Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/27eba1-3ea1-4191-9699-9f004101ce4c/1/PpeXKwFXszTha_kfKifuDi3BOag.mft
File: PpeXKwFXszTha_kfKifuDi3BOag.mft (raw, json)
Hash identifier: NDYdBs9bmer7lAKigEqfJzuC8g8S3BLr47eMtquzsOo=
Subject key identifier: A0:9D:BF:60:40:1B:83:C0:9B:23:E0:1C:C1:08:62:32:9A:3E:30:AF
Authority key identifier: 3E:97:97:2B:01:57:B3:34:E1:6B:F9:1F:2A:27:EE:0E:2D:C1:39:A8
Certificate issuer: /CN=3e97972b0157b334e16bf91f2a27ee0e2dc139a8
Certificate serial: 019A1FBF388B95A57E856B7895030E415892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PpeXKwFXszTha_kfKifuDi3BOag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/27eba1-3ea1-4191-9699-9f004101ce4c/1/PpeXKwFXszTha_kfKifuDi3BOag.mft
Manifest number: 0362
Signing time: Sun 26 Oct 2025 09:00:16 +0000
Manifest this update: Sun 26 Oct 2025 09:00:16 +0000
Manifest next update: Mon 27 Oct 2025 09:00:16 +0000
Files and hashes: 1: PpeXKwFXszTha_kfKifuDi3BOag.crl (hash: gcB4JN3hFLyPPy/S/bKmHpkbq7hRIIhsqJPW70TsEPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/27eba1-3ea1-4191-9699-9f004101ce4c/1/PpeXKwFXszTha_kfKifuDi3BOag.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/27eba1-3ea1-4191-9699-9f004101ce4c/1/PpeXKwFXszTha_kfKifuDi3BOag.mft
rsync://rpki.ripe.net/repository/DEFAULT/PpeXKwFXszTha_kfKifuDi3BOag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:bf:38:8b:95:a5:7e:85:6b:78:95:03:0e:41:58:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e97972b0157b334e16bf91f2a27ee0e2dc139a8
Validity
Not Before: Oct 26 09:00:16 2025 GMT
Not After : Oct 27 09:00:16 2025 GMT
Subject: CN=a09dbf60401b83c09b23e01cc10862329a3e30af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c3:28:d0:f9:fb:d5:30:09:db:42:2f:8b:07:
4e:3b:ba:56:5e:dd:7f:ef:fc:b3:fe:ae:73:9b:d7:
74:44:20:81:04:c4:1f:45:bb:50:ca:f3:df:75:64:
cb:5c:96:0d:b7:a0:82:5a:54:8d:41:35:9a:f3:38:
b1:7b:9c:f9:98:8e:fb:9c:33:8c:92:b8:14:51:1b:
c5:1e:18:2f:b5:f5:f1:f7:a2:0f:35:17:29:71:5e:
61:92:9f:f3:36:40:d6:a8:81:dd:80:82:95:3f:36:
44:b3:44:06:03:4f:8f:4f:99:3b:b2:2d:2c:63:86:
14:21:2b:a6:62:9a:a6:69:20:96:b7:a0:3b:85:d6:
36:cf:47:5c:b3:40:2c:2e:79:7d:0b:f4:1b:e4:88:
30:8b:40:e7:18:3c:1d:35:2d:6f:f6:ec:50:87:10:
14:a0:3e:ab:e5:11:90:c0:40:19:0d:26:8b:8c:9b:
36:fd:d2:22:f3:9d:0d:3f:31:e8:ca:eb:47:98:3e:
92:bf:21:50:99:4d:e7:b8:27:66:f9:a4:05:07:20:
b2:1f:03:35:e0:33:51:a7:af:26:a0:8f:09:03:8c:
35:3f:62:11:45:41:e6:03:60:33:1f:e4:fb:c1:94:
55:e6:9f:e0:8a:f0:2f:15:2b:dc:d4:26:45:5e:bc:
4d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9D:BF:60:40:1B:83:C0:9B:23:E0:1C:C1:08:62:32:9A:3E:30:AF
X509v3 Authority Key Identifier:
keyid:3E:97:97:2B:01:57:B3:34:E1:6B:F9:1F:2A:27:EE:0E:2D:C1:39:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PpeXKwFXszTha_kfKifuDi3BOag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/27eba1-3ea1-4191-9699-9f004101ce4c/1/PpeXKwFXszTha_kfKifuDi3BOag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/27eba1-3ea1-4191-9699-9f004101ce4c/1/PpeXKwFXszTha_kfKifuDi3BOag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e4:97:11:4e:a9:90:7c:5a:c2:a3:1c:e5:ba:a5:fa:15:80:
5a:d0:7d:45:ca:9e:35:26:db:f4:f0:46:83:39:63:7b:b7:0f:
04:42:8e:32:cc:42:b6:7d:20:ab:4e:46:6c:91:0a:fa:6c:87:
5d:ff:10:b7:47:8e:fd:aa:f1:1e:f2:83:3c:5c:c3:d5:dd:fa:
65:80:ff:ee:38:71:99:a4:e4:5d:1d:d3:27:74:3a:87:39:bc:
15:98:c5:80:2a:bc:d5:18:bd:f7:cc:39:99:5e:19:43:ac:e4:
be:a4:e9:82:ed:18:c5:da:fd:29:11:07:f1:d2:44:9b:20:2c:
e0:68:b6:0f:da:bb:af:79:d9:f4:77:58:53:c1:f0:ee:d7:3a:
c6:8a:dd:88:88:a5:9d:78:58:f9:b7:c7:3b:43:55:5d:77:42:
07:4b:c1:28:32:f0:2b:d9:38:4d:cb:c0:3d:7f:e6:5c:a1:90:
d7:bb:c1:d2:fe:eb:90:ab:27:1b:dd:3f:f1:ee:cb:bf:5f:80:
c8:db:83:c1:9f:1d:52:fd:f7:aa:77:93:52:b1:c7:52:36:69:
1d:48:5f:ed:0a:22:58:07:1e:02:c3:5a:c8:0d:5d:5e:58:3a:
2b:f0:7f:e8:e5:06:70:b8:bc:cb:05:17:21:c0:1d:53:6e:91:
dd:8e:4b:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZofvziLlaV+hWt4lQMOQViSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlOTc5NzJiMDE1N2IzMzRlMTZiZjkxZjJhMjdlZTBlMmRj
MTM5YTgwHhcNMjUxMDI2MDkwMDE2WhcNMjUxMDI3MDkwMDE2WjAzMTEwLwYDVQQD
EyhhMDlkYmY2MDQwMWI4M2MwOWIyM2UwMWNjMTA4NjIzMjlhM2UzMGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMMo0Pn71TAJ20IviwdOO7pWXt1/
7/yz/q5zm9d0RCCBBMQfRbtQyvPfdWTLXJYNt6CCWlSNQTWa8zixe5z5mI77nDOM
krgUURvFHhgvtfXx96IPNRcpcV5hkp/zNkDWqIHdgIKVPzZEs0QGA0+PT5k7si0s
Y4YUISumYpqmaSCWt6A7hdY2z0dcs0AsLnl9C/Qb5Igwi0DnGDwdNS1v9uxQhxAU
oD6r5RGQwEAZDSaLjJs2/dIi850NPzHoyutHmD6SvyFQmU3nuCdm+aQFByCyHwM1
4DNRp68moI8JA4w1P2IRRUHmA2AzH+T7wZRV5p/givAvFSvc1CZFXrxNnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCdv2BAG4PAmyPgHMEIYjKaPjCvMB8GA1UdIwQY
MBaAFD6XlysBV7M04Wv5Hyon7g4twTmoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHBlWEt3RlhzelRoYV9rZktpZnVEaTNCT2FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yN2ViYTEtM2VhMS00MTkxLTk2OTkt
OWYwMDQxMDFjZTRjLzEvUHBlWEt3RlhzelRoYV9rZktpZnVEaTNCT2FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8yN2ViYTEtM2VhMS00MTkxLTk2OTktOWYwMDQxMDFjZTRj
LzEvUHBlWEt3RlhzelRoYV9rZktpZnVEaTNCT2FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaOSXEU6p
kHxawqMc5bql+hWAWtB9RcqeNSbb9PBGgzlje7cPBEKOMsxCtn0gq05GbJEK+myH
Xf8Qt0eO/arxHvKDPFzD1d36ZYD/7jhxmaTkXR3TJ3Q6hzm8FZjFgCq81Ri998w5
mV4ZQ6zkvqTpgu0Yxdr9KREH8dJEmyAs4Gi2D9q7r3nZ9HdYU8Hw7tc6xordiIil
nXhY+bfHO0NVXXdCB0vBKDLwK9k4TcvAPX/mXKGQ17vB0v7rkKsnG90/8e7Lv1+A
yNuDwZ8dUv33qneTUrHHUjZpHUhf7QoiWAceAsNayA1dXlg6K/B/6OUGcLi8ywUX
IcAdU26R3Y5LfA==
-----END CERTIFICATE-----
Generated at Sun Oct 26 10:55:58 2025 by rpki-client