Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
File: piqMeh9qTJSeAntTadl9dXbhR_g.mft (raw, json)
Hash identifier: pREUDG87P/0X1uIe+Asdd57tD6h5HBSA2j12Z8LOww0=
Subject key identifier: 6A:ED:0B:19:5D:2D:69:4E:14:48:7A:8D:27:F5:29:F1:37:75:25:73
Authority key identifier: A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
Certificate issuer: /CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Certificate serial: 019A28552A031EE3F62A0B0712026ABA9C15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
Manifest number: 0B3C
Signing time: Tue 28 Oct 2025 01:01:01 +0000
Manifest this update: Tue 28 Oct 2025 01:01:01 +0000
Manifest next update: Wed 29 Oct 2025 01:01:01 +0000
Files and hashes: 1: BxgD-RrZabBuEEfFQkOR7JzPkYA.roa (hash: Dbgg4n4USIHYY1LVI9yt8KqtluJXraRBx7hK71/1AxU=)
2: _HboziFCCXY6Aftni-9e_QXHS7Y.roa (hash: 1Dtm7p4VO9zPNWsz+P/VL1I6c+v4X7GMgtJoAtf8pBU=)
3: piqMeh9qTJSeAntTadl9dXbhR_g.crl (hash: nznFW+tyfU1Uj6/b8XlPzDjUggpxFvjpRob3t7jM31A=)
4: y3UMX5qqKpS7PayD_PFfS-9xYiA.roa (hash: 1x0+PMsy7NMRlTF0Iq4hoHsB7a+mNEhOddx/6ZAYPrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 01:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:55:2a:03:1e:e3:f6:2a:0b:07:12:02:6a:ba:9c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Validity
Not Before: Oct 28 01:01:01 2025 GMT
Not After : Oct 29 01:01:01 2025 GMT
Subject: CN=6aed0b195d2d694e14487a8d27f529f137752573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6e:e6:0b:9d:b0:88:7b:8b:af:d3:7f:7d:c5:
a9:28:4b:d1:ce:97:ae:0a:14:ce:b1:81:2b:6d:9e:
70:8d:23:e1:80:84:11:4c:b6:c1:19:dd:a2:b6:77:
f9:16:63:18:e5:59:e0:8c:e8:4c:8f:bd:6b:48:d7:
cd:9c:d1:93:1b:61:9e:ff:81:e6:61:a5:ec:5a:03:
d1:e7:17:50:fe:fb:4d:26:54:9b:5a:e6:1c:53:73:
ab:42:81:73:a9:21:f8:12:cc:ae:b3:43:d8:f5:6f:
b5:5a:71:f4:24:18:5f:0d:5c:e5:4b:91:05:c7:8c:
be:bb:68:96:c8:e6:08:13:f3:94:19:9f:6f:3a:10:
c1:c5:f1:33:31:7d:fa:58:33:03:30:f8:94:fb:b8:
30:8e:cb:67:ea:54:c1:8e:93:b1:47:a6:3e:03:6d:
b1:11:dd:a0:b3:2f:7c:5b:84:84:d1:f1:35:7f:9d:
31:40:bf:0f:40:ab:ec:e8:4d:68:eb:9f:ef:ef:9b:
1e:7c:43:af:44:96:ec:61:e6:ad:b5:4a:1a:45:93:
00:a7:ab:24:ee:5c:d6:11:4e:88:ae:b5:2e:ef:6d:
d6:bf:65:bb:f5:ed:d7:38:39:17:57:c4:a3:f2:d3:
5a:88:e1:58:10:57:af:4c:4d:48:e8:57:58:a0:2e:
f5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:ED:0B:19:5D:2D:69:4E:14:48:7A:8D:27:F5:29:F1:37:75:25:73
X509v3 Authority Key Identifier:
keyid:A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ac:f6:1e:5b:29:fb:62:59:0d:31:77:47:8e:97:57:1e:db:
