Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft
File: Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft (raw, json)
Hash identifier: nzL6Ayc9dTWUQHqVg2dhmemLB5SLy4ymhRiDozgtEiI=
Subject key identifier: 47:7E:DB:B1:B6:35:99:10:C3:30:7A:64:E8:7C:34:7F:F4:E6:B5:66
Authority key identifier: 3E:78:2D:E1:B5:D5:29:2E:DD:13:6D:52:78:25:8C:67:B0:5B:E2:2A
Certificate issuer: /CN=3e782de1b5d5292edd136d5278258c67b05be22a
Certificate serial: 019A72267AC4BA5A52050055206407638406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pngt4bXVKS7dE21SeCWMZ7Bb4io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft
Manifest number: 0463
Signing time: Tue 11 Nov 2025 09:01:55 +0000
Manifest this update: Tue 11 Nov 2025 09:01:55 +0000
Manifest next update: Wed 12 Nov 2025 09:01:55 +0000
Files and hashes: 1: HsLH977Wr8CRqPeFRIsKeWuqNBQ.roa (hash: DfN2Ce+eFgUYzjRB1SnZEzwBexeV9U5bLQB9J92xhK4=)
2: Pngt4bXVKS7dE21SeCWMZ7Bb4io.crl (hash: H39ktnCVmnag1NgGqU5W4P0NeCIZmTdlNQk4p/PvYx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pngt4bXVKS7dE21SeCWMZ7Bb4io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:7a:c4:ba:5a:52:05:00:55:20:64:07:63:84:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e782de1b5d5292edd136d5278258c67b05be22a
Validity
Not Before: Nov 11 09:01:55 2025 GMT
Not After : Nov 12 09:01:55 2025 GMT
Subject: CN=477edbb1b6359910c3307a64e87c347ff4e6b566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bd:d2:33:6b:36:1d:3b:ea:d3:03:4f:3f:04:
a3:fa:3e:e5:5a:e0:b2:da:3c:1a:2a:ac:6f:54:f9:
1c:9a:c2:a7:fc:23:06:91:45:bf:59:9b:4d:4e:28:
37:f7:e2:83:14:30:bc:ee:b3:29:fe:5e:a9:c1:c7:
8a:c2:88:e1:6c:31:c4:25:c2:0f:66:53:8a:a7:c3:
63:9f:f9:03:e4:85:cf:da:e1:6c:85:d8:c1:b6:1e:
7d:5e:f5:07:f7:bb:8c:0e:05:59:df:8c:e2:a2:c3:
b0:10:df:0f:a1:96:1a:4b:73:f4:ca:e9:c9:d6:b4:
07:a6:d6:07:ff:e4:8e:1d:74:bd:b5:f1:c7:e0:b7:
1b:1b:8c:95:17:22:bc:17:a0:61:9a:81:c3:bc:43:
ba:fe:43:34:78:63:d6:7e:b8:11:73:c8:9f:57:c0:
34:26:0b:50:9e:32:83:19:87:54:3d:e6:4a:8d:92:
4a:a5:9f:87:f1:e8:7d:77:03:4d:f4:04:81:4c:02:
4b:6d:aa:a2:a6:98:3a:b7:a7:38:86:01:0a:3e:98:
08:59:4d:bf:2d:b5:35:d2:38:c9:e7:b5:c2:1e:5a:
53:e7:2c:8d:37:ba:70:70:3e:bd:6a:6c:0b:23:f4:
61:f8:b7:20:49:cf:53:9d:f5:64:a5:0c:34:35:57:
86:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7E:DB:B1:B6:35:99:10:C3:30:7A:64:E8:7C:34:7F:F4:E6:B5:66
X509v3 Authority Key Identifier:
keyid:3E:78:2D:E1:B5:D5:29:2E:DD:13:6D:52:78:25:8C:67:B0:5B:E2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pngt4bXVKS7dE21SeCWMZ7Bb4io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:3d:d5:18:e1:3f:f5:64:4a:6f:6a:2d:15:35:dd:ea:07:e5:
