Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft
File: Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft (raw, json)
Hash identifier: wyhXXXbCxZY71jvrKGjQn75sA5m/MV2fymJJeuBOllA=
Subject key identifier: 01:7F:8A:E4:A7:37:3A:71:54:67:90:70:C3:FF:83:4D:BB:1C:9A:BA
Authority key identifier: 3E:78:2D:E1:B5:D5:29:2E:DD:13:6D:52:78:25:8C:67:B0:5B:E2:2A
Certificate issuer: /CN=3e782de1b5d5292edd136d5278258c67b05be22a
Certificate serial: 019A533F82E9A3050E6F7980821B1A8D0939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pngt4bXVKS7dE21SeCWMZ7Bb4io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft
Manifest number: 0453
Signing time: Wed 05 Nov 2025 09:01:02 +0000
Manifest this update: Wed 05 Nov 2025 09:01:02 +0000
Manifest next update: Thu 06 Nov 2025 09:01:02 +0000
Files and hashes: 1: HsLH977Wr8CRqPeFRIsKeWuqNBQ.roa (hash: DfN2Ce+eFgUYzjRB1SnZEzwBexeV9U5bLQB9J92xhK4=)
2: Pngt4bXVKS7dE21SeCWMZ7Bb4io.crl (hash: D1tm5etBwHsxe34XCUqBAaFs56H9jCdwD5RcwzyilTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pngt4bXVKS7dE21SeCWMZ7Bb4io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:82:e9:a3:05:0e:6f:79:80:82:1b:1a:8d:09:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e782de1b5d5292edd136d5278258c67b05be22a
Validity
Not Before: Nov 5 09:01:02 2025 GMT
Not After : Nov 6 09:01:02 2025 GMT
Subject: CN=017f8ae4a7373a7154679070c3ff834dbb1c9aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ae:a0:5a:ed:ea:bb:f6:2b:8d:80:b4:b9:42:
62:6e:e4:3d:af:34:e4:17:97:53:fd:3c:4b:0d:36:
97:5b:db:68:54:c3:96:d1:ce:04:7e:9c:7f:cb:a1:
30:89:ab:62:fd:0c:f5:f3:d7:fe:a0:74:2a:9b:1c:
58:3c:78:89:61:83:5f:42:f9:8c:b2:3e:da:26:50:
d6:db:56:d5:a1:38:42:64:51:82:f0:e6:48:61:16:
f3:45:ef:2e:01:81:fa:96:b6:88:28:c8:11:f2:45:
e6:f1:d4:09:05:ec:f4:13:9a:84:8b:e0:3d:f4:a6:
89:93:77:50:d0:a5:e4:a4:96:58:ad:a1:4c:ab:d5:
56:30:91:18:3a:2b:14:65:36:8e:69:53:b6:cf:00:
88:65:c3:88:df:28:c9:b9:23:a4:72:4a:13:c0:15:
43:04:57:63:56:cb:b3:96:f7:57:24:4a:8b:73:64:
12:f4:5d:fd:65:d8:f2:61:e0:34:ba:d3:f9:68:49:
23:23:34:82:1e:bf:3d:f8:02:40:34:34:d9:fc:f5:
d9:b5:8a:bb:62:5e:33:7e:d4:92:52:ee:ef:a0:76:
5f:8e:71:93:e5:ea:e5:36:ed:4a:48:e8:2c:39:aa:
21:a0:de:0e:35:ac:16:71:16:53:10:6b:73:5c:d3:
86:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7F:8A:E4:A7:37:3A:71:54:67:90:70:C3:FF:83:4D:BB:1C:9A:BA
X509v3 Authority Key Identifier:
keyid:3E:78:2D:E1:B5:D5:29:2E:DD:13:6D:52:78:25:8C:67:B0:5B:E2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pngt4bXVKS7dE21SeCWMZ7Bb4io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:3d:44:fd:84:85:69:ad:92:72:ea:a0:58:91:19:c6:3b:6b:
c4:e3:aa:e2:fa:44:75:76:3c:cb:5a:19:fd:e8:56:04:6c:d7:
ed:8e:0d:d9:f3:85:5f:5a:55:07:45:e2:7e:a7:7c:d8:67:a5:
42:c8:70:e9:2b:5c:f8:9c:a1:a3:12:c8:28:fd:10:86:f9:07:
0d:e0:8d:63:7e:8d:93:03:bd:aa:57:4e:b8:54:36:17:99:c1:
be:05:28:f6:58:b3:bd:de:74:b0:2c:84:fc:5c:6c:70:8e:32:
da:20:f7:a3:b7:d1:de:97:38:86:6b:5c:e0:65:37:25:de:41:
e1:9f:b3:bc:47:aa:25:37:e5:2d:89:f3:f1:44:00:8a:80:ca:
50:cf:52:31:ac:8a:43:e5:ed:93:f1:b2:46:d1:25:91:36:75:
05:46:a0:53:fb:f8:d1:7c:e2:59:62:a5:9d:9d:8a:0e:c8:45:
6c:8a:25:e7:81:ef:16:86:ce:ee:44:8e:d5:af:a3:4a:f5:40:
5a:c9:51:8e:4a:a0:8e:c4:c2:dd:f8:ce:06:a9:2e:b2:71:cd:
7e:cc:4a:89:1b:3e:f0:8c:58:53:c7:61:ce:95:ff:31:34:6c:
e9:67:b9:39:e6:ef:a5:c1:80:34:7b:4d:3c:dc:20:7e:d8:5e:
e9:ec:62:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTP4LpowUOb3mAghsajQk5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNzgyZGUxYjVkNTI5MmVkZDEzNmQ1Mjc4MjU4YzY3YjA1
YmUyMmEwHhcNMjUxMTA1MDkwMTAyWhcNMjUxMTA2MDkwMTAyWjAzMTEwLwYDVQQD
EygwMTdmOGFlNGE3MzczYTcxNTQ2NzkwNzBjM2ZmODM0ZGJiMWM5YWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzK6gWu3qu/YrjYC0uUJibuQ9rzTk
F5dT/TxLDTaXW9toVMOW0c4Efpx/y6Ewiati/Qz189f+oHQqmxxYPHiJYYNfQvmM
sj7aJlDW21bVoThCZFGC8OZIYRbzRe8uAYH6lraIKMgR8kXm8dQJBez0E5qEi+A9
9KaJk3dQ0KXkpJZYraFMq9VWMJEYOisUZTaOaVO2zwCIZcOI3yjJuSOkckoTwBVD
BFdjVsuzlvdXJEqLc2QS9F39ZdjyYeA0utP5aEkjIzSCHr89+AJANDTZ/PXZtYq7
Yl4zftSSUu7voHZfjnGT5erlNu1KSOgsOaohoN4ONawWcRZTEGtzXNOGhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAF/iuSnNzpxVGeQcMP/g027HJq6MB8GA1UdIwQY
MBaAFD54LeG11Sku3RNtUngljGewW+IqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG5ndDRiWFZLUzdkRTIxU2VDV01aN0JiNGlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9kMDM1ZmItZTg2MC00NjFkLTk3Mjgt
MTQ5ZTJhM2FkZTc2LzEvUG5ndDRiWFZLUzdkRTIxU2VDV01aN0JiNGlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9kMDM1ZmItZTg2MC00NjFkLTk3MjgtMTQ5ZTJhM2FkZTc2
LzEvUG5ndDRiWFZLUzdkRTIxU2VDV01aN0JiNGlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAej1E/YSF
aa2ScuqgWJEZxjtrxOOq4vpEdXY8y1oZ/ehWBGzX7Y4N2fOFX1pVB0Xifqd82Gel
Qshw6Stc+JyhoxLIKP0QhvkHDeCNY36NkwO9qldOuFQ2F5nBvgUo9lizvd50sCyE
/FxscI4y2iD3o7fR3pc4hmtc4GU3Jd5B4Z+zvEeqJTflLYnz8UQAioDKUM9SMayK
Q+Xtk/GyRtElkTZ1BUagU/v40XziWWKlnZ2KDshFbIol54HvFobO7kSO1a+jSvVA
WslRjkqgjsTC3fjOBqkusnHNfsxKiRs+8IxYU8dhzpX/MTRs6We5OebvpcGANHtN
PNwgfthe6exiYw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:09:43 2025 by rpki-client