Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
File: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft (raw, json)
Hash identifier: GkYnWZkirPk9btRuHMWDINpVxX7nwgs+i62w51mqIs8=
Subject key identifier: 64:37:1A:34:41:35:4B:89:E0:DA:5B:2A:94:65:0C:4A:0F:7B:D2:47
Authority key identifier: 3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
Certificate issuer: /CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Certificate serial: 019A53E3ECB85DCA3EC19B8C68C9105FDD89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
Manifest number: 10AB
Signing time: Wed 05 Nov 2025 12:00:37 +0000
Manifest this update: Wed 05 Nov 2025 12:00:37 +0000
Manifest next update: Thu 06 Nov 2025 12:00:37 +0000
Files and hashes: 1: 9fywOGNsk6OIfuzuy-reOW9V4kc.roa (hash: b/vhaQiKQhhebnkpqZc4spciDDH3KeMp+AUrKHHSWv4=)
2: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl (hash: ceeK6Emh7Ro6QWyuG0lHxawHrUpNRGk2bm2QIkVjkCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:ec:b8:5d:ca:3e:c1:9b:8c:68:c9:10:5f:dd:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Validity
Not Before: Nov 5 12:00:37 2025 GMT
Not After : Nov 6 12:00:37 2025 GMT
Subject: CN=64371a3441354b89e0da5b2a94650c4a0f7bd247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:58:99:31:fa:10:58:bd:65:08:a2:60:9e:76:
31:51:c4:39:eb:9b:9b:01:8b:90:91:8c:2d:e8:9a:
82:3a:c0:19:ed:86:8f:22:ae:f3:93:90:14:d0:91:
fc:1e:54:30:dd:c8:ca:72:8c:f3:92:e2:0a:ad:15:
ba:13:b9:47:80:f4:ff:c4:84:64:a3:c9:e4:c4:30:
b8:1b:8f:9b:34:b9:78:b3:ae:e2:79:c5:56:ac:64:
ae:3c:d5:9a:15:57:d6:f7:09:d6:c5:ee:5b:46:47:
a9:5b:44:f7:b5:d6:22:d5:27:c8:71:e2:d3:42:d5:
de:ef:9b:28:8a:83:da:03:57:76:a4:62:54:8c:4f:
dc:ab:95:64:1a:65:ce:ea:40:fc:b3:ab:61:1a:4a:
62:65:dc:3a:3c:43:c6:fb:e7:60:fa:c6:dc:34:0e:
59:05:f6:6b:63:19:3f:f1:2d:11:60:62:fe:5b:0c:
2a:43:61:7e:49:05:90:8a:4a:9e:78:01:9c:2c:41:
b6:03:9a:f6:90:cd:c5:b5:57:57:1a:31:6c:37:81:
b1:c8:c7:ce:f2:83:76:1d:3e:c9:f5:65:02:f5:c1:
3a:94:5c:a2:ef:d8:db:72:95:14:cc:14:8b:3d:14:
72:2d:5f:08:4c:47:0c:53:f9:7d:02:5e:08:37:bd:
28:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:37:1A:34:41:35:4B:89:E0:DA:5B:2A:94:65:0C:4A:0F:7B:D2:47
X509v3 Authority Key Identifier:
keyid:3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:b4:2a:04:22:42:2d:67:e3:cb:2f:4a:f9:2c:55:4a:9f:2d:
25:75:a1:4f:9f:c5:8c:c0:2c:8a:cb:ca:92:bf:67:a9:ab:13:
