Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
File: PDULqC8_61ruKJOPvxsJweL9GbQ.mft (raw, json)
Hash identifier: vfAnjPcp7SU3MvJIswIrFsn7Pb3X24W29TaMpMGuLfc=
Subject key identifier: 52:81:14:91:59:C8:F2:45:9D:87:B1:F5:E4:CA:FE:B0:B5:85:A2:6E
Authority key identifier: 3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4
Certificate issuer: /CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
Certificate serial: 019A503E171229EEE9EFEF96F6C2DDE0F915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 19:00:37 +0000
Manifest this update: Tue 04 Nov 2025 19:00:37 +0000
Manifest next update: Wed 05 Nov 2025 19:00:37 +0000
Files and hashes: 1: 1-Csr3W7RFkTtbpc5vegpM0x3SJg.roa (hash: OEps/3ayuoO5bERjIwyI74TPDpt1ijmiHI+Ru4dOW1I=)
2: PDULqC8_61ruKJOPvxsJweL9GbQ.crl (hash: CVbQcMsaw12KSzmwFvYUUf9tS4gsW1soqZU8aRV+9o8=)
3: aI9PtDrL1wGCUURcBpHMKfTf4hE.roa (hash: 4oSaxJpQHFX+hBtLYICwFPgrE4wCzYMHUMuoAxfYBXE=)
4: j6dQ2cjzXA3192uDTyOAiZGLE8Q.roa (hash: b9/CxQNUb4cLntaVBU/KEYsxwEObm97HgDwZmznQiH0=)
5: jyPlSfMwE97ShJiNEree4W-YnKc.roa (hash: RPRkI69AUdx22PSRgMKu/d39p+trzoeOCprFB1jyo6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:17:12:29:ee:e9:ef:ef:96:f6:c2:dd:e0:f9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
Validity
Not Before: Nov 4 19:00:37 2025 GMT
Not After : Nov 5 19:00:37 2025 GMT
Subject: CN=5281149159c8f2459d87b1f5e4cafeb0b585a26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e3:5c:e9:b2:91:2b:2d:8c:57:3e:fd:86:b1:
9d:77:5d:fb:d7:f6:39:90:65:a4:e9:a7:4b:83:2d:
af:60:7e:f3:bb:a6:4e:9f:30:c8:6d:74:21:6e:f9:
66:f8:07:d3:30:39:b9:34:ab:c3:b6:59:10:19:bb:
77:30:27:8f:1c:31:82:9b:93:5a:ec:f8:8c:90:68:
be:7f:54:11:b9:81:c8:02:9c:70:1d:67:b1:36:90:
ac:75:0f:e2:a9:3d:b8:00:99:a4:41:42:89:c2:a8:
6f:15:6e:8e:ba:77:05:27:15:0d:58:3a:c8:b6:4b:
c9:57:5b:c5:d8:12:36:22:88:3d:7c:4d:c2:76:72:
72:84:58:3a:0e:15:f5:34:0e:52:b4:ee:ff:da:53:
88:ee:70:80:4b:af:58:f5:94:4c:e6:58:94:ca:83:
35:36:4b:21:92:2f:35:76:ec:78:2a:2d:0d:9a:ca:
0d:16:81:d2:50:c9:5b:e7:4a:9b:d8:95:40:94:74:
a1:96:20:3a:d7:9d:8a:99:a8:7a:03:32:ab:b9:22:
53:b9:65:56:58:fe:68:7c:00:f7:77:d0:70:cb:90:
b4:a8:60:4e:10:2b:3c:79:d5:8b:03:a0:53:ef:b8:
61:9e:b9:7e:53:72:e5:a9:46:64:56:ac:70:e1:72:
e7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:81:14:91:59:C8:F2:45:9D:87:B1:F5:E4:CA:FE:B0:B5:85:A2:6E
X509v3 Authority Key Identifier:
keyid:3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:69:5b:33:ae:b1:c4:27:76:d1:2a:d3:c9:aa:57:55:af:2a:
74:e4:a6:9c:d9:3f:07:21:f5:8d:c5:4f:d1:18:fe:2f:fd:03:
bc:fb:02:64:0d:c0:74:0b:cb:d3:eb:1a:c8:57:de:a5:ba:4a:
5a:7d:ae:29:f0:74:c5:6e:53:8c:98:36:5f:bd:58:fd:c0:81:
a5:0d:92:b5:1e:4e:24:ec:c4:76:e3:93:3d:23:38:f8:8c:88:
0e:7e:e3:12:fc:b1:96:aa:b5:db:52:88:61:36:a7:4b:f6:e1:
f2:0c:0c:7e:59:63:43:c3:16:d0:16:47:73:4f:ca:ff:0f:49:
bd:e4:ed:8c:68:75:d1:2a:87:87:f5:73:0e:91:67:bc:a1:91:
2a:53:0a:a5:93:aa:b6:4e:49:40:32:c6:0e:84:2b:b8:b0:a3:
77:17:a5:ce:d9:7b:df:b2:60:69:10:ee:65:ca:df:73:c6:0f:
ad:f5:9d:97:f3:4a:11:5c:5e:ef:fd:b2:c4:bd:a7:81:28:2a:
f3:ca:68:84:3d:5d:e0:eb:0d:8d:8b:fe:6b:c6:68:e4:ee:f0:
2e:00:ce:64:73:f0:d9:33:6c:a7:d9:ee:29:19:a9:52:e7:e4:
ba:e2:e1:ef:f0:7e:e6:eb:39:4a:2b:e9:60:1f:27:d5:d8:3e:
9f:1c:f8:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQPhcSKe7p7++W9sLd4PkVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMzUwYmE4MmYzZmViNWFlZTI4OTM4ZmJmMWIwOWMxZTJm
ZDE5YjQwHhcNMjUxMTA0MTkwMDM3WhcNMjUxMTA1MTkwMDM3WjAzMTEwLwYDVQQD
Eyg1MjgxMTQ5MTU5YzhmMjQ1OWQ4N2IxZjVlNGNhZmViMGI1ODVhMjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+Nc6bKRKy2MVz79hrGdd1371/Y5
kGWk6adLgy2vYH7zu6ZOnzDIbXQhbvlm+AfTMDm5NKvDtlkQGbt3MCePHDGCm5Na
7PiMkGi+f1QRuYHIApxwHWexNpCsdQ/iqT24AJmkQUKJwqhvFW6OuncFJxUNWDrI
tkvJV1vF2BI2Iog9fE3CdnJyhFg6DhX1NA5StO7/2lOI7nCAS69Y9ZRM5liUyoM1
Nkshki81dux4Ki0NmsoNFoHSUMlb50qb2JVAlHShliA6152Kmah6AzKruSJTuWVW
WP5ofAD3d9Bwy5C0qGBOECs8edWLA6BT77hhnrl+U3LlqUZkVqxw4XLntwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFKBFJFZyPJFnYex9eTK/rC1haJuMB8GA1UdIwQY
MBaAFDw1C6gvP+ta7iiTj78bCcHi/Rm0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUERVTHFDOF82MXJ1S0pPUHZ4c0p3ZUw5R2JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82NGQ3YTktY2FjMy00NTQ5LWE3YWEt
NjFiNzkwMmVlMjA0LzEvUERVTHFDOF82MXJ1S0pPUHZ4c0p3ZUw5R2JRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS82NGQ3YTktY2FjMy00NTQ5LWE3YWEtNjFiNzkwMmVlMjA0
LzEvUERVTHFDOF82MXJ1S0pPUHZ4c0p3ZUw5R2JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZGlbM66x
xCd20SrTyapXVa8qdOSmnNk/ByH1jcVP0Rj+L/0DvPsCZA3AdAvL0+sayFfepbpK
Wn2uKfB0xW5TjJg2X71Y/cCBpQ2StR5OJOzEduOTPSM4+IyIDn7jEvyxlqq121KI
YTanS/bh8gwMflljQ8MW0BZHc0/K/w9JveTtjGh10SqHh/VzDpFnvKGRKlMKpZOq
tk5JQDLGDoQruLCjdxelztl737JgaRDuZcrfc8YPrfWdl/NKEVxe7/2yxL2ngSgq
88pohD1d4OsNjYv+a8Zo5O7wLgDOZHPw2TNsp9nuKRmpUufkuuLh7/B+5us5Sivp
YB8n1dg+nxz4mw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:22:04 2025 by rpki-client