Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
File: pqxtBp2PtzL0_pK04TzX3E05OkI.mft (raw, json)
Hash identifier: jXKFXA8cjFng/YIVnK1p8f/pWga2hEZc/UCuU/1d8Ok=
Subject key identifier: 0B:1D:19:C7:6B:84:37:BA:52:79:6E:83:1D:2D:5F:02:B7:D9:EB:09
Authority key identifier: A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42
Certificate issuer: /CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42
Certificate serial: 019A4F62CD93A05BC8B77129FF33645C0A5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
Manifest number: 0C80
Signing time: Tue 04 Nov 2025 15:01:06 +0000
Manifest this update: Tue 04 Nov 2025 15:01:06 +0000
Manifest next update: Wed 05 Nov 2025 15:01:06 +0000
Files and hashes: 1: kORzGbUwfQz_reUfKxE-VKML1Ko.roa (hash: LJNSK27C7NQtNI1BCy3DsB/OzJxofkAzOY3Bw0ai+Lk=)
2: pqxtBp2PtzL0_pK04TzX3E05OkI.crl (hash: Lv6zCQ9BxGx2CUW0znsKU+crupNy5JjaXKGj/w1uW0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:cd:93:a0:5b:c8:b7:71:29:ff:33:64:5c:0a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42
Validity
Not Before: Nov 4 15:01:06 2025 GMT
Not After : Nov 5 15:01:06 2025 GMT
Subject: CN=0b1d19c76b8437ba52796e831d2d5f02b7d9eb09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:82:18:68:88:94:8c:bb:d5:4a:59:77:62:c3:
8d:ad:c7:4b:fb:05:b5:f5:00:c3:21:08:cb:a1:db:
44:3b:93:12:56:43:f7:f5:9a:e8:c2:19:cb:43:c4:
6e:52:e8:6c:55:26:c5:43:d2:c0:13:ed:05:1e:7b:
81:ce:08:5b:02:cd:1d:bf:ca:78:d1:93:a6:3d:94:
77:d7:fb:9f:1b:df:02:a9:9a:14:e9:dd:08:0a:bc:
ac:3d:fa:fd:5e:ae:2d:7d:31:ce:1b:bf:5b:62:bb:
c3:06:a1:5f:4f:33:82:ea:9b:53:27:fb:17:41:cd:
b9:5a:55:1b:79:6c:cb:87:44:46:99:81:01:73:a3:
13:17:b2:b0:b6:e1:43:03:72:97:ab:99:f6:9c:d5:
cf:7a:9d:fd:9a:d8:72:80:14:d5:27:7b:14:3f:c1:
4e:b1:d0:da:fd:d0:f1:1f:70:e7:7a:01:24:91:99:
9f:5c:53:89:3e:dd:8e:68:8d:b1:e4:68:f4:42:aa:
6c:9e:a6:f6:e5:df:dc:43:6c:41:0f:7a:95:0c:77:
4e:6f:c7:f4:96:d8:1c:a7:21:be:20:62:e3:9d:d5:
98:3c:a1:92:5f:11:9d:ac:a5:8a:9f:89:04:69:1a:
91:96:5f:4c:f2:18:7a:cc:bc:d9:61:6f:c1:08:34:
47:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1D:19:C7:6B:84:37:BA:52:79:6E:83:1D:2D:5F:02:B7:D9:EB:09
X509v3 Authority Key Identifier:
keyid:A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d3:88:9e:39:09:82:58:6f:42:45:27:f8:7d:3f:b6:de:12:
75:6d:0a:a7:17:1b:92:9f:46:f2:0a:33:f2:07:96:af:53:4a:
dc:48:ca:9c:03:5b:8c:a0:82:c9:01:40:40:9d:b8:c9:ad:e4:
32:0e:00:b0:ab:27:00:49:48:a2:46:1b:cf:33:e6:09:2b:51:
e4:6a:94:b5:a4:f7:86:d8:8b:43:05:8f:c4:fc:27:63:41:dc:
d7:ad:c6:ad:12:c8:71:78:7b:8d:d4:ea:bf:32:f9:0e:d7:05:
30:cb:30:35:87:94:fe:5c:a8:d7:62:ce:2a:45:d4:cb:ad:f9:
7f:32:ca:a9:ab:41:97:12:f0:70:07:02:cd:50:87:98:d7:b6:
9b:d6:ee:53:36:38:d4:24:2c:18:11:8d:8d:5f:ee:0a:e8:0d:
07:a8:13:b0:54:06:b3:d4:51:6d:55:4f:9a:79:d0:d1:c8:c1:
7c:c1:7c:71:e6:de:40:44:cb:e1:50:1b:ac:57:9f:1f:cc:d8:
89:fe:b5:8d:b7:75:14:64:ef:95:26:cb:78:ae:ed:91:ac:24:
fe:f4:3c:85:22:f1:9b:79:53:e3:de:85:84:09:5d:ec:e2:55:
5a:38:c7:4f:e9:cc:8a:31:9e:3f:c0:7b:eb:72:7f:38:43:19:
b3:27:ae:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYs2ToFvIt3Ep/zNkXApaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YWM2ZDA2OWQ4ZmI3MzJmNGZlOTJiNGUxM2NkN2RjNGQz
OTNhNDIwHhcNMjUxMTA0MTUwMTA2WhcNMjUxMTA1MTUwMTA2WjAzMTEwLwYDVQQD
EygwYjFkMTljNzZiODQzN2JhNTI3OTZlODMxZDJkNWYwMmI3ZDllYjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIIYaIiUjLvVSll3YsONrcdL+wW1
9QDDIQjLodtEO5MSVkP39ZrowhnLQ8RuUuhsVSbFQ9LAE+0FHnuBzghbAs0dv8p4
0ZOmPZR31/ufG98CqZoU6d0ICrysPfr9Xq4tfTHOG79bYrvDBqFfTzOC6ptTJ/sX
Qc25WlUbeWzLh0RGmYEBc6MTF7KwtuFDA3KXq5n2nNXPep39mthygBTVJ3sUP8FO
sdDa/dDxH3DnegEkkZmfXFOJPt2OaI2x5Gj0Qqpsnqb25d/cQ2xBD3qVDHdOb8f0
ltgcpyG+IGLjndWYPKGSXxGdrKWKn4kEaRqRll9M8hh6zLzZYW/BCDRH4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAsdGcdrhDe6Unlugx0tXwK32esJMB8GA1UdIwQY
MBaAFKasbQadj7cy9P6StOE819xNOTpCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHF4dEJwMlB0ekwwX3BLMDRUelgzRTA1T2tJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jMDlmMDItNzUxMC00MmVhLWIyODEt
YmZhMDNhNjY4NTc3LzEvcHF4dEJwMlB0ekwwX3BLMDRUelgzRTA1T2tJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9jMDlmMDItNzUxMC00MmVhLWIyODEtYmZhMDNhNjY4NTc3
LzEvcHF4dEJwMlB0ekwwX3BLMDRUelgzRTA1T2tJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFNOInjkJ
glhvQkUn+H0/tt4SdW0Kpxcbkp9G8goz8geWr1NK3EjKnANbjKCCyQFAQJ24ya3k
Mg4AsKsnAElIokYbzzPmCStR5GqUtaT3htiLQwWPxPwnY0Hc163GrRLIcXh7jdTq
vzL5DtcFMMswNYeU/lyo12LOKkXUy635fzLKqatBlxLwcAcCzVCHmNe2m9buUzY4
1CQsGBGNjV/uCugNB6gTsFQGs9RRbVVPmnnQ0cjBfMF8cebeQETL4VAbrFefH8zY
if61jbd1FGTvlSbLeK7tkawk/vQ8hSLxm3lT496FhAld7OJVWjjHT+nMijGeP8B7
63J/OEMZsyeuuQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:14 2025 by rpki-client