02:b0:0f:52:d5:32:25:c9:4b:63:99:1a:c0:91:89:43:12:56:
39:11:37:e7:02:a0:db:bc:48:84:f5:78:35:fb:56:1a:8e:ff:
64:74:89:33:07:71:22:2e:c8:1c:c7:7f:7c:34:d8:8b:9e:e5:
ea:15:c4:c5:62:d8:84:38:b9:dc:bf:75:77:67:ab:31:c3:3e:
05:37:f2:c0:a0:6f:88:07:79:6c:84:8c:eb:c5:00:9e:83:d9:
43:09:5f:87:72:ff:b9:04:03:76:30:00:c5:8e:64:fa:e3:c9:
30:0d:24:ca:29:40:78:1e:b3:23:fa:f2:76:07:57:33:93:9e:
48:02:8b:c5:12:54:04:02:8c:ac:f9:63:b1:49:33:ee:9e:bf:
3e:3a:2d:62:e0:45:37:7f:8e:26:d5:5a:e5:e3:14:29:9c:51:
b0:b7:5e:1e:47:da:43:dd:3f:d5:f5:c9:6b:10:0d:a2:4e:c2:
aa:8a:80:4f:be:1d:6a:c6:06:bf:9a:ad:7d:60:1f:52:42:df:
2d:fa:23:28:64:63:77:8b:20:1f:b5:b9:bb:ad:5b:ae:b0:e0:
7b:56:91:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpT4+y4Xco+wZuMaMkQX92JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYTU1NDA5OGM3YTg4YWEzNDI2NGI5MmQ4YmYyMjU3ZWMw
YmNkYTQwHhcNMjUxMTA1MTIwMDM3WhcNMjUxMTA2MTIwMDM3WjAzMTEwLwYDVQQD
Eyg2NDM3MWEzNDQxMzU0Yjg5ZTBkYTViMmE5NDY1MGM0YTBmN2JkMjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApliZMfoQWL1lCKJgnnYxUcQ565ub
AYuQkYwt6JqCOsAZ7YaPIq7zk5AU0JH8HlQw3cjKcozzkuIKrRW6E7lHgPT/xIRk
o8nkxDC4G4+bNLl4s67iecVWrGSuPNWaFVfW9wnWxe5bRkepW0T3tdYi1SfIceLT
QtXe75soioPaA1d2pGJUjE/cq5VkGmXO6kD8s6thGkpiZdw6PEPG++dg+sbcNA5Z
BfZrYxk/8S0RYGL+WwwqQ2F+SQWQikqeeAGcLEG2A5r2kM3FtVdXGjFsN4GxyMfO
8oN2HT7J9WUC9cE6lFyi79jbcpUUzBSLPRRyLV8ITEcMU/l9Al4IN70oFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQ3GjRBNUuJ4NpbKpRlDEoPe9JHMB8GA1UdIwQY
MBaAFD6lVAmMeoiqNCZLkti/IlfsC82kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHFWVUNZeDZpS28wSmt1UzJMOGlWLXdMemFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80NzY3Y2UtNDQ0OC00MzZiLWE5MTAt
NjZkZTk4NjVkYmFjLzEvUHFWVUNZeDZpS28wSmt1UzJMOGlWLXdMemFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy80NzY3Y2UtNDQ0OC00MzZiLWE5MTAtNjZkZTk4NjVkYmFj
LzEvUHFWVUNZeDZpS28wSmt1UzJMOGlWLXdMemFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkrQqBCJC
LWfjyy9K+SxVSp8tJXWhT5/FjMAsisvKkr9nqasTArAPUtUyJclLY5kawJGJQxJW
ORE35wKg27xIhPV4NftWGo7/ZHSJMwdxIi7IHMd/fDTYi57l6hXExWLYhDi53L91
d2erMcM+BTfywKBviAd5bISM68UAnoPZQwlfh3L/uQQDdjAAxY5k+uPJMA0kyilA
eB6zI/rydgdXM5OeSAKLxRJUBAKMrPljsUkz7p6/PjotYuBFN3+OJtVa5eMUKZxR
sLdeHkfaQ90/1fXJaxANok7CqoqAT74dasYGv5qtfWAfUkLfLfojKGRjd4sgH7W5
u61brrDge1aR2w==
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:40:13 2025 by rpki-client