Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
File: PSGIrVl7WKqllwA_jwhDSWxsfJM.mft (raw, json)
Hash identifier: ABUtDsjyTqXjJ3dttvM+kGw4Lm3sYaAVEDSmoxO2Xjo=
Subject key identifier: E5:8F:EE:AC:B6:2E:57:27:01:B5:87:85:AB:48:AB:4C:53:82:F5:81
Authority key identifier: 3D:21:88:AD:59:7B:58:AA:A5:97:00:3F:8F:08:43:49:6C:6C:7C:93
Certificate issuer: /CN=3d2188ad597b58aaa597003f8f0843496c6c7c93
Certificate serial: 0199FEB4AD19A25E68F9C071984AB1E164D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
Manifest number: 0FE6
Signing time: Sun 19 Oct 2025 23:01:17 +0000
Manifest this update: Sun 19 Oct 2025 23:01:17 +0000
Manifest next update: Mon 20 Oct 2025 23:01:17 +0000
Files and hashes: 1: K-fnSlqCnsMuB-NlWaWBJUmC4FM.roa (hash: j54MZjizcVLzs5xFTxfuwkhp1hDwpOUSaYB4Ws5FVDc=)
2: PSGIrVl7WKqllwA_jwhDSWxsfJM.crl (hash: teWCSDcdrrUYwprYaigYQej1qmcFyJE4BWqeeZzH8JI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:ad:19:a2:5e:68:f9:c0:71:98:4a:b1:e1:64:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2188ad597b58aaa597003f8f0843496c6c7c93
Validity
Not Before: Oct 19 23:01:17 2025 GMT
Not After : Oct 20 23:01:17 2025 GMT
Subject: CN=e58feeacb62e572701b58785ab48ab4c5382f581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:57:13:c7:30:de:cb:a2:08:b7:db:fd:06:b8:
77:7b:dd:e8:03:6e:85:e3:f6:12:57:2e:ce:ac:4f:
d9:55:23:17:3b:87:49:9a:28:ae:0f:3a:ff:b0:0c:
83:1f:b0:21:9b:aa:6d:fb:db:92:5d:96:ad:98:72:
e9:61:86:99:4c:6d:2f:20:35:58:f3:38:2d:46:3a:
42:5a:72:eb:bf:98:9c:39:37:f8:0a:1a:a3:58:e9:
94:3f:3c:90:07:79:bd:56:61:bf:37:0a:e9:3f:58:
7c:40:02:94:b3:cc:67:43:24:cb:47:ac:de:e3:79:
b0:f9:14:0d:92:c5:34:ba:8f:80:4d:3c:af:d5:57:
3e:88:d7:2d:cb:73:13:b0:f1:1e:81:0d:82:bc:83:
bc:2c:c5:fc:2c:df:dc:3c:20:90:ad:70:af:47:1d:
2a:78:70:30:e2:75:e1:92:a0:ed:ce:c2:5b:de:a9:
7b:c2:9f:be:f6:23:9d:0b:d1:ce:dd:dd:9e:c0:35:
fe:54:94:4c:ae:e9:a8:1d:1d:e6:ed:54:bd:c5:c7:
6f:63:15:18:dc:f9:91:2e:55:25:ba:43:02:de:18:
d5:e8:17:62:81:b0:79:f0:75:66:55:0e:b5:e5:65:
59:73:20:f5:bf:24:e5:b7:d0:04:27:bb:46:a8:be:
e7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8F:EE:AC:B6:2E:57:27:01:B5:87:85:AB:48:AB:4C:53:82:F5:81
X509v3 Authority Key Identifier:
keyid:3D:21:88:AD:59:7B:58:AA:A5:97:00:3F:8F:08:43:49:6C:6C:7C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f5:2e:89:f9:47:60:ab:91:01:fd:fc:3e:1f:61:f4:03:0c:
25:1d:10:f2:6a:bc:13:7d:5c:e9:31:15:9d:1f:23:65:71:13:
f2:cd:f7:11:75:76:4f:a1:52:07:1e:30:4a:c8:66:47:e3:99:
fc:1b:e5:3c:57:22:3e:cb:3e:6e:22:99:c8:4f:25:fd:0c:12:
fb:98:63:fa:5f:d0:62:35:a4:b3:fc:fb:1b:f5:5b:ee:ea:94:
7f:57:27:59:90:c9:b2:e3:18:2f:67:c9:71:c6:44:dc:dc:91:
0e:77:cd:6c:46:72:15:d2:64:13:0c:57:a8:6d:1b:3b:cc:1c:
a8:54:bc:05:4d:e0:6d:30:55:37:2b:00:cf:e2:34:2b:ab:87:
2f:88:4d:e2:36:5c:bb:43:ce:c0:11:b3:ba:c9:44:cf:12:78:
db:3c:01:bc:46:6c:d3:e9:72:fd:1e:f1:1a:87:1e:a2:67:35:
21:4a:22:d8:82:70:e9:f8:f3:dd:12:46:eb:c7:46:d5:06:6f:
9b:f6:92:d5:a0:58:03:88:be:2a:c5:af:55:b8:10:e1:9c:cc:
46:e2:98:78:59:38:d4:9d:90:e9:7a:fa:88:a2:fc:0c:79:01:
8c:90:f4:5f:f3:8f:2d:42:13:b4:31:c2:15:c5:7c:e6:a0:57:
8f:64:12:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+tK0Zol5o+cBxmEqx4WTWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMjE4OGFkNTk3YjU4YWFhNTk3MDAzZjhmMDg0MzQ5NmM2
YzdjOTMwHhcNMjUxMDE5MjMwMTE3WhcNMjUxMDIwMjMwMTE3WjAzMTEwLwYDVQQD
EyhlNThmZWVhY2I2MmU1NzI3MDFiNTg3ODVhYjQ4YWI0YzUzODJmNTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lcTxzDey6IIt9v9Brh3e93oA26F
4/YSVy7OrE/ZVSMXO4dJmiiuDzr/sAyDH7Ahm6pt+9uSXZatmHLpYYaZTG0vIDVY
8zgtRjpCWnLrv5icOTf4ChqjWOmUPzyQB3m9VmG/NwrpP1h8QAKUs8xnQyTLR6ze
43mw+RQNksU0uo+ATTyv1Vc+iNcty3MTsPEegQ2CvIO8LMX8LN/cPCCQrXCvRx0q
eHAw4nXhkqDtzsJb3ql7wp++9iOdC9HO3d2ewDX+VJRMrumoHR3m7VS9xcdvYxUY
3PmRLlUlukMC3hjV6BdigbB58HVmVQ615WVZcyD1vyTlt9AEJ7tGqL7nuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWP7qy2LlcnAbWHhatIq0xTgvWBMB8GA1UdIwQY
MBaAFD0hiK1Ze1iqpZcAP48IQ0lsbHyTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFNHSXJWbDdXS3FsbHdBX2p3aERTV3hzZkpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zYmZkMGEtMDE3Zi00ODFmLWI2NzYt
YmMzNmZlZWI5MGIzLzEvUFNHSXJWbDdXS3FsbHdBX2p3aERTV3hzZkpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zYmZkMGEtMDE3Zi00ODFmLWI2NzYtYmMzNmZlZWI5MGIz
LzEvUFNHSXJWbDdXS3FsbHdBX2p3aERTV3hzZkpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPfUuiflH
YKuRAf38Ph9h9AMMJR0Q8mq8E31c6TEVnR8jZXET8s33EXV2T6FSBx4wSshmR+OZ
/BvlPFciPss+biKZyE8l/QwS+5hj+l/QYjWks/z7G/Vb7uqUf1cnWZDJsuMYL2fJ
ccZE3NyRDnfNbEZyFdJkEwxXqG0bO8wcqFS8BU3gbTBVNysAz+I0K6uHL4hN4jZc
u0POwBGzuslEzxJ42zwBvEZs0+ly/R7xGoceomc1IUoi2IJw6fjz3RJG68dG1QZv
m/aS1aBYA4i+KsWvVbgQ4ZzMRuKYeFk41J2Q6Xr6iKL8DHkBjJD0X/OPLUITtDHC
FcV85qBXj2QS9g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:04 2025 by rpki-client