Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
File: pqxtBp2PtzL0_pK04TzX3E05OkI.mft (raw, json)
Hash identifier: mR7kVoBypKIgWtfkcBotwX98nA7oHAzZfRMejcn4Dyc=
Subject key identifier: 9E:FB:16:E1:FA:C4:A6:15:71:E5:0F:F9:03:98:84:48:71:2F:CB:9D
Authority key identifier: A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42
Certificate issuer: /CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42
Certificate serial: 019A2108FD99300FF7765AFB4876084196DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
Manifest number: 0C68
Signing time: Sun 26 Oct 2025 15:00:28 +0000
Manifest this update: Sun 26 Oct 2025 15:00:28 +0000
Manifest next update: Mon 27 Oct 2025 15:00:28 +0000
Files and hashes: 1: kORzGbUwfQz_reUfKxE-VKML1Ko.roa (hash: LJNSK27C7NQtNI1BCy3DsB/OzJxofkAzOY3Bw0ai+Lk=)
2: pqxtBp2PtzL0_pK04TzX3E05OkI.crl (hash: Tbe08z1crWBsrk4Sya2AFiTTKDqMvBQRG+JVNkvovfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:08:fd:99:30:0f:f7:76:5a:fb:48:76:08:41:96:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42
Validity
Not Before: Oct 26 15:00:28 2025 GMT
Not After : Oct 27 15:00:28 2025 GMT
Subject: CN=9efb16e1fac4a61571e50ff903988448712fcb9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:b7:22:49:d3:72:68:6b:f9:d9:bc:b5:19:c4:
c8:d3:47:92:04:ac:01:c3:0d:9e:b9:65:a5:b5:d6:
c2:e6:71:15:5b:0f:91:74:f7:a7:30:9b:f0:06:d0:
13:b2:41:75:62:27:3b:7c:29:51:d5:16:37:63:3a:
6d:a9:19:7d:34:36:81:cf:38:6e:82:b2:aa:b1:64:
92:fd:aa:a7:a6:ae:e3:85:db:a4:d4:b0:f5:2d:13:
b8:08:1c:20:53:0d:64:d8:dd:40:2c:ce:a5:46:5f:
fc:55:5d:88:91:5d:cc:87:09:e5:ba:34:2a:ad:68:
da:3f:18:12:51:79:6b:ee:b0:e6:24:20:bb:c8:3e:
a3:80:d3:56:cf:cf:25:f8:c0:ad:26:65:d8:85:6b:
03:43:b7:2b:51:a3:d8:6a:aa:b0:d0:e2:f7:08:6e:
5f:34:0f:41:1d:09:ce:fd:d7:ed:49:3c:8e:0e:24:
4a:4d:f6:83:6b:52:d3:5c:ec:c2:7f:b3:4a:4c:04:
8d:49:84:cb:0e:f2:37:9c:f5:32:70:60:16:31:4d:
cc:5c:5e:b7:56:42:d4:9e:ee:6e:67:6f:3e:24:75:
eb:39:8c:62:31:c0:73:d5:10:42:af:78:c4:d8:01:
71:6a:62:1c:2e:86:05:b2:ad:65:61:3b:54:08:d7:
02:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:FB:16:E1:FA:C4:A6:15:71:E5:0F:F9:03:98:84:48:71:2F:CB:9D
X509v3 Authority Key Identifier:
keyid:A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:07:4f:54:7c:f8:2d:a7:a9:8b:99:69:68:db:7c:41:e8:2a:
9e:88:eb:cb:49:24:b1:66:b6:73:a2:8c:27:80:74:4a:de:49:
e0:c8:71:d3:1b:8b:f5:da:b6:aa:ea:1f:a6:49:1b:25:c9:0b:
62:16:f5:b3:11:d1:91:9c:f5:46:2b:8d:5b:99:75:c5:c4:32:
44:ef:90:71:60:43:2a:70:45:06:26:a4:e2:d3:57:56:b7:61:
b2:49:08:88:a7:79:af:8e:b7:96:5c:79:9f:8f:b6:63:a7:8d:
5c:31:26:72:fb:8d:75:f0:f2:e3:8a:db:6f:63:5d:12:11:be:
d6:f2:cc:68:92:e8:02:b4:8e:93:5a:82:ad:2b:0e:60:7c:31:
35:74:6e:4a:82:fb:1a:ab:b8:d2:ad:cb:c8:76:7e:29:14:d1:
68:13:43:ec:a0:67:8d:30:c4:e2:ef:43:90:6f:a1:28:d9:2d:
a6:d8:9d:e8:a7:81:f4:b6:12:a4:eb:2a:68:2d:f2:0c:6b:99:
59:24:93:95:d9:a6:0e:a0:fd:ee:d8:c9:22:b1:4a:e3:ff:b9:
84:4a:3e:fa:7b:0c:ef:ad:e5:97:a5:08:a9:81:37:8b:06:aa:
83:38:8d:b6:42:6d:5a:81:ae:63:67:93:5a:22:80:06:f5:3d:
ca:a8:7e:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohCP2ZMA/3dlr7SHYIQZbfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YWM2ZDA2OWQ4ZmI3MzJmNGZlOTJiNGUxM2NkN2RjNGQz
OTNhNDIwHhcNMjUxMDI2MTUwMDI4WhcNMjUxMDI3MTUwMDI4WjAzMTEwLwYDVQQD
Eyg5ZWZiMTZlMWZhYzRhNjE1NzFlNTBmZjkwMzk4ODQ0ODcxMmZjYjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+bciSdNyaGv52by1GcTI00eSBKwB
ww2euWWltdbC5nEVWw+RdPenMJvwBtATskF1Yic7fClR1RY3YzptqRl9NDaBzzhu
grKqsWSS/aqnpq7jhduk1LD1LRO4CBwgUw1k2N1ALM6lRl/8VV2IkV3MhwnlujQq
rWjaPxgSUXlr7rDmJCC7yD6jgNNWz88l+MCtJmXYhWsDQ7crUaPYaqqw0OL3CG5f
NA9BHQnO/dftSTyODiRKTfaDa1LTXOzCf7NKTASNSYTLDvI3nPUycGAWMU3MXF63
VkLUnu5uZ28+JHXrOYxiMcBz1RBCr3jE2AFxamIcLoYFsq1lYTtUCNcCsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ77FuH6xKYVceUP+QOYhEhxL8udMB8GA1UdIwQY
MBaAFKasbQadj7cy9P6StOE819xNOTpCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHF4dEJwMlB0ekwwX3BLMDRUelgzRTA1T2tJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jMDlmMDItNzUxMC00MmVhLWIyODEt
YmZhMDNhNjY4NTc3LzEvcHF4dEJwMlB0ekwwX3BLMDRUelgzRTA1T2tJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9jMDlmMDItNzUxMC00MmVhLWIyODEtYmZhMDNhNjY4NTc3
LzEvcHF4dEJwMlB0ekwwX3BLMDRUelgzRTA1T2tJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfAdPVHz4
Laepi5lpaNt8Qegqnojry0kksWa2c6KMJ4B0St5J4Mhx0xuL9dq2quofpkkbJckL
Yhb1sxHRkZz1RiuNW5l1xcQyRO+QcWBDKnBFBiak4tNXVrdhskkIiKd5r463llx5
n4+2Y6eNXDEmcvuNdfDy44rbb2NdEhG+1vLMaJLoArSOk1qCrSsOYHwxNXRuSoL7
Gqu40q3LyHZ+KRTRaBND7KBnjTDE4u9DkG+hKNktptid6KeB9LYSpOsqaC3yDGuZ
WSSTldmmDqD97tjJIrFK4/+5hEo++nsM763ll6UIqYE3iwaqgziNtkJtWoGuY2eT
WiKABvU9yqh+Lg==
-----END CERTIFICATE-----
Generated at Sun Oct 26 22:54:48 2025 by rpki-client