Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
File: pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft (raw, json)
Hash identifier: 1OsHsmQzyIJpdOvq452AHbo56MOw62D5hAgrdwyXOV8=
Subject key identifier: 00:7D:7E:E5:7F:EB:0D:0D:8B:85:50:9F:F8:97:BD:D0:3D:94:19:0C
Authority key identifier: A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37
Certificate issuer: /CN=a67f1cf27426070aeda7b26053453c283fdf7537
Certificate serial: 019A4FD014B365CD1E4886E63FF267E5308C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
Manifest number: 099A
Signing time: Tue 04 Nov 2025 17:00:28 +0000
Manifest this update: Tue 04 Nov 2025 17:00:28 +0000
Manifest next update: Wed 05 Nov 2025 17:00:28 +0000
Files and hashes: 1: pGhFSYKZpUat85kiXiiCd2_IqX0.roa (hash: rRFD7qwRqqnJAuhQ1luySoQoJ9GoQlnTCcam7ZPbXJk=)
2: pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl (hash: 9UJiQhAeQBsybJYMU1PY6HNWsULBOj4uwFGu/hXlmWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:14:b3:65:cd:1e:48:86:e6:3f:f2:67:e5:30:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a67f1cf27426070aeda7b26053453c283fdf7537
Validity
Not Before: Nov 4 17:00:28 2025 GMT
Not After : Nov 5 17:00:28 2025 GMT
Subject: CN=007d7ee57feb0d0d8b85509ff897bdd03d94190c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:94:ee:e1:5d:60:ed:e7:50:72:c3:8e:6d:4e:
2b:ab:d6:39:93:1d:10:bd:09:89:bc:73:df:30:07:
a2:21:e6:54:e4:e3:53:7f:ec:cf:3a:65:7c:39:f1:
76:71:7c:86:b0:e6:b0:1a:d4:64:65:1f:3f:50:cb:
61:2d:9d:80:56:78:59:cb:4e:4f:09:01:91:0d:b6:
51:81:a9:d0:38:dd:c3:34:37:bd:25:8e:7a:9e:57:
9e:61:c9:8a:11:65:14:fc:65:7f:e2:d7:ae:6d:30:
4c:52:e9:dc:b7:ee:f4:cd:eb:ec:8b:de:13:a0:f2:
06:79:41:9f:5f:07:22:b9:ae:c1:9d:d9:a5:5d:46:
7f:2a:bb:b2:9d:6d:4e:12:63:fb:c9:ef:d2:75:b0:
58:56:1d:14:65:d2:a8:20:a8:62:f0:88:8d:8f:20:
36:0d:36:1b:85:ab:12:a6:4e:44:66:c3:7d:c5:81:
eb:ff:bf:3c:a9:9d:29:11:74:da:3c:02:1c:7f:51:
3a:63:9b:82:c4:d0:9f:dd:13:d9:b3:71:40:c4:75:
8c:13:cb:c6:9e:ec:67:11:30:06:e4:96:62:bf:0a:
6f:45:b9:66:8f:61:f9:26:8c:fc:db:d1:8f:08:d8:
d0:73:c3:c4:50:f1:64:3a:54:66:00:b4:36:63:e2:
fb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:7D:7E:E5:7F:EB:0D:0D:8B:85:50:9F:F8:97:BD:D0:3D:94:19:0C
X509v3 Authority Key Identifier:
keyid:A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:e4:9e:34:1a:17:37:3d:d2:9f:17:0f:be:85:4d:7f:eb:23:
fd:64:71:76:ff:b5:8f:b8:ac:00:19:87:27:5b:26:8a:c9:e5:
c3:13:42:35:4f:0c:da:38:2c:42:57:c6:c7:35:21:62:83:76:
33:9b:a0:b8:37:59:a6:54:e9:3e:f6:f6:4f:0a:ae:a7:2f:28:
34:4d:4b:4d:a4:a8:b6:50:97:39:a3:7b:a8:f8:11:be:36:e3:
3e:e5:a8:12:26:00:b0:90:af:ec:2b:fc:a8:d7:64:62:b3:1c:
00:c6:08:db:aa:48:89:af:2c:1f:a7:08:87:cd:6e:b3:37:1e:
ca:85:6d:55:c0:7e:74:5c:dc:15:fd:a0:bb:55:fe:a5:c3:9a:
a4:ab:f2:2f:5c:7a:e0:1a:c9:c5:be:16:c0:eb:18:84:8d:ce:
e5:06:71:81:ee:7a:85:07:bd:1b:8a:9c:3b:3d:4e:95:b5:c4:
b4:38:0c:a2:db:9c:1c:67:ad:33:e4:83:2c:50:e2:4b:25:fa:
17:e8:29:a9:8b:e7:84:db:91:d4:a0:9e:73:5e:1d:ab:49:00:
43:22:58:ee:ad:57:54:3e:1b:a6:64:45:ea:1f:65:fd:08:74:
61:77:38:fe:db:37:47:05:1b:ca:93:41:17:6e:f6:8e:ae:76:
40:63:50:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpP0BSzZc0eSIbmP/Jn5TCMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2N2YxY2YyNzQyNjA3MGFlZGE3YjI2MDUzNDUzYzI4M2Zk
Zjc1MzcwHhcNMjUxMTA0MTcwMDI4WhcNMjUxMTA1MTcwMDI4WjAzMTEwLwYDVQQD
EygwMDdkN2VlNTdmZWIwZDBkOGI4NTUwOWZmODk3YmRkMDNkOTQxOTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5Tu4V1g7edQcsOObU4rq9Y5kx0Q
vQmJvHPfMAeiIeZU5ONTf+zPOmV8OfF2cXyGsOawGtRkZR8/UMthLZ2AVnhZy05P
CQGRDbZRganQON3DNDe9JY56nleeYcmKEWUU/GV/4teubTBMUunct+70zevsi94T
oPIGeUGfXwciua7BndmlXUZ/KruynW1OEmP7ye/SdbBYVh0UZdKoIKhi8IiNjyA2
DTYbhasSpk5EZsN9xYHr/788qZ0pEXTaPAIcf1E6Y5uCxNCf3RPZs3FAxHWME8vG
nuxnETAG5JZivwpvRblmj2H5Joz829GPCNjQc8PEUPFkOlRmALQ2Y+L7IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAB9fuV/6w0Ni4VQn/iXvdA9lBkMMB8GA1UdIwQY
MBaAFKZ/HPJ0JgcK7aeyYFNFPCg/33U3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcG44YzhuUW1Cd3J0cDdKZ1UwVThLRF9mZFRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xMmUyYzQtMjQzZC00NGRmLWIwZGMt
YjlkNjY4ZjA1MWRlLzEvcG44YzhuUW1Cd3J0cDdKZ1UwVThLRF9mZFRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8xMmUyYzQtMjQzZC00NGRmLWIwZGMtYjlkNjY4ZjA1MWRl
LzEvcG44YzhuUW1Cd3J0cDdKZ1UwVThLRF9mZFRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuOSeNBoX
Nz3SnxcPvoVNf+sj/WRxdv+1j7isABmHJ1smisnlwxNCNU8M2jgsQlfGxzUhYoN2
M5uguDdZplTpPvb2Twqupy8oNE1LTaSotlCXOaN7qPgRvjbjPuWoEiYAsJCv7Cv8
qNdkYrMcAMYI26pIia8sH6cIh81uszceyoVtVcB+dFzcFf2gu1X+pcOapKvyL1x6
4BrJxb4WwOsYhI3O5QZxge56hQe9G4qcOz1OlbXEtDgMotucHGetM+SDLFDiSyX6
F+gpqYvnhNuR1KCec14dq0kAQyJY7q1XVD4bpmRF6h9l/Qh0YXc4/ts3RwUbypNB
F272jq52QGNQ1w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:57:53 2025 by rpki-client