Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
File: PJMfJlqEcdMs6ESdnhhvDccRSno.mft (raw, json)
Hash identifier: bhaAuqeiwswVhFCS0vPqpMMk70KjA26plEjte5n8s50=
Subject key identifier: 5F:AC:30:92:3C:8D:C3:13:C1:CF:85:7A:4B:01:FA:9A:1B:06:0B:20
Authority key identifier: 3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A
Certificate issuer: /CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a
Certificate serial: 0199FC8F508ABF8F457F4F728BA8A0D56974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
Manifest number: 13E0
Signing time: Sun 19 Oct 2025 13:01:14 +0000
Manifest this update: Sun 19 Oct 2025 13:01:14 +0000
Manifest next update: Mon 20 Oct 2025 13:01:14 +0000
Files and hashes: 1: PJMfJlqEcdMs6ESdnhhvDccRSno.crl (hash: Cr+XbbOnl8OO+1MVkt1zLOZ6Ln7heDqU/k2KOFsg4bw=)
2: PkJhyt9pT1uGvNEkXULDRnIoKM8.roa (hash: GnXTwsBZIxIhJPycvbpoXf49+cV9ppIdazG5Z3GlNBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:50:8a:bf:8f:45:7f:4f:72:8b:a8:a0:d5:69:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a
Validity
Not Before: Oct 19 13:01:14 2025 GMT
Not After : Oct 20 13:01:14 2025 GMT
Subject: CN=5fac30923c8dc313c1cf857a4b01fa9a1b060b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:05:9a:19:d1:f7:39:97:60:07:f5:43:3b:67:
00:45:f2:99:88:bb:ea:5a:0a:a8:40:a9:a4:39:05:
a2:53:1e:d3:09:af:72:a4:f3:b9:12:a5:6c:32:13:
3f:1c:3f:31:ef:80:d3:38:e7:30:c1:39:a0:9a:41:
a9:8e:87:23:fe:1f:9b:05:70:8b:50:e7:7d:36:7a:
a9:15:c6:7e:b9:77:e5:7b:5f:fe:07:14:fa:c9:e0:
4a:87:b1:47:4d:67:82:2a:43:14:03:36:8b:ee:dc:
a6:e4:ef:62:85:73:16:bf:d0:42:d4:50:db:59:4a:
ff:75:aa:de:e4:b0:f4:13:8b:8a:b8:ec:14:ae:12:
1b:1d:02:ce:23:c4:61:f9:8e:36:2e:15:e9:8f:6c:
0a:66:96:5e:09:bd:54:2a:56:26:e4:c5:ea:a9:27:
0f:73:8c:cc:40:c3:a6:84:c1:44:04:ee:c6:7a:d8:
bf:b5:5a:06:7e:29:85:15:b9:6d:1d:ac:7c:d0:32:
83:75:a4:02:79:ee:a9:b7:b4:41:b8:07:7a:ed:f7:
02:c8:67:6f:10:fb:6c:7a:77:f5:2c:7e:5b:e4:a8:
b3:92:5c:17:5c:0e:b8:f3:2d:30:d8:15:23:52:59:
09:5f:34:a3:97:68:11:99:cb:55:58:1c:b7:b6:68:
08:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AC:30:92:3C:8D:C3:13:C1:CF:85:7A:4B:01:FA:9A:1B:06:0B:20
X509v3 Authority Key Identifier:
keyid:3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:86:55:ee:23:58:d8:e7:e4:9b:ed:1e:bf:31:ba:4c:3a:79:
6e:d1:4b:98:19:e7:50:45:94:f7:44:6c:2d:b6:7c:0a:83:dd:
f7:75:48:d7:63:00:31:e2:70:4e:ac:76:a5:b5:a0:67:47:64:
a0:c8:73:80:97:5f:1d:d8:76:a0:2c:4e:72:4b:8b:7e:83:0f:
6b:34:f3:71:a5:23:a4:50:42:92:c7:df:67:95:39:9b:a4:55:
bf:77:1b:c8:7f:a0:ee:96:c5:29:22:e1:1c:db:12:7a:73:1a:
a2:7e:cc:e4:b0:9f:18:a3:63:10:79:79:e3:50:22:2c:1c:98:
38:e6:56:56:9c:42:ac:25:5e:29:4f:18:80:62:d4:bf:07:bd:
7a:37:55:0f:23:44:16:76:93:d0:29:a5:e2:db:3b:fe:93:0b:
ac:ca:4d:91:22:8e:d7:a4:4b:48:93:f7:6b:84:8e:ef:b0:2b:
07:8c:72:4a:1a:d9:b7:05:19:b1:12:1c:e7:52:92:09:44:fd:
49:fc:87:74:66:5e:6c:f2:86:f9:df:f7:1d:f2:4a:2f:e4:12:
a8:9d:2d:59:7c:73:ba:97:ef:02:51:51:ba:23:45:4b:c5:5e:
6d:f2:1c:32:ef:73:d8:82:fb:b7:23:5f:28:c6:66:05:56:67:
67:e9:48:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j1CKv49Ff09yi6ig1Wl0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjOTMxZjI2NWE4NDcxZDMyY2U4NDQ5ZDllMTg2ZjBkYzcx
MTRhN2EwHhcNMjUxMDE5MTMwMTE0WhcNMjUxMDIwMTMwMTE0WjAzMTEwLwYDVQQD
Eyg1ZmFjMzA5MjNjOGRjMzEzYzFjZjg1N2E0YjAxZmE5YTFiMDYwYjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QWaGdH3OZdgB/VDO2cARfKZiLvq
WgqoQKmkOQWiUx7TCa9ypPO5EqVsMhM/HD8x74DTOOcwwTmgmkGpjocj/h+bBXCL
UOd9NnqpFcZ+uXfle1/+BxT6yeBKh7FHTWeCKkMUAzaL7tym5O9ihXMWv9BC1FDb
WUr/dare5LD0E4uKuOwUrhIbHQLOI8Rh+Y42LhXpj2wKZpZeCb1UKlYm5MXqqScP
c4zMQMOmhMFEBO7Geti/tVoGfimFFbltHax80DKDdaQCee6pt7RBuAd67fcCyGdv
EPtsenf1LH5b5KizklwXXA648y0w2BUjUlkJXzSjl2gRmctVWBy3tmgITQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+sMJI8jcMTwc+FeksB+pobBgsgMB8GA1UdIwQY
MBaAFDyTHyZahHHTLOhEnZ4Ybw3HEUp6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEpNZkpscUVjZE1zNkVTZG5oaHZEY2NSU25vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9iNTBiZGEtNjg5OS00ZWVmLWEyMzEt
NWUwMDI2MzAzNjI5LzEvUEpNZkpscUVjZE1zNkVTZG5oaHZEY2NSU25vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9iNTBiZGEtNjg5OS00ZWVmLWEyMzEtNWUwMDI2MzAzNjI5
LzEvUEpNZkpscUVjZE1zNkVTZG5oaHZEY2NSU25vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfoZV7iNY
2Ofkm+0evzG6TDp5btFLmBnnUEWU90RsLbZ8CoPd93VI12MAMeJwTqx2pbWgZ0dk
oMhzgJdfHdh2oCxOckuLfoMPazTzcaUjpFBCksffZ5U5m6RVv3cbyH+g7pbFKSLh
HNsSenMaon7M5LCfGKNjEHl541AiLByYOOZWVpxCrCVeKU8YgGLUvwe9ejdVDyNE
FnaT0Cml4ts7/pMLrMpNkSKO16RLSJP3a4SO77ArB4xyShrZtwUZsRIc51KSCUT9
SfyHdGZebPKG+d/3HfJKL+QSqJ0tWXxzupfvAlFRuiNFS8VebfIcMu9z2IL7tyNf
KMZmBVZnZ+lIag==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:04 2025 by rpki-client