Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
File: Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft (raw, json)
Hash identifier: Hx3v054taTpLM/xCPDGXxpCWFhgSkGP74qIdeaOuw3A=
Subject key identifier: D1:E4:7C:42:A8:CD:BE:2D:B4:4E:90:74:57:82:7E:CE:5D:85:BA:4F
Authority key identifier: 3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
Certificate issuer: /CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Certificate serial: 0199FE7E0E00467725409865C2541723F5DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
Manifest number: 0614
Signing time: Sun 19 Oct 2025 22:01:37 +0000
Manifest this update: Sun 19 Oct 2025 22:01:37 +0000
Manifest next update: Mon 20 Oct 2025 22:01:37 +0000
Files and hashes: 1: Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl (hash: 4R17t9kQTNLNCQi/qwXiJ+4LuY/WlqsPUIvSplT06n0=)
2: jCGGbslP38BuOy2f_eS54xc-hWg.roa (hash: rfVT0PEc4ZDXhhwqi4mRItGvqKV42ncM8sTUj9MUtx0=)
3: lFHDzTXqiwUlXqs5qOXSJRmYXfE.roa (hash: Kj0KUbB2+KfwbsuGFaPjdzmb30sagRusRai8T0ZrnFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:0e:00:46:77:25:40:98:65:c2:54:17:23:f5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Validity
Not Before: Oct 19 22:01:37 2025 GMT
Not After : Oct 20 22:01:37 2025 GMT
Subject: CN=d1e47c42a8cdbe2db44e907457827ece5d85ba4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:39:5a:ab:1a:c5:e1:33:3d:59:bb:da:f8:94:
dc:f2:7d:47:bb:de:f5:80:73:4e:24:0a:aa:6f:fd:
dd:d6:68:70:b6:3e:18:92:85:a9:17:0c:9e:36:ee:
74:55:dc:41:f1:e4:32:ef:35:c6:95:98:38:1f:e7:
15:de:e7:bc:4f:75:e7:db:81:9c:11:fe:dc:64:2d:
9e:69:3c:19:a8:20:98:8b:4c:3b:f5:c0:39:8c:1d:
0a:cb:5f:fe:89:22:d7:0c:55:0f:71:bf:4e:94:67:
6e:1a:64:e0:25:af:ec:e5:53:3a:a6:2d:af:9b:01:
5e:f5:42:99:4b:15:51:dc:11:68:f0:ac:a4:d7:1c:
92:04:10:cf:a0:c4:93:0a:72:f4:13:80:09:f7:00:
eb:f9:ab:19:d5:de:1a:1f:16:84:2b:08:2e:61:55:
da:b2:4e:cb:45:7e:01:55:78:ee:8b:d3:c8:c2:f1:
57:82:97:f8:9d:0a:2d:c2:19:00:7e:cc:33:d0:cb:
80:a2:d0:76:00:c1:3d:39:59:1e:20:a0:2b:4d:63:
79:34:be:d8:82:e1:b4:14:96:5a:f5:f1:f5:53:81:
7a:b0:3e:60:5a:68:49:f0:33:39:87:2d:4a:68:93:
23:d7:90:6c:af:63:8a:14:31:fe:d6:f3:50:ce:4c:
11:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E4:7C:42:A8:CD:BE:2D:B4:4E:90:74:57:82:7E:CE:5D:85:BA:4F
X509v3 Authority Key Identifier:
keyid:3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a6:6f:3c:82:85:fa:a2:ed:13:02:21:41:c8:a3:cc:cb:af:
d2:32:6a:cf:25:4e:cf:6d:46:69:bc:86:41:8d:42:27:c9:27:
67:60:ff:7c:b0:f1:a4:e8:d7:48:88:7e:bc:9b:e6:e3:b1:8b:
88:a4:83:9b:3b:60:36:e1:7b:2d:6d:f9:e3:89:30:4b:37:53:
67:ab:5d:36:52:8c:6a:c6:c7:a3:29:95:36:cb:75:32:73:0e:
51:8f:82:fa:1c:05:d7:fc:18:b4:76:a0:2c:a4:60:36:4a:ee:
9e:51:2d:81:9a:3e:d1:14:dc:da:b7:30:6e:f0:71:62:a9:18:
04:0b:f2:1f:a5:e7:e6:e8:ad:1e:c5:6f:cb:5b:69:fe:f0:a2:
fd:9b:36:e8:b7:68:f4:bb:39:ff:08:21:28:e8:a5:a4:04:c2:
b4:31:93:23:88:16:ff:08:79:e3:d2:18:b3:79:b7:32:cd:fd:
a5:f2:47:ba:12:d0:cb:2a:a0:82:e3:4e:9f:9a:4c:09:71:4c:
3e:3a:18:06:a6:16:30:75:59:4d:7f:c2:b1:15:72:9c:dd:17:
a1:d4:c5:94:33:ef:48:f9:14:06:c1:aa:5f:ea:d5:a1:9b:57:
f4:8d:7b:be:81:8b:19:7b:34:2d:9d:d1:70:e3:2e:1c:2e:1f:
c8:92:08:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+fg4ARnclQJhlwlQXI/XfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmM2Y1NTRiODAyODFkZWEyYTMwMDMxOGFhYWQ2ZDJkOTdm
MWNlNDQwHhcNMjUxMDE5MjIwMTM3WhcNMjUxMDIwMjIwMTM3WjAzMTEwLwYDVQQD
EyhkMWU0N2M0MmE4Y2RiZTJkYjQ0ZTkwNzQ1NzgyN2VjZTVkODViYTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTlaqxrF4TM9Wbva+JTc8n1Hu971
gHNOJAqqb/3d1mhwtj4YkoWpFwyeNu50VdxB8eQy7zXGlZg4H+cV3ue8T3Xn24Gc
Ef7cZC2eaTwZqCCYi0w79cA5jB0Ky1/+iSLXDFUPcb9OlGduGmTgJa/s5VM6pi2v
mwFe9UKZSxVR3BFo8Kyk1xySBBDPoMSTCnL0E4AJ9wDr+asZ1d4aHxaEKwguYVXa
sk7LRX4BVXjui9PIwvFXgpf4nQotwhkAfswz0MuAotB2AME9OVkeIKArTWN5NL7Y
guG0FJZa9fH1U4F6sD5gWmhJ8DM5hy1KaJMj15Bsr2OKFDH+1vNQzkwRKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHkfEKozb4ttE6QdFeCfs5dhbpPMB8GA1UdIwQY
MBaAFD8/VUuAKB3qKjADGKqtbS2X8c5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHo5VlM0QW9IZW9xTUFNWXFxMXRMWmZ4emtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83OGQ1MjgtN2NkZi00NGMwLWFjZGQt
ZjUzM2I4ZGY4MGE5LzEvUHo5VlM0QW9IZW9xTUFNWXFxMXRMWmZ4emtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy83OGQ1MjgtN2NkZi00NGMwLWFjZGQtZjUzM2I4ZGY4MGE5
LzEvUHo5VlM0QW9IZW9xTUFNWXFxMXRMWmZ4emtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjaZvPIKF
+qLtEwIhQcijzMuv0jJqzyVOz21GabyGQY1CJ8knZ2D/fLDxpOjXSIh+vJvm47GL
iKSDmztgNuF7LW3544kwSzdTZ6tdNlKMasbHoymVNst1MnMOUY+C+hwF1/wYtHag
LKRgNkrunlEtgZo+0RTc2rcwbvBxYqkYBAvyH6Xn5uitHsVvy1tp/vCi/Zs26Ldo
9Ls5/wghKOilpATCtDGTI4gW/wh549IYs3m3Ms39pfJHuhLQyyqgguNOn5pMCXFM
PjoYBqYWMHVZTX/CsRVynN0XodTFlDPvSPkUBsGqX+rVoZtX9I17voGLGXs0LZ3R
cOMuHC4fyJIIdQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:52:51 2025 by rpki-client