Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
File: PgiDSzspc5CcCq9btdNUscDlyj4.mft (raw, json)
Hash identifier: KY9whb0pqpO4fvQdmWAaHsNmxgNQjVUup0wP6q88XlQ=
Subject key identifier: 9B:03:04:AF:A6:31:4A:F9:6F:9F:54:81:AC:70:0D:4E:4B:CD:77:99
Authority key identifier: 3E:08:83:4B:3B:29:73:90:9C:0A:AF:5B:B5:D3:54:B1:C0:E5:CA:3E
Certificate issuer: /CN=3e08834b3b2973909c0aaf5bb5d354b1c0e5ca3e
Certificate serial: 019A7149A8AD9AD365385A3A9391C42FEFA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
Manifest number: 0600
Signing time: Tue 11 Nov 2025 05:00:43 +0000
Manifest this update: Tue 11 Nov 2025 05:00:43 +0000
Manifest next update: Wed 12 Nov 2025 05:00:43 +0000
Files and hashes: 1: MtWTrnrND6EP3cM9Z5OSCIGl4vA.roa (hash: pbxVZVZ80DN49b7VnIcQNiVRM2BUbkPepC2i0a2pNpo=)
2: PgiDSzspc5CcCq9btdNUscDlyj4.crl (hash: xUM82v6SbAZa//gXTe0ya5y6j0NUtpxQ9K5KDyqxx7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:a8:ad:9a:d3:65:38:5a:3a:93:91:c4:2f:ef:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e08834b3b2973909c0aaf5bb5d354b1c0e5ca3e
Validity
Not Before: Nov 11 05:00:43 2025 GMT
Not After : Nov 12 05:00:43 2025 GMT
Subject: CN=9b0304afa6314af96f9f5481ac700d4e4bcd7799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:24:d2:d0:2f:8f:6b:93:7f:ca:20:3a:52:b8:
e4:f0:60:f3:d9:25:e8:e2:0f:d3:f1:7c:9b:e3:d3:
93:12:ae:30:7d:81:b5:a5:1e:de:0f:2c:9c:bf:6e:
31:b3:27:d7:3d:b8:e2:ff:77:c3:bd:6f:fd:25:24:
9b:79:29:90:69:86:e5:b1:47:3f:5a:a6:8d:1b:e4:
89:6c:21:eb:f9:36:e6:06:0f:b0:17:1b:e5:1b:80:
86:f5:97:8a:8b:a4:5a:d8:c0:c9:be:cb:e7:e8:dc:
ab:22:4e:56:4a:ad:dd:b8:a1:96:4f:f0:05:59:79:
8a:ff:81:68:c6:62:c7:81:0a:bc:84:16:37:dc:f7:
80:3e:2d:19:60:bc:4d:db:04:4d:e4:ed:13:26:b4:
a0:68:76:a0:ec:ab:a6:0e:05:a2:7d:77:bc:b5:51:
98:9a:12:ec:db:93:70:99:de:0c:f7:e2:21:1f:e5:
9e:6f:6b:05:03:17:0f:c4:62:60:b9:92:6c:44:62:
15:27:c2:9c:17:d0:00:0d:f1:a9:95:0f:11:5c:7e:
a2:fb:87:1b:c8:a9:d5:e5:d2:7d:7c:f4:df:c6:75:
6a:e5:c0:49:50:fc:23:2f:98:09:70:4e:f0:85:5e:
38:e5:9d:4e:56:5d:b6:15:6d:35:87:29:ad:31:26:
0d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:03:04:AF:A6:31:4A:F9:6F:9F:54:81:AC:70:0D:4E:4B:CD:77:99
X509v3 Authority Key Identifier:
keyid:3E:08:83:4B:3B:29:73:90:9C:0A:AF:5B:B5:D3:54:B1:C0:E5:CA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b0:dd:ab:3a:ce:33:dc:6a:7a:4b:f6:9c:c7:f8:74:ca:07:
17:4b:84:33:4b:1f:26:cd:96:70:6f:4b:ad:1a:0b:95:ce:74:
21:28:c9:71:bf:40:68:a7:6a:68:f6:a0:2f:f1:81:83:53:7e:
a2:81:1e:03:ab:69:85:fb:db:cd:d3:a4:2c:5c:5a:e5:c3:cb:
23:38:29:23:fc:bc:ac:17:25:89:4d:98:f4:52:72:42:52:8a:
54:4f:5e:af:ff:60:d4:8b:a7:8b:95:38:ef:7b:fd:ef:cc:88:
0b:40:31:76:9f:55:79:c6:64:e3:44:52:45:f2:ab:fe:0a:77:
2d:40:8d:24:c1:be:ba:37:5e:80:fe:ac:3f:e7:a9:81:33:b4:
56:48:53:9d:3e:63:e1:47:22:18:72:53:ce:91:80:83:d9:1d:
bb:bb:6f:67:c2:57:ad:c8:a4:70:48:a9:db:8d:91:fa:11:31:
d0:41:e6:84:bf:4f:b6:c8:6f:a1:5e:e0:60:3a:a0:a3:14:c2:
fb:08:23:b8:a6:23:cc:6c:ae:a3:94:da:d1:dd:4b:c3:ea:eb:
c8:6c:30:11:c5:0c:af:b2:0f:b5:f1:10:85:e6:49:d0:3d:4b:
c2:6b:cb:ca:a2:36:c8:39:47:ed:e9:17:ef:ce:33:66:79:99:
8c:f5:60:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSaitmtNlOFo6k5HEL++lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMDg4MzRiM2IyOTczOTA5YzBhYWY1YmI1ZDM1NGIxYzBl
NWNhM2UwHhcNMjUxMTExMDUwMDQzWhcNMjUxMTEyMDUwMDQzWjAzMTEwLwYDVQQD
Eyg5YjAzMDRhZmE2MzE0YWY5NmY5ZjU0ODFhYzcwMGQ0ZTRiY2Q3Nzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yTS0C+Pa5N/yiA6Urjk8GDz2SXo
4g/T8Xyb49OTEq4wfYG1pR7eDyycv24xsyfXPbji/3fDvW/9JSSbeSmQaYblsUc/
WqaNG+SJbCHr+TbmBg+wFxvlG4CG9ZeKi6Ra2MDJvsvn6NyrIk5WSq3duKGWT/AF
WXmK/4FoxmLHgQq8hBY33PeAPi0ZYLxN2wRN5O0TJrSgaHag7KumDgWifXe8tVGY
mhLs25Nwmd4M9+IhH+Web2sFAxcPxGJguZJsRGIVJ8KcF9AADfGplQ8RXH6i+4cb
yKnV5dJ9fPTfxnVq5cBJUPwjL5gJcE7whV445Z1OVl22FW01hymtMSYNRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJsDBK+mMUr5b59UgaxwDU5LzXeZMB8GA1UdIwQY
MBaAFD4Ig0s7KXOQnAqvW7XTVLHA5co+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGdpRFN6c3BjNUNjQ3E5YnRkTlVzY0RseWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9lZjAzYjMtNzQ3Mi00NmRlLTk1ODYt
ZmQ3Yjk3MzljYTI2LzEvUGdpRFN6c3BjNUNjQ3E5YnRkTlVzY0RseWo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9lZjAzYjMtNzQ3Mi00NmRlLTk1ODYtZmQ3Yjk3MzljYTI2
LzEvUGdpRFN6c3BjNUNjQ3E5YnRkTlVzY0RseWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbLDdqzrO
M9xqekv2nMf4dMoHF0uEM0sfJs2WcG9LrRoLlc50ISjJcb9AaKdqaPagL/GBg1N+
ooEeA6tphfvbzdOkLFxa5cPLIzgpI/y8rBcliU2Y9FJyQlKKVE9er/9g1Iuni5U4
73v978yIC0Axdp9VecZk40RSRfKr/gp3LUCNJMG+ujdegP6sP+epgTO0VkhTnT5j
4UciGHJTzpGAg9kdu7tvZ8JXrcikcEip242R+hEx0EHmhL9PtshvoV7gYDqgoxTC
+wgjuKYjzGyuo5Ta0d1Lw+rryGwwEcUMr7IPtfEQheZJ0D1LwmvLyqI2yDlH7ekX
784zZnmZjPVgSA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:17 2025 by rpki-client