
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
File: PCr6XHBtPrCpLaibXUG5NutJzLg.mft (raw, json)
Hash identifier: WLk0WT8kRb+bkzK9LTG0DhMuIKv2vD39pAEH3NJJqmU=
Subject key identifier: 4F:98:47:92:6E:3E:79:9E:95:78:AA:6D:5F:9E:00:A7:E5:61:34:46
Authority key identifier: 3C:2A:FA:5C:70:6D:3E:B0:A9:2D:A8:9B:5D:41:B9:36:EB:49:CC:B8
Certificate issuer: /CN=3c2afa5c706d3eb0a92da89b5d41b936eb49ccb8
Certificate serial: 0199FC587066B6987E198914753F3FE2D1CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
Manifest number: 119A
Signing time: Sun 19 Oct 2025 12:01:18 +0000
Manifest this update: Sun 19 Oct 2025 12:01:18 +0000
Manifest next update: Mon 20 Oct 2025 12:01:18 +0000
Files and hashes: 1: PCr6XHBtPrCpLaibXUG5NutJzLg.crl (hash: 077JsDMiODRmcBvD33tk8jn7P7aYwKq6aQUoqofuFSE=)
2: gS9qTUkzusPVnwIVsvZEcIJfkGw.roa (hash: vAfS5SaRlx1aspB2qU2R3kxZGRQKFuwGAmKIB/uyw98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:70:66:b6:98:7e:19:89:14:75:3f:3f:e2:d1:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c2afa5c706d3eb0a92da89b5d41b936eb49ccb8
Validity
Not Before: Oct 19 12:01:18 2025 GMT
Not After : Oct 20 12:01:18 2025 GMT
Subject: CN=4f9847926e3e799e9578aa6d5f9e00a7e5613446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f2:86:d3:25:b9:43:3a:84:c4:27:01:94:74:
7d:38:95:b3:94:33:bc:88:f4:bf:5d:09:f3:82:42:
67:f7:22:d1:93:0f:aa:1a:cb:d5:79:24:44:92:47:
c9:de:6f:4a:2a:3b:47:22:23:a8:0c:d6:25:d7:ae:
f4:c8:e1:33:72:8e:c0:12:b9:f7:f0:3f:6e:49:10:
24:0d:62:79:bf:dc:9b:f7:dd:f2:72:6f:b7:b5:7d:
3b:0d:fd:d1:ef:91:86:36:21:23:22:86:c3:50:57:
dd:49:ee:36:3d:3a:ea:27:28:63:0e:79:9a:dc:12:
c6:06:5b:f5:37:66:88:e3:f0:cf:02:ad:47:8f:a3:
bc:94:08:fd:b5:85:d4:65:56:e2:18:25:69:a3:94:
68:84:95:71:a8:2c:f0:fd:db:7a:40:cf:2c:fb:bb:
b4:66:13:8c:b1:ef:58:d2:d8:07:3d:6d:48:87:94:
a8:60:fe:15:11:14:d2:37:14:5c:d8:33:af:dd:c9:
bd:a2:d2:10:36:30:71:32:86:b8:17:3b:1b:56:0c:
ca:95:1f:ec:fd:75:00:6c:a3:4f:bc:9a:7a:79:7b:
ab:73:fb:4d:ac:ea:d3:2b:48:ca:f8:8f:f1:60:6b:
1a:12:11:7f:ce:2e:6c:52:b6:34:07:0b:87:92:44:
78:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:98:47:92:6E:3E:79:9E:95:78:AA:6D:5F:9E:00:A7:E5:61:34:46
X509v3 Authority Key Identifier:
keyid:3C:2A:FA:5C:70:6D:3E:B0:A9:2D:A8:9B:5D:41:B9:36:EB:49:CC:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:95:80:02:ce:03:47:4c:32:23:94:84:ae:4c:be:ec:1e:38:
f7:26:db:2b:82:f2:55:65:04:d5:8e:5c:aa:27:97:14:98:20:
da:1e:69:dd:a0:28:8a:4b:eb:31:40:40:25:27:47:28:f8:64:
ba:47:3f:0f:dc:ae:b9:0e:db:1d:8a:ac:53:1e:17:5c:6c:27:
8e:4d:37:4c:fc:4f:21:e4:ab:52:df:a0:90:ef:b4:7d:3c:a8:
29:dd:f3:68:d1:93:12:ea:f7:0b:56:60:3a:4f:b1:03:5b:21:
f5:ee:af:e6:f2:2f:f0:f5:32:0f:65:ab:08:ed:e6:7d:b9:9c:
4d:1d:2a:15:8f:74:0f:f9:ca:52:30:93:32:0a:b4:11:17:ef:
c0:cb:d9:e5:13:25:bc:fb:92:ab:8e:5f:9b:cb:4b:62:dc:03:
68:9d:93:58:68:a2:91:5f:87:98:11:5e:9d:7f:95:8f:52:55:
d8:b3:b7:13:46:a0:5d:43:88:92:6d:1d:33:bc:c7:21:dd:ff:
ed:c2:83:9f:8c:6c:36:44:70:4f:d4:38:50:78:f0:fe:a4:60:
7a:82:c6:77:20:ca:ce:bc:12:e9:16:6a:05:51:ed:2b:ff:b5:
99:66:90:38:ca:b4:85:32:f8:c9:4c:9c:a7:1f:b4:c3:77:16:
29:2b:e6:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WHBmtph+GYkUdT8/4tHKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMmFmYTVjNzA2ZDNlYjBhOTJkYTg5YjVkNDFiOTM2ZWI0
OWNjYjgwHhcNMjUxMDE5MTIwMTE4WhcNMjUxMDIwMTIwMTE4WjAzMTEwLwYDVQQD
Eyg0Zjk4NDc5MjZlM2U3OTllOTU3OGFhNmQ1ZjllMDBhN2U1NjEzNDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PKG0yW5QzqExCcBlHR9OJWzlDO8
iPS/XQnzgkJn9yLRkw+qGsvVeSREkkfJ3m9KKjtHIiOoDNYl1670yOEzco7AErn3
8D9uSRAkDWJ5v9yb993ycm+3tX07Df3R75GGNiEjIobDUFfdSe42PTrqJyhjDnma
3BLGBlv1N2aI4/DPAq1Hj6O8lAj9tYXUZVbiGCVpo5RohJVxqCzw/dt6QM8s+7u0
ZhOMse9Y0tgHPW1Ih5SoYP4VERTSNxRc2DOv3cm9otIQNjBxMoa4FzsbVgzKlR/s
/XUAbKNPvJp6eXurc/tNrOrTK0jK+I/xYGsaEhF/zi5sUrY0BwuHkkR4EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+YR5JuPnmelXiqbV+eAKflYTRGMB8GA1UdIwQY
MBaAFDwq+lxwbT6wqS2om11BuTbrScy4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUENyNlhIQnRQckNwTGFpYlhVRzVOdXRKekxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9lYjFjNGYtZmQ4MC00OTE5LWIxODUt
Zjc4MzNhM2YyNDg1LzEvUENyNlhIQnRQckNwTGFpYlhVRzVOdXRKekxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9lYjFjNGYtZmQ4MC00OTE5LWIxODUtZjc4MzNhM2YyNDg1
LzEvUENyNlhIQnRQckNwTGFpYlhVRzVOdXRKekxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcJWAAs4D
R0wyI5SErky+7B449ybbK4LyVWUE1Y5cqieXFJgg2h5p3aAoikvrMUBAJSdHKPhk
ukc/D9yuuQ7bHYqsUx4XXGwnjk03TPxPIeSrUt+gkO+0fTyoKd3zaNGTEur3C1Zg
Ok+xA1sh9e6v5vIv8PUyD2WrCO3mfbmcTR0qFY90D/nKUjCTMgq0ERfvwMvZ5RMl
vPuSq45fm8tLYtwDaJ2TWGiikV+HmBFenX+Vj1JV2LO3E0agXUOIkm0dM7zHId3/
7cKDn4xsNkRwT9Q4UHjw/qRgeoLGdyDKzrwS6RZqBVHtK/+1mWaQOMq0hTL4yUyc
px+0w3cWKSvmgg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:29 2025 by rpki-client