Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
File: Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft (raw, json)
Hash identifier: TNz/f2JyFZnkQUSue62pONm3crZA815dK4gQPs5QMfQ=
Subject key identifier: 2F:95:41:FA:C7:83:E5:3F:80:ED:C9:63:F7:B0:7B:33:51:A3:3D:24
Authority key identifier: 3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29
Certificate issuer: /CN=3ead19096b0ee080fe43810500b718a947fed229
Certificate serial: 019A09DC521A1C1D4AD336CEBF7B7EB06241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
Manifest number: 0B12
Signing time: Wed 22 Oct 2025 03:00:25 +0000
Manifest this update: Wed 22 Oct 2025 03:00:25 +0000
Manifest next update: Thu 23 Oct 2025 03:00:25 +0000
Files and hashes: 1: Bk8zYlSKqLYVsGMH3YEvHnLSsEU.roa (hash: LyRPaqVEcdiw5E3uBmgAAh9/7xweVS475crHOVmwvK8=)
2: Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl (hash: N5RCWxD2B6urNQV8G0m82ZxIms9ia8T322DcpOmUkzc=)
3: gwj9P8ZuERM-SCTzjIoGfn0Rln0.roa (hash: 9JU5L0oKqu22gCI9ibec6Elcvk/4kJnQuHkzo4ps1r4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:09:dc:52:1a:1c:1d:4a:d3:36:ce:bf:7b:7e:b0:62:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ead19096b0ee080fe43810500b718a947fed229
Validity
Not Before: Oct 22 03:00:25 2025 GMT
Not After : Oct 23 03:00:25 2025 GMT
Subject: CN=2f9541fac783e53f80edc963f7b07b3351a33d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:44:dd:f8:ca:19:b3:3a:28:0f:5e:48:41:9b:
b8:2a:61:b1:10:94:61:a7:29:fe:d6:61:41:d9:07:
c1:2d:64:9c:2e:bc:d5:95:0c:3b:f0:78:98:23:6c:
a9:31:d7:53:2f:a2:79:2d:bd:49:96:d0:39:a6:eb:
ab:e4:b2:27:e9:be:07:b3:30:51:09:7a:32:fa:c9:
ff:19:7c:2f:c6:25:ef:72:d5:25:1d:1d:76:1a:bb:
df:4d:59:cf:5d:e6:59:b6:89:9f:b6:a0:29:03:79:
18:71:f4:dc:b9:a7:99:7d:d2:50:4f:e9:a6:3a:49:
ae:4f:c3:48:50:b2:20:66:2b:3c:24:9e:e1:f9:c5:
e3:78:53:c1:43:68:8e:33:27:9d:4b:01:5f:a5:89:
e8:fe:2c:6e:b4:73:37:55:26:04:8e:7a:6a:a7:98:
d9:db:f1:4c:71:43:c0:a1:95:5e:5b:4e:73:2a:63:
8d:38:81:d9:1c:5b:73:66:04:4c:b4:d2:ec:87:d9:
6c:69:14:67:54:65:45:72:f2:75:b4:19:6c:ac:9b:
4b:1a:7e:77:c7:d7:5d:9d:3f:93:4b:27:f4:c4:05:
ee:30:3b:9d:9e:45:ec:c4:7f:cb:88:9d:2f:e7:f8:
32:74:a7:75:d2:20:60:2f:07:8f:a1:67:31:a7:e1:
18:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:95:41:FA:C7:83:E5:3F:80:ED:C9:63:F7:B0:7B:33:51:A3:3D:24
X509v3 Authority Key Identifier:
keyid:3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:45:0d:df:5f:cf:0e:ce:52:d2:c7:aa:55:36:d8:a1:77:a5:
ce:17:cb:52:49:a8:9c:5c:de:18:3a:f0:d9:16:4d:f0:cb:9c:
b4:89:d1:31:ba:b1:2d:54:4b:17:67:17:a0:09:e0:dd:59:3c:
98:d2:ee:4e:9e:fb:da:a2:40:dd:9f:64:c8:3e:d2:b3:7b:3c:
01:71:3b:96:d3:12:4b:a8:3e:ff:52:a1:e2:1a:df:6a:b5:d2:
2c:53:5d:6b:ac:23:0b:de:99:57:9b:88:53:63:01:67:b0:39:
12:5d:02:35:47:aa:4b:5a:48:4d:d8:58:7a:5e:6c:60:a9:6b:
e4:82:74:63:fc:b1:ac:02:be:d3:ac:96:1a:3e:46:fa:29:f6:
4f:54:9c:30:d4:51:2e:33:37:aa:0f:28:97:c9:d4:9c:fd:5f:
dc:d1:bf:e6:5b:49:34:b2:5d:f3:f8:bd:d7:58:0f:ed:c9:0f:
1d:58:da:07:a2:a5:1e:e7:9f:02:12:58:30:d8:97:52:69:ba:
95:44:50:84:12:b4:d7:49:96:60:41:34:b6:6b:1e:53:29:d8:
ea:74:ca:2c:b4:f2:13:42:65:42:d7:32:a2:f0:f4:c8:c0:7c:
c1:f1:fb:c1:ad:81:e1:eb:0a:9d:09:f6:f9:1a:7f:02:f5:09:
19:ec:dc:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoJ3FIaHB1K0zbOv3t+sGJBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYWQxOTA5NmIwZWUwODBmZTQzODEwNTAwYjcxOGE5NDdm
ZWQyMjkwHhcNMjUxMDIyMDMwMDI1WhcNMjUxMDIzMDMwMDI1WjAzMTEwLwYDVQQD
EygyZjk1NDFmYWM3ODNlNTNmODBlZGM5NjNmN2IwN2IzMzUxYTMzZDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUTd+MoZszooD15IQZu4KmGxEJRh
pyn+1mFB2QfBLWScLrzVlQw78HiYI2ypMddTL6J5Lb1JltA5puur5LIn6b4HszBR
CXoy+sn/GXwvxiXvctUlHR12GrvfTVnPXeZZtomftqApA3kYcfTcuaeZfdJQT+mm
OkmuT8NIULIgZis8JJ7h+cXjeFPBQ2iOMyedSwFfpYno/ixutHM3VSYEjnpqp5jZ
2/FMcUPAoZVeW05zKmONOIHZHFtzZgRMtNLsh9lsaRRnVGVFcvJ1tBlsrJtLGn53
x9ddnT+TSyf0xAXuMDudnkXsxH/LiJ0v5/gydKd10iBgLwePoWcxp+EYgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+VQfrHg+U/gO3JY/ewezNRoz0kMB8GA1UdIwQY
MBaAFD6tGQlrDuCA/kOBBQC3GKlH/tIpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHEwWkNXc080SUQtUTRFRkFMY1lxVWYtMGlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82M2JiNzktOTNiMC00OTlmLTk3OGQt
MTBmZTQ0NzI2OTA4LzEvUHEwWkNXc080SUQtUTRFRkFMY1lxVWYtMGlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy82M2JiNzktOTNiMC00OTlmLTk3OGQtMTBmZTQ0NzI2OTA4
LzEvUHEwWkNXc080SUQtUTRFRkFMY1lxVWYtMGlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkUUN31/P
Ds5S0seqVTbYoXelzhfLUkmonFzeGDrw2RZN8MuctInRMbqxLVRLF2cXoAng3Vk8
mNLuTp772qJA3Z9kyD7Ss3s8AXE7ltMSS6g+/1Kh4hrfarXSLFNda6wjC96ZV5uI
U2MBZ7A5El0CNUeqS1pITdhYel5sYKlr5IJ0Y/yxrAK+06yWGj5G+in2T1ScMNRR
LjM3qg8ol8nUnP1f3NG/5ltJNLJd8/i911gP7ckPHVjaB6KlHuefAhJYMNiXUmm6
lURQhBK010mWYEE0tmseUynY6nTKLLTyE0JlQtcyovD0yMB8wfH7wa2B4esKnQn2
+Rp/AvUJGezciQ==
-----END CERTIFICATE-----
Generated at Wed Oct 22 12:08:56 2025 by rpki-client