Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
File: Pbiird2wAoUIVJlqlLcrh_Snsw8.mft (raw, json)
Hash identifier: MEsYIEMerUCqEAwFBzzWZ8lw0INZ2jSbSpqbSmz/+Tk=
Subject key identifier: A9:1A:B0:7C:64:65:FF:B3:45:AA:88:35:A1:39:8F:61:87:27:5A:BE
Authority key identifier: 3D:B8:A2:AD:DD:B0:02:85:08:54:99:6A:94:B7:2B:87:F4:A7:B3:0F
Certificate issuer: /CN=3db8a2adddb002850854996a94b72b87f4a7b30f
Certificate serial: 0199FC586CA4CF53BAC91F129DE39291669E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
Manifest number: 0F8F
Signing time: Sun 19 Oct 2025 12:01:17 +0000
Manifest this update: Sun 19 Oct 2025 12:01:17 +0000
Manifest next update: Mon 20 Oct 2025 12:01:17 +0000
Files and hashes: 1: Pbiird2wAoUIVJlqlLcrh_Snsw8.crl (hash: hv6EZWNzWwZ8q2i+Ykg67OX1WbLaESmvZ+XMRrcc1QA=)
2: gt9goB76oJJ9IidA_tfxI6lWDIw.roa (hash: q0BFU46k9v4mjBVsSe1ZjIuLriX+JzS+b+gMagD0YfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:6c:a4:cf:53:ba:c9:1f:12:9d:e3:92:91:66:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db8a2adddb002850854996a94b72b87f4a7b30f
Validity
Not Before: Oct 19 12:01:17 2025 GMT
Not After : Oct 20 12:01:17 2025 GMT
Subject: CN=a91ab07c6465ffb345aa8835a1398f6187275abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ca:7b:37:27:ff:ea:d0:f4:6f:6a:c0:7d:ec:
42:c4:1a:46:2e:2a:99:d2:f4:0c:7b:43:a2:8a:9d:
dd:74:52:88:2f:be:bc:0b:90:93:30:0f:b2:0c:83:
64:06:6c:e5:15:b8:bb:69:d3:a8:7f:8c:42:99:15:
25:26:5a:bd:27:9a:a1:cc:4a:ec:54:bf:0c:99:94:
f9:ce:c3:7a:84:25:d2:cb:63:7c:98:6c:11:4d:b6:
99:12:73:b3:1e:c4:0d:e9:09:22:f2:02:1e:f0:9f:
6e:43:f8:d2:73:08:21:fd:6a:6f:49:da:bb:e1:9a:
e4:f2:15:01:19:a0:80:c8:59:b9:4f:df:64:0c:ef:
99:c9:c6:b8:1e:44:08:70:14:1c:be:d6:08:c3:fc:
7c:76:41:62:f7:47:1c:fc:79:e3:72:e6:9e:00:18:
b6:d4:92:aa:99:8d:53:84:ed:e5:19:eb:7b:04:2b:
d0:d3:89:89:77:b7:6c:e9:0d:09:01:f2:b9:ba:71:
7e:d2:7d:05:bb:79:38:9d:7e:6d:85:32:99:88:bb:
f2:40:6e:b4:45:b7:7d:a5:b4:8a:e0:bd:b9:f1:5e:
99:3a:c1:f8:43:cb:4d:5d:aa:01:1a:29:b5:75:48:
3a:26:95:ec:c5:50:a3:0e:fa:ca:d8:90:10:19:63:
7e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1A:B0:7C:64:65:FF:B3:45:AA:88:35:A1:39:8F:61:87:27:5A:BE
X509v3 Authority Key Identifier:
keyid:3D:B8:A2:AD:DD:B0:02:85:08:54:99:6A:94:B7:2B:87:F4:A7:B3:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:1d:da:99:07:75:c2:11:0d:e3:e7:5b:ff:5e:ce:f6:fc:46:
