Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
File: PD9FAh1us0CkKy5d0fv3IaGmbWE.mft (raw, json)
Hash identifier: 8EeBMoH0Kb9PA4uAKmMs6hJWu6h+Ah/EkChiQMeAcR4=
Subject key identifier: 56:F4:E8:7C:7F:58:C8:DF:EB:BC:6D:46:85:E6:13:74:3F:E3:BF:45
Authority key identifier: 3C:3F:45:02:1D:6E:B3:40:A4:2B:2E:5D:D1:FB:F7:21:A1:A6:6D:61
Certificate issuer: /CN=3c3f45021d6eb340a42b2e5dd1fbf721a1a66d61
Certificate serial: 0199353745734FD2C05A0A68D30480D001B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
Manifest number: 0D62
Signing time: Wed 10 Sep 2025 20:00:38 +0000
Manifest this update: Wed 10 Sep 2025 20:00:38 +0000
Manifest next update: Thu 11 Sep 2025 20:00:38 +0000
Files and hashes: 1: PD9FAh1us0CkKy5d0fv3IaGmbWE.crl (hash: VPz4NPweZBXpPy6277IQH1yY1QU1ytqvUvtNqb3edyk=)
2: x9hUxJfn47T_kDyiFQOIzJ-cz6A.roa (hash: xdaaD+GtntD/xfR79byZL40UTK4Nd3mN7SfVEUnzNx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:37:45:73:4f:d2:c0:5a:0a:68:d3:04:80:d0:01:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c3f45021d6eb340a42b2e5dd1fbf721a1a66d61
Validity
Not Before: Sep 10 20:00:38 2025 GMT
Not After : Sep 11 20:00:38 2025 GMT
Subject: CN=56f4e87c7f58c8dfebbc6d4685e613743fe3bf45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:df:f6:ca:05:81:84:b4:c8:68:8f:28:a4:63:
3d:a5:a1:bd:29:34:11:54:f0:ef:42:d5:fc:b0:25:
70:0d:46:c8:d2:99:f9:c1:17:87:30:48:4b:80:7c:
3a:b8:15:b3:16:00:19:15:17:b5:8a:89:5c:40:12:
1a:9b:af:22:7a:4f:9e:62:af:24:a6:2a:be:51:44:
1e:ec:ce:92:f6:33:95:02:ba:08:f5:2b:29:2c:ca:
f2:78:42:d4:9d:12:ca:c3:9b:4d:b6:a1:6a:a2:f2:
db:8e:fe:0a:81:c4:9b:af:0d:84:8b:36:0e:8f:35:
3d:c1:b3:0b:b7:ab:3c:12:97:1e:7b:ce:ab:4b:0f:
83:e3:19:c5:a0:05:22:45:a0:5b:24:f2:07:d6:43:
e3:03:88:17:0a:9e:49:b0:72:53:94:92:ed:ed:2e:
8d:25:f5:ea:5b:8e:07:2e:1e:18:3c:03:8c:9b:7b:
98:cf:d7:b9:59:7b:1a:24:0c:c5:65:b0:33:99:15:
2a:76:5d:7e:cd:bb:b2:76:b1:b6:0e:3b:e0:8d:20:
65:a2:3e:4e:8d:30:83:38:1c:7b:ba:d8:bd:0b:52:
58:6a:f1:ee:72:86:51:11:e6:2d:5b:56:8c:46:5d:
9a:1a:05:5d:9f:80:dd:50:37:06:2e:f5:e8:95:a7:
2a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F4:E8:7C:7F:58:C8:DF:EB:BC:6D:46:85:E6:13:74:3F:E3:BF:45
X509v3 Authority Key Identifier:
keyid:3C:3F:45:02:1D:6E:B3:40:A4:2B:2E:5D:D1:FB:F7:21:A1:A6:6D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:32:a8:a4:21:3d:ee:e5:79:97:c4:41:5a:69:13:de:a0:7f:
19:ec:9b:a0:b3:ac:02:cb:65:a4:6b:c6:52:d8:b6:99:22:26:
40:d0:70:f2:91:f7:11:96:f4:9d:3f:bf:5f:90:ab:82:98:d3:
6c:00:bb:0e:7b:e0:e1:0c:10:f3:f1:96:9d:5e:8b:77:4b:b0:
49:35:1b:bf:b9:59:50:d3:03:ce:a5:c1:09:09:90:45:a4:cb:
46:0d:d9:5e:77:60:3e:10:9f:af:31:16:8a:94:46:76:ce:96:
a1:95:4e:b2:73:08:de:b6:32:4b:43:a8:cc:b5:28:ac:f8:2e:
ba:2a:be:47:a3:fa:75:b1:bf:df:8a:95:ea:af:d5:6e:55:21:
4b:db:ce:7c:c5:f0:c8:46:82:ab:c6:2a:f7:64:e6:2d:8b:7f:
ca:7d:e2:e7:b9:da:a1:6b:a5:ac:97:7f:26:54:e4:10:76:34:
5b:db:a3:d0:ce:4b:ef:bb:87:78:cd:d2:e4:3d:95:01:d0:12:
86:e3:1c:1c:3b:a4:ab:a2:02:14:e6:a3:03:ca:87:31:8a:f6:
d7:de:65:f3:12:67:b5:d5:be:3b:9b:c7:92:e3:f3:da:4d:f7:
e3:3f:cd:55:47:11:78:bc:31:12:8c:f0:6e:ed:9f:4d:d7:c7:
77:03:2d:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk1N0VzT9LAWgpo0wSA0AG3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjM2Y0NTAyMWQ2ZWIzNDBhNDJiMmU1ZGQxZmJmNzIxYTFh
NjZkNjEwHhcNMjUwOTEwMjAwMDM4WhcNMjUwOTExMjAwMDM4WjAzMTEwLwYDVQQD
Eyg1NmY0ZTg3YzdmNThjOGRmZWJiYzZkNDY4NWU2MTM3NDNmZTNiZjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqN/2ygWBhLTIaI8opGM9paG9KTQR
VPDvQtX8sCVwDUbI0pn5wReHMEhLgHw6uBWzFgAZFRe1iolcQBIam68iek+eYq8k
piq+UUQe7M6S9jOVAroI9SspLMryeELUnRLKw5tNtqFqovLbjv4KgcSbrw2EizYO
jzU9wbMLt6s8Epcee86rSw+D4xnFoAUiRaBbJPIH1kPjA4gXCp5JsHJTlJLt7S6N
JfXqW44HLh4YPAOMm3uYz9e5WXsaJAzFZbAzmRUqdl1+zbuydrG2DjvgjSBloj5O
jTCDOBx7uti9C1JYavHucoZREeYtW1aMRl2aGgVdn4DdUDcGLvXolacqJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFb06Hx/WMjf67xtRoXmE3Q/479FMB8GA1UdIwQY
MBaAFDw/RQIdbrNApCsuXdH79yGhpm1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEQ5RkFoMXVzMENrS3k1ZDBmdjNJYUdtYldFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8wNTI1N2UtMWU2Ny00MTU4LThhZGIt
NDdkNmU0YmFlMmNmLzEvUEQ5RkFoMXVzMENrS3k1ZDBmdjNJYUdtYldFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8wNTI1N2UtMWU2Ny00MTU4LThhZGItNDdkNmU0YmFlMmNm
LzEvUEQ5RkFoMXVzMENrS3k1ZDBmdjNJYUdtYldFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIjKopCE9
7uV5l8RBWmkT3qB/GeyboLOsAstlpGvGUti2mSImQNBw8pH3EZb0nT+/X5CrgpjT
bAC7Dnvg4QwQ8/GWnV6Ld0uwSTUbv7lZUNMDzqXBCQmQRaTLRg3ZXndgPhCfrzEW
ipRGds6WoZVOsnMI3rYyS0OozLUorPguuiq+R6P6dbG/34qV6q/VblUhS9vOfMXw
yEaCq8Yq92TmLYt/yn3i57naoWulrJd/JlTkEHY0W9uj0M5L77uHeM3S5D2VAdAS
huMcHDukq6ICFOajA8qHMYr2195l8xJntdW+O5vHkuPz2k334z/NVUcReLwxEozw
bu2fTdfHdwMtcg==
-----END CERTIFICATE-----
Generated at Thu Sep 11 00:13:26 2025 by rpki-client