Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
File: PJMfJlqEcdMs6ESdnhhvDccRSno.mft (raw, json)
Hash identifier: o3RcoAnvSdX78FdEb901FxVRI5uKF5xoCp4eeV4+3rY=
Subject key identifier: B6:7C:73:E4:A3:EF:B2:74:93:C5:92:73:ED:7C:D9:BD:2B:56:4B:A1
Authority key identifier: 3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A
Certificate issuer: /CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a
Certificate serial: 019A4F98DBAE15EF25B24538ACE5E014372F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
Manifest number: 140B
Signing time: Tue 04 Nov 2025 16:00:08 +0000
Manifest this update: Tue 04 Nov 2025 16:00:08 +0000
Manifest next update: Wed 05 Nov 2025 16:00:08 +0000
Files and hashes: 1: PJMfJlqEcdMs6ESdnhhvDccRSno.crl (hash: l+6n54Qs0dPhsphQo4xOmGGR39Jm2wm1cUuepwrztVI=)
2: PkJhyt9pT1uGvNEkXULDRnIoKM8.roa (hash: GnXTwsBZIxIhJPycvbpoXf49+cV9ppIdazG5Z3GlNBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:db:ae:15:ef:25:b2:45:38:ac:e5:e0:14:37:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a
Validity
Not Before: Nov 4 16:00:08 2025 GMT
Not After : Nov 5 16:00:08 2025 GMT
Subject: CN=b67c73e4a3efb27493c59273ed7cd9bd2b564ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d6:6a:53:b4:1d:b1:83:57:55:ba:7a:ce:1e:
3d:b3:62:8f:63:f5:c0:c3:7f:8c:7c:28:d5:63:1e:
68:bd:33:f1:db:9d:06:0f:87:7c:f7:88:2d:88:f9:
05:04:5b:58:b6:80:fe:cf:e3:0d:1b:50:7c:f3:6f:
7d:ec:21:7d:e3:08:9f:5b:bc:c1:c7:9a:87:0b:bc:
d5:96:e6:70:ec:67:aa:28:43:37:9f:c7:d8:74:7b:
50:6b:00:de:79:02:85:9d:83:1b:c6:29:e1:dc:95:
17:a0:cd:2a:07:1a:79:83:81:4a:28:2e:72:03:4a:
5c:de:5b:92:ba:86:e5:4d:2b:0f:c5:0d:d1:c3:f6:
84:46:0e:9a:d7:7a:61:9d:c0:ae:da:72:83:fb:55:
50:51:dd:54:97:f0:3f:28:81:de:04:8b:d0:de:e1:
17:40:e7:5f:6d:f8:7a:4a:f4:a7:48:49:86:f1:0e:
45:d1:0a:1b:c5:4b:0c:6e:4c:7f:a7:54:22:82:01:
dc:82:be:c7:37:f4:ea:2c:ce:ed:17:33:66:68:0f:
9d:8f:7e:92:ab:c1:f3:43:1c:18:36:4d:11:bf:12:
17:97:d9:04:7a:08:01:47:3c:6f:32:3f:37:e7:51:
fe:b5:30:ac:32:0b:45:f1:e8:97:5e:80:9a:67:99:
8d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7C:73:E4:A3:EF:B2:74:93:C5:92:73:ED:7C:D9:BD:2B:56:4B:A1
X509v3 Authority Key Identifier:
keyid:3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b3:1c:80:7b:5c:8b:3f:ab:17:0f:ee:10:30:0c:f6:58:4b:
6c:15:2a:49:3a:35:cc:f5:05:0b:d0:18:80:e4:26:49:a7:99:
89:81:3f:d8:80:1c:0d:97:02:6f:18:12:87:37:c4:7a:6a:49:
f1:ba:90:7b:ed:61:2c:e8:52:e3:ac:3c:ab:e3:9c:f0:4d:f2:
69:eb:f5:18:9d:07:0b:ca:1d:4f:53:c7:d0:86:ae:b3:6b:c5:
44:b4:8a:1d:9d:87:fe:2e:8c:88:12:db:3d:15:bc:1b:52:81:
7a:e4:bb:3a:2d:18:60:ee:77:f6:db:14:6a:a0:90:58:be:d3:
e0:30:48:e6:3f:84:7c:8d:c5:7c:ae:dc:ab:91:6e:5e:e6:17:
68:6d:e6:0a:01:ce:87:63:fe:a1:c6:b8:d2:d0:61:a2:6a:5a:
16:40:99:3e:72:a1:9e:5e:f2:e1:15:30:85:08:ae:9d:33:b5:
c8:49:8e:ed:36:88:e4:8d:7c:e9:18:b3:c9:01:ba:5e:d3:ec:
6f:41:a2:b8:a9:f6:f2:9a:73:2f:a8:9d:8f:b0:46:e7:20:48:
5c:d5:ac:ff:a8:c4:eb:22:64:e3:d1:e9:89:f7:8b:54:11:c2:
3b:a4:e9:ca:36:fe:88:d7:6b:76:f7:c1:d0:63:c7:9f:07:6e:
eb:ca:0b:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmNuuFe8lskU4rOXgFDcvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjOTMxZjI2NWE4NDcxZDMyY2U4NDQ5ZDllMTg2ZjBkYzcx
MTRhN2EwHhcNMjUxMTA0MTYwMDA4WhcNMjUxMTA1MTYwMDA4WjAzMTEwLwYDVQQD
EyhiNjdjNzNlNGEzZWZiMjc0OTNjNTkyNzNlZDdjZDliZDJiNTY0YmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9ZqU7QdsYNXVbp6zh49s2KPY/XA
w3+MfCjVYx5ovTPx250GD4d894gtiPkFBFtYtoD+z+MNG1B882997CF94wifW7zB
x5qHC7zVluZw7GeqKEM3n8fYdHtQawDeeQKFnYMbxinh3JUXoM0qBxp5g4FKKC5y
A0pc3luSuoblTSsPxQ3Rw/aERg6a13phncCu2nKD+1VQUd1Ul/A/KIHeBIvQ3uEX
QOdfbfh6SvSnSEmG8Q5F0QobxUsMbkx/p1QiggHcgr7HN/TqLM7tFzNmaA+dj36S
q8HzQxwYNk0RvxIXl9kEeggBRzxvMj8351H+tTCsMgtF8eiXXoCaZ5mNqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZ8c+Sj77J0k8WSc+182b0rVkuhMB8GA1UdIwQY
MBaAFDyTHyZahHHTLOhEnZ4Ybw3HEUp6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEpNZkpscUVjZE1zNkVTZG5oaHZEY2NSU25vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9iNTBiZGEtNjg5OS00ZWVmLWEyMzEt
NWUwMDI2MzAzNjI5LzEvUEpNZkpscUVjZE1zNkVTZG5oaHZEY2NSU25vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9iNTBiZGEtNjg5OS00ZWVmLWEyMzEtNWUwMDI2MzAzNjI5
LzEvUEpNZkpscUVjZE1zNkVTZG5oaHZEY2NSU25vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdrMcgHtc
iz+rFw/uEDAM9lhLbBUqSTo1zPUFC9AYgOQmSaeZiYE/2IAcDZcCbxgShzfEempJ
8bqQe+1hLOhS46w8q+Oc8E3yaev1GJ0HC8odT1PH0Iaus2vFRLSKHZ2H/i6MiBLb
PRW8G1KBeuS7Oi0YYO539tsUaqCQWL7T4DBI5j+EfI3FfK7cq5FuXuYXaG3mCgHO
h2P+oca40tBhompaFkCZPnKhnl7y4RUwhQiunTO1yEmO7TaI5I186RizyQG6XtPs
b0GiuKn28ppzL6idj7BG5yBIXNWs/6jE6yJk49HpifeLVBHCO6Tpyjb+iNdrdvfB
0GPHnwdu68oLpg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:21:01 2025 by rpki-client