Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
File: PS60FH7nv8a6cvwDSUU0mPAA5YE.mft (raw, json)
Hash identifier: e3ZQ6J+0vXW/LGOVijgoOsyOAECcJesrmPvTY+JWzrQ=
Subject key identifier: 6B:07:D0:DB:51:4C:BC:5C:12:9A:1F:BA:4D:E0:4D:2A:93:0D:F2:AD
Authority key identifier: 3D:2E:B4:14:7E:E7:BF:C6:BA:72:FC:03:49:45:34:98:F0:00:E5:81
Certificate issuer: /CN=3d2eb4147ee7bfc6ba72fc0349453498f000e581
Certificate serial: 0199FB7CB3BE87146D8BDE3FC7DE4FB2D565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
Manifest number: 03D5
Signing time: Sun 19 Oct 2025 08:01:17 +0000
Manifest this update: Sun 19 Oct 2025 08:01:17 +0000
Manifest next update: Mon 20 Oct 2025 08:01:17 +0000
Files and hashes: 1: PS60FH7nv8a6cvwDSUU0mPAA5YE.crl (hash: pnjitWlQD2Sovxln1xMWdflAaABTZjcQcB+OWu4ugEc=)
2: rhHZBrR5DDkzkDSwq2N2DFoItdo.roa (hash: gfniJmHb/llxXTuf6zA06t/WamUafcFVdlCv/KyOq4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:b3:be:87:14:6d:8b:de:3f:c7:de:4f:b2:d5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2eb4147ee7bfc6ba72fc0349453498f000e581
Validity
Not Before: Oct 19 08:01:17 2025 GMT
Not After : Oct 20 08:01:17 2025 GMT
Subject: CN=6b07d0db514cbc5c129a1fba4de04d2a930df2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:15:06:4e:47:f2:22:c1:ac:9e:a5:75:a1:32:
f4:10:05:b6:2b:97:4b:b2:4c:14:72:2b:2d:49:82:
6f:d9:38:87:34:6b:f3:87:1f:0c:52:07:ea:ad:08:
0a:97:07:ec:db:0b:86:76:85:24:68:fb:97:35:c9:
d6:a2:48:3e:03:49:69:20:db:5a:3c:20:2f:d2:02:
40:3b:ca:a7:cd:c3:84:fa:2e:3b:8e:c1:b4:41:22:
37:88:cb:e3:21:cb:89:9f:ce:58:05:fc:4e:16:dd:
30:df:58:f1:0a:a0:40:d8:06:42:f7:29:f6:5a:60:
97:d5:f8:3a:40:f4:cc:19:e5:c3:de:a0:e7:c6:5f:
5b:b2:5f:d1:0c:f8:48:fc:50:77:16:e6:84:78:af:
dc:06:4b:8c:c6:b3:a0:ca:9e:53:51:10:ad:6d:d0:
d3:a9:70:00:e5:40:54:bc:f6:65:7c:15:92:70:84:
2a:f3:7b:33:4c:1f:d7:02:25:c8:9f:bd:e4:35:a2:
d2:37:56:00:8a:b8:f8:c2:b6:5e:1f:b9:33:bf:6a:
e8:b4:ef:7c:56:7b:97:5b:87:ec:6e:9b:ad:1e:25:
b1:70:47:9b:76:3e:7f:75:0b:78:85:75:33:f4:f0:
bd:99:7c:e3:0b:4a:d6:e1:ef:44:ae:f2:92:6f:1c:
e8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:07:D0:DB:51:4C:BC:5C:12:9A:1F:BA:4D:E0:4D:2A:93:0D:F2:AD
X509v3 Authority Key Identifier:
keyid:3D:2E:B4:14:7E:E7:BF:C6:BA:72:FC:03:49:45:34:98:F0:00:E5:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:f8:97:49:fd:be:2e:2b:55:52:1b:66:9b:d9:e2:d9:16:22:
6e:bc:90:78:5c:bf:2d:95:76:7d:07:c8:15:9a:03:83:68:86:
b8:d3:de:23:5c:af:e9:b9:44:59:e7:65:8b:55:c1:cf:4d:47:
21:e7:84:9f:63:d6:7b:9a:9c:cc:f2:f6:05:b4:ae:db:9c:6d:
c8:b8:a6:73:7e:c3:0d:fa:0b:9f:0c:7e:ed:eb:2e:39:a6:68:
4e:8c:28:57:04:dd:d0:62:b7:82:a4:b0:2f:b9:8a:d0:5f:b3:
1c:e1:53:da:f5:29:cc:74:98:8f:b7:52:b7:d9:a7:78:50:09:
df:ff:5b:59:60:4a:45:7d:86:41:dd:66:dd:6c:a1:98:b3:b8:
f4:51:e3:a4:65:3e:97:4d:4a:7d:f0:e9:f6:67:74:27:ed:10:
b9:05:30:fb:22:be:16:44:db:11:36:09:b5:0f:f9:93:85:bf:
9c:61:b2:43:af:01:73:5a:0c:0e:ed:a4:33:b8:63:24:b5:b6:
b5:ac:6d:4c:4f:ca:62:fe:24:be:09:4e:96:c1:2a:66:5e:b0:
98:a8:b8:ad:3d:d9:73:50:1c:1d:69:27:52:b8:00:23:cf:a9:
c1:69:8d:94:90:51:17:7e:0f:58:5c:1a:97:33:4c:2c:c4:5e:
38:73:78:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fLO+hxRti94/x95PstVlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMmViNDE0N2VlN2JmYzZiYTcyZmMwMzQ5NDUzNDk4ZjAw
MGU1ODEwHhcNMjUxMDE5MDgwMTE3WhcNMjUxMDIwMDgwMTE3WjAzMTEwLwYDVQQD
Eyg2YjA3ZDBkYjUxNGNiYzVjMTI5YTFmYmE0ZGUwNGQyYTkzMGRmMmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhUGTkfyIsGsnqV1oTL0EAW2K5dL
skwUcistSYJv2TiHNGvzhx8MUgfqrQgKlwfs2wuGdoUkaPuXNcnWokg+A0lpINta
PCAv0gJAO8qnzcOE+i47jsG0QSI3iMvjIcuJn85YBfxOFt0w31jxCqBA2AZC9yn2
WmCX1fg6QPTMGeXD3qDnxl9bsl/RDPhI/FB3FuaEeK/cBkuMxrOgyp5TURCtbdDT
qXAA5UBUvPZlfBWScIQq83szTB/XAiXIn73kNaLSN1YAirj4wrZeH7kzv2rotO98
VnuXW4fsbputHiWxcEebdj5/dQt4hXUz9PC9mXzjC0rW4e9ErvKSbxzoVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsH0NtRTLxcEpofuk3gTSqTDfKtMB8GA1UdIwQY
MBaAFD0utBR+57/GunL8A0lFNJjwAOWBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFM2MEZIN252OGE2Y3Z3RFNVVTBtUEFBNVlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9iOGY1M2YtNDY3Zi00NWNmLTgzMDYt
NDI5NTFjMmNhNzM4LzEvUFM2MEZIN252OGE2Y3Z3RFNVVTBtUEFBNVlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9iOGY1M2YtNDY3Zi00NWNmLTgzMDYtNDI5NTFjMmNhNzM4
LzEvUFM2MEZIN252OGE2Y3Z3RFNVVTBtUEFBNVlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq/iXSf2+
LitVUhtmm9ni2RYibryQeFy/LZV2fQfIFZoDg2iGuNPeI1yv6blEWedli1XBz01H
IeeEn2PWe5qczPL2BbSu25xtyLimc37DDfoLnwx+7esuOaZoTowoVwTd0GK3gqSw
L7mK0F+zHOFT2vUpzHSYj7dSt9mneFAJ3/9bWWBKRX2GQd1m3WyhmLO49FHjpGU+
l01KffDp9md0J+0QuQUw+yK+FkTbETYJtQ/5k4W/nGGyQ68Bc1oMDu2kM7hjJLW2
taxtTE/KYv4kvglOlsEqZl6wmKi4rT3Zc1AcHWknUrgAI8+pwWmNlJBRF34PWFwa
lzNMLMReOHN4Ig==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:13 2025 by rpki-client