Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
File: PetYF7vn5aHF-xMFUbhKtIgBb5I.mft (raw, json)
Hash identifier: 3/Nv5p6s/rySAq52hFTGhvK8A5J2/GpxyopHs6W3sO0=
Subject key identifier: 8A:91:FA:F1:70:8F:D7:9E:DC:15:3B:9D:A7:DE:C9:18:53:E2:E0:46
Authority key identifier: 3D:EB:58:17:BB:E7:E5:A1:C5:FB:13:05:51:B8:4A:B4:88:01:6F:92
Certificate issuer: /CN=3deb5817bbe7e5a1c5fb130551b84ab488016f92
Certificate serial: 019921B1F64E2075D850F6CE8F5A362647F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
Manifest number: 02D2
Signing time: Sun 07 Sep 2025 01:02:14 +0000
Manifest this update: Sun 07 Sep 2025 01:02:14 +0000
Manifest next update: Mon 08 Sep 2025 01:02:14 +0000
Files and hashes: 1: KWPAsF0vFOD6kPsFU3LMV-L0lSI.roa (hash: VQvFUbsDDfVrBdoP9kicGC0pG5uJaNDDod3tQ4qnm70=)
2: PetYF7vn5aHF-xMFUbhKtIgBb5I.crl (hash: Q2o3Jt+qVJwwcHfdb9byPOoxzDvS1+Xh8EphXAkrgyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:f6:4e:20:75:d8:50:