b6:5d:81:c0:14:48:49:91:96:02:0a:ad:75:a2:3d:5e:2f:64:
3a:fd:d5:3f:56:05:a3:61:38:62:86:7f:e0:8e:01:fd:68:62:
54:62:c2:05:a3:42:ed:7d:28:8d:35:66:be:03:0f:eb:3b:d7:
ff:13:14:54:c5:2f:40:1a:1d:ad:2a:e4:7d:99:02:ee:2e:58:
2a:ec:99:9b:c9:ca:28:78:57:75:1e:74:aa:3e:0b:e2:28:c1:
57:0b:b0:38:08:94:65:fd:dd:8c:c6:f7:28:23:27:dc:97:59:
e0:88:63:e4:67:24:f8:58:c8:27:10:b8:49:af:a2:08:d9:07:
d1:68:20:5d:ed:1a:ed:0f:0a:93:22:b2:ae:03:6e:ec:f6:dd:
75:1d:29:89:14:d2:51:42:15:3f:89:61:3f:a7:92:5b:38:8b:
a4:66:5b:c2:d3:f3:96:22:cf:1b:c4:5d:19:d8:55:32:5d:8c:
73:a5:6d:71:f8:75:f3:78:4f:47:93:87:a6:66:c7:ea:13:b2:
64:8a:d9:8c:6b:a7:d6:d4:c4:66:3b:7c:49:c6:d7:a1:cd:2b:
0d:f8:ed:e9:e9:ef:15:83:3b:53:5a:5e:7a:5f:96:ad:d2:f1:
5c:e0:d4:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJnrEulpSBQBVIGQHY4QGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNzgyZGUxYjVkNTI5MmVkZDEzNmQ1Mjc4MjU4YzY3YjA1
YmUyMmEwHhcNMjUxMTExMDkwMTU1WhcNMjUxMTEyMDkwMTU1WjAzMTEwLwYDVQQD
Eyg0NzdlZGJiMWI2MzU5OTEwYzMzMDdhNjRlODdjMzQ3ZmY0ZTZiNTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyb3SM2s2HTvq0wNPPwSj+j7lWuCy
2jwaKqxvVPkcmsKn/CMGkUW/WZtNTig39+KDFDC87rMp/l6pwceKwojhbDHEJcIP
ZlOKp8Njn/kD5IXP2uFshdjBth59XvUH97uMDgVZ34ziosOwEN8PoZYaS3P0yunJ
1rQHptYH/+SOHXS9tfHH4LcbG4yVFyK8F6BhmoHDvEO6/kM0eGPWfrgRc8ifV8A0
JgtQnjKDGYdUPeZKjZJKpZ+H8eh9dwNN9ASBTAJLbaqippg6t6c4hgEKPpgIWU2/
LbU10jjJ57XCHlpT5yyNN7pwcD69amwLI/Rh+LcgSc9TnfVkpQw0NVeG3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEd+27G2NZkQwzB6ZOh8NH/05rVmMB8GA1UdIwQY
MBaAFD54LeG11Sku3RNtUngljGewW+IqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG5ndDRiWFZLUzdkRTIxU2VDV01aN0JiNGlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9kMDM1ZmItZTg2MC00NjFkLTk3Mjgt
MTQ5ZTJhM2FkZTc2LzEvUG5ndDRiWFZLUzdkRTIxU2VDV01aN0JiNGlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9kMDM1ZmItZTg2MC00NjFkLTk3MjgtMTQ5ZTJhM2FkZTc2
LzEvUG5ndDRiWFZLUzdkRTIxU2VDV01aN0JiNGlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArT3VGOE/
9WRKb2otFTXd6gfltl2BwBRISZGWAgqtdaI9Xi9kOv3VP1YFo2E4YoZ/4I4B/Whi
VGLCBaNC7X0ojTVmvgMP6zvX/xMUVMUvQBodrSrkfZkC7i5YKuyZm8nKKHhXdR50
qj4L4ijBVwuwOAiUZf3djMb3KCMn3JdZ4Ihj5Gck+FjIJxC4Sa+iCNkH0WggXe0a
7Q8KkyKyrgNu7PbddR0piRTSUUIVP4lhP6eSWziLpGZbwtPzliLPG8RdGdhVMl2M
c6Vtcfh183hPR5OHpmbH6hOyZIrZjGun1tTEZjt8ScbXoc0rDfjt6envFYM7U1pe
el+WrdLxXODU1w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:29 2025 by rpki-client