Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
File: PesQRGPpILRVQravGifVlQ6G6aA.mft (raw, json)
Hash identifier: cvehJes9vqTTuZh4oEMILKVrYkh29xr8i/Nvqzs81QE=
Subject key identifier: 19:30:19:AC:98:AF:3D:A7:38:58:51:E4:FE:3F:B7:21:CE:16:AA:29
Authority key identifier: 3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0
Certificate issuer: /CN=3deb104463e920b45542b6af1a27d5950e86e9a0
Certificate serial: 0199529E26C21A354DC95FA5447625228D5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
Manifest number: 145B
Signing time: Tue 16 Sep 2025 13:02:00 +0000
Manifest this update: Tue 16 Sep 2025 13:02:00 +0000
Manifest next update: Wed 17 Sep 2025 13:02:00 +0000
Files and hashes: 1: 1-gBlmRElwFozsXlk-zODgtGpAuA.roa (hash: xVfyWKViH35Kce9xfyzBsAu8tiyl2DKuvLolO3h9f4s=)
2: 3X_OCsm4wSXVQQmIGXvbWiOwwPk.roa (hash: uAifQhxv7JsH18zEmjWnpWg6H+QdTkCHwp4ioEB51v8=)
3: CGYCoXePbFBrriJrNgrZF9Uefow.roa (hash: KPb5usKgdYQ3JpgKFKA1WlcbtVkuv48+f5lB1B8M9IA=)
4: PesQRGPpILRVQravGifVlQ6G6aA.crl (hash: b2TccoN6QLq9f/TX90TZyEm7+acCjAfhWTI0ijMRy7k=)
5: PyMiLV0wnNJXQTQMDEPMVXWx9ZQ.roa (hash: gY7gqfT3zhDP3uAkWWCqVVxfWQ7GvCSgS8lQh0U5EGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 13:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:52:9e:26:c2:1a:35:4d:c9:5f:a5:44:76:25:22:8d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3deb104463e920b45542b6af1a27d5950e86e9a0
Validity
Not Before: Sep 16 13:02:00 2025 GMT
Not After : Sep 17 13:02:00 2025 GMT
Subject: CN=193019ac98af3da7385851e4fe3fb721ce16aa29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:50:1a:6c:7e:f8:21:85:2d:d8:35:bf:30:c9:
dd:61:00:a0:18:7d:66:c7:aa:52:65:f6:95:c0:80:
fe:0f:9c:7d:52:2f:8f:e9:04:a9:39:8c:1f:b9:6d:
c8:8d:39:42:8d:93:79:d4:6b:88:31:38:7e:37:8c:
e3:98:f6:f0:44:f7:e5:de:42:c0:37:f2:19:d8:ce:
10:bc:80:09:6a:82:88:40:66:ed:30:22:1d:f5:92:
f4:a6:bc:f0:6b:45:1f:ff:1d:4d:5d:04:be:1d:02:
96:fa:88:c7:06:a7:87:1b:13:01:f5:ba:f6:1f:74:
c0:68:df:e2:16:2b:72:d9:78:a5:75:05:68:2c:61:
d0:ac:bc:09:3a:a5:63:c8:b7:24:ab:ab:84:67:02:
12:dc:d4:b9:ec:ef:a7:7a:bf:74:40:99:57:38:65:
9f:9c:3c:35:53:0f:4f:67:cc:b9:e0:f3:15:97:ad:
fc:c9:61:9b:e2:d0:67:13:f2:a4:ee:07:55:bb:b6:
a6:07:a9:9d:0d:e9:c7:b9:c1:7d:23:c0:28:01:c5:
3e:99:41:08:35:06:5e:22:58:10:18:99:8e:9e:e6:
98:b6:d0:0e:a0:7a:1a:e6:e4:50:6f:de:e5:c3:62:
3f:71:de:94:17:b8:ba:1b:71:c5:51:f4:8a:7d:72:
5f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:30:19:AC:98:AF:3D:A7:38:58:51:E4:FE:3F:B7:21:CE:16:AA:29
X509v3 Authority Key Identifier:
keyid:3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:9a:ae:bc:ea:78:82:4f:02:3e:b2:b5:62:cc:d3:39:47:e8:
9e:25:75:44:17:eb:6e:89:8f:87:3d:bf:8b:4a:59:37:67:bd:
53:c9:1e:40:a8:5b:5e:64:5f:89:8b:5d:44:a0:1e:e5:1d:d6:
30:17:a3:a8:23:b3:3d:08:f2:2e:d1:89:01:83:b1:8f:0a:aa:
74:2e:e2:97:40:db:03:65:9a:a7:73:80:3b:77:2b:c4:f2:c4:
cf:6f:20:c5:c6:36:57:a6:fb:a8:8e:15:32:2f:ec:58:46:52:
e5:4c:8a:1c:64:3b:f1:8f:60:95:4b:17:3c:17:57:ee:f3:71:
b6:f4:97:42:cc:dc:52:e5:e0:a4:6a:c2:ec:b4:48:1c:38:20:
96:c0:e7:64:84:7b:b0:72:ef:ed:f8:20:79:12:1b:51:93:4a:
23:c3:41:ec:f8:fe:6f:ae:44:b2:19:66:43:00:05:f2:f4:53:
21:ce:f5:98:a9:51:f4:39:2e:b1:9a:7d:61:5c:fb:b6:03:d8:
d3:00:52:d5:1e:e7:83:2e:38:d1:ef:0d:0b:d0:18:98:39:37:
ce:db:1a:52:be:3c:6e:69:c0:7c:41:fe:f6:f1:d8:5b:40:f3:
54:43:ac:32:45:cc:2b:2b:82:21:92:01:b2:61:c8:19:08:74:
ff:04:2d:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlSnibCGjVNyV+lRHYlIo1bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkZWIxMDQ0NjNlOTIwYjQ1NTQyYjZhZjFhMjdkNTk1MGU4
NmU5YTAwHhcNMjUwOTE2MTMwMjAwWhcNMjUwOTE3MTMwMjAwWjAzMTEwLwYDVQQD
EygxOTMwMTlhYzk4YWYzZGE3Mzg1ODUxZTRmZTNmYjcyMWNlMTZhYTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7VAabH74IYUt2DW/MMndYQCgGH1m
x6pSZfaVwID+D5x9Ui+P6QSpOYwfuW3IjTlCjZN51GuIMTh+N4zjmPbwRPfl3kLA
N/IZ2M4QvIAJaoKIQGbtMCId9ZL0przwa0Uf/x1NXQS+HQKW+ojHBqeHGxMB9br2
H3TAaN/iFity2XildQVoLGHQrLwJOqVjyLckq6uEZwIS3NS57O+ner90QJlXOGWf
nDw1Uw9PZ8y54PMVl638yWGb4tBnE/Kk7gdVu7amB6mdDenHucF9I8AoAcU+mUEI
NQZeIlgQGJmOnuaYttAOoHoa5uRQb97lw2I/cd6UF7i6G3HFUfSKfXJftwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBkwGayYrz2nOFhR5P4/tyHOFqopMB8GA1UdIwQY
MBaAFD3rEERj6SC0VUK2rxon1ZUOhumgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGVzUVJHUHBJTFJWUXJhdkdpZlZsUTZHNmFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9jNjg2YjMtZTdhOS00ZjljLTg0MmMt
MTE5ZDhiZjcxN2JiLzEvUGVzUVJHUHBJTFJWUXJhdkdpZlZsUTZHNmFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9jNjg2YjMtZTdhOS00ZjljLTg0MmMtMTE5ZDhiZjcxN2Ji
LzEvUGVzUVJHUHBJTFJWUXJhdkdpZlZsUTZHNmFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN5quvOp4
gk8CPrK1YszTOUfoniV1RBfrbomPhz2/i0pZN2e9U8keQKhbXmRfiYtdRKAe5R3W
MBejqCOzPQjyLtGJAYOxjwqqdC7il0DbA2Wap3OAO3crxPLEz28gxcY2V6b7qI4V
Mi/sWEZS5UyKHGQ78Y9glUsXPBdX7vNxtvSXQszcUuXgpGrC7LRIHDgglsDnZIR7
sHLv7fggeRIbUZNKI8NB7Pj+b65EshlmQwAF8vRTIc71mKlR9DkusZp9YVz7tgPY
0wBS1R7ngy440e8NC9AYmDk3ztsaUr48bmnAfEH+9vHYW0DzVEOsMkXMKyuCIZIB
smHIGQh0/wQtLQ==
-----END CERTIFICATE-----
Generated at Tue Sep 16 14:35:33 2025 by rpki-client