Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
File: PwbJ3z-o-T2e8O0EscoENduLxlA.mft (raw, json)
Hash identifier: /PsW6WSl/QfvYZCuZsEu+SumZrCyamSIJYVbdhzVtyE=
Subject key identifier: 30:1A:7C:23:EE:7E:FC:A3:F6:23:5D:A3:70:C3:47:0B:17:D0:74:85
Authority key identifier: 3F:06:C9:DF:3F:A8:F9:3D:9E:F0:ED:04:B1:CA:04:35:DB:8B:C6:50
Certificate issuer: /CN=3f06c9df3fa8f93d9ef0ed04b1ca0435db8bc650
Certificate serial: 0199FAD7CAA1351F74A566A4304E9B2E86C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwbJ3z-o-T2e8O0EscoENduLxlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 05:01:09 +0000
Manifest this update: Sun 19 Oct 2025 05:01:09 +0000
Manifest next update: Mon 20 Oct 2025 05:01:09 +0000
Files and hashes: 1: PwbJ3z-o-T2e8O0EscoENduLxlA.crl (hash: eRW2rRpSEYUlMvfB+OFJPYFrDjfGAPEcPB9CU4VVSM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PwbJ3z-o-T2e8O0EscoENduLxlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:ca:a1:35:1f:74:a5:66:a4:30:4e:9b:2e:86:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f06c9df3fa8f93d9ef0ed04b1ca0435db8bc650
Validity
Not Before: Oct 19 05:01:09 2025 GMT
Not After : Oct 20 05:01:09 2025 GMT
Subject: CN=301a7c23ee7efca3f6235da370c3470b17d07485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:05:8c:54:31:c4:67:5e:ff:4e:35:3c:23:11:
cc:ea:df:b1:4f:fc:b9:9b:f3:2b:7c:0f:cf:9c:50:
b5:bd:7d:5a:85:67:54:e6:f6:d4:2d:00:46:77:af:
17:3f:7d:a5:1f:e2:0c:ba:da:af:4d:9e:17:ea:06:
1b:3b:cb:7b:2a:f4:06:ef:c6:d6:30:97:97:bd:78:
97:ef:03:10:5e:fa:7e:98:ad:7a:de:5e:f3:50:0a:
b1:4a:7f:8b:13:9e:b9:23:0b:cf:11:62:67:82:8a:
bc:a7:3b:c9:d6:87:16:e9:e0:e1:8c:c4:8f:d8:35:
26:06:a5:f8:76:af:7e:80:63:3f:e8:6d:bf:b9:be:
85:25:ea:9f:ce:12:51:60:86:87:49:ad:78:35:46:
72:90:d7:d9:3d:ba:f1:e3:10:52:4c:56:99:b8:94:
ec:63:d6:0d:10:17:e5:f1:e9:14:05:22:a1:c8:fb:
c0:f8:22:bf:6d:54:ac:7c:e5:1d:86:89:a3:6c:e3:
d7:27:5e:b7:27:e3:e9:ff:3e:52:4a:06:35:a2:11:
b9:5d:9e:18:88:3c:50:3b:f3:4d:ab:79:26:6c:e8:
7b:6b:ef:44:2b:d3:f0:69:09:d6:8b:f8:16:18:2e:
05:08:16:49:60:79:22:ef:41:f0:ba:e0:a7:1c:f2:
87:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1A:7C:23:EE:7E:FC:A3:F6:23:5D:A3:70:C3:47:0B:17:D0:74:85
X509v3 Authority Key Identifier:
keyid:3F:06:C9:DF:3F:A8:F9:3D:9E:F0:ED:04:B1:CA:04:35:DB:8B:C6:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwbJ3z-o-T2e8O0EscoENduLxlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:3a:fa:2d:d6:05:1f:7b:9f:c3:91:cc:8f:e2:56:31:03:bf:
8a:87:9f:3c:30:05:d1:19:f5:d3:e2:5c:d4:8d:73:b3:0a:15:
82:7d:80:ad:77:95:9f:a7:82:25:81:75:28:b4:2f:e0:e0:ef:
f8:02:c9:e3:88:aa:f7:a6:32:0c:04:0e:23:01:57:ac:e5:93:
4b:40:f9:c1:fa:84:d0:e3:ba:35:c9:5a:c4:81:d2:f5:0c:23:
89:04:dc:e5:d6:71:38:2d:4a:80:ec:51:eb:f9:5f:7a:94:07:
8e:68:a6:49:d3:73:ca:ee:0c:53:4f:dc:0f:81:f0:8c:d1:bf:
6e:89:76:4a:c1:a5:83:80:24:5b:1b:09:da:9b:74:6a:8b:96:
9e:e9:92:e9:89:45:2d:4a:8e:9c:80:8e:31:ff:19:9c:c3:ac:
8a:84:e1:4e:b5:bf:99:69:86:6f:74:52:a0:8a:21:8e:69:a4:
6f:f2:94:e6:d5:78:44:c2:79:ca:00:ac:73:88:54:9a:3d:8d:
92:e8:ef:f0:b3:ac:cb:97:70:d6:79:dc:6f:21:4e:d9:e8:2e:
98:86:a0:31:e9:22:ca:6d:a7:ca:14:5d:00:63:85:f5:1b:44:
22:63:e2:eb:83:85:19:8d:03:e7:ff:70:56:c7:2f:cf:cf:31:
12:2f:eb:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn618qhNR90pWakME6bLobJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMDZjOWRmM2ZhOGY5M2Q5ZWYwZWQwNGIxY2EwNDM1ZGI4
YmM2NTAwHhcNMjUxMDE5MDUwMTA5WhcNMjUxMDIwMDUwMTA5WjAzMTEwLwYDVQQD
EygzMDFhN2MyM2VlN2VmY2EzZjYyMzVkYTM3MGMzNDcwYjE3ZDA3NDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QWMVDHEZ17/TjU8IxHM6t+xT/y5
m/MrfA/PnFC1vX1ahWdU5vbULQBGd68XP32lH+IMutqvTZ4X6gYbO8t7KvQG78bW
MJeXvXiX7wMQXvp+mK163l7zUAqxSn+LE565IwvPEWJngoq8pzvJ1ocW6eDhjMSP
2DUmBqX4dq9+gGM/6G2/ub6FJeqfzhJRYIaHSa14NUZykNfZPbrx4xBSTFaZuJTs
Y9YNEBfl8ekUBSKhyPvA+CK/bVSsfOUdhomjbOPXJ163J+Pp/z5SSgY1ohG5XZ4Y
iDxQO/NNq3kmbOh7a+9EK9PwaQnWi/gWGC4FCBZJYHki70HwuuCnHPKHRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDAafCPufvyj9iNdo3DDRwsX0HSFMB8GA1UdIwQY
MBaAFD8Gyd8/qPk9nvDtBLHKBDXbi8ZQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHdiSjN6LW8tVDJlOE8wRXNjb0VOZHVMeGxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9kMDBlM2QtNTRjNy00MzZmLWE4Y2Ut
MzM4YWEwY2Y5OGUyLzEvUHdiSjN6LW8tVDJlOE8wRXNjb0VOZHVMeGxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9kMDBlM2QtNTRjNy00MzZmLWE4Y2UtMzM4YWEwY2Y5OGUy
LzEvUHdiSjN6LW8tVDJlOE8wRXNjb0VOZHVMeGxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiTr6LdYF
H3ufw5HMj+JWMQO/ioefPDAF0Rn10+Jc1I1zswoVgn2ArXeVn6eCJYF1KLQv4ODv
+ALJ44iq96YyDAQOIwFXrOWTS0D5wfqE0OO6NclaxIHS9QwjiQTc5dZxOC1KgOxR
6/lfepQHjmimSdNzyu4MU0/cD4HwjNG/bol2SsGlg4AkWxsJ2pt0aouWnumS6YlF
LUqOnICOMf8ZnMOsioThTrW/mWmGb3RSoIohjmmkb/KU5tV4RMJ5ygCsc4hUmj2N
kujv8LOsy5dw1nncbyFO2egumIagMekiym2nyhRdAGOF9RtEImPi64OFGY0D5/9w
Vscvz88xEi/rWQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:34 2025 by rpki-client