Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
File: PcOGJxwOCo0B-xkNaNhf92TRatQ.mft (raw, json)
Hash identifier: IesXvVN0L6xuFMA2fJzzQ1eicRXyt4H9XtVf+qsjN6Y=
Subject key identifier: 68:58:10:0C:67:31:CA:8D:68:7B:E9:20:CB:39:8D:0D:77:99:4D:5A
Authority key identifier: 3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4
Certificate issuer: /CN=3dc386271c0e0a8d01fb190d68d85ff764d16ad4
Certificate serial: 019A51F56870F5B9F56FAC9ECDFC49CD42A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
Manifest number: 04EB
Signing time: Wed 05 Nov 2025 03:00:28 +0000
Manifest this update: Wed 05 Nov 2025 03:00:28 +0000
Manifest next update: Thu 06 Nov 2025 03:00:28 +0000
Files and hashes: 1: PcOGJxwOCo0B-xkNaNhf92TRatQ.crl (hash: z8aaNZUxpbl3A99mfHrR9AILKExdwU1NhLnScZY6/OA=)
2: dA9mnK7u8SrMJvStuVXROxjQcrs.roa (hash: JKT3V8fX4yHMnqh46H6Ra4xfMdM8EBf4akbaDFvA95s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:68:70:f5:b9:f5:6f:ac:9e:cd:fc:49:cd:42:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc386271c0e0a8d01fb190d68d85ff764d16ad4
Validity
Not Before: Nov 5 03:00:28 2025 GMT
Not After : Nov 6 03:00:28 2025 GMT
Subject: CN=6858100c6731ca8d687be920cb398d0d77994d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1e:5d:53:fd:77:e6:e9:e6:83:5a:b1:c0:cd:
c8:79:d8:d4:5e:74:04:d2:0a:a9:92:72:52:1d:38:
f7:da:a7:9f:7c:9a:f2:32:03:9a:1e:5f:f8:b0:40:
6e:8e:61:fc:7c:5c:58:78:21:e3:eb:26:f3:17:1b:
51:f0:6b:34:ea:82:22:84:81:69:8c:bc:53:b3:b6:
0c:77:d2:2c:a2:8b:7a:a8:66:8f:63:60:c2:55:cf:
13:b9:87:71:6c:34:b5:5b:04:67:bb:7f:31:4f:e9:
d6:23:29:4e:2d:0b:f1:e5:20:f3:5f:2a:50:cc:e5:
27:f9:0c:d9:5e:99:fc:18:3d:c3:e0:81:ee:58:c5:
b0:fb:fc:5f:43:be:79:12:7c:6d:d9:4c:e0:cc:5e:
9a:6c:9e:8d:8e:de:0d:7f:81:56:18:ef:9a:91:b2:
fc:fe:73:c4:f7:ea:bb:0d:7b:e7:c4:d1:d2:1b:ef:
ab:85:6d:6d:a8:1a:05:7f:c4:f0:dd:04:ab:2c:aa:
b1:d6:06:76:9e:e3:3a:74:ba:5e:70:62:c5:bd:44:
e6:68:20:69:f6:2f:dd:2e:7a:77:81:6b:c1:06:2d:
08:e6:03:58:2d:9a:31:52:5b:d1:b4:97:ce:91:43:
3c:2f:48:0e:6c:a4:26:73:6c:1f:32:ad:30:54:21:
22:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:58:10:0C:67:31:CA:8D:68:7B:E9:20:CB:39:8D:0D:77:99:4D:5A
X509v3 Authority Key Identifier:
keyid:3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:73:09:1d:fe:b0:eb:ee:1b:e7:d2:d5:a3:7d:fa:3a:94:b8:
0b:73:c9:09:2f:8f:5b:86:e4:54:e0:6e:a3:db:c3:a9:d2:b8:
c7:e9:40:83:c2:b7:ff:75:52:58:ad:75:9c:9c:d9:cb:ac:74:
64:8d:14:2a:e9:e0:2c:ec:26:e2:fd:92:eb:09:92:60:77:40:
e7:9b:6a:ab:00:3b:2b:15:75:98:a6:d5:9a:b3:5c:3a:1d:58:
bd:81:07:c6:43:46:4e:32:44:f1:51:2a:95:e8:60:32:9b:6e:
04:a4:06:46:12:4a:6c:55:c7:fc:a9:cf:8c:ee:2f:9d:dd:ac:
fe:05:3f:39:65:09:02:57:40:ff:88:b1:a7:10:f1:79:e3:de:
de:a5:65:d0:79:17:8c:e0:ef:ad:88:c5:e5:e9:64:fa:bb:5f:
7a:7e:19:7c:08:4e:1f:34:54:4f:b3:c1:2b:70:9b:87:b4:de:
b8:c3:8a:d3:df:28:f3:82:bc:a8:0b:e8:fc:38:0e:af:06:7f:
a7:f1:f3:3a:a3:21:a6:26:ef:ef:d0:07:e1:83:0a:cc:7f:7a:
3b:ac:3b:8d:f1:dd:e7:2b:2b:95:4c:05:74:3b:6d:f6:b8:c2:
60:a9:d8:de:9d:b6:90:44:1f:ff:d4:cd:fd:36:10:d9:8f:15:
42:81:cc:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpR9Whw9bn1b6yezfxJzUKiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYzM4NjI3MWMwZTBhOGQwMWZiMTkwZDY4ZDg1ZmY3NjRk
MTZhZDQwHhcNMjUxMTA1MDMwMDI4WhcNMjUxMTA2MDMwMDI4WjAzMTEwLwYDVQQD
Eyg2ODU4MTAwYzY3MzFjYThkNjg3YmU5MjBjYjM5OGQwZDc3OTk0ZDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqB5dU/135unmg1qxwM3IedjUXnQE
0gqpknJSHTj32qeffJryMgOaHl/4sEBujmH8fFxYeCHj6ybzFxtR8Gs06oIihIFp
jLxTs7YMd9Isoot6qGaPY2DCVc8TuYdxbDS1WwRnu38xT+nWIylOLQvx5SDzXypQ
zOUn+QzZXpn8GD3D4IHuWMWw+/xfQ755Enxt2UzgzF6abJ6Njt4Nf4FWGO+akbL8
/nPE9+q7DXvnxNHSG++rhW1tqBoFf8Tw3QSrLKqx1gZ2nuM6dLpecGLFvUTmaCBp
9i/dLnp3gWvBBi0I5gNYLZoxUlvRtJfOkUM8L0gObKQmc2wfMq0wVCEi1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGhYEAxnMcqNaHvpIMs5jQ13mU1aMB8GA1UdIwQY
MBaAFD3DhiccDgqNAfsZDWjYX/dk0WrUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGNPR0p4d09DbzBCLXhrTmFOaGY5MlRSYXRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9mMjY0YmItZWZkZC00NDk3LWJjMTAt
ZGRmZWYzYzZhZDllLzEvUGNPR0p4d09DbzBCLXhrTmFOaGY5MlRSYXRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9mMjY0YmItZWZkZC00NDk3LWJjMTAtZGRmZWYzYzZhZDll
LzEvUGNPR0p4d09DbzBCLXhrTmFOaGY5MlRSYXRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHHMJHf6w
6+4b59LVo336OpS4C3PJCS+PW4bkVOBuo9vDqdK4x+lAg8K3/3VSWK11nJzZy6x0
ZI0UKungLOwm4v2S6wmSYHdA55tqqwA7KxV1mKbVmrNcOh1YvYEHxkNGTjJE8VEq
lehgMptuBKQGRhJKbFXH/KnPjO4vnd2s/gU/OWUJAldA/4ixpxDxeePe3qVl0HkX
jODvrYjF5elk+rtfen4ZfAhOHzRUT7PBK3Cbh7TeuMOK098o84K8qAvo/DgOrwZ/
p/HzOqMhpibv79AH4YMKzH96O6w7jfHd5ysrlUwFdDtt9rjCYKnY3p22kEQf/9TN
/TYQ2Y8VQoHMGQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:11:49 2025 by rpki-client