Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft
File: PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft (raw, json)
Hash identifier: iWdCluiYD8Q7m8q61hDE89rg5vuJiMQxSY0Ti2JbUFo=
Subject key identifier: 26:3C:1B:A9:28:EE:D9:FB:CF:F7:99:F3:3C:33:29:62:09:D6:4A:2E
Authority key identifier: 3D:23:75:8D:FB:6F:1D:43:DC:D6:4D:0F:0A:B2:7E:F7:15:13:59:52
Certificate issuer: /CN=3d23758dfb6f1d43dcd64d0f0ab27ef715135952
Certificate serial: 019A4F99518BC6768CEAFFBDC3D080722202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PSN1jftvHUPc1k0PCrJ-9xUTWVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft
Manifest number: 05ED
Signing time: Tue 04 Nov 2025 16:00:39 +0000
Manifest this update: Tue 04 Nov 2025 16:00:39 +0000
Manifest next update: Wed 05 Nov 2025 16:00:39 +0000
Files and hashes: 1: PSN1jftvHUPc1k0PCrJ-9xUTWVI.crl (hash: KRC9x+UPE1DqblA3zKxbKxaYK+PQJu6DNNRjGTvVeGo=)
2: cNQzFblAKvFr8hGK7lwE2E-QroQ.roa (hash: 6L0JpdKsg5wIV7DiGvLclmuCfLf4+RgtvQ0jAlVXODk=)
3: sq8t5TnYeFbLwzKDRurrhu8TSwI.roa (hash: BEQOlbgnZNiMmu4zSM6xloAN2ehefN/KrPp5K3vJnWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/PSN1jftvHUPc1k0PCrJ-9xUTWVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:51:8b:c6:76:8c:ea:ff:bd:c3:d0:80:72:22:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d23758dfb6f1d43dcd64d0f0ab27ef715135952
Validity
Not Before: Nov 4 16:00:39 2025 GMT
Not After : Nov 5 16:00:39 2025 GMT
Subject: CN=263c1ba928eed9fbcff799f33c33296209d64a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3d:eb:4f:75:8e:a8:f1:b0:e7:34:01:a7:ef:
a4:05:b3:a8:e8:55:59:34:fe:8f:97:aa:e9:f5:e4:
f4:eb:61:b9:44:8f:72:65:ba:47:3c:43:32:a1:10:
bd:b5:74:ef:3d:31:1f:d8:15:9c:b4:9d:54:93:98:
77:cd:fe:89:99:61:a0:7b:c6:b7:d1:1a:91:6f:3a:
4e:76:92:f5:09:ff:5b:41:ac:a6:08:8c:da:13:b0:
2c:78:c4:9d:07:20:f2:79:6a:32:2b:e2:30:5c:89:
d6:f5:6b:f0:88:d1:eb:6f:9f:f3:cf:81:65:aa:c0:
1b:60:f3:c4:21:1c:d5:89:e9:58:c6:6b:4d:a5:44:
4f:0b:0c:27:a0:c3:03:47:2a:50:32:e4:fc:dd:86:
aa:c0:0d:36:6b:a7:c9:05:58:f6:5a:44:5d:d6:97:
87:42:c4:a2:4a:fa:bf:69:32:60:88:c1:61:3d:2f:
b9:57:fd:82:6a:bb:25:21:ed:29:dd:94:53:68:ef:
59:6a:6d:bf:00:84:7b:03:e4:ec:d2:9e:01:a8:70:
ad:41:d8:e6:18:3a:d2:9e:4d:06:b2:04:4a:a4:12:
67:3a:8e:0a:95:b6:49:e5:0b:dc:c9:0e:22:0d:fa:
2a:5d:e8:dc:bb:f1:f8:54:09:b4:6a:ab:e0:01:db:
42:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3C:1B:A9:28:EE:D9:FB:CF:F7:99:F3:3C:33:29:62:09:D6:4A:2E
X509v3 Authority Key Identifier:
keyid:3D:23:75:8D:FB:6F:1D:43:DC:D6:4D:0F:0A:B2:7E:F7:15:13:59:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSN1jftvHUPc1k0PCrJ-9xUTWVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:3f:7e:12:a0:b9:e0:68:9c:f3:25:54:a5:96:07:3b:48:ed:
fa:c1:50:ab:ad:0e:cd:a3:74:ca:25:da:0f:09:74:ea:21:92:
98:1b:79:a5:5a:63:24:38:dc:e4:aa:a8:b3:d3:67:91:46:02:
62:6f:d9:9d:33:c3:7e:b3:a3:96:42:aa:16:b9:ed:bc:a6:db:
5e:a3:35:15:c3:fe:07:c3:6d:74:81:e9:c9:d4:45:38:dd:49:
cd:c8:89:71:2e:b2:f7:d8:e2:b0:28:5c:b8:9c:27:25:0f:3a:
9a:6f:bd:b4:4e:3a:16:ea:ea:f2:8c:40:83:0c:19:7d:bc:0c:
be:fa:e4:43:14:82:78:b7:ae:63:6c:c4:c5:e2:dd:d8:3a:c3:
73:e8:85:66:a3:72:37:32:02:6b:d8:d1:5b:04:0d:84:9a:19:
b1:d8:ab:d8:4b:58:56:d8:dd:1f:9a:91:a8:85:1f:56:b7:3b:
6a:d6:48:9a:55:25:c0:19:01:88:0e:bb:ab:f5:db:1f:c5:70:
67:0a:35:a8:d6:4a:66:43:5f:8a:f9:4f:d2:02:01:14:5b:fb:
35:df:25:4f:7e:ae:f3:83:cd:00:4b:af:35:b4:6e:a2:2c:6d:
7f:cb:eb:15:74:d6:5f:8e:ff:36:ed:6b:3a:a7:75:d4:65:37:
dc:fd:50:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmVGLxnaM6v+9w9CAciICMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMjM3NThkZmI2ZjFkNDNkY2Q2NGQwZjBhYjI3ZWY3MTUx
MzU5NTIwHhcNMjUxMTA0MTYwMDM5WhcNMjUxMTA1MTYwMDM5WjAzMTEwLwYDVQQD
EygyNjNjMWJhOTI4ZWVkOWZiY2ZmNzk5ZjMzYzMzMjk2MjA5ZDY0YTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz3rT3WOqPGw5zQBp++kBbOo6FVZ
NP6Pl6rp9eT062G5RI9yZbpHPEMyoRC9tXTvPTEf2BWctJ1Uk5h3zf6JmWGge8a3
0RqRbzpOdpL1Cf9bQaymCIzaE7AseMSdByDyeWoyK+IwXInW9WvwiNHrb5/zz4Fl
qsAbYPPEIRzVielYxmtNpURPCwwnoMMDRypQMuT83YaqwA02a6fJBVj2WkRd1peH
QsSiSvq/aTJgiMFhPS+5V/2CarslIe0p3ZRTaO9Zam2/AIR7A+Ts0p4BqHCtQdjm
GDrSnk0GsgRKpBJnOo4KlbZJ5QvcyQ4iDfoqXejcu/H4VAm0aqvgAdtCZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCY8G6ko7tn7z/eZ8zwzKWIJ1kouMB8GA1UdIwQY
MBaAFD0jdY37bx1D3NZNDwqyfvcVE1lSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFNOMWpmdHZIVVBjMWswUENySi05eFVUV1ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82NmVmYjQtZDJlYy00MGQ2LTlhM2Ut
Nzk5MGU4N2JiZDVmLzEvUFNOMWpmdHZIVVBjMWswUENySi05eFVUV1ZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC82NmVmYjQtZDJlYy00MGQ2LTlhM2UtNzk5MGU4N2JiZDVm
LzEvUFNOMWpmdHZIVVBjMWswUENySi05eFVUV1ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFD9+EqC5
4Gic8yVUpZYHO0jt+sFQq60OzaN0yiXaDwl06iGSmBt5pVpjJDjc5Kqos9NnkUYC
Ym/ZnTPDfrOjlkKqFrntvKbbXqM1FcP+B8NtdIHpydRFON1JzciJcS6y99jisChc
uJwnJQ86mm+9tE46Furq8oxAgwwZfbwMvvrkQxSCeLeuY2zExeLd2DrDc+iFZqNy
NzICa9jRWwQNhJoZsdir2EtYVtjdH5qRqIUfVrc7atZImlUlwBkBiA67q/XbH8Vw
Zwo1qNZKZkNfivlP0gIBFFv7Nd8lT36u84PNAEuvNbRuoixtf8vrFXTWX47/Nu1r
Oqd11GU33P1QZA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:32:40 2025 by rpki-client