Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
File: Pt7grog0cFCIgFBEvnXHQDsdx-I.mft (raw, json)
Hash identifier: eePkeFKkWOyqXJnrmhq7DxmnEj4Wzoc4BtjLzvBidlA=
Subject key identifier: 63:85:78:82:C8:2B:E6:5D:90:99:DB:36:5F:DB:75:AD:94:4C:04:6B
Authority key identifier: 3E:DE:E0:AE:88:34:70:50:88:80:50:44:BE:75:C7:40:3B:1D:C7:E2
Certificate issuer: /CN=3edee0ae8834705088805044be75c7403b1dc7e2
Certificate serial: 0199FBEBFE80F617D713029EA1B4B7F71ECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
Manifest number: 1377
Signing time: Sun 19 Oct 2025 10:02:51 +0000
Manifest this update: Sun 19 Oct 2025 10:02:51 +0000
Manifest next update: Mon 20 Oct 2025 10:02:51 +0000
Files and hashes: 1: Pt7grog0cFCIgFBEvnXHQDsdx-I.crl (hash: zJEcdk+uaoXSAKubiitbQ8rtnvmFAhtvG3UjdpJLctE=)
2: f4uXUqTz6EMLfxnYPkQ3ht2dRz0.roa (hash: WwKae4E8mCPYphGvXV9B/QCbohcENp4wZ1ekmYvPPps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:fe:80:f6:17:d7:13:02:9e:a1:b4:b7:f7:1e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3edee0ae8834705088805044be75c7403b1dc7e2
Validity
Not Before: Oct 19 10:02:51 2025 GMT
Not After : Oct 20 10:02:51 2025 GMT
Subject: CN=63857882c82be65d9099db365fdb75ad944c046b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:be:fa:e7:03:be:fb:82:6b:30:a6:00:12:82:
c8:99:c2:01:d6:d7:76:49:71:f8:9b:6c:61:45:8b:
86:f9:7c:86:f1:f3:be:f0:b1:4d:03:05:72:5f:f2:
b9:02:3c:59:a0:16:5d:6b:fe:4e:1d:41:77:31:76:
01:40:ae:f4:94:0e:bd:cd:29:fb:33:0c:65:37:1d:
10:e6:4d:fe:3b:c6:28:ad:94:b8:50:4a:e2:41:ac:
67:5b:3c:08:f4:ed:6f:78:e1:28:35:de:4a:af:58:
9a:52:7a:ac:51:de:f6:2c:99:83:12:df:4e:60:64:
47:80:4d:56:69:b1:1e:3a:f2:ed:b7:a0:2b:6c:f5:
fa:5c:01:09:f7:b4:34:c7:2c:c4:a3:5d:72:d6:98:
93:36:9f:37:d6:72:02:34:64:3f:cb:9d:83:79:24:
9b:01:63:3f:a9:f7:6e:33:56:fe:8d:0b:9e:94:ce:
e5:1d:80:9a:3d:e7:2f:d0:2b:95:7d:d9:c6:24:20:
37:4a:13:1c:cc:99:9e:4d:07:96:22:42:7e:70:19:
7c:24:cc:2e:57:a4:ea:50:0a:9e:21:f9:79:d2:a7:
80:bc:95:90:50:9a:c7:e7:69:5a:9b:b9:a5:fb:9c:
62:fa:56:4b:f3:34:5d:d0:58:f6:36:9e:a6:34:d1:
82:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:85:78:82:C8:2B:E6:5D:90:99:DB:36:5F:DB:75:AD:94:4C:04:6B
X509v3 Authority Key Identifier:
keyid:3E:DE:E0:AE:88:34:70:50:88:80:50:44:BE:75:C7:40:3B:1D:C7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c2:4e:e7:72:03:75:63:12:fb:cc:07:66:99:dd:17:f2:6e:
47:d9:03:cf:b4:2d:8f:03:68:20:72:62:70:51:1c:b1:76:cb:
64:4d:f0:b0:f5:2e:9a:65:25:1d:3e:2e:f4:73:5d:21:9b:55:
dd:c1:61:14:0a:04:6a:68:37:9a:29:10:3f:55:2d:d8:d6:10:
29:40:21:24:a6:56:c2:ee:4b:33:66:eb:b7:42:f0:de:ec:49:
1f:9e:de:ac:3f:fe:66:74:4b:f6:63:bf:e1:e6:61:56:4b:c2:
1f:fe:1c:27:bc:87:3f:c1:64:0d:bc:8c:50:54:03:52:42:f4:
84:ed:d8:10:64:f6:27:14:1b:ca:37:9f:ea:a3:a9:ce:74:ff:
a9:d3:1e:19:76:16:81:6f:9e:94:4e:71:6d:2b:8f:c2:7d:fb:
d5:b3:37:fb:27:31:27:2a:35:93:90:08:d1:04:08:42:68:3e:
62:e6:55:bb:93:e6:ae:22:e4:30:9f:06:c5:d3:05:e2:0a:03:
9d:3a:87:42:2d:41:ad:00:ed:55:7a:cb:9c:7c:54:d6:7c:2d:
f2:20:83:41:f1:af:34:2d:90:91:c2:f1:01:8c:c3:db:ab:5c:
69:da:1f:17:7b:33:c7:c4:b6:8c:a7:1f:68:d1:5a:09:b6:4d:
b8:27:e5:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76/6A9hfXEwKeobS39x7OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZGVlMGFlODgzNDcwNTA4ODgwNTA0NGJlNzVjNzQwM2Ix
ZGM3ZTIwHhcNMjUxMDE5MTAwMjUxWhcNMjUxMDIwMTAwMjUxWjAzMTEwLwYDVQQD
Eyg2Mzg1Nzg4MmM4MmJlNjVkOTA5OWRiMzY1ZmRiNzVhZDk0NGMwNDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7765wO++4JrMKYAEoLImcIB1td2
SXH4m2xhRYuG+XyG8fO+8LFNAwVyX/K5AjxZoBZda/5OHUF3MXYBQK70lA69zSn7
MwxlNx0Q5k3+O8YorZS4UEriQaxnWzwI9O1veOEoNd5Kr1iaUnqsUd72LJmDEt9O
YGRHgE1WabEeOvLtt6ArbPX6XAEJ97Q0xyzEo11y1piTNp831nICNGQ/y52DeSSb
AWM/qfduM1b+jQuelM7lHYCaPecv0CuVfdnGJCA3ShMczJmeTQeWIkJ+cBl8JMwu
V6TqUAqeIfl50qeAvJWQUJrH52lam7ml+5xi+lZL8zRd0Fj2Np6mNNGCfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGOFeILIK+ZdkJnbNl/bda2UTARrMB8GA1UdIwQY
MBaAFD7e4K6INHBQiIBQRL51x0A7HcfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHQ3Z3JvZzBjRkNJZ0ZCRXZuWEhRRHNkeC1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny81MTRjZjQtMTI2Yi00Y2M1LWI0ZDUt
NzlhYjQ4ZDgzYmFiLzEvUHQ3Z3JvZzBjRkNJZ0ZCRXZuWEhRRHNkeC1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny81MTRjZjQtMTI2Yi00Y2M1LWI0ZDUtNzlhYjQ4ZDgzYmFi
LzEvUHQ3Z3JvZzBjRkNJZ0ZCRXZuWEhRRHNkeC1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi8JO53ID
dWMS+8wHZpndF/JuR9kDz7QtjwNoIHJicFEcsXbLZE3wsPUummUlHT4u9HNdIZtV
3cFhFAoEamg3mikQP1Ut2NYQKUAhJKZWwu5LM2brt0Lw3uxJH57erD/+ZnRL9mO/
4eZhVkvCH/4cJ7yHP8FkDbyMUFQDUkL0hO3YEGT2JxQbyjef6qOpznT/qdMeGXYW
gW+elE5xbSuPwn371bM3+ycxJyo1k5AI0QQIQmg+YuZVu5PmriLkMJ8GxdMF4goD
nTqHQi1BrQDtVXrLnHxU1nwt8iCDQfGvNC2QkcLxAYzD26tcadofF3szx8S2jKcf
aNFaCbZNuCflBA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:35 2025 by rpki-client