Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
File: pkDHUev7SAfYRiLoBss9C53YEGk.mft (raw, json)
Hash identifier: r4WtcsB2735T2fVXF1w+PgPK9uDBOF0Us/Q/lEo6S6s=
Subject key identifier: AC:D8:40:E8:4D:A8:D3:1D:DB:55:BB:A3:4C:F0:94:9F:9E:05:AA:63
Authority key identifier: A6:40:C7:51:EB:FB:48:07:D8:46:22:E8:06:CB:3D:0B:9D:D8:10:69
Certificate issuer: /CN=a640c751ebfb4807d84622e806cb3d0b9dd81069
Certificate serial: 019A4D05C7ED0D9B7FDAF397D9634E9E1068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 04:00:15 +0000
Manifest this update: Tue 04 Nov 2025 04:00:15 +0000
Manifest next update: Wed 05 Nov 2025 04:00:15 +0000
Files and hashes: 1: CqoX7DJIz6T-m3NHJ01LCtyGJFE.roa (hash: 32gG2ZUMfd1jjxqZY90ktdKNZmqWxjZXungJm+FeL3s=)
2: ZCRNSq91ZKzRcSK6x3pKdZV_4Rw.roa (hash: SLb/dN4BABY7//UWc03uIXxQcoqVDd7HnpJMkhWH2bA=)
3: pkDHUev7SAfYRiLoBss9C53YEGk.crl (hash: ayDq+5Lbr9ZNdGcx2d6uegBsEvEU1UV2xVv2zHTXfj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:c7:ed:0d:9b:7f:da:f3:97:d9:63:4e:9e:10:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a640c751ebfb4807d84622e806cb3d0b9dd81069
Validity
Not Before: Nov 4 04:00:15 2025 GMT
Not After : Nov 5 04:00:15 2025 GMT
Subject: CN=acd840e84da8d31ddb55bba34cf0949f9e05aa63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4d:57:0f:6c:85:08:15:63:e2:7e:5d:b3:fb:
c2:47:44:dc:73:a3:f6:41:60:93:82:ac:19:e6:71:
a7:ca:1b:e3:58:24:02:6b:87:d3:cf:c8:0d:8b:12:
dd:3d:7d:3d:57:3a:3a:75:d9:dc:8d:76:31:2a:a3:
d7:e2:d9:e4:d7:2f:19:f5:e8:e1:32:3b:25:cf:32:
42:38:85:f7:5e:1a:be:0a:d9:26:c9:50:c4:ad:f6:
43:4f:f4:da:d4:db:2a:fc:f7:c6:72:d4:7f:e7:78:
0e:f4:63:8f:8b:89:e0:bb:87:7d:e2:8d:44:90:0d:
e3:40:13:50:e1:5c:ac:25:7d:88:5f:3d:56:be:bd:
cc:1a:99:5b:b1:a5:e6:e5:11:a8:74:6e:38:1c:5b:
b1:20:4b:0d:2e:60:09:aa:9f:95:37:0f:66:70:64:
09:56:40:47:34:b6:a5:53:aa:89:c6:dc:60:1f:95:
20:81:df:a4:67:dc:e7:8b:9a:5f:0d:88:f1:65:e5:
53:d1:c8:c4:cf:ac:d8:7a:cd:02:c6:2d:93:fb:2b:
46:9d:47:d4:d8:66:fa:5b:9c:6c:be:df:ce:a7:93:
13:c1:0b:0a:fe:81:c4:c8:99:88:7e:d7:ae:df:17:
03:18:41:0c:4f:1c:0a:60:6c:16:bf:4b:3a:5d:18:
e0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D8:40:E8:4D:A8:D3:1D:DB:55:BB:A3:4C:F0:94:9F:9E:05:AA:63
X509v3 Authority Key Identifier:
keyid:A6:40:C7:51:EB:FB:48:07:D8:46:22:E8:06:CB:3D:0B:9D:D8:10:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:12:09:3f:6d:48:67:04:dd:52:20:58:da:0c:55:75:c1:95:
