Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.mft
File: pQzTuftkZJFa0NN2CTTAGCiJ8fs.mft (raw, json)
Hash identifier: aTXbgss1YI0DGCTLIvukH9rCLYRpcOJoF68HKx9fNTM=
Subject key identifier: 9C:A6:90:0E:CF:05:AF:1B:16:12:E6:A7:54:14:65:B8:9D:2D:4A:2E
Authority key identifier: A5:0C:D3:B9:FB:64:64:91:5A:D0:D3:76:09:34:C0:18:28:89:F1:FB
Certificate issuer: /CN=a50cd3b9fb6464915ad0d3760934c0182889f1fb
Certificate serial: 019A198639C85EFD9CC767DCAFC00185DF4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQzTuftkZJFa0NN2CTTAGCiJ8fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.mft
Manifest number: 0B84
Signing time: Sat 25 Oct 2025 04:00:18 +0000
Manifest this update: Sat 25 Oct 2025 04:00:18 +0000
Manifest next update: Sun 26 Oct 2025 04:00:18 +0000
Files and hashes: 1: LPRtA19ISdoMAcOg5dTdVh6L9Jk.roa (hash: yfplS3KyTgY8se7AVlwzcVLsAsein115ckLeaHyCF6w=)
2: pQzTuftkZJFa0NN2CTTAGCiJ8fs.crl (hash: oPcsXWGYYHWugEYtTtMyqta67vrgyU2g4x3hDg+zank=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQzTuftkZJFa0NN2CTTAGCiJ8fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:86:39:c8:5e:fd:9c:c7:67:dc:af:c0:01:85:df:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a50cd3b9fb6464915ad0d3760934c0182889f1fb
Validity
Not Before: Oct 25 04:00:18 2025 GMT
Not After : Oct 26 04:00:18 2025 GMT
Subject: CN=9ca6900ecf05af1b1612e6a7541465b89d2d4a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:44:1d:9a:df:c3:90:e0:f0:df:38:38:5f:36:
e6:cc:60:25:e3:4d:0e:84:ab:75:ab:05:d5:b8:ba:
11:23:4e:0b:9d:a9:24:8e:4c:7c:b2:65:87:07:9f:
e4:2e:fd:6e:77:46:a3:be:ad:0f:82:16:28:f0:25:
9c:bc:04:24:d6:5c:cb:e7:a8:e3:de:26:c6:dc:93:
3b:00:f3:19:27:8c:f9:a1:d9:05:fc:e3:d4:9c:16:
61:8d:57:92:e0:0f:fd:6f:d2:3c:b3:db:bb:92:58:
2f:8a:a4:7b:ff:a4:e1:8b:cd:c3:e7:b7:09:ad:2a:
75:37:cd:6b:a6:6b:44:2f:c4:4f:61:0f:a6:42:6f:
4b:6c:9a:e1:1e:bc:fd:c6:76:0a:f6:05:0c:74:95:
96:4c:13:b4:58:fb:32:29:77:a4:2a:8a:9d:b0:46:
69:45:dc:0e:4d:6a:de:7e:a7:1e:ef:d2:fa:5d:5e:
80:0f:17:e4:47:2c:14:b8:e9:d5:b8:4d:b2:99:02:
e4:b2:9d:5b:02:5c:ba:68:9c:1e:1c:cf:c8:2c:b1:
7c:ad:47:d6:f1:7c:ea:97:b0:f7:8f:eb:8a:4b:21:
d4:8b:1d:8a:d0:95:1f:73:b6:12:e4:0d:08:7b:6d:
e8:79:de:8e:4e:71:e2:89:69:7e:28:3a:ed:71:0e:
93:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A6:90:0E:CF:05:AF:1B:16:12:E6:A7:54:14:65:B8:9D:2D:4A:2E
X509v3 Authority Key Identifier:
keyid:A5:0C:D3:B9:FB:64:64:91:5A:D0:D3:76:09:34:C0:18:28:89:F1:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQzTuftkZJFa0NN2CTTAGCiJ8fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:49:30:53:90:1c:11:3f:23:c9:ac:6c:e6:a1:22:b6:65:07:
0e:1e:5a:1c:ad:11:51:ed:25:7f:f7:0d:d3:75:28:7d:d9:b0:
fc:6b:8a:3d:a0:5e:8b:1e:e4:c5:8e:e4:e5:2d:cf:8b:6d:c0:
dd:67:7b:ac:06:86:56:e1:0b:ed:35:19:47:a4:21:d0:40:1c:
d2:f7:79:76:0b:73:dd:ee:10:b6:8f:ba:b6:b8:1e:8f:9f:ab:
13:7c:09:61:5e:e5:a8:a0:63:1e:6b:76:6f:93:c1:0e:64:1a:
41:de:01:40:9d:c7:a7:59:1c:50:36:5f:f8:0a:9c:3b:b5:b1:
45:1e:17:d0:ec:4c:2c:94:5a:25:90:ce:2d:24:14:dd:e2:30:
5f:f9:14:3b:89:dc:12:2f:8a:78:ef:12:bb:ab:47:46:8e:1b:
17:8a:c9:91:6e:83:37:bc:8e:4a:b7:18:b9:32:b9:f7:66:95:
36:9f:db:51:5d:dc:11:ae:69:98:a7:b2:44:f8:0e:c9:54:3b:
ee:75:7b:ec:eb:c3:38:ca:aa:f9:0b:ec:15:83:85:5b:9c:9c:
ee:4e:c5:93:d9:95:03:d9:2b:3a:dc:e6:4f:9d:d0:1c:65:6e:
07:c8:23:e3:36:5d:e9:b3:1f:85:9a:5e:f4:bc:bc:37:99:a0:
e5:cf:ab:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoZhjnIXv2cx2fcr8ABhd9PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MGNkM2I5ZmI2NDY0OTE1YWQwZDM3NjA5MzRjMDE4Mjg4
OWYxZmIwHhcNMjUxMDI1MDQwMDE4WhcNMjUxMDI2MDQwMDE4WjAzMTEwLwYDVQQD
Eyg5Y2E2OTAwZWNmMDVhZjFiMTYxMmU2YTc1NDE0NjViODlkMmQ0YTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkQdmt/DkODw3zg4XzbmzGAl400O
hKt1qwXVuLoRI04Lnakkjkx8smWHB5/kLv1ud0ajvq0PghYo8CWcvAQk1lzL56jj
3ibG3JM7APMZJ4z5odkF/OPUnBZhjVeS4A/9b9I8s9u7klgviqR7/6Thi83D57cJ
rSp1N81rpmtEL8RPYQ+mQm9LbJrhHrz9xnYK9gUMdJWWTBO0WPsyKXekKoqdsEZp
RdwOTWrefqce79L6XV6ADxfkRywUuOnVuE2ymQLksp1bAly6aJweHM/ILLF8rUfW
8Xzql7D3j+uKSyHUix2K0JUfc7YS5A0Ie23oed6OTnHiiWl+KDrtcQ6TLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJymkA7PBa8bFhLmp1QUZbidLUouMB8GA1UdIwQY
MBaAFKUM07n7ZGSRWtDTdgk0wBgoifH7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFF6VHVmdGtaSkZhME5OMkNUVEFHQ2lKOGZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8zYzkyZmEtYzNkNS00YTM2LTllMTct
MzdlOWU4NmE5Mjc5LzEvcFF6VHVmdGtaSkZhME5OMkNUVEFHQ2lKOGZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8zYzkyZmEtYzNkNS00YTM2LTllMTctMzdlOWU4NmE5Mjc5
LzEvcFF6VHVmdGtaSkZhME5OMkNUVEFHQ2lKOGZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI0kwU5Ac
ET8jyaxs5qEitmUHDh5aHK0RUe0lf/cN03Uofdmw/GuKPaBeix7kxY7k5S3Pi23A
3Wd7rAaGVuEL7TUZR6Qh0EAc0vd5dgtz3e4Qto+6trgej5+rE3wJYV7lqKBjHmt2
b5PBDmQaQd4BQJ3Hp1kcUDZf+AqcO7WxRR4X0OxMLJRaJZDOLSQU3eIwX/kUO4nc
Ei+KeO8Su6tHRo4bF4rJkW6DN7yOSrcYuTK592aVNp/bUV3cEa5pmKeyRPgOyVQ7
7nV77OvDOMqq+QvsFYOFW5yc7k7Fk9mVA9krOtzmT53QHGVuB8gj4zZd6bMfhZpe
9Ly8N5mg5c+rcQ==
-----END CERTIFICATE-----
Generated at Sat Oct 25 12:33:33 2025 by rpki-client