Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft
File: PqGMkbK-KKB0uaOHSpC0RgE84b4.mft (raw, json)
Hash identifier: +efVtVTi4J/JS2tXoQMgRsAX3NdOQ1+iTY84PpER8X4=
Subject key identifier: D5:3E:86:6C:70:F7:0C:41:D0:9F:23:AA:DE:9E:63:86:44:CB:32:D4
Authority key identifier: 3E:A1:8C:91:B2:BE:28:A0:74:B9:A3:87:4A:90:B4:46:01:3C:E1:BE
Certificate issuer: /CN=3ea18c91b2be28a074b9a3874a90b446013ce1be
Certificate serial: 0199FB7CF3FE5C9B4ACF0F10F9CD2A710CDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqGMkbK-KKB0uaOHSpC0RgE84b4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft
Manifest number: 0477
Signing time: Sun 19 Oct 2025 08:01:34 +0000
Manifest this update: Sun 19 Oct 2025 08:01:34 +0000
Manifest next update: Mon 20 Oct 2025 08:01:34 +0000
Files and hashes: 1: PqGMkbK-KKB0uaOHSpC0RgE84b4.crl (hash: DuxCd5u8nB8yNugaAlcJUGHF/RU7Y0SY5Sg9I62Fldo=)
2: w78-PkWjkmBWzXnYfu0GZ4j6LVI.roa (hash: BzBqUt4k6YCYPQ6Nn7PdPu+ICTIm/5kh0/Z+KfmEAhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqGMkbK-KKB0uaOHSpC0RgE84b4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:f3:fe:5c:9b:4a:cf:0f:10:f9:cd:2a:71:0c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea18c91b2be28a074b9a3874a90b446013ce1be
Validity
Not Before: Oct 19 08:01:34 2025 GMT
Not After : Oct 20 08:01:34 2025 GMT
Subject: CN=d53e866c70f70c41d09f23aade9e638644cb32d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e4:3b:59:34:06:29:21:b6:89:4f:3e:e9:af:
22:b3:5b:a4:b0:18:d7:83:35:38:d7:52:5f:46:1b:
a4:0c:c4:cf:ad:20:36:0a:e1:63:4b:e2:73:68:2f:
af:89:ad:bf:78:42:50:29:96:e5:48:8e:7f:27:5d:
f4:1e:6b:29:ef:21:c3:4f:47:bd:a6:79:6d:f1:7f:
9e:27:60:19:d9:00:81:c0:f4:7b:04:e2:c9:21:76:
ca:7c:92:ca:0c:ca:bc:f7:7d:1f:1f:21:0f:e6:c9:
b3:e6:ba:85:c0:f1:0b:7a:70:bb:93:dd:16:6d:c0:
03:e4:44:cd:2a:e0:d5:bb:46:b3:1a:61:b0:1a:0d:
44:9d:76:e8:3d:6b:ba:45:47:dd:fa:cc:79:20:99:
0a:53:c5:0c:82:11:fd:5f:13:b0:64:0f:e2:22:87:
5b:0d:39:33:46:ee:cb:22:cc:5e:fd:4e:79:df:04:
fc:e5:03:e6:60:69:a4:47:99:31:29:91:41:a0:57:
97:b6:16:21:2e:9a:31:20:77:6c:2c:ae:ca:6d:0f:
60:e9:f4:e0:2c:14:67:58:b8:9f:5b:36:7e:10:93:
b1:0c:bb:8c:05:f5:ab:2d:eb:c2:a2:3e:3c:f5:06:
d7:b5:63:30:6d:cf:e5:f7:8e:60:4b:92:b1:80:eb:
96:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3E:86:6C:70:F7:0C:41:D0:9F:23:AA:DE:9E:63:86:44:CB:32:D4
X509v3 Authority Key Identifier:
keyid:3E:A1:8C:91:B2:BE:28:A0:74:B9:A3:87:4A:90:B4:46:01:3C:E1:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqGMkbK-KKB0uaOHSpC0RgE84b4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b6:6f:95:fa:a7:74:5f:c3:45:47:83:cb:14:bd:9b:b4:22:
4b:15:05:24:a5:48:fb:a2:18:07:fb:88:9a:67:a2:02:4b:d6:
7f:18:b8:a4:56:c5:df:95:1f:13:48:79:ff:e6:5a:ec:31:1f:
1e:2f:a0:5c:87:96:b5:a5:1a:d7:e7:6d:e5:f3:7d:f1:e8:f4:
6e:dc:d7:e7:56:f8:cd:44:52:09:3c:0e:89:97:fc:29:1a:a7:
7a:45:70:e3:4b:b1:fe:04:81:d0:56:8f:e5:7b:fa:5a:96:7d:
2a:6a:60:60:14:20:67:30:16:5e:50:75:1b:88:2f:fc:91:00:
06:4a:12:98:b8:62:ac:bc:89:07:28:ad:fb:5a:d2:9e:43:34:
2c:78:79:a2:06:9d:cc:2c:a0:85:7d:bf:1f:60:4d:96:dc:e1:
47:3d:8a:af:d0:1b:78:43:14:29:0e:a7:9c:85:87:26:fe:a1:
45:c0:9a:19:e8:e0:6c:60:4b:c8:01:83:b1:fd:52:6f:12:36:
e7:a4:5b:b3:31:e0:bf:00:ae:89:f9:66:50:04:b3:86:de:31:
76:31:d4:2b:84:24:15:47:5d:a1:ec:88:aa:2d:13:c5:6e:a0:
b8:7c:53:ab:0d:d9:12:af:1e:86:f1:55:b9:75:ac:cc:b1:fa:
0b:eb:ea:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fPP+XJtKzw8Q+c0qcQzeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYTE4YzkxYjJiZTI4YTA3NGI5YTM4NzRhOTBiNDQ2MDEz
Y2UxYmUwHhcNMjUxMDE5MDgwMTM0WhcNMjUxMDIwMDgwMTM0WjAzMTEwLwYDVQQD
EyhkNTNlODY2YzcwZjcwYzQxZDA5ZjIzYWFkZTllNjM4NjQ0Y2IzMmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOQ7WTQGKSG2iU8+6a8is1uksBjX
gzU411JfRhukDMTPrSA2CuFjS+JzaC+via2/eEJQKZblSI5/J130Hmsp7yHDT0e9
pnlt8X+eJ2AZ2QCBwPR7BOLJIXbKfJLKDMq8930fHyEP5smz5rqFwPELenC7k90W
bcAD5ETNKuDVu0azGmGwGg1EnXboPWu6RUfd+sx5IJkKU8UMghH9XxOwZA/iIodb
DTkzRu7LIsxe/U553wT85QPmYGmkR5kxKZFBoFeXthYhLpoxIHdsLK7KbQ9g6fTg
LBRnWLifWzZ+EJOxDLuMBfWrLevCoj489QbXtWMwbc/l945gS5KxgOuWswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNU+hmxw9wxB0J8jqt6eY4ZEyzLUMB8GA1UdIwQY
MBaAFD6hjJGyviigdLmjh0qQtEYBPOG+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHFHTWtiSy1LS0IwdWFPSFNwQzBSZ0U4NGI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9jYTM2NDktYzI5Zi00ZTkwLTg4MjIt
YmM2NWVmNmIyN2I2LzEvUHFHTWtiSy1LS0IwdWFPSFNwQzBSZ0U4NGI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9jYTM2NDktYzI5Zi00ZTkwLTg4MjItYmM2NWVmNmIyN2I2
LzEvUHFHTWtiSy1LS0IwdWFPSFNwQzBSZ0U4NGI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAirZvlfqn
dF/DRUeDyxS9m7QiSxUFJKVI+6IYB/uImmeiAkvWfxi4pFbF35UfE0h5/+Za7DEf
Hi+gXIeWtaUa1+dt5fN98ej0btzX51b4zURSCTwOiZf8KRqnekVw40ux/gSB0FaP
5Xv6WpZ9KmpgYBQgZzAWXlB1G4gv/JEABkoSmLhirLyJByit+1rSnkM0LHh5ogad
zCyghX2/H2BNltzhRz2Kr9AbeEMUKQ6nnIWHJv6hRcCaGejgbGBLyAGDsf1SbxI2
56RbszHgvwCuiflmUASzht4xdjHUK4QkFUddoeyIqi0TxW6guHxTqw3ZEq8ehvFV
uXWszLH6C+vqdg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:27:02 2025 by rpki-client