30:42:38:74:eb:fe:4f:ee:f5:24:da:12:45:32:fd:41:a2:2a:
67:43:43:15:d5:61:0f:86:ef:c8:59:ff:21:ad:0c:36:f4:b0:
6e:48:7a:bc:ac:9c:e5:e8:9c:1a:64:04:07:e2:ad:22:d3:0b:
a3:ec:db:0a:d4:8b:c7:c3:91:de:8e:9d:8b:a9:82:da:e0:08:
da:3f:94:1d:13:c6:b9:4a:d1:82:53:9f:2b:f0:1e:a7:78:b9:
46:8d:76:34:5c:8d:3c:e2:bd:a0:69:2d:a9:3c:6e:7f:c8:e7:
87:4b:c6:0f:f4:f8:9d:09:6f:a7:5c:72:8d:cd:04:d0:db:b3:
cc:50:9e:6b:67:4a:ee:e6:45:ff:b1:7b:61:ea:7c:dd:a4:6b:
29:92:2e:61:85:45:74:d2:67:7f:f4:a2:bf:71:34:f1:19:a9:
ac:36:63:8a:0d:c9:11:55:1d:72:a3:17:ab:5f:07:f6:17:80:
d3:69:9a:eb:87:4f:9d:fe:7f:83:7c:19:0f:46:b0:84:ac:35:
7e:5c:f7:73:0e:97:2a:a0:1a:6e:63:6f:91:1d:59:ed:b6:07:
d9:f7:45:e2:c4:eb:d6:0e:11:e0:0e:56:31:b0:a3:6e:d9:0f:
2e:aa:38:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNBcftDZt/2vOX2WNOnhBoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NDBjNzUxZWJmYjQ4MDdkODQ2MjJlODA2Y2IzZDBiOWRk
ODEwNjkwHhcNMjUxMTA0MDQwMDE1WhcNMjUxMTA1MDQwMDE1WjAzMTEwLwYDVQQD
EyhhY2Q4NDBlODRkYThkMzFkZGI1NWJiYTM0Y2YwOTQ5ZjllMDVhYTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy01XD2yFCBVj4n5ds/vCR0Tcc6P2
QWCTgqwZ5nGnyhvjWCQCa4fTz8gNixLdPX09Vzo6ddncjXYxKqPX4tnk1y8Z9ejh
MjslzzJCOIX3Xhq+CtkmyVDErfZDT/Ta1Nsq/PfGctR/53gO9GOPi4ngu4d94o1E
kA3jQBNQ4VysJX2IXz1Wvr3MGplbsaXm5RGodG44HFuxIEsNLmAJqp+VNw9mcGQJ
VkBHNLalU6qJxtxgH5Uggd+kZ9zni5pfDYjxZeVT0cjEz6zYes0Cxi2T+ytGnUfU
2Gb6W5xsvt/Op5MTwQsK/oHEyJmIfteu3xcDGEEMTxwKYGwWv0s6XRjgRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzYQOhNqNMd21W7o0zwlJ+eBapjMB8GA1UdIwQY
MBaAFKZAx1Hr+0gH2EYi6AbLPQud2BBpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGtESFVldjdTQWZZUmlMb0JzczlDNTNZRUdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC84YTVhMmUtNGQzMy00YTJjLWFkZjMt
MDI2YjhjZjY5MWJhLzEvcGtESFVldjdTQWZZUmlMb0JzczlDNTNZRUdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC84YTVhMmUtNGQzMy00YTJjLWFkZjMtMDI2YjhjZjY5MWJh
LzEvcGtESFVldjdTQWZZUmlMb0JzczlDNTNZRUdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnxIJP21I
ZwTdUiBY2gxVdcGVMEI4dOv+T+71JNoSRTL9QaIqZ0NDFdVhD4bvyFn/Ia0MNvSw
bkh6vKyc5eicGmQEB+KtItMLo+zbCtSLx8OR3o6di6mC2uAI2j+UHRPGuUrRglOf
K/Aep3i5Ro12NFyNPOK9oGktqTxuf8jnh0vGD/T4nQlvp1xyjc0E0NuzzFCea2dK
7uZF/7F7Yep83aRrKZIuYYVFdNJnf/Siv3E08RmprDZjig3JEVUdcqMXq18H9heA
02ma64dPnf5/g3wZD0awhKw1flz3cw6XKqAabmNvkR1Z7bYH2fdF4sTr1g4R4A5W
MbCjbtkPLqo4NA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:46 2025 by rpki-client