23:e5:06:ec:11:6b:8a:b7:48:e7:bf:46:c9:8a:3c:82:66:7b:
8e:51:4b:68:4e:73:08:1c:e0:92:80:3b:be:c5:03:18:11:60:
3f:ff:42:15:7a:bb:af:e5:ab:d5:ba:8d:94:6b:51:9a:e4:58:
81:92:7d:78:51:db:15:11:df:2d:44:7f:00:2c:62:3c:16:6d:
6a:99:d3:b2:40:2e:bc:c1:eb:3e:90:7e:f3:6d:93:04:ba:66:
9e:20:71:1c:08:da:26:9d:fe:d4:87:4c:0f:94:d7:09:81:2a:
1e:84:c7:c0:b7:6c:a2:ff:ba:5f:79:1b:06:b4:61:20:66:f7:
b7:03:eb:27:2e:8c:f9:fd:f2:fa:78:55:b4:33:d6:81:8e:ee:
b6:53:68:b1:f6:fc:75:60:c1:9c:03:9c:b2:49:f6:6e:ac:1f:
56:e4:c2:aa:8f:75:34:1d:11:7f:76:c1:1d:04:99:7f:e0:83:
04:ca:32:f6:05:5f:2e:ee:03:6b:f0:ed:23:0e:b1:13:78:3d:
0e:5b:3d:4f:c8:b9:63:f9:28:e8:c5:5c:17:32:60:82:45:ac:
4e:87:1d:f1:96:3d:01:8b:47:21:f2:58:e6:5d:67:21:43:f3:
48:c2:f6:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WGykz1O6yR8SneOSkWaeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYjhhMmFkZGRiMDAyODUwODU0OTk2YTk0YjcyYjg3ZjRh
N2IzMGYwHhcNMjUxMDE5MTIwMTE3WhcNMjUxMDIwMTIwMTE3WjAzMTEwLwYDVQQD
EyhhOTFhYjA3YzY0NjVmZmIzNDVhYTg4MzVhMTM5OGY2MTg3Mjc1YWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcp7Nyf/6tD0b2rAfexCxBpGLiqZ
0vQMe0Oiip3ddFKIL768C5CTMA+yDINkBmzlFbi7adOof4xCmRUlJlq9J5qhzErs
VL8MmZT5zsN6hCXSy2N8mGwRTbaZEnOzHsQN6Qki8gIe8J9uQ/jScwgh/WpvSdq7
4Zrk8hUBGaCAyFm5T99kDO+Zyca4HkQIcBQcvtYIw/x8dkFi90cc/HnjcuaeABi2
1JKqmY1ThO3lGet7BCvQ04mJd7ds6Q0JAfK5unF+0n0Fu3k4nX5thTKZiLvyQG60
Rbd9pbSK4L258V6ZOsH4Q8tNXaoBGim1dUg6JpXsxVCjDvrK2JAQGWN+hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkasHxkZf+zRaqINaE5j2GHJ1q+MB8GA1UdIwQY
MBaAFD24oq3dsAKFCFSZapS3K4f0p7MPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGJpaXJkMndBb1VJVkpscWxMY3JoX1Nuc3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yZDQzYzItM2IyZS00ZjJlLWE2YWQt
YTBhNzJhNzMzYzAyLzEvUGJpaXJkMndBb1VJVkpscWxMY3JoX1Nuc3c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8yZDQzYzItM2IyZS00ZjJlLWE2YWQtYTBhNzJhNzMzYzAy
LzEvUGJpaXJkMndBb1VJVkpscWxMY3JoX1Nuc3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIR3amQd1
whEN4+db/17O9vxGI+UG7BFrirdI579GyYo8gmZ7jlFLaE5zCBzgkoA7vsUDGBFg
P/9CFXq7r+Wr1bqNlGtRmuRYgZJ9eFHbFRHfLUR/ACxiPBZtapnTskAuvMHrPpB+
822TBLpmniBxHAjaJp3+1IdMD5TXCYEqHoTHwLdsov+6X3kbBrRhIGb3twPrJy6M
+f3y+nhVtDPWgY7utlNosfb8dWDBnAOcskn2bqwfVuTCqo91NB0Rf3bBHQSZf+CD
BMoy9gVfLu4Da/DtIw6xE3g9Dls9T8i5Y/ko6MVcFzJggkWsTocd8ZY9AYtHIfJY
5l1nIUPzSML2Cg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:26:59 2025 by rpki-client