Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
File: pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft (raw, json)
Hash identifier: Y7lvTvFyWgWbDyQc7aqLjpYKEvStzS5rcBMMtUFev5Q=
Subject key identifier: 8E:4B:F2:7F:4C:DD:FC:F7:7C:5F:6A:5C:91:0F:44:80:76:95:7D:D7
Authority key identifier: A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9
Certificate issuer: /CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9
Certificate serial: 0199FE7DE06D7BDB70A57A2EFDDC14B44A17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
Manifest number: 1674
Signing time: Sun 19 Oct 2025 22:01:26 +0000
Manifest this update: Sun 19 Oct 2025 22:01:26 +0000
Manifest next update: Mon 20 Oct 2025 22:01:26 +0000
Files and hashes: 1: o-nYlXPYTvbWycHnP4jG4hys78s.roa (hash: +9u5uc7wAwLvJQwWxklCfmQHya0NysgfSBmasNGP6Yk=)
2: pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl (hash: QPCFR/s7g3c0yx35s72U9W2etxWt3Sb1jVCmc/TnFbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:e0:6d:7b:db:70:a5:7a:2e:fd:dc:14:b4:4a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9
Validity
Not Before: Oct 19 22:01:26 2025 GMT
Not After : Oct 20 22:01:26 2025 GMT
Subject: CN=8e4bf27f4cddfcf77c5f6a5c910f448076957dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8f:46:f6:1a:95:d0:4f:ff:eb:c3:bb:94:8e:
cf:50:54:68:49:4c:95:05:27:39:a5:46:e5:c5:1b:
d9:8c:87:5b:29:62:51:a1:3a:a0:75:9d:a6:ce:46:
c3:22:82:e7:96:c1:8b:21:00:54:74:f1:f2:80:f5:
70:f8:fc:51:cb:b0:e0:a9:9c:87:1d:ff:2e:51:9b:
5c:a1:74:8f:a5:d3:2d:16:f9:d8:65:a5:1e:fc:1b:
f4:63:6a:9b:cd:49:e1:f2:8c:2b:00:ef:69:fd:be:
a1:65:5a:77:db:fc:c2:91:8c:8b:fe:ed:c8:f8:fe:
fd:72:23:0f:9a:e3:c3:42:17:1f:30:40:e6:92:f5:
29:4d:d0:2d:45:e1:be:67:05:5c:19:f5:4d:16:25:
0e:43:9e:55:64:ed:ef:1d:28:28:57:d9:59:b8:43:
74:f0:8a:5c:5c:b6:81:87:47:7d:85:06:88:ed:ae:
72:3f:ca:88:8f:37:ce:87:3b:2a:48:5c:0b:00:10:
24:3c:34:bf:0a:3e:0b:a9:90:ca:3f:e6:1d:72:89:
f0:e8:e1:1c:c1:15:cc:11:a1:cc:ef:dc:cd:1c:b1:
83:67:94:8c:78:9a:99:d3:11:19:e9:4f:02:80:e4:
89:04:15:97:d5:d4:75:fa:ba:e5:fe:db:c3:65:89:
db:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4B:F2:7F:4C:DD:FC:F7:7C:5F:6A:5C:91:0F:44:80:76:95:7D:D7
X509v3 Authority Key Identifier:
keyid:A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:02:5a:2f:d8:da:8b:02:93:35:86:35:9d:e5:df:4e:df:76:
02:5c:83:e6:fe:b5:e3:ef:d0:b9:3c:72:f6:53:51:a2:ed:03:
1c:e4:43:c8:32:0c:5c:1d:2b:c3:40:93:5e:4c:d3:77:29:83:
45:18:05:f2:97:4c:bf:3c:72:e7:e5:6f:bb:f1:ca:01:a9:33:
7a:4b:96:93:ae:03:29:00:2a:ad:c8:0d:6a:86:02:f3:2c:90:
e3:55:49:90:97:b8:ca:0f:c9:6e:fc:7f:6e:e3:6c:da:a4:0e:
81:67:4b:dc:91:75:06:0d:ab:2e:77:1e:2b:37:93:b9:a0:13:
4e:73:3f:1b:27:d1:cf:cb:32:8f:73:6a:bb:97:80:0d:e8:7d:
61:76:bc:a0:83:83:94:5e:6c:0f:4c:90:40:54:9e:a8:9a:96:
ae:53:b0:03:ae:6f:03:47:0e:ed:a6:ee:f7:46:40:f7:1e:92:
55:b4:19:ab:81:7e:4d:69:9c:b2:d6:03:c2:ae:44:94:6b:b8:
39:8c:c5:81:0d:cb:11:5b:70:b1:8e:76:fb:79:a1:7a:f0:4d:
83:39:b0:27:c0:20:b4:78:0d:a4:6e:cc:36:38:53:1e:a8:71:
34:e5:1e:7f:fe:9f:98:2b:da:b6:98:28:cc:b5:93:78:4f:1e:
95:8e:9b:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+feBte9twpXou/dwUtEoXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YWJhZjFkMzdmMGExNDFhODE0Y2EwMmZjMDFlM2Q5NjIx
YzczZDkwHhcNMjUxMDE5MjIwMTI2WhcNMjUxMDIwMjIwMTI2WjAzMTEwLwYDVQQD
Eyg4ZTRiZjI3ZjRjZGRmY2Y3N2M1ZjZhNWM5MTBmNDQ4MDc2OTU3ZGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Y9G9hqV0E//68O7lI7PUFRoSUyV
BSc5pUblxRvZjIdbKWJRoTqgdZ2mzkbDIoLnlsGLIQBUdPHygPVw+PxRy7DgqZyH
Hf8uUZtcoXSPpdMtFvnYZaUe/Bv0Y2qbzUnh8owrAO9p/b6hZVp32/zCkYyL/u3I
+P79ciMPmuPDQhcfMEDmkvUpTdAtReG+ZwVcGfVNFiUOQ55VZO3vHSgoV9lZuEN0
8IpcXLaBh0d9hQaI7a5yP8qIjzfOhzsqSFwLABAkPDS/Cj4LqZDKP+Ydconw6OEc
wRXMEaHM79zNHLGDZ5SMeJqZ0xEZ6U8CgOSJBBWX1dR1+rrl/tvDZYnbkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5L8n9M3fz3fF9qXJEPRIB2lX3XMB8GA1UdIwQY
MBaAFKSrrx038KFBqBTKAvwB49liHHPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEt1dkhUZndvVUdvRk1vQ19BSGoyV0ljYzlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8xNTViZGMtYjU3NC00N2Y5LWIzNDgt
OTNjZjY0Zjg4OTkwLzEvcEt1dkhUZndvVUdvRk1vQ19BSGoyV0ljYzlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8xNTViZGMtYjU3NC00N2Y5LWIzNDgtOTNjZjY0Zjg4OTkw
LzEvcEt1dkhUZndvVUdvRk1vQ19BSGoyV0ljYzlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARAJaL9ja
iwKTNYY1neXfTt92AlyD5v614+/QuTxy9lNRou0DHORDyDIMXB0rw0CTXkzTdymD
RRgF8pdMvzxy5+Vvu/HKAakzekuWk64DKQAqrcgNaoYC8yyQ41VJkJe4yg/Jbvx/
buNs2qQOgWdL3JF1Bg2rLnceKzeTuaATTnM/GyfRz8syj3Nqu5eADeh9YXa8oIOD
lF5sD0yQQFSeqJqWrlOwA65vA0cO7abu90ZA9x6SVbQZq4F+TWmcstYDwq5ElGu4
OYzFgQ3LEVtwsY52+3mhevBNgzmwJ8AgtHgNpG7MNjhTHqhxNOUef/6fmCvatpgo
zLWTeE8elY6bZA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:23:13 2025 by rpki-client