Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
File: PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft (raw, json)
Hash identifier: JhkRR+stSNxfjj4dOYhYtjNDCn/SJcvt8OcGkUDdLSo=
Subject key identifier: AF:68:26:F5:03:D9:1F:C5:A3:22:69:AA:A4:22:19:37:5C:9C:64:7F
Authority key identifier: 3D:C4:10:E3:F0:9B:EA:6A:BC:9D:D8:C6:FF:41:85:65:1B:0A:B8:67
Certificate issuer: /CN=3dc410e3f09bea6abc9dd8c6ff4185651b0ab867
Certificate serial: 0199FC213BC13F396CF52F376A5FD2917278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
Manifest number: 1674
Signing time: Sun 19 Oct 2025 11:01:00 +0000
Manifest this update: Sun 19 Oct 2025 11:01:00 +0000
Manifest next update: Mon 20 Oct 2025 11:01:00 +0000
Files and hashes: 1: PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.crl (hash: VDaSYOb2v9H6yn6enAxuPpXDhcdKlsYWd3mWWIYZo/k=)
2: itPEMbOZFFR8e5L5AvpBnlFEedQ.roa (hash: pIQ9iWRr1eE7BBGNob9EZxPiOkZPJVC3FeL7vrrHIjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:3b:c1:3f:39:6c:f5:2f:37:6a:5f:d2:91:72:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc410e3f09bea6abc9dd8c6ff4185651b0ab867
Validity
Not Before: Oct 19 11:01:00 2025 GMT
Not After : Oct 20 11:01:00 2025 GMT
Subject: CN=af6826f503d91fc5a32269aaa42219375c9c647f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b6:3a:c0:75:97:82:06:a8:ad:be:b8:a3:ed:
41:58:e3:18:36:fc:b0:2c:d2:66:81:7f:73:6b:ca:
fb:2a:99:27:5b:65:12:ec:8b:be:4f:36:b4:c3:3f:
56:f1:4e:18:25:00:e8:b8:ad:53:d4:85:ee:95:a0:
8a:53:17:2e:9c:15:84:f9:31:cd:33:95:b3:c5:eb:
5e:61:9a:d2:91:9b:6c:35:87:c5:49:3c:d4:ef:98:
49:6d:5c:1d:e0:a0:9c:d7:46:a4:d5:d5:2d:ed:56:
2f:1f:87:60:fd:1b:86:3b:94:11:f4:cb:6e:cf:2c:
83:2b:d8:ab:87:78:58:d1:b3:44:d9:2c:3e:32:22:
9e:0c:2c:27:90:25:f1:1c:ca:b8:2b:c6:e3:1c:47:
c5:0b:c9:bc:86:6f:4c:10:48:6b:70:c4:02:e1:ba:
5d:58:0b:9f:b1:94:8d:df:83:2c:26:aa:95:cc:29:
78:34:22:8e:a8:93:7c:99:d8:88:4a:23:c1:79:70:
44:39:5c:5e:90:66:b0:cb:90:33:7d:2b:ac:d8:a4:
67:e9:d4:60:1b:19:a6:b3:12:c1:0a:e8:f5:c0:65:
9c:8e:b9:8f:07:a3:27:cc:bc:e5:bc:26:d8:7f:76:
d3:fd:1b:9d:9e:06:29:c6:6d:10:9f:fb:23:b3:39:
00:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:68:26:F5:03:D9:1F:C5:A3:22:69:AA:A4:22:19:37:5C:9C:64:7F
X509v3 Authority Key Identifier:
keyid:3D:C4:10:E3:F0:9B:EA:6A:BC:9D:D8:C6:FF:41:85:65:1B:0A:B8:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:92:d6:d4:6f:9f:5d:fc:af:0b:35:ed:c1:f1:ef:8d:67:b7:
bd:73:70:c7:d1:0e:6c:7f:5a:73:26:fe:7b:d5:12:33:a1:cf:
b7:d5:fe:19:23:67:1b:02:46:e3:bd:1f:32:c5:03:f9:aa:0d:
9e:77:d6:c1:ba:a5:7a:6e:06:39:33:66:2e:c7:33:18:8c:72:
3a:9f:dc:76:99:9e:f3:8d:b5:13:c6:e4:5d:55:b7:61:54:62:
4a:c4:0d:aa:b3:4a:2b:3c:a3:1a:ea:27:f6:4c:01:66:f2:31:
a6:66:c9:e0:04:5d:94:5b:d6:be:ce:3c:f2:ae:d6:70:10:a1:
87:2f:3e:5e:b9:dd:cb:15:0e:11:ea:0a:07:fa:da:a4:a9:1c:
42:3f:a5:47:e8:c2:57:59:9e:e0:78:92:2e:24:d5:a8:c6:54:
bb:31:df:0a:c6:c1:41:a0:a3:40:b3:c8:2c:d8:b0:94:b1:d2:
10:e4:12:d4:7c:47:17:3a:ee:35:50:89:fe:24:b0:4b:c1:50:
e0:73:a5:f7:dd:a1:5e:7f:18:f9:69:11:97:b0:73:e5:c7:5c:
9a:b8:e9:24:81:95:f8:51:32:23:a0:f7:1e:e4:4c:0a:10:2d:
d3:c3:8b:94:56:2e:3e:90:34:0b:f1:28:92:4e:cb:54:51:9f:
bc:9c:34:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8ITvBPzls9S83al/SkXJ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYzQxMGUzZjA5YmVhNmFiYzlkZDhjNmZmNDE4NTY1MWIw
YWI4NjcwHhcNMjUxMDE5MTEwMTAwWhcNMjUxMDIwMTEwMTAwWjAzMTEwLwYDVQQD
EyhhZjY4MjZmNTAzZDkxZmM1YTMyMjY5YWFhNDIyMTkzNzVjOWM2NDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrY6wHWXggaorb64o+1BWOMYNvyw
LNJmgX9za8r7KpknW2US7Iu+Tza0wz9W8U4YJQDouK1T1IXulaCKUxcunBWE+THN
M5WzxeteYZrSkZtsNYfFSTzU75hJbVwd4KCc10ak1dUt7VYvH4dg/RuGO5QR9Mtu
zyyDK9irh3hY0bNE2Sw+MiKeDCwnkCXxHMq4K8bjHEfFC8m8hm9MEEhrcMQC4bpd
WAufsZSN34MsJqqVzCl4NCKOqJN8mdiISiPBeXBEOVxekGawy5AzfSus2KRn6dRg
GxmmsxLBCuj1wGWcjrmPB6MnzLzlvCbYf3bT/RudngYpxm0Qn/sjszkAswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9oJvUD2R/FoyJpqqQiGTdcnGR/MB8GA1UdIwQY
MBaAFD3EEOPwm+pqvJ3Yxv9BhWUbCrhnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGNRUTRfQ2I2bXE4bmRqR18wR0ZaUnNLdUdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8wNDI5NTEtNTRkOC00NjljLWJiYTEt
YTY1NDZjZDlkYTk0LzEvUGNRUTRfQ2I2bXE4bmRqR18wR0ZaUnNLdUdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8wNDI5NTEtNTRkOC00NjljLWJiYTEtYTY1NDZjZDlkYTk0
LzEvUGNRUTRfQ2I2bXE4bmRqR18wR0ZaUnNLdUdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVZLW1G+f
XfyvCzXtwfHvjWe3vXNwx9EObH9acyb+e9USM6HPt9X+GSNnGwJG470fMsUD+aoN
nnfWwbqlem4GOTNmLsczGIxyOp/cdpme8421E8bkXVW3YVRiSsQNqrNKKzyjGuon
9kwBZvIxpmbJ4ARdlFvWvs488q7WcBChhy8+XrndyxUOEeoKB/rapKkcQj+lR+jC
V1me4HiSLiTVqMZUuzHfCsbBQaCjQLPILNiwlLHSEOQS1HxHFzruNVCJ/iSwS8FQ
4HOl992hXn8Y+WkRl7Bz5cdcmrjpJIGV+FEyI6D3HuRMChAt08OLlFYuPpA0C/Eo
kk7LVFGfvJw0hQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:33 2025 by rpki-client