Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
File: PnFWq-5roji5BzFd-cVShlrc2ug.mft (raw, json)
Hash identifier: vace6kQQWOwMWE2Lm3kXEkdVuP02h3l3TnPyfG6qKDg=
Subject key identifier: 3F:36:37:01:D9:AD:20:96:64:79:EC:E0:CD:14:16:AE:66:4D:FF:60
Authority key identifier: 3E:71:56:AB:EE:6B:A2:38:B9:07:31:5D:F9:C5:52:86:5A:DC:DA:E8
Certificate issuer: /CN=3e7156abee6ba238b907315df9c552865adcdae8
Certificate serial: 019A0E2755DFD2B19B35730CD096319116E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
Manifest number: 095D
Signing time: Wed 22 Oct 2025 23:00:50 +0000
Manifest this update: Wed 22 Oct 2025 23:00:50 +0000
Manifest next update: Thu 23 Oct 2025 23:00:50 +0000
Files and hashes: 1: DRXIRPlz989IQESya6WStEPwwfI.roa (hash: vzHP7wdlF/pn8v84Pbfgox37vxRmFYAJNGZAwD+DkvA=)
2: PnFWq-5roji5BzFd-cVShlrc2ug.crl (hash: FEDxOkFnuyxOQaAOHGOWLTsGqe2ELcDjPg63BA3En7w=)
3: QWM4nrBr-pa9JzWD2Zz8wHHbmCU.roa (hash: VKweVNYicugh0mCYY3yIR2LnHnKsWIZPY+G4TQfXJ6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0e:27:55:df:d2:b1:9b:35:73:0c:d0:96:31:91:16:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e7156abee6ba238b907315df9c552865adcdae8
Validity
Not Before: Oct 22 23:00:50 2025 GMT
Not After : Oct 23 23:00:50 2025 GMT
Subject: CN=3f363701d9ad20966479ece0cd1416ae664dff60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:10:da:11:c8:ff:59:9d:14:a0:bf:9e:9a:28:
59:9e:96:74:7e:31:ea:a6:5e:3e:38:44:60:23:14:
55:d2:41:e3:59:98:a2:c3:71:c5:80:49:86:7a:f1:
6b:f8:b6:dc:e0:07:5c:97:19:9e:42:f6:f1:9f:bc:
04:f7:1d:b5:9e:63:0e:b5:e8:e5:e2:e2:74:ac:42:
42:48:19:0e:42:c8:d4:25:30:62:87:4b:0d:ac:a4:
56:36:8f:9b:24:55:27:d3:4e:ea:c0:05:bf:e8:6b:
5a:49:8f:8c:51:4c:5f:33:37:2d:51:2d:e3:7d:6e:
a2:a6:e2:e7:fa:d9:d2:6b:4d:c9:49:ef:e0:c0:cb:
98:ef:77:c7:9e:c8:36:5e:43:4c:8e:0a:76:7e:15:
99:7d:8c:f2:77:ff:38:ac:cd:e0:f3:3f:4a:99:e3:
49:0c:f9:3c:18:89:ef:1a:a1:c2:b1:a5:b5:e4:8d:
1a:9e:a3:78:c7:3b:3c:41:91:c4:eb:77:cf:58:34:
a1:72:b6:0a:e5:91:ad:ac:cf:33:2a:75:04:c3:55:
f7:cf:11:0a:78:90:e3:e9:e8:05:77:83:e6:e1:11:
f9:84:6f:a5:2a:e6:f4:53:b0:89:a1:b8:65:e3:96:
00:4f:b5:82:00:e3:54:0b:be:62:e7:f2:a1:e3:0e:
6f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:36:37:01:D9:AD:20:96:64:79:EC:E0:CD:14:16:AE:66:4D:FF:60
X509v3 Authority Key Identifier:
keyid:3E:71:56:AB:EE:6B:A2:38:B9:07:31:5D:F9:C5:52:86:5A:DC:DA:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b9:9d:42:25:47:12:1b:0b:f2:d0:0c:c0:2d:db:f7:1b:ee:
b2:87:81:fd:89:b6:bd:83:69:53:a9:b5:05:51:68:b4:6c:ec:
53:cd:49:04:ac:c2:e6:b6:5b:ec:dd:a5:13:b4:d2:db:85:95:
73:33:ba:3a:da:a1:d2:48:bf:fc:4f:2f:fb:6b:ce:f9:6b:7e:
7a:1c:30:cc:6c:c7:15:6c:2d:b6:c9:7f:e0:c3:c9:6f:c9:47:
aa:ec:54:7c:18:62:72:ae:50:b7:50:39:30:b5:dd:d5:37:d5:
83:2a:1e:bb:bb:1f:e5:32:88:c6:93:d0:38:69:43:2a:d3:3e:
d3:b9:e4:10:fd:c3:2e:b7:98:9c:5a:48:7b:fc:e5:d9:b5:59:
5b:33:59:9f:b2:ed:cb:7a:25:15:2f:6f:e9:a7:97:56:a9:1b:
4a:44:c5:b1:0b:ac:11:77:56:4e:65:62:65:b9:d6:99:16:1e:
e0:ff:59:3b:ac:ad:a2:0e:ea:a3:a3:f1:67:06:d1:3a:22:9d:
6b:df:bd:e2:b1:ae:54:41:af:09:ad:77:07:b6:38:1b:e5:d2:
91:8f:6f:0e:20:fa:fe:7c:ab:ea:76:3c:ae:22:f9:2c:7d:f6:
cf:9b:c6:37:0c:28:c0:20:8f:14:4f:86:1d:53:c4:0a:22:a1:
b4:f8:9b:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoOJ1Xf0rGbNXMM0JYxkRbkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNzE1NmFiZWU2YmEyMzhiOTA3MzE1ZGY5YzU1Mjg2NWFk
Y2RhZTgwHhcNMjUxMDIyMjMwMDUwWhcNMjUxMDIzMjMwMDUwWjAzMTEwLwYDVQQD
EygzZjM2MzcwMWQ5YWQyMDk2NjQ3OWVjZTBjZDE0MTZhZTY2NGRmZjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BDaEcj/WZ0UoL+emihZnpZ0fjHq
pl4+OERgIxRV0kHjWZiiw3HFgEmGevFr+Lbc4AdclxmeQvbxn7wE9x21nmMOtejl
4uJ0rEJCSBkOQsjUJTBih0sNrKRWNo+bJFUn007qwAW/6GtaSY+MUUxfMzctUS3j
fW6ipuLn+tnSa03JSe/gwMuY73fHnsg2XkNMjgp2fhWZfYzyd/84rM3g8z9KmeNJ
DPk8GInvGqHCsaW15I0anqN4xzs8QZHE63fPWDShcrYK5ZGtrM8zKnUEw1X3zxEK
eJDj6egFd4Pm4RH5hG+lKub0U7CJobhl45YAT7WCAONUC75i5/Kh4w5vQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD82NwHZrSCWZHns4M0UFq5mTf9gMB8GA1UdIwQY
MBaAFD5xVqvua6I4uQcxXfnFUoZa3NroMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG5GV3EtNXJvamk1QnpGZC1jVlNobHJjMnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9hNGEwZjctN2RiZC00YjAzLWI3Zjkt
NThmMmQ0NGZmMjgxLzEvUG5GV3EtNXJvamk1QnpGZC1jVlNobHJjMnVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9hNGEwZjctN2RiZC00YjAzLWI3ZjktNThmMmQ0NGZmMjgx
LzEvUG5GV3EtNXJvamk1QnpGZC1jVlNobHJjMnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcbmdQiVH
EhsL8tAMwC3b9xvusoeB/Ym2vYNpU6m1BVFotGzsU81JBKzC5rZb7N2lE7TS24WV
czO6Otqh0ki//E8v+2vO+Wt+ehwwzGzHFWwttsl/4MPJb8lHquxUfBhicq5Qt1A5
MLXd1TfVgyoeu7sf5TKIxpPQOGlDKtM+07nkEP3DLreYnFpIe/zl2bVZWzNZn7Lt
y3olFS9v6aeXVqkbSkTFsQusEXdWTmViZbnWmRYe4P9ZO6ytog7qo6PxZwbROiKd
a9+94rGuVEGvCa13B7Y4G+XSkY9vDiD6/nyr6nY8riL5LH32z5vGNwwowCCPFE+G
HVPECiKhtPibiA==
-----END CERTIFICATE-----
Generated at Thu Oct 23 04:58:02 2025 by rpki-client