Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
File: PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft (raw, json)
Hash identifier: 7/EuvCJBSaGHDQbqHaXSGe1X23sLbjatnLfUUAGc6bw=
Subject key identifier: 04:20:8D:FE:11:90:10:36:0F:37:82:A6:74:AB:B0:D7:FB:00:86:25
Authority key identifier: 3F:05:8E:43:2B:BF:72:36:97:50:A9:95:1D:52:59:43:0B:5C:A4:BF
Certificate issuer: /CN=3f058e432bbf72369750a9951d5259430b5ca4bf
Certificate serial: 0199FC5872FA85499B94BA6FF5E0C49CD640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:19 +0000
Manifest this update: Sun 19 Oct 2025 12:01:19 +0000
Manifest next update: Mon 20 Oct 2025 12:01:19 +0000
Files and hashes: 1: LHapQb8ix5yDr9XdIdq3SLfgGJQ.roa (hash: OTBcvGKIAwNH7dYThkaA46DYb8Du7nUhG7Wp8v0hqOA=)
2: PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl (hash: lnyZnK+ke6ZMRpRcVCrUnMhkfpgWjXx3cTeFFcNzPwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:72:fa:85:49:9b:94:ba:6f:f5:e0:c4:9c:d6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f058e432bbf72369750a9951d5259430b5ca4bf
Validity
Not Before: Oct 19 12:01:19 2025 GMT
Not After : Oct 20 12:01:19 2025 GMT
Subject: CN=04208dfe119010360f3782a674abb0d7fb008625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:15:64:ec:29:9a:08:1f:c3:15:9c:5c:4a:e2:
d4:e9:cb:d6:64:90:6d:f8:34:83:61:4d:d0:df:52:
92:c1:90:45:35:e3:b6:ad:6a:8a:b9:e5:6d:a8:12:
4e:31:d0:c5:88:c6:d8:1b:21:ec:86:9b:3b:64:0b:
f8:a8:55:f0:00:0b:1a:63:80:08:2c:19:42:e3:35:
a5:95:db:a3:85:9b:ed:4c:89:e4:57:d6:e3:e3:2e:
f7:f5:9e:c1:2e:08:7a:6b:5b:02:91:d5:04:6f:54:
40:7e:ec:be:6b:c8:40:5a:a5:6d:84:5c:76:09:bf:
14:ab:e5:ec:3f:6e:ac:44:53:39:c6:9a:8c:40:e9:
3a:97:07:dd:d4:37:ea:79:64:ea:7c:4a:fe:a6:14:
b3:7c:29:e4:f9:1a:96:82:09:82:58:a4:a6:17:e8:
33:5c:64:a0:4f:7b:77:91:d6:67:2e:39:71:18:a2:
3c:b1:e7:13:c8:69:61:d7:30:fb:e1:53:c7:c2:f5:
33:f3:39:45:13:2f:a0:33:d5:65:8e:d5:01:ea:8e:
63:08:98:ed:7c:d8:15:19:7c:06:60:63:9d:6a:e9:
a6:78:e0:e2:bc:15:ef:ef:f7:e7:eb:ec:62:8c:10:
01:c6:bf:5e:92:84:e6:bc:59:c6:e1:26:71:cb:e0:
14:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:20:8D:FE:11:90:10:36:0F:37:82:A6:74:AB:B0:D7:FB:00:86:25
X509v3 Authority Key Identifier:
keyid:3F:05:8E:43:2B:BF:72:36:97:50:A9:95:1D:52:59:43:0B:5C:A4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:08:e8:d8:27:2f:e6:e4:d8:67:7d:3e:67:b6:8c:c9:3e:fe:
c3:5c:a9:1e:e7:fd:a6:08:80:ad:b4:e5:10:c3:76:d4:f6:b4:
36:ae:3e:0e:2e:b1:88:2c:2e:6c:ee:e8:dd:8b:53:fc:80:98:
90:96:69:fe:95:bb:38:5e:4b:ad:12:3b:f4:fc:c6:63:b2:93:
11:ae:7d:63:32:2f:14:a6:ee:98:c0:29:39:c4:51:3b:3c:02:
4f:1c:41:c3:02:71:d1:5d:5c:de:f6:9d:5e:75:5b:ee:a5:cc:
b6:b4:e5:09:f6:0a:b6:f9:2b:0a:34:6b:f4:95:c6:83:d7:2a:
3b:de:ee:f3:26:e3:7a:f7:70:03:90:34:3e:3f:77:0b:eb:e6:
1e:66:36:53:bc:61:89:d3:67:bb:50:b5:13:3f:17:eb:0c:3f:
da:aa:67:f3:b1:22:68:42:a8:d8:ce:05:51:46:fc:33:87:90:
9c:41:23:85:ac:5e:e9:cc:d2:ad:36:54:bf:65:53:b5:f5:9c:
e8:e3:75:02:21:05:35:aa:7a:5e:02:87:00:a7:7b:b2:71:9c:
a1:3e:d8:d6:84:50:dc:9b:60:f3:28:80:ac:8d:33:a7:da:4c:
b7:e6:dc:bf:fd:87:f1:f7:40:a1:81:b1:03:a4:63:8f:c9:b8:
6b:87:8b:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WHL6hUmblLpv9eDEnNZAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMDU4ZTQzMmJiZjcyMzY5NzUwYTk5NTFkNTI1OTQzMGI1
Y2E0YmYwHhcNMjUxMDE5MTIwMTE5WhcNMjUxMDIwMTIwMTE5WjAzMTEwLwYDVQQD
EygwNDIwOGRmZTExOTAxMDM2MGYzNzgyYTY3NGFiYjBkN2ZiMDA4NjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRVk7CmaCB/DFZxcSuLU6cvWZJBt
+DSDYU3Q31KSwZBFNeO2rWqKueVtqBJOMdDFiMbYGyHshps7ZAv4qFXwAAsaY4AI
LBlC4zWlldujhZvtTInkV9bj4y739Z7BLgh6a1sCkdUEb1RAfuy+a8hAWqVthFx2
Cb8Uq+XsP26sRFM5xpqMQOk6lwfd1DfqeWTqfEr+phSzfCnk+RqWggmCWKSmF+gz
XGSgT3t3kdZnLjlxGKI8secTyGlh1zD74VPHwvUz8zlFEy+gM9VljtUB6o5jCJjt
fNgVGXwGYGOdaummeODivBXv7/fn6+xijBABxr9ekoTmvFnG4SZxy+AU/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQgjf4RkBA2DzeCpnSrsNf7AIYlMB8GA1UdIwQY
MBaAFD8FjkMrv3I2l1CplR1SWUMLXKS/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHdXT1F5dV9jamFYVUttVkhWSlpRd3RjcEw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9kZTY4YzYtNjUwZi00ZGZhLWJkMTMt
MDAwMDgyYzEyM2U3LzEvUHdXT1F5dV9jamFYVUttVkhWSlpRd3RjcEw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9kZTY4YzYtNjUwZi00ZGZhLWJkMTMtMDAwMDgyYzEyM2U3
LzEvUHdXT1F5dV9jamFYVUttVkhWSlpRd3RjcEw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMAjo2Ccv
5uTYZ30+Z7aMyT7+w1ypHuf9pgiArbTlEMN21Pa0Nq4+Di6xiCwubO7o3YtT/ICY
kJZp/pW7OF5LrRI79PzGY7KTEa59YzIvFKbumMApOcRROzwCTxxBwwJx0V1c3vad
XnVb7qXMtrTlCfYKtvkrCjRr9JXGg9cqO97u8ybjevdwA5A0Pj93C+vmHmY2U7xh
idNnu1C1Ez8X6ww/2qpn87EiaEKo2M4FUUb8M4eQnEEjhaxe6czSrTZUv2VTtfWc
6ON1AiEFNap6XgKHAKd7snGcoT7Y1oRQ3Jtg8yiArI0zp9pMt+bcv/2H8fdAoYGx
A6Rjj8m4a4eLXg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:37 2025 by rpki-client