Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/PKRH_Ql5uKmJNVw1TTBNEU0gcno.mft
File: PKRH_Ql5uKmJNVw1TTBNEU0gcno.mft (raw, json)
Hash identifier: sXS202viY4cNSUq6r/K+7H2q/iIjiTekzwW9yw4nhqI=
Subject key identifier: 0C:D6:FE:86:4F:0B:C7:F2:63:A0:7E:F1:BE:ED:9E:AA:EC:0C:7B:5B
Authority key identifier: 3C:A4:47:FD:09:79:B8:A9:89:35:5C:35:4D:30:4D:11:4D:20:72:7A
Certificate issuer: /CN=3ca447fd0979b8a989355c354d304d114d20727a
Certificate serial: 0199FC8F2B744B3AF5E77576FEF4E729DD00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKRH_Ql5uKmJNVw1TTBNEU0gcno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/PKRH_Ql5uKmJNVw1TTBNEU0gcno.mft
Manifest number: 03C0
Signing time: Sun 19 Oct 2025 13:01:05 +0000
Manifest this update: Sun 19 Oct 2025 13:01:05 +0000
Manifest next update: Mon 20 Oct 2025 13:01:05 +0000
Files and hashes: 1: BcTRmH6BmmlSz8rh3pMxnCQXpBs.roa (hash: xmk+1c+FLynSNXKfYDQ/lfjoeA1RsSdHXQaf1l1+6Ak=)
2: PKRH_Ql5uKmJNVw1TTBNEU0gcno.crl (hash: ag92h4vNfeoHjD6omoIxPF4SpIfVrV+YUbfvGh6v8H4=)
3: eP87Vey-9rBbyOrOh4YCvuO3c1M.roa (hash: az6VMbDPubRZM135slIGEREK5WUZUt9MUwTRvHW3psg=)
4: wBy33E8gC6zWuMOmD5yzfH0QyIQ.roa (hash: yM84zdMfEYNT7elb1Nq+ZFqPP22ZSrKZWHzVdylcK6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/PKRH_Ql5uKmJNVw1TTBNEU0gcno.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/PKRH_Ql5uKmJNVw1TTBNEU0gcno.mft
rsync://rpki.ripe.net/repository/DEFAULT/PKRH_Ql5uKmJNVw1TTBNEU0gcno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:2b:74:4b:3a:f5:e7:75:76:fe:f4:e7:29:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ca447fd0979b8a989355c354d304d114d20727a
Validity
Not Before: Oct 19 13:01:05 2025 GMT
Not After : Oct 20 13:01:05 2025 GMT
Subject: CN=0cd6fe864f0bc7f263a07ef1beed9eaaec0c7b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c9:eb:f0:9a:10:10:aa:0e:4a:06:cb:2a:2a:
13:00:a2:79:da:b1:78:74:62:90:0f:38:fe:06:e9:
ed:68:46:99:76:97:1d:99:70:5e:4a:26:4c:65:0d:
2f:c7:e9:3b:33:db:8c:ca:a2:5f:b4:d6:7c:9f:01:
49:fc:d8:bf:e3:d9:7d:0e:2e:e3:32:96:6a:d7:09:
41:29:d5:34:3b:c4:3a:93:6b:be:c4:6a:3f:fa:13:
c4:8b:33:e6:77:63:f1:5b:7c:58:20:a9:96:bc:9b:
44:b0:eb:8c:ae:4f:4d:c6:75:25:8a:e9:94:85:81:
f1:7f:d0:9e:88:1e:e8:bd:0e:fa:9e:56:e0:b3:db:
7f:ac:b8:af:94:10:23:4c:c5:19:47:b5:be:32:fb:
00:c9:90:dc:dd:ff:c1:3b:da:21:c0:1b:e2:40:a4:
6d:53:39:e7:46:0e:9d:d1:65:33:24:20:14:fa:8a:
e1:af:44:29:4c:55:68:0a:c2:c6:10:cf:88:db:fa:
1f:16:c9:5d:75:6b:2c:86:9c:1c:da:13:41:8d:bf:
d6:37:76:45:4f:c1:91:3e:1e:6b:ac:8b:34:b5:59:
9f:e7:79:c1:84:d4:24:5f:d8:b7:2e:b6:e5:74:35:
43:ff:3b:a1:51:28:ac:32:16:92:6a:43:3e:5a:76:
57:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D6:FE:86:4F:0B:C7:F2:63:A0:7E:F1:BE:ED:9E:AA:EC:0C:7B:5B
X509v3 Authority Key Identifier:
keyid:3C:A4:47:FD:09:79:B8:A9:89:35:5C:35:4D:30:4D:11:4D:20:72:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKRH_Ql5uKmJNVw1TTBNEU0gcno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/PKRH_Ql5uKmJNVw1TTBNEU0gcno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/PKRH_Ql5uKmJNVw1TTBNEU0gcno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:1f:45:fc:d9:87:29:95:86:73:e3:82:2d:17:66:3a:5f:e8:
b5:da:26:65:c5:4f:48:a2:e7:f6:19:3f:e5:73:81:5d:e1:12:
20:a5:1c:9b:88:9c:a2:ce:45:2f:60:c0:45:80:b1:70:40:cc:
73:aa:2f:07:3f:5b:7b:36:0f:0c:20:32:34:88:5d:d7:db:5e:
b6:b1:1a:c8:5e:7e:35:20:03:ab:f8:86:0b:02:ba:f7:1c:83:
2d:f2:b0:65:75:db:b5:a6:1f:6b:55:c9:d7:27:f8:00:e2:5a:
f8:17:2a:99:95:83:67:79:40:19:6b:70:47:4a:64:11:a4:79:
f8:e2:4c:7b:f6:4e:a9:f6:53:69:33:55:4b:db:88:5c:a1:ca:
62:4b:16:d0:9f:ad:ac:a5:78:89:69:47:99:a5:d4:47:d7:6e:
8e:48:69:9d:55:d5:aa:b1:c4:9d:be:b9:72:1c:e9:73:16:01:
67:37:42:f2:3b:fd:d7:71:c6:b6:cf:af:98:8d:a6:7c:71:74:
23:34:a6:26:72:3d:a2:3f:7b:78:c0:22:48:bf:fb:9a:91:b1:
cb:4f:b5:b8:12:96:68:70:de:f2:65:f4:4b:e3:74:73:7d:a2:
d4:61:d5:78:39:c7:71:33:9d:d1:0a:1d:ac:1f:98:65:e4:86:
ba:a4:43:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8jyt0Szr153V2/vTnKd0AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjYTQ0N2ZkMDk3OWI4YTk4OTM1NWMzNTRkMzA0ZDExNGQy
MDcyN2EwHhcNMjUxMDE5MTMwMTA1WhcNMjUxMDIwMTMwMTA1WjAzMTEwLwYDVQQD
EygwY2Q2ZmU4NjRmMGJjN2YyNjNhMDdlZjFiZWVkOWVhYWVjMGM3YjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8nr8JoQEKoOSgbLKioTAKJ52rF4
dGKQDzj+BuntaEaZdpcdmXBeSiZMZQ0vx+k7M9uMyqJftNZ8nwFJ/Ni/49l9Di7j
MpZq1wlBKdU0O8Q6k2u+xGo/+hPEizPmd2PxW3xYIKmWvJtEsOuMrk9NxnUliumU
hYHxf9CeiB7ovQ76nlbgs9t/rLivlBAjTMUZR7W+MvsAyZDc3f/BO9ohwBviQKRt
UznnRg6d0WUzJCAU+orhr0QpTFVoCsLGEM+I2/ofFslddWsshpwc2hNBjb/WN3ZF
T8GRPh5rrIs0tVmf53nBhNQkX9i3LrbldDVD/zuhUSisMhaSakM+WnZX0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAzW/oZPC8fyY6B+8b7tnqrsDHtbMB8GA1UdIwQY
MBaAFDykR/0JebipiTVcNU0wTRFNIHJ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEtSSF9RbDV1S21KTlZ3MVRUQk5FVTBnY25vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9iNWEwOGYtZDlmOC00MzJkLWJhNGIt
YTZlZjc1MmM2ZGMyLzEvUEtSSF9RbDV1S21KTlZ3MVRUQk5FVTBnY25vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9iNWEwOGYtZDlmOC00MzJkLWJhNGItYTZlZjc1MmM2ZGMy
LzEvUEtSSF9RbDV1S21KTlZ3MVRUQk5FVTBnY25vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkh9F/NmH
KZWGc+OCLRdmOl/otdomZcVPSKLn9hk/5XOBXeESIKUcm4icos5FL2DARYCxcEDM
c6ovBz9bezYPDCAyNIhd19tetrEayF5+NSADq/iGCwK69xyDLfKwZXXbtaYfa1XJ
1yf4AOJa+BcqmZWDZ3lAGWtwR0pkEaR5+OJMe/ZOqfZTaTNVS9uIXKHKYksW0J+t
rKV4iWlHmaXUR9dujkhpnVXVqrHEnb65chzpcxYBZzdC8jv913HGts+vmI2mfHF0
IzSmJnI9oj97eMAiSL/7mpGxy0+1uBKWaHDe8mX0S+N0c32i1GHVeDnHcTOd0Qod
rB+YZeSGuqRD8Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:55 2025 by rpki-client