:f2:3b:
85:57:a7:9b:40:41:6d:36:5e:af:a6:8c:25:aa:05:23:f7:f2:
d0:f7:62:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xizpN0CmG8oFaRGRGXNIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMGNjZDI1MDQ3YjljYjhiNmYwMTg2N2NkZWRlODI1NmY3
MzRhMjMwHhcNMjUxMDE5MTQwMTEwWhcNMjUxMDIwMTQwMTEwWjAzMTEwLwYDVQQD
Eyg1OWNlYTQyYzJkNmY1ZDUxNWYzNjk5ZTY3NDA0NDU4OGFhMzA1N2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDGvSb6KUikpH/VlLQkV39BMNI3F
xWIId6x9OPhQi/saCGyFdiQoBNh8YiPPgX5NNBn0dMTuOzytMJojcXPVbqm7pmdR
Kw1kq/miWfW4GKnr68wmc1xtYMiNzn9sCRPOTYQ2vFNREkiLQQscU8i4iLCFLdEN
zXzG8xCJ5wKo5qxpmOcl93D69/CVJGP/NtGhUr7Pw5Z1wDf/pgJCCPEBEXCQyllP
upAKcywccrxvRF42+qJdZPh3NM5AKGAxwg0kswEQt21vsZBhSU+tlKUVE2fvIl+m
9UsjcLB4kMwc+fkOQJl4xVBIYJUsrvo1C2PCnA0SCp4gVPhlrlZT2piTfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnOpCwtb11RXzaZ5nQERYiqMFfnMB8GA1UdIwQY
MBaAFD4MzSUEe5y4tvAYZ83t6CVvc0ojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGd6TkpRUjduTGkyOEJobnplM29KVzl6U2lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC85Yzg2MzEtZGM2YS00NWMyLWJjZjkt
OWNkMDE3MjQzYTA2LzEvUGd6TkpRUjduTGkyOEJobnplM29KVzl6U2lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC85Yzg2MzEtZGM2YS00NWMyLWJjZjktOWNkMDE3MjQzYTA2
LzEvUGd6TkpRUjduTGkyOEJobnplM29KVzl6U2lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZB3Yw9iT
r0ebtZtt9OlzBp638xXZJwj9vqsH0ypdEJUpwNk74Ilx4+zp5xt131bIL1dcLzAd
VQuTqDwtRLRAXqCxNw9BSaWjFdhynwi+N4R9iJrNHNMoeXMwv9Da+1pCRMs795PB
FvsqUjBl5DhmwPw/lJbP+K4OvpTWihcxSQ/XWktb2SNvNGTS8K3yrtbBZL7CFpFl
J4FB16FcNxbUNJA00G3eRsvL309TnbJnPRCJbj6njdh1QV8oYelx6B9CbMKtoZGH
+X8cWYi9rY88d7mgRf/yw9DmQGnRm97OsEu42il3iyZC6/I7hVenm0BBbTZer6aM
JaoFI/fy0PdilQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:11 2025 by rpki-client