Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
File: P1vEQBQoW28-KHKuz11PM-Jozos.mft (raw, json)
Hash identifier: hr83eYKA4UFbpzuhRNK58mDKmyuGHLMb0/NiXqDu7Jw=
Subject key identifier: 18:8C:DF:35:27:13:56:FC:38:DA:31:40:A1:6A:1B:38:A5:53:38:04
Authority key identifier: 3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
Certificate issuer: /CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Certificate serial: 0199FB4614583C7A819EC4D7F07974CD9FDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
Manifest number: 07E0
Signing time: Sun 19 Oct 2025 07:01:37 +0000
Manifest this update: Sun 19 Oct 2025 07:01:37 +0000
Manifest next update: Mon 20 Oct 2025 07:01:37 +0000
Files and hashes: 1: AcEkQsHgOk9cJvafcwY_24-gqJU.roa (hash: P0WFMbng9Ro3ND0yeTy1ArY8fd/+6N/p4Vx6hJOnIpk=)
2: AhGacAZRO8Gx3hNBgiDjl4oZgqI.roa (hash: /EpJOq122VUgjLXObaWDOaWwB7lmX3CrZN3WS11mATY=)
3: P1vEQBQoW28-KHKuz11PM-Jozos.crl (hash: XQZ8hsRv7XDeM8EzINBSTBcDwQO1H4ZDU77doeDTEe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:14:58:3c:7a:81:9e:c4:d7:f0:79:74:cd:9f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Validity
Not Before: Oct 19 07:01:37 2025 GMT
Not After : Oct 20 07:01:37 2025 GMT
Subject: CN=188cdf35271356fc38da3140a16a1b38a5533804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:81:db:0b:3a:24:07:73:d1:3e:7e:c2:f8:b0:
1a:92:e3:95:c4:9d:e9:be:d9:cb:76:29:99:ea:30:
87:06:57:f4:29:ed:dc:80:a5:b0:47:3c:68:ca:a5:
ef:e2:35:cb:4c:e8:c0:e9:74:96:b2:21:ea:c6:06:
d8:46:52:f9:b7:72:10:6b:2e:f8:5d:ae:f6:71:6b:
0f:d0:f1:31:ec:3d:c4:b0:59:b4:4d:45:a7:29:34:
a8:53:70:be:b8:da:b0:32:83:1f:d3:f6:51:12:8d:
bc:ea:50:98:f1:70:ba:34:34:b5:9a:f5:3a:66:ec:
47:3e:86:a3:26:44:7d:86:96:cd:63:0c:05:9b:9a:
51:6c:c7:71:7c:be:9e:9c:0d:19:eb:43:42:54:2b:
05:06:cc:86:18:70:e0:b4:b3:7f:75:d0:86:58:b2:
fb:8e:5e:ca:7c:9b:02:fb:98:ac:35:b4:31:4f:f2:
28:cc:f5:9f:bf:3d:89:54:74:95:ec:fa:de:de:b8:
54:c4:b5:ce:c7:ca:9f:3e:a6:74:9b:4d:64:cc:62:
68:d8:ef:91:da:d4:0e:9b:77:23:c3:09:6a:9c:9a:
f0:43:67:52:31:03:ef:5b:b5:2b:93:f9:19:0f:e2:
74:4b:33:ed:52:16:48:65:01:a7:b4:15:53:18:91:
7b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8C:DF:35:27:13:56:FC:38:DA:31:40:A1:6A:1B:38:A5:53:38:04
X509v3 Authority Key Identifier:
keyid:3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:97:d2:83:34:a1:04:c3:69:08:00:70:09:40:91:ca:77:59:
c3:1c:a5:b0:7e:04:55:ac:60:dc:2c:e9:6d:02:27:f0:91:c5:
a2:c1:c0:e8:06:4c:ca:72:16:4b:b7:e2:d9:22:82:1c:00:9d:
8c:13:2a:9d:76:57:5b:81:84:c9:49:ca:72:7b:9b:78:6d:8d:
da:93:9a:68:f5:f7:77:4a:94:cc:73:31:32:da:e2:39:f7:01:
ad:8b:a0:13:dd:81:23:b6:3b:7a:4d:ae:f1:43:f8:8f:52:31:
c5:8e:2c:3a:5a:e3:b3:21:c0:b5:bb:b1:af:0b:ff:e9:5e:7b:
d6:2d:fc:11:dc:f9:5b:b8:2f:ca:05:b1:ee:3f:fa:f8:9f:76:
bc:31:64:c2:08:b0:06:59:1b:b8:52:69:d1:bb:92:31:e6:b7:
1a:95:44:20:b6:c1:37:83:b1:2d:3c:24:fd:59:f7:6f:b9:1a:
c6:e0:f5:1f:71:de:e6:df:b0:aa:c8:c5:fd:71:cc:6a:60:31:
4f:59:6c:8c:dc:83:bf:ea:3f:49:ae:58:7f:a5:d8:78:5e:c2:
57:40:a1:26:53:24:5a:57:cd:71:88:6f:cd:4c:62:ef:00:a3:
1a:a8:ae:77:73:3a:cc:e1:1a:9f:ce:9f:26:fc:ae:d4:36:9b:
ca:a3:35:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RhRYPHqBnsTX8Hl0zZ/bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmNWJjNDQwMTQyODViNmYzZTI4NzJhZWNmNWQ0ZjMzZTI2
OGNlOGIwHhcNMjUxMDE5MDcwMTM3WhcNMjUxMDIwMDcwMTM3WjAzMTEwLwYDVQQD
EygxODhjZGYzNTI3MTM1NmZjMzhkYTMxNDBhMTZhMWIzOGE1NTMzODA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04HbCzokB3PRPn7C+LAakuOVxJ3p
vtnLdimZ6jCHBlf0Ke3cgKWwRzxoyqXv4jXLTOjA6XSWsiHqxgbYRlL5t3IQay74
Xa72cWsP0PEx7D3EsFm0TUWnKTSoU3C+uNqwMoMf0/ZREo286lCY8XC6NDS1mvU6
ZuxHPoajJkR9hpbNYwwFm5pRbMdxfL6enA0Z60NCVCsFBsyGGHDgtLN/ddCGWLL7
jl7KfJsC+5isNbQxT/IozPWfvz2JVHSV7Pre3rhUxLXOx8qfPqZ0m01kzGJo2O+R
2tQOm3cjwwlqnJrwQ2dSMQPvW7Urk/kZD+J0SzPtUhZIZQGntBVTGJF7ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBiM3zUnE1b8ONoxQKFqGzilUzgEMB8GA1UdIwQY
MBaAFD9bxEAUKFtvPihyrs9dTzPiaM6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDF2RVFCUW9XMjgtS0hLdXoxMVBNLUpvem9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zMjI2OTMtZTU4Yi00OGUyLWJkZDkt
MDI5NTNjZTYzODQzLzEvUDF2RVFCUW9XMjgtS0hLdXoxMVBNLUpvem9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8zMjI2OTMtZTU4Yi00OGUyLWJkZDktMDI5NTNjZTYzODQz
LzEvUDF2RVFCUW9XMjgtS0hLdXoxMVBNLUpvem9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADpfSgzSh
BMNpCABwCUCRyndZwxylsH4EVaxg3CzpbQIn8JHFosHA6AZMynIWS7fi2SKCHACd
jBMqnXZXW4GEyUnKcnubeG2N2pOaaPX3d0qUzHMxMtriOfcBrYugE92BI7Y7ek2u
8UP4j1IxxY4sOlrjsyHAtbuxrwv/6V571i38Edz5W7gvygWx7j/6+J92vDFkwgiw
BlkbuFJp0buSMea3GpVEILbBN4OxLTwk/Vn3b7kaxuD1H3He5t+wqsjF/XHMamAx
T1lsjNyDv+o/Sa5Yf6XYeF7CV0ChJlMkWlfNcYhvzUxi7wCjGqiud3M6zOEan86f
Jvyu1DabyqM1hQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:52 2025 by rpki-client