Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
File: PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft (raw, json)
Hash identifier: eGrdbbu4+OWbD40zxybxb9pQBABjrq3y7k3wJ3A/jNs=
Subject key identifier: CB:F4:C6:C6:C1:E6:DD:09:29:90:F3:E5:DC:DB:5E:BC:A2:BA:A3:34
Authority key identifier: 3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
Certificate issuer: /CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Certificate serial: 019A1BE29CA5ABC604A8125A6F324FE8819C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
Manifest number: 090C
Signing time: Sat 25 Oct 2025 15:00:27 +0000
Manifest this update: Sat 25 Oct 2025 15:00:27 +0000
Manifest next update: Sun 26 Oct 2025 15:00:27 +0000
Files and hashes: 1: PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl (hash: HqgruN4xGg2JAMED3WlPPw3RRAkABGfUTPDVLuWXNL8=)
2: zw3ZQoqzEpP0EhpQ36h6FYlUI5I.roa (hash: Jk/Vq/HavBcVMjBR4tqdS47N90EhCkZ4tAXukBLV+pA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:e2:9c:a5:ab:c6:04:a8:12:5a:6f:32:4f:e8:81:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Validity
Not Before: Oct 25 15:00:27 2025 GMT
Not After : Oct 26 15:00:27 2025 GMT
Subject: CN=cbf4c6c6c1e6dd092990f3e5dcdb5ebca2baa334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c2:02:ac:b6:2d:c1:f4:83:a7:ad:4f:50:3f:
22:00:90:9d:e1:4f:5d:ac:b0:a0:6b:86:d6:53:ed:
ae:fe:4c:2d:77:1d:c1:ba:0c:d8:c0:ac:02:4c:f6:
f5:b1:de:b0:4a:d0:38:87:e1:65:1b:47:7f:43:92:
57:db:db:67:73:a5:82:df:5e:79:43:41:ff:60:43:
ab:66:56:ca:09:5c:fc:b7:79:c1:97:c6:84:8c:c0:
84:71:35:2d:12:4f:90:4a:00:a0:fb:73:e3:c0:35:
e5:2e:55:e6:c5:b1:19:dd:fc:38:ee:c0:16:03:69:
36:d6:2a:9c:30:9e:8d:c4:db:19:c6:11:47:ed:cd:
de:ca:5b:3d:a0:50:1d:80:4a:5f:cc:8a:1f:c1:5f:
51:32:6d:2a:4c:48:8c:66:b8:ac:34:a7:bd:8c:cd:
af:18:8b:06:ab:69:83:58:da:6c:37:93:4e:81:3a:
6f:00:f7:bf:82:10:4a:bc:7d:70:4d:7c:05:4c:05:
ea:44:e0:af:7a:bb:bd:77:4f:88:54:84:74:be:e2:
37:14:9d:1a:b4:a9:26:d0:65:a5:22:e8:b8:72:2f:
e2:29:fb:54:d4:5d:46:53:39:e7:ab:4b:13:39:4c:
5e:b2:5d:f2:88:25:ed:fb:ec:7c:ba:25:5a:9f:72:
6f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F4:C6:C6:C1:E6:DD:09:29:90:F3:E5:DC:DB:5E:BC:A2:BA:A3:34
X509v3 Authority Key Identifier:
keyid:3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:80:55:d5:f2:d9:02:ff:21:87:8c:28:a6:aa:09:0b:d5:ec:
f9:76:f7:54:7b:aa:c2:0c:47:eb:7b:b4:ea:d3:20:7f:00:64:
31:2a:5c:3d:95:71:32:63:ab:a4:fd:f1:b4:01:e2:7d:5d:26:
ff:c7:c4:19:fd:f7:08:ef:ee:ff:7a:2d:8a:37:33:5d:4b:98:
d9:bb:c4:1b:db:4e:03:ad:bc:d1:e0:8a:a6:06:ac:ff:0f:de:
0f:96:9f:44:06:fd:93:c1:33:d0:e8:02:33:05:19:d5:3c:13:
e9:23:29:95:47:af:ce:47:e6:b2:9c:b8:b2:1b:87:00:0c:5c:
7f:f2:c8:aa:22:c2:85:86:c6:72:f2:e1:28:8a:5a:ad:2b:5d:
c9:c3:58:fa:ca:88:23:3a:ba:24:f2:e9:15:02:57:a2:35:c1:
e0:d6:19:6e:0e:0a:f1:94:e3:57:2f:1b:ca:1b:f4:6d:36:76:
99:43:3e:b0:89:f1:a0:70:31:7f:b4:d4:8f:c7:21:88:75:2c:
c6:49:86:2c:51:53:a7:a8:fd:c7:35:c5:1d:00:3b:5f:a9:6f:
e9:55:79:47:0a:58:aa:f4:9c:35:a5:79:05:ff:dd:17:82:90:
19:93:3d:8d:d1:11:a1:cb:c4:df:45:e4:96:a4:a8:98:e1:8a:
a6:7a:79:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZob4pylq8YEqBJabzJP6IGcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMzRiMDJlZGM3YzI4NzhmOTRjNTEwNGNhZmE4OTc4YWZi
Njc1MmQwHhcNMjUxMDI1MTUwMDI3WhcNMjUxMDI2MTUwMDI3WjAzMTEwLwYDVQQD
EyhjYmY0YzZjNmMxZTZkZDA5Mjk5MGYzZTVkY2RiNWViY2EyYmFhMzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5sICrLYtwfSDp61PUD8iAJCd4U9d
rLCga4bWU+2u/kwtdx3BugzYwKwCTPb1sd6wStA4h+FlG0d/Q5JX29tnc6WC3155
Q0H/YEOrZlbKCVz8t3nBl8aEjMCEcTUtEk+QSgCg+3PjwDXlLlXmxbEZ3fw47sAW
A2k21iqcMJ6NxNsZxhFH7c3eyls9oFAdgEpfzIofwV9RMm0qTEiMZrisNKe9jM2v
GIsGq2mDWNpsN5NOgTpvAPe/ghBKvH1wTXwFTAXqROCveru9d0+IVIR0vuI3FJ0a
tKkm0GWlIui4ci/iKftU1F1GUznnq0sTOUxesl3yiCXt++x8uiVan3JvWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMv0xsbB5t0JKZDz5dzbXryiuqM0MB8GA1UdIwQY
MBaAFD40sC7cfCh4+UxRBMr6iXivtnUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGpTd0x0eDhLSGo1VEZFRXl2cUplSy0yZFMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi80MjI1MmUtMDMyMS00ZGEyLTkyZjQt
MzVhMDI0MWE0MzAxLzEvUGpTd0x0eDhLSGo1VEZFRXl2cUplSy0yZFMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi80MjI1MmUtMDMyMS00ZGEyLTkyZjQtMzVhMDI0MWE0MzAx
LzEvUGpTd0x0eDhLSGo1VEZFRXl2cUplSy0yZFMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfYBV1fLZ
Av8hh4wopqoJC9Xs+Xb3VHuqwgxH63u06tMgfwBkMSpcPZVxMmOrpP3xtAHifV0m
/8fEGf33CO/u/3otijczXUuY2bvEG9tOA6280eCKpgas/w/eD5afRAb9k8Ez0OgC
MwUZ1TwT6SMplUevzkfmspy4shuHAAxcf/LIqiLChYbGcvLhKIparStdycNY+sqI
Izq6JPLpFQJXojXB4NYZbg4K8ZTjVy8byhv0bTZ2mUM+sInxoHAxf7TUj8chiHUs
xkmGLFFTp6j9xzXFHQA7X6lv6VV5RwpYqvScNaV5Bf/dF4KQGZM9jdERocvE30Xk
lqSomOGKpnp5WA==
-----END CERTIFICATE-----
Generated at Sat Oct 25 18:12:22 2025 by rpki-client