Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5cac1e-831d-4d9e-9a22-1eef11a8dddf/1/PidqxRoTJAHbTNdB2GalRiKg0Vw.mft
File: PidqxRoTJAHbTNdB2GalRiKg0Vw.mft (raw, json)
Hash identifier: y7Z0EtkfB87wgcYepNC6pWSjmjv/XvzVeTlH82IKUrI=
Subject key identifier: 80:4D:51:0F:6A:53:23:3C:17:97:88:18:E1:8C:11:1B:59:91:8C:A4
Authority key identifier: 3E:27:6A:C5:1A:13:24:01:DB:4C:D7:41:D8:66:A5:46:22:A0:D1:5C
Certificate issuer: /CN=3e276ac51a132401db4cd741d866a54622a0d15c
Certificate serial: 0199FE7E1FDF716E6196228203C1B4DE4750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PidqxRoTJAHbTNdB2GalRiKg0Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5cac1e-831d-4d9e-9a22-1eef11a8dddf/1/PidqxRoTJAHbTNdB2GalRiKg0Vw.mft
Manifest number: 1406
Signing time: Sun 19 Oct 2025 22:01:42 +0000
Manifest this update: Sun 19 Oct 2025 22:01:42 +0000
Manifest next update: Mon 20 Oct 2025 22:01:42 +0000
Files and hashes: 1: PidqxRoTJAHbTNdB2GalRiKg0Vw.crl (hash: INMnWYCC1sQ2jc5I0EthE4nuL1fuvve8gzGowau2LU4=)
2: mmsyAnMHt_dbYyNaAmRzOf1ER00.roa (hash: Z0B0gLnq6WYbQAuekKr8EymO3fzsvhfiIyL1pWQiz74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/5cac1e-831d-4d9e-9a22-1eef11a8dddf/1/PidqxRoTJAHbTNdB2GalRiKg0Vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/5cac1e-831d-4d9e-9a22-1eef11a8dddf/1/PidqxRoTJAHbTNdB2GalRiKg0Vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PidqxRoTJAHbTNdB2GalRiKg0Vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:1f:df:71:6e:61:96:22:82:03:c1:b4:de:47:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e276ac51a132401db4cd741d866a54622a0d15c
Validity
Not Before: Oct 19 22:01:42 2025 GMT
Not After : Oct 20 22:01:42 2025 GMT
Subject: CN=804d510f6a53233c17978818e18c111b59918ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:65:79:ab:0e:0a:06:cb:a0:05:19:1e:bc:04:
a5:de:16:56:a4:9b:1a:0e:ea:ba:2e:7b:49:71:a6:
76:5b:8e:67:76:6c:26:6d:79:f5:08:a3:7b:1a:45:
78:0e:94:d3:0f:31:42:1e:a0:ef:8b:fb:f6:bd:6d:
c6:11:2b:01:ab:74:e1:7f:15:6c:40:69:be:37:be:
72:f6:76:bf:3b:76:0d:e4:63:5d:a8:76:12:9a:f6:
02:38:56:6b:1e:43:1c:8c:02:a4:8d:e9:fe:2d:af:
b0:ab:31:e6:0b:95:dc:8e:68:59:eb:65:d7:73:b0:
2f:57:8d:f1:87:0d:af:c2:66:e9:59:84:fe:c7:cc:
5e:dc:36:f9:e5:fe:0e:98:fb:25:2f:8c:ed:72:6b:
5c:0b:45:cf:4a:86:00:20:83:c9:65:f4:4f:c0:7a:
1e:6a:26:f8:bd:ae:fa:78:84:69:e4:4e:36:3e:34:
88:db:51:43:cc:41:0b:f4:9e:f6:07:0a:1a:01:60:
09:ce:21:e8:1d:e4:2b:d5:52:4c:03:0a:bd:ae:21:
08:e8:fe:ae:35:0a:d1:4e:0b:8a:ae:7f:5e:a2:0e:
ce:94:ce:e8:4f:0b:2c:5e:45:dc:4b:eb:85:93:46:
e0:54:4b:f2:8d:6d:b3:2a:d2:d4:dc:05:a7:b0:48:
e3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4D:51:0F:6A:53:23:3C:17:97:88:18:E1:8C:11:1B:59:91:8C:A4
X509v3 Authority Key Identifier:
keyid:3E:27:6A:C5:1A:13:24:01:DB:4C:D7:41:D8:66:A5:46:22:A0:D1:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PidqxRoTJAHbTNdB2GalRiKg0Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5cac1e-831d-4d9e-9a22-1eef11a8dddf/1/PidqxRoTJAHbTNdB2GalRiKg0Vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5cac1e-831d-4d9e-9a22-1eef11a8dddf/1/PidqxRoTJAHbTNdB2GalRiKg0Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:8c:ce:60:99:e9:e4:3b:63:94:c4:92:fa:b3:d3:fa:90:5a:
22:6a:91:3a:13:74:94:fb:cd:a4:7d:b0:5b:de:da:28:a4:98:
97:40:42:70:34:34:66:c3:db:2f:4c:f7:fb:19:48:88:c9:ad:
3e:50:e4:53:b2:e0:ce:b4:8b:eb:43:cb:2e:53:19:99:eb:f5:
d2:62:7b:c4:63:d4:9d:e9:96:80:cc:70:e3:ef:be:e0:3d:0d:
16:7c:ae:6c:2a:5d:7e:0b:e6:9d:11:c7:ab:d9:fe:31:e6:da:
e6:20:00:7b:ed:45:83:10:fa:ba:b4:1a:55:4a:cf:8c:7d:d2:
78:82:65:f4:b2:23:5a:4c:d2:9f:98:81:62:2a:85:e8:6b:1f:
45:c8:2f:aa:ae:56:54:d9:f6:28:2a:a7:8f:cd:d7:08:4a:08:
6f:9a:1f:05:72:a6:db:6f:3c:48:b2:c2:33:6b:0d:d4:0d:26:
ed:96:ff:3d:dd:5c:ea:b1:ae:18:00:de:41:af:02:be:e6:2c:
df:e2:2d:07:d2:17:5f:15:e6:23:b5:93:98:94:e8:f8:26:5f:
db:a1:58:22:ca:93:2b:78:88:bb:c4:2c:8a:dd:b1:5b:05:0e:
e8:e5:7e:07:c2:ca:02:38:e2:b3:d9:fa:29:af:c9:a8:ec:12:
5e:ed:d3:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+fh/fcW5hliKCA8G03kdQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMjc2YWM1MWExMzI0MDFkYjRjZDc0MWQ4NjZhNTQ2MjJh
MGQxNWMwHhcNMjUxMDE5MjIwMTQyWhcNMjUxMDIwMjIwMTQyWjAzMTEwLwYDVQQD
Eyg4MDRkNTEwZjZhNTMyMzNjMTc5Nzg4MThlMThjMTExYjU5OTE4Y2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGV5qw4KBsugBRkevASl3hZWpJsa
Duq6LntJcaZ2W45ndmwmbXn1CKN7GkV4DpTTDzFCHqDvi/v2vW3GESsBq3ThfxVs
QGm+N75y9na/O3YN5GNdqHYSmvYCOFZrHkMcjAKkjen+La+wqzHmC5XcjmhZ62XX
c7AvV43xhw2vwmbpWYT+x8xe3Db55f4OmPslL4ztcmtcC0XPSoYAIIPJZfRPwHoe
aib4va76eIRp5E42PjSI21FDzEEL9J72BwoaAWAJziHoHeQr1VJMAwq9riEI6P6u
NQrRTguKrn9eog7OlM7oTwssXkXcS+uFk0bgVEvyjW2zKtLU3AWnsEjjnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIBNUQ9qUyM8F5eIGOGMERtZkYykMB8GA1UdIwQY
MBaAFD4nasUaEyQB20zXQdhmpUYioNFcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGlkcXhSb1RKQUhiVE5kQjJHYWxSaUtnMFZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi81Y2FjMWUtODMxZC00ZDllLTlhMjIt
MWVlZjExYThkZGRmLzEvUGlkcXhSb1RKQUhiVE5kQjJHYWxSaUtnMFZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi81Y2FjMWUtODMxZC00ZDllLTlhMjItMWVlZjExYThkZGRm
LzEvUGlkcXhSb1RKQUhiVE5kQjJHYWxSaUtnMFZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApYzOYJnp
5DtjlMSS+rPT+pBaImqROhN0lPvNpH2wW97aKKSYl0BCcDQ0ZsPbL0z3+xlIiMmt
PlDkU7LgzrSL60PLLlMZmev10mJ7xGPUnemWgMxw4+++4D0NFnyubCpdfgvmnRHH
q9n+Meba5iAAe+1FgxD6urQaVUrPjH3SeIJl9LIjWkzSn5iBYiqF6GsfRcgvqq5W
VNn2KCqnj83XCEoIb5ofBXKm2288SLLCM2sN1A0m7Zb/Pd1c6rGuGADeQa8CvuYs
3+ItB9IXXxXmI7WTmJTo+CZf26FYIsqTK3iIu8Qsit2xWwUO6OV+B8LKAjjis9n6
Ka/JqOwSXu3TRw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:47 2025 by rpki-client