Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.mft
File: PmoAuz7ZB8Umrdtaq9mtdkssPZ4.mft (raw, json)
Hash identifier: FJivi9B0qtx5+44ImmywY5+PNMGFpO/HgHQoxLOQ4hQ=
Subject key identifier: D0:A3:0B:2F:21:6F:BC:98:03:69:30:EE:BE:2D:93:9A:46:CB:EC:6D
Authority key identifier: 3E:6A:00:BB:3E:D9:07:C5:26:AD:DB:5A:AB:D9:AD:76:4B:2C:3D:9E
Certificate issuer: /CN=3e6a00bb3ed907c526addb5aabd9ad764b2c3d9e
Certificate serial: 0199FF2256ACCC8BA33F806FDFC62F6E2D4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.mft
Manifest number: 03B1
Signing time: Mon 20 Oct 2025 01:01:04 +0000
Manifest this update: Mon 20 Oct 2025 01:01:04 +0000
Manifest next update: Tue 21 Oct 2025 01:01:04 +0000
Files and hashes: 1: PmoAuz7ZB8Umrdtaq9mtdkssPZ4.crl (hash: K1lKy9KPBxOMQq8HVNpgB5NZ6XroVUi/MOeuGLdPkhA=)
2: vEaUcgTOmvxT4RwiTozd0tA5mdY.roa (hash: NlBiID9/yPQCEPkEu0Pfr8aESCT+/QAEDOmwYhde0qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:56:ac:cc:8b:a3:3f:80:6f:df:c6:2f:6e:2d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6a00bb3ed907c526addb5aabd9ad764b2c3d9e
Validity
Not Before: Oct 20 01:01:04 2025 GMT
Not After : Oct 21 01:01:04 2025 GMT
Subject: CN=d0a30b2f216fbc98036930eebe2d939a46cbec6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f4:55:85:19:e4:63:c8:84:0f:0d:6d:56:95:
af:18:60:bd:cb:64:7c:ad:b4:80:6a:a8:2b:83:39:
2c:21:b8:72:2d:19:0e:ef:45:38:88:ac:ab:2c:20:
03:93:66:76:08:2f:1e:c1:b9:06:74:0d:04:dc:c1:
35:25:77:8f:ee:51:28:60:44:97:aa:c7:67:0c:77:
81:93:f2:07:6f:10:78:9d:ea:aa:2c:6f:83:c2:aa:
68:1c:3e:d1:27:4d:d3:96:12:a5:75:1c:cc:74:d7:
2c:4a:a5:3e:0b:8d:c0:7c:64:00:19:92:fd:7a:f7:
22:8a:09:68:88:96:70:38:4c:8c:a6:1e:20:89:d5:
cb:cb:de:59:b8:22:d9:dc:82:9d:be:42:09:ec:49:
55:a1:6e:3b:18:7a:d2:1d:a5:ab:6b:02:e8:e6:fa:
63:fb:3b:9a:f0:f5:27:f9:8b:d8:b2:3e:99:fd:74:
cc:75:c4:07:c5:ad:f1:16:84:b9:f6:8f:c4:83:13:
6a:5b:5b:a1:ea:b1:34:ce:2a:86:99:61:4b:c0:d0:
eb:02:1f:46:0b:d0:c9:b5:b7:cc:41:4b:c2:4c:d0:
54:2b:ab:aa:16:72:a5:56:ef:ce:d7:0d:e2:ea:df:
00:cd:84:11:b1:7f:2e:78:c2:8c:b2:fc:18:f1:ea:
1b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A3:0B:2F:21:6F:BC:98:03:69:30:EE:BE:2D:93:9A:46:CB:EC:6D
X509v3 Authority Key Identifier:
keyid:3E:6A:00:BB:3E:D9:07:C5:26:AD:DB:5A:AB:D9:AD:76:4B:2C:3D:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a7:bd:e3:84:ca:4c:e2:3c:9a:3a:05:29:c7:64:85:1f:36:
02:f0:68:e8:cb:79:d8:44:5e:88:e5:c3:84:c7:96:73:61:2d:
97:98:41:b7:7b:43:e0:ab:4e:a1:94:e3:19:87:6a:77:8f:04:
e5:22:42:88:9c:4e:32:62:3d:3d:d6:1b:35:5e:a6:6c:25:61:
31:52:d3:98:d8:5f:4c:67:d4:3c:24:6f:5f:f7:00:ec:6d:cd:
0f:25:1d:6c:d8:f5:65:6d:55:6c:06:97:56:f1:bb:75:01:41:
44:c0:96:ab:38:dc:10:63:2c:79:bd:bd:a6:29:12:84:05:f5:
c3:93:f3:68:d6:e6:54:24:ab:0e:9b:d7:ba:75:ff:55:a0:af:
99:10:26:34:e6:14:7a:a9:33:0a:3a:bb:5f:37:89:94:2b:bb:
f0:89:96:fb:1a:c5:9b:de:eb:8d:5c:46:87:c2:cd:e6:c2:3b:
96:e0:e7:06:52:28:8c:08:d0:35:98:ed:d1:b1:e5:e0:c5:22:
13:57:a5:91:fb:cb:b7:d0:6a:b2:66:52:74:c9:d3:34:cc:39:
98:10:cb:ad:c6:b7:23:8b:5b:ea:b5:2a:5c:9b:5e:97:56:cf:
94:b7:9d:93:11:e4:57:c3:01:1f:86:5d:88:68:5d:e4:ed:77:
29:4f:c1:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/IlaszIujP4Bv38Yvbi1LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNmEwMGJiM2VkOTA3YzUyNmFkZGI1YWFiZDlhZDc2NGIy
YzNkOWUwHhcNMjUxMDIwMDEwMTA0WhcNMjUxMDIxMDEwMTA0WjAzMTEwLwYDVQQD
EyhkMGEzMGIyZjIxNmZiYzk4MDM2OTMwZWViZTJkOTM5YTQ2Y2JlYzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvRVhRnkY8iEDw1tVpWvGGC9y2R8
rbSAaqgrgzksIbhyLRkO70U4iKyrLCADk2Z2CC8ewbkGdA0E3ME1JXeP7lEoYESX
qsdnDHeBk/IHbxB4neqqLG+DwqpoHD7RJ03TlhKldRzMdNcsSqU+C43AfGQAGZL9
evciigloiJZwOEyMph4gidXLy95ZuCLZ3IKdvkIJ7ElVoW47GHrSHaWrawLo5vpj
+zua8PUn+YvYsj6Z/XTMdcQHxa3xFoS59o/EgxNqW1uh6rE0ziqGmWFLwNDrAh9G
C9DJtbfMQUvCTNBUK6uqFnKlVu/O1w3i6t8AzYQRsX8ueMKMsvwY8eobIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCjCy8hb7yYA2kw7r4tk5pGy+xtMB8GA1UdIwQY
MBaAFD5qALs+2QfFJq3bWqvZrXZLLD2eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1vQXV6N1pCOFVtcmR0YXE5bXRka3NzUFo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9iM2IxMDYtNzc0YS00NjkwLWEwM2Mt
MzVjMWM3OWFhMWRjLzEvUG1vQXV6N1pCOFVtcmR0YXE5bXRka3NzUFo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9iM2IxMDYtNzc0YS00NjkwLWEwM2MtMzVjMWM3OWFhMWRj
LzEvUG1vQXV6N1pCOFVtcmR0YXE5bXRka3NzUFo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXKe944TK
TOI8mjoFKcdkhR82AvBo6Mt52EReiOXDhMeWc2Etl5hBt3tD4KtOoZTjGYdqd48E
5SJCiJxOMmI9PdYbNV6mbCVhMVLTmNhfTGfUPCRvX/cA7G3NDyUdbNj1ZW1VbAaX
VvG7dQFBRMCWqzjcEGMseb29pikShAX1w5PzaNbmVCSrDpvXunX/VaCvmRAmNOYU
eqkzCjq7XzeJlCu78ImW+xrFm97rjVxGh8LN5sI7luDnBlIojAjQNZjt0bHl4MUi
E1elkfvLt9BqsmZSdMnTNMw5mBDLrca3I4tb6rUqXJtel1bPlLedkxHkV8MBH4Zd
iGhd5O13KU/Bsg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:14 2025 by rpki-client