Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.mft
File: PJIZ2sNYSYbni0Hcn_tiJiO0rGE.mft (raw, json)
Hash identifier: CvdbtIk5RwoCYBhlY72VZnvDh1ALoJ5CGaV0vVFSj0s=
Subject key identifier: 59:14:D8:17:DD:B0:9A:D3:4A:28:60:21:53:94:A7:C5:6B:32:89:21
Authority key identifier: 3C:92:19:DA:C3:58:49:86:E7:8B:41:DC:9F:FB:62:26:23:B4:AC:61
Certificate issuer: /CN=3c9219dac3584986e78b41dc9ffb622623b4ac61
Certificate serial: 0199FE46EBDECE3803F705F9A3CE8A093F61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.mft
Manifest number: 03D6
Signing time: Sun 19 Oct 2025 21:01:24 +0000
Manifest this update: Sun 19 Oct 2025 21:01:24 +0000
Manifest next update: Mon 20 Oct 2025 21:01:24 +0000
Files and hashes: 1: PJIZ2sNYSYbni0Hcn_tiJiO0rGE.crl (hash: 7Xu2Z0QgsOeBUZ0cL8XFbl9awtxp9lNW+xbxZfEv7Co=)
2: x_RfurRNedmEj2hSqHVNcrKbV_E.roa (hash: 8G+RNYkhEQwOffPjlh7thkZsriDB79Nwv1PSXlUOkh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:eb:de:ce:38:03:f7:05:f9:a3:ce:8a:09:3f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c9219dac3584986e78b41dc9ffb622623b4ac61
Validity
Not Before: Oct 19 21:01:24 2025 GMT
Not After : Oct 20 21:01:24 2025 GMT
Subject: CN=5914d817ddb09ad34a2860215394a7c56b328921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:da:c6:37:24:b1:92:c3:83:56:56:5e:b1:d1:
70:f6:ab:d2:4a:41:a6:d8:5e:42:87:87:7c:56:e6:
f5:79:bc:75:d9:3d:19:93:13:b6:5c:fb:a0:3e:84:
f8:5c:02:15:b2:9e:41:7c:19:87:4e:77:32:e3:f8:
d2:b9:b1:a1:24:5f:7d:d2:ef:c2:d8:9c:94:4a:b3:
7e:c8:77:5f:3b:b6:f2:2f:31:9b:44:f2:1c:ad:17:
24:7a:81:54:29:5f:7d:a1:b3:aa:a1:e7:bd:23:31:
f1:69:c4:a1:b6:1b:27:59:41:5a:63:64:67:54:9a:
d7:eb:7d:c8:a4:72:6c:3d:cb:45:70:23:30:16:7b:
2e:b1:b8:99:79:8b:d1:ce:d6:c4:8a:a1:02:9e:97:
6e:04:74:85:d1:5c:8b:55:b4:8d:c0:83:73:5c:dc:
ab:b0:2f:c6:c4:18:47:b2:e2:f4:3f:96:1c:31:a6:
f7:3e:58:e5:96:25:d9:3c:85:30:18:91:06:f3:fb:
2b:92:79:ca:d2:9a:9d:3e:a9:ff:2d:4d:c3:a9:bc:
d6:4d:7d:08:2b:5a:05:b4:c5:d3:97:f7:5e:56:fa:
e4:b2:25:a0:bc:1c:6e:09:fa:80:9e:53:a5:bd:2d:
47:9f:43:4a:e9:dc:0f:58:57:d3:7a:15:52:78:db:
29:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:14:D8:17:DD:B0:9A:D3:4A:28:60:21:53:94:A7:C5:6B:32:89:21
X509v3 Authority Key Identifier:
keyid:3C:92:19:DA:C3:58:49:86:E7:8B:41:DC:9F:FB:62:26:23:B4:AC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b4:2f:c7:c4:15:79:c0:3e:6c:bf:eb:41:0e:98:53:97:ac:
fd:1d:88:41:7a:fa:ef:ee:a8:4e:34:b3:0b:1d:e2:df:df:06:
2d:16:ac:06:d0:0f:34:a2:84:a8:96:02:78:0e:cf:07:8a:52:
96:f7:14:9f:09:28:c2:aa:db:65:32:29:d3:6e:9a:03:f0:fa:
15:9c:0f:0e:5f:6a:96:10:52:4d:5c:a3:4d:28:de:91:9c:df:
16:62:9f:16:49:4e:fb:ff:f4:7f:93:20:2c:4b:e0:a6:28:4d:
5a:fa:b5:bf:88:07:05:b7:7e:0e:70:89:c4:ae:f5:18:b9:7c:
94:29:b0:87:54:bb:02:ad:8e:5b:6e:ac:18:2e:3f:f3:2c:48:
1a:74:28:8d:4c:90:a6:ae:75:0d:df:6b:97:13:4e:bc:13:64:
bd:0c:38:c4:1e:cc:53:12:88:41:93:b1:00:ef:ba:fb:71:b2:
99:ef:ae:4c:7d:10:0e:08:b3:88:af:32:c5:be:8c:45:c3:8d:
c9:8b:e9:77:f1:59:03:4a:13:e8:67:c3:91:53:e2:2b:71:25:
0f:6b:43:54:67:fd:94:30:2d:0f:3a:19:1e:83:60:d0:64:b6:
4f:7c:67:13:5a:e1:99:a3:43:10:c5:41:cb:68:44:96:a3:4d:
d6:08:a6:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+RuvezjgD9wX5o86KCT9hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjOTIxOWRhYzM1ODQ5ODZlNzhiNDFkYzlmZmI2MjI2MjNi
NGFjNjEwHhcNMjUxMDE5MjEwMTI0WhcNMjUxMDIwMjEwMTI0WjAzMTEwLwYDVQQD
Eyg1OTE0ZDgxN2RkYjA5YWQzNGEyODYwMjE1Mzk0YTdjNTZiMzI4OTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntrGNySxksODVlZesdFw9qvSSkGm
2F5Ch4d8Vub1ebx12T0ZkxO2XPugPoT4XAIVsp5BfBmHTncy4/jSubGhJF990u/C
2JyUSrN+yHdfO7byLzGbRPIcrRckeoFUKV99obOqoee9IzHxacShthsnWUFaY2Rn
VJrX633IpHJsPctFcCMwFnsusbiZeYvRztbEiqECnpduBHSF0VyLVbSNwINzXNyr
sC/GxBhHsuL0P5YcMab3PljlliXZPIUwGJEG8/srknnK0pqdPqn/LU3DqbzWTX0I
K1oFtMXTl/deVvrksiWgvBxuCfqAnlOlvS1Hn0NK6dwPWFfTehVSeNsppwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkU2BfdsJrTSihgIVOUp8VrMokhMB8GA1UdIwQY
MBaAFDySGdrDWEmG54tB3J/7YiYjtKxhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEpJWjJzTllTWWJuaTBIY25fdGlKaU8wckdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iMGQxZDItODQyYy00ZDA1LWE2MjMt
YjUwYzJmMmU0NzA0LzEvUEpJWjJzTllTWWJuaTBIY25fdGlKaU8wckdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9iMGQxZDItODQyYy00ZDA1LWE2MjMtYjUwYzJmMmU0NzA0
LzEvUEpJWjJzTllTWWJuaTBIY25fdGlKaU8wckdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi7Qvx8QV
ecA+bL/rQQ6YU5es/R2IQXr67+6oTjSzCx3i398GLRasBtAPNKKEqJYCeA7PB4pS
lvcUnwkowqrbZTIp026aA/D6FZwPDl9qlhBSTVyjTSjekZzfFmKfFklO+//0f5Mg
LEvgpihNWvq1v4gHBbd+DnCJxK71GLl8lCmwh1S7Aq2OW26sGC4/8yxIGnQojUyQ
pq51Dd9rlxNOvBNkvQw4xB7MUxKIQZOxAO+6+3Gyme+uTH0QDgiziK8yxb6MRcON
yYvpd/FZA0oT6GfDkVPiK3ElD2tDVGf9lDAtDzoZHoNg0GS2T3xnE1rhmaNDEMVB
y2hElqNN1gimKg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:32:17 2025 by rpki-client