Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
File: PQG9lJxV7QfnAkLhUDPQqEdKnho.mft (raw, json)
Hash identifier: c9Jp5B68IRJ8Dx6EcbGXW0X1ERQt1OSFn0QsrZZd108=
Subject key identifier: F6:D1:2A:CD:09:BB:7B:00:26:97:3D:36:D1:9E:B6:57:8D:8D:EE:6E
Authority key identifier: 3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
Certificate issuer: /CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Certificate serial: 0199FB0EBBFAAB15A1F70FC0CD1F4C83F740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
Manifest number: 05C0
Signing time: Sun 19 Oct 2025 06:01:10 +0000
Manifest this update: Sun 19 Oct 2025 06:01:10 +0000
Manifest next update: Mon 20 Oct 2025 06:01:10 +0000
Files and hashes: 1: PQG9lJxV7QfnAkLhUDPQqEdKnho.crl (hash: /6kfTW0L6wb6kTr1qJeQW1wt2d76CJgO3/H3z6UoTUQ=)
2: wTHnefFYASN9t7OgaDJP2pTz5W4.roa (hash: 9oC2Jer2cW2AbqdUqYgPoU7bU/Jm0xDFHVun+XWYaKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:bb:fa:ab:15:a1:f7:0f:c0:cd:1f:4c:83:f7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Validity
Not Before: Oct 19 06:01:10 2025 GMT
Not After : Oct 20 06:01:10 2025 GMT
Subject: CN=f6d12acd09bb7b0026973d36d19eb6578d8dee6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2f:c1:41:ba:03:0e:b8:77:f6:dd:62:d3:35:
c7:b5:cb:6b:8e:76:f9:d1:35:f8:a0:7d:f7:da:8b:
be:03:e9:30:e2:72:08:13:b4:1e:85:cd:49:c1:ca:
d4:25:73:cf:5b:66:44:b8:d0:36:e5:86:88:c6:f4:
ce:d3:17:ac:5d:8d:f3:20:5d:87:31:fc:fc:16:63:
59:b3:7c:dc:45:57:da:f1:9d:79:8a:8e:4b:2d:ab:
dd:b1:68:0f:89:66:f4:4d:f9:57:c3:ca:3c:1a:1d:
63:3a:6d:23:23:a2:a1:ac:27:05:a0:f3:e8:aa:4f:
47:46:27:79:ae:5d:e3:3b:20:af:7f:1e:ce:3a:d9:
98:58:ac:59:ea:d8:a1:18:02:3d:9a:cd:ea:06:c4:
7b:29:78:8d:fb:3c:55:49:22:de:59:a2:58:a5:23:
61:39:c0:2c:a6:27:6d:b8:de:55:96:0a:6b:05:67:
ea:5e:e3:79:2c:fb:61:4e:80:d6:66:91:68:97:3a:
73:60:f6:9b:92:46:b2:13:19:0b:af:05:28:d2:f3:
12:35:a3:b2:81:7b:67:fc:5d:06:c9:5b:98:fb:bd:
6c:a2:06:ea:93:6b:26:62:9a:fd:2f:cd:fd:c5:76:
e8:78:a9:32:29:5d:bd:2b:a7:90:d0:6c:b3:54:79:
6e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D1:2A:CD:09:BB:7B:00:26:97:3D:36:D1:9E:B6:57:8D:8D:EE:6E
X509v3 Authority Key Identifier:
keyid:3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:69:e4:ae:b0:df:d1:2a:f6:0f:7d:c0:db:e2:64:e0:84:45:
f4:5f:0b:cb:61:85:a5:74:6e:0b:50:47:c4:62:9f:7a:c7:49:
7f:f6:d7:34:bd:29:0d:7a:87:43:52:4b:58:9d:0d:fd:0e:f3:
98:61:3f:58:d0:6e:78:ac:4b:19:bd:bf:10:66:62:5e:e4:d3:
13:8f:08:f7:1e:6f:72:c1:c3:9b:8f:bf:7b:6c:08:54:91:a9:
b6:fb:9c:80:62:8e:fa:15:6e:66:ca:5f:9f:65:4b:df:f9:74:
4a:3c:32:9b:cf:3f:3e:5a:e8:df:ec:6e:ea:ae:43:f8:d9:3a:
aa:2f:f7:54:4b:ca:3d:42:f5:f5:d6:c8:d3:bb:9f:fb:a4:55:
92:bb:11:c3:05:5e:77:45:3a:59:67:cf:ea:1c:46:49:d4:37:
28:d0:67:7d:d2:8f:44:90:a7:46:d1:7c:ca:ac:90:fd:f4:41:
5d:09:3c:50:e3:c4:4f:f7:3b:68:9f:f8:f0:9a:6f:23:49:09:
d7:d9:84:8b:f7:b9:e6:df:0c:7c:89:ff:d0:41:94:b2:6a:6c:
b1:a0:e1:de:5f:d1:ba:28:c2:f7:23:41:4d:ca:9a:c9:b5:92:
53:73:bc:c2:94:4b:1f:d6:14:78:e2:8f:84:c2:93:aa:b3:fc:
fc:c0:e4:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Drv6qxWh9w/AzR9Mg/dAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMDFiZDk0OWM1NWVkMDdlNzAyNDJlMTUwMzNkMGE4NDc0
YTllMWEwHhcNMjUxMDE5MDYwMTEwWhcNMjUxMDIwMDYwMTEwWjAzMTEwLwYDVQQD
EyhmNmQxMmFjZDA5YmI3YjAwMjY5NzNkMzZkMTllYjY1NzhkOGRlZTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui/BQboDDrh39t1i0zXHtctrjnb5
0TX4oH332ou+A+kw4nIIE7Qehc1JwcrUJXPPW2ZEuNA25YaIxvTO0xesXY3zIF2H
Mfz8FmNZs3zcRVfa8Z15io5LLavdsWgPiWb0TflXw8o8Gh1jOm0jI6KhrCcFoPPo
qk9HRid5rl3jOyCvfx7OOtmYWKxZ6tihGAI9ms3qBsR7KXiN+zxVSSLeWaJYpSNh
OcAspidtuN5VlgprBWfqXuN5LPthToDWZpFolzpzYPabkkayExkLrwUo0vMSNaOy
gXtn/F0GyVuY+71sogbqk2smYpr9L839xXboeKkyKV29K6eQ0GyzVHlubQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPbRKs0Ju3sAJpc9NtGetleNje5uMB8GA1UdIwQY
MBaAFD0BvZScVe0H5wJC4VAz0KhHSp4aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFFHOWxKeFY3UWZuQWtMaFVEUFFxRWRLbmhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMTUwMDMtZWQ1My00MmQzLWFmMDkt
ZTRlMGI1NTVhZDU5LzEvUFFHOWxKeFY3UWZuQWtMaFVEUFFxRWRLbmhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9jMTUwMDMtZWQ1My00MmQzLWFmMDktZTRlMGI1NTVhZDU5
LzEvUFFHOWxKeFY3UWZuQWtMaFVEUFFxRWRLbmhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhWnkrrDf
0Sr2D33A2+Jk4IRF9F8Ly2GFpXRuC1BHxGKfesdJf/bXNL0pDXqHQ1JLWJ0N/Q7z
mGE/WNBueKxLGb2/EGZiXuTTE48I9x5vcsHDm4+/e2wIVJGptvucgGKO+hVuZspf
n2VL3/l0Sjwym88/Plro3+xu6q5D+Nk6qi/3VEvKPUL19dbI07uf+6RVkrsRwwVe
d0U6WWfP6hxGSdQ3KNBnfdKPRJCnRtF8yqyQ/fRBXQk8UOPET/c7aJ/48JpvI0kJ
19mEi/e55t8MfIn/0EGUsmpssaDh3l/RuijC9yNBTcqaybWSU3O8wpRLH9YUeOKP
hMKTqrP8/MDkcA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:29 2025 by rpki-client