d1:42:1a:50:e3:39:ce:98:9c:2b:13:e1:60:b6:0d:4c:17:c6:
fb:05:ff:ea:85:57:d6:6d:41:f7:3f:ff:da:5c:80:03:80:c8:
78:46:bd:85:7b:a5:bd:80:d5:48:dd:87:a7:0c:e4:27:50:75:
a2:06:e3:53:05:40:b6:10:46:ec:4d:f7:83:7e:ca:59:03:dc:
98:a1:9a:24:fc:4e:c1:22:be:ba:50:55:47:6a:be:86:65:54:
0f:53:67:32:74:98:77:52:3d:45:63:98:be:f2:bd:c8:e2:15:
35:f8:fa:a0:cf:ce:e6:97:d3:c9:63:c7:fe:46:94:b7:e9:ac:
69:c2:73:f6:4b:57:b3:b6:8a:6d:3e:5f:c5:15:b3:56:b0:53:
7a:b2:41:7a:32:fd:72:b9:e2:15:12:a1:55:6e:27:18:21:83:
b4:7d:64:13:cb:78:08:1a:3f:22:ac:b5:03:b1:f0:e5:80:f7:
29:fc:55:42:b5:98:5b:14:71:d2:b0:26:45:2c:ca:dc:98:90:
9c:01:43:ac:bd:ba:37:5e:1d:0a:60:65:b6:08:02:5c:e5:74:
2d:1e:6c:2c:a5:74:9e:59:7e:e0:82:e6:fa:23:0a:04:33:58:
70:e5:b2:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZooVSoDHuP2KgsHEgJqupwVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MmE4YzdhMWY2YTRjOTQ5ZTAyN2I1MzY5ZDk3ZDc1NzZl
MTQ3ZjgwHhcNMjUxMDI4MDEwMTAxWhcNMjUxMDI5MDEwMTAxWjAzMTEwLwYDVQQD
Eyg2YWVkMGIxOTVkMmQ2OTRlMTQ0ODdhOGQyN2Y1MjlmMTM3NzUyNTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW7mC52wiHuLr9N/fcWpKEvRzpeu
ChTOsYErbZ5wjSPhgIQRTLbBGd2itnf5FmMY5VngjOhMj71rSNfNnNGTG2Ge/4Hm
YaXsWgPR5xdQ/vtNJlSbWuYcU3OrQoFzqSH4Esyus0PY9W+1WnH0JBhfDVzlS5EF
x4y+u2iWyOYIE/OUGZ9vOhDBxfEzMX36WDMDMPiU+7gwjstn6lTBjpOxR6Y+A22x
Ed2gsy98W4SE0fE1f50xQL8PQKvs6E1o65/v75sefEOvRJbsYeattUoaRZMAp6sk
7lzWEU6IrrUu723Wv2W79e3XODkXV8Sj8tNaiOFYEFevTE1I6FdYoC71KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGrtCxldLWlOFEh6jSf1KfE3dSVzMB8GA1UdIwQY
MBaAFKYqjHofakyUngJ7U2nZfXV24Uf4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGlxTWVoOXFUSlNlQW50VGFkbDlkWGJoUl9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mYzAyMmQtZjhlNS00YTZlLThiMWYt
NThjODVkNDMzNmJjLzEvcGlxTWVoOXFUSlNlQW50VGFkbDlkWGJoUl9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9mYzAyMmQtZjhlNS00YTZlLThiMWYtNThjODVkNDMzNmJj
LzEvcGlxTWVoOXFUSlNlQW50VGFkbDlkWGJoUl9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGaz2Hlsp
+2JZDTF3R46XVx7b0UIaUOM5zpicKxPhYLYNTBfG+wX/6oVX1m1B9z//2lyAA4DI
eEa9hXulvYDVSN2HpwzkJ1B1ogbjUwVAthBG7E33g37KWQPcmKGaJPxOwSK+ulBV
R2q+hmVUD1NnMnSYd1I9RWOYvvK9yOIVNfj6oM/O5pfTyWPH/kaUt+msacJz9ktX
s7aKbT5fxRWzVrBTerJBejL9crniFRKhVW4nGCGDtH1kE8t4CBo/Iqy1A7Hw5YD3
KfxVQrWYWxRx0rAmRSzK3JiQnAFDrL26N14dCmBltggCXOV0LR5sLKV0nll+4ILm
+iMKBDNYcOWysQ==
-----END CERTIFICATE-----
Generated at Tue Oct 28 11:49:52 2025 by rpki-client