Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
File: PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft (raw, json)
Hash identifier: WrihJFFIfYmoRdHbcKAID2Wo6PPWP3/z/Glw0i0ev+0=
Subject key identifier: DE:4E:55:2F:2A:6F:51:17:A2:36:94:84:93:F2:AB:D0:1A:65:71:6D
Authority key identifier: 3D:C4:10:E3:F0:9B:EA:6A:BC:9D:D8:C6:FF:41:85:65:1B:0A:B8:67
Certificate issuer: /CN=3dc410e3f09bea6abc9dd8c6ff4185651b0ab867
Certificate serial: 019A1B06B814B37AB529D17284B7188C55B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
Manifest number: 1684
Signing time: Sat 25 Oct 2025 11:00:16 +0000
Manifest this update: Sat 25 Oct 2025 11:00:16 +0000
Manifest next update: Sun 26 Oct 2025 11:00:16 +0000
Files and hashes: 1: PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.crl (hash: TyUqGeRqxVPcXS6OwMYF31dMtvw5XVgHYhw3M9qhjPM=)
2: itPEMbOZFFR8e5L5AvpBnlFEedQ.roa (hash: pIQ9iWRr1eE7BBGNob9EZxPiOkZPJVC3FeL7vrrHIjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:06:b8:14:b3:7a:b5:29:d1:72:84:b7:18:8c:55:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc410e3f09bea6abc9dd8c6ff4185651b0ab867
Validity
Not Before: Oct 25 11:00:16 2025 GMT
Not After : Oct 26 11:00:16 2025 GMT
Subject: CN=de4e552f2a6f5117a236948493f2abd01a65716d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:91:8e:58:0d:e4:6f:cb:1d:7d:62:f1:33:ea:
6a:3b:67:9b:19:d6:31:ce:aa:d2:93:ca:1d:f6:7a:
ef:b5:d5:cf:d9:c7:32:f0:2d:1f:5e:48:46:3b:76:
7e:51:a9:05:93:3e:a4:d6:a5:c6:ae:30:c8:4b:5d:
6f:c6:9b:3f:a8:47:d9:01:b0:50:1c:21:c2:52:88:
e8:8c:e6:5d:e9:74:27:a7:c4:c3:3e:70:a9:74:95:
a5:f3:9d:78:1b:dd:83:a4:e7:c8:24:58:ab:a5:8a:
30:5e:fe:99:ed:ce:0e:40:81:6b:f9:5c:88:49:6a:
1a:81:e7:a3:85:91:1e:22:6e:96:d6:38:f3:73:d0:
7e:c2:2f:32:ae:8b:36:bc:fd:7a:c1:cc:08:a0:69:
06:31:43:21:b2:68:e4:85:8b:15:35:6b:7d:36:c0:
b2:18:8d:d9:7e:c0:1b:04:00:60:2c:96:b1:aa:f9:
30:86:de:ca:58:da:29:98:43:c0:7c:d9:4b:51:20:
a3:21:b3:16:87:61:ae:ce:1b:75:ff:0f:be:69:6d:
c6:bf:ec:2c:24:f8:ff:82:77:52:18:02:3d:a2:d9:
f6:48:dd:fd:95:d7:ea:c8:89:8c:74:40:1f:af:ca:
0a:a3:a1:c2:61:d8:ad:7f:7a:de:22:b0:5b:aa:70:
c2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4E:55:2F:2A:6F:51:17:A2:36:94:84:93:F2:AB:D0:1A:65:71:6D
X509v3 Authority Key Identifier:
keyid:3D:C4:10:E3:F0:9B:EA:6A:BC:9D:D8:C6:FF:41:85:65:1B:0A:B8:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:59:70:81:f2:d6:af:11:32:1b:6d:d2:30:5a:5b:02:aa:ed:
08:96:5e:3a:6f:7b:d4:98:72:d5:83:f6:b1:a5:27:e7:88:ca:
ef:67:07:c8:13:dc:36:76:54:7a:cf:c8:5e:3b:9d:a8:50:33:
34:88:f3:7c:ce:ea:c6:c3:34:5d:82:ca:69:09:c3:e7:ac:2b:
59:0c:a7:6d:1f:3e:6f:a1:a3:13:67:b0:05:e6:d0:2e:be:17:
eb:78:f5:6c:d2:1b:f8:ae:5e:80:02:a9:76:28:33:b8:2f:7e:
24:14:48:4b:6e:4a:1d:4a:6d:8c:db:1b:fc:18:93:78:64:32:
19:89:b0:f0:ac:37:24:92:0b:4f:5b:89:91:10:6f:3d:52:67:
a7:8e:cc:fa:2b:34:3a:2a:29:42:ee:ba:e5:4a:17:e6:5d:2d:
33:82:25:e6:36:8e:b0:bb:14:ca:c3:8d:43:8a:36:e7:03:90:
06:04:43:ab:98:22:d5:0d:fc:31:a4:23:91:d0:8d:e7:d7:58:
32:94:18:38:2a:66:f4:39:15:07:9c:08:4a:56:4b:ce:d5:b0:
fc:88:b0:83:da:c3:16:45:34:4c:15:f4:9c:44:68:de:77:80:
cb:45:5a:82:6b:42:cf:28:bf:e5:cd:8f:09:d0:99:c1:c6:b3:
85:63:34:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZobBrgUs3q1KdFyhLcYjFWzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYzQxMGUzZjA5YmVhNmFiYzlkZDhjNmZmNDE4NTY1MWIw
YWI4NjcwHhcNMjUxMDI1MTEwMDE2WhcNMjUxMDI2MTEwMDE2WjAzMTEwLwYDVQQD
EyhkZTRlNTUyZjJhNmY1MTE3YTIzNjk0ODQ5M2YyYWJkMDFhNjU3MTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJGOWA3kb8sdfWLxM+pqO2ebGdYx
zqrSk8od9nrvtdXP2ccy8C0fXkhGO3Z+UakFkz6k1qXGrjDIS11vxps/qEfZAbBQ
HCHCUojojOZd6XQnp8TDPnCpdJWl8514G92DpOfIJFirpYowXv6Z7c4OQIFr+VyI
SWoageejhZEeIm6W1jjzc9B+wi8yros2vP16wcwIoGkGMUMhsmjkhYsVNWt9NsCy
GI3ZfsAbBABgLJaxqvkwht7KWNopmEPAfNlLUSCjIbMWh2Guzht1/w++aW3Gv+ws
JPj/gndSGAI9otn2SN39ldfqyImMdEAfr8oKo6HCYditf3reIrBbqnDCNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5OVS8qb1EXojaUhJPyq9AaZXFtMB8GA1UdIwQY
MBaAFD3EEOPwm+pqvJ3Yxv9BhWUbCrhnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGNRUTRfQ2I2bXE4bmRqR18wR0ZaUnNLdUdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8wNDI5NTEtNTRkOC00NjljLWJiYTEt
YTY1NDZjZDlkYTk0LzEvUGNRUTRfQ2I2bXE4bmRqR18wR0ZaUnNLdUdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8wNDI5NTEtNTRkOC00NjljLWJiYTEtYTY1NDZjZDlkYTk0
LzEvUGNRUTRfQ2I2bXE4bmRqR18wR0ZaUnNLdUdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZVlwgfLW
rxEyG23SMFpbAqrtCJZeOm971Jhy1YP2saUn54jK72cHyBPcNnZUes/IXjudqFAz
NIjzfM7qxsM0XYLKaQnD56wrWQynbR8+b6GjE2ewBebQLr4X63j1bNIb+K5egAKp
digzuC9+JBRIS25KHUptjNsb/BiTeGQyGYmw8Kw3JJILT1uJkRBvPVJnp47M+is0
OiopQu665UoX5l0tM4Il5jaOsLsUysONQ4o25wOQBgRDq5gi1Q38MaQjkdCN59dY
MpQYOCpm9DkVB5wISlZLztWw/Iiwg9rDFkU0TBX0nERo3neAy0VagmtCzyi/5c2P
CdCZwcazhWM0FA==
-----END CERTIFICATE-----
Generated at Sat Oct 25 13:35:53 2025 by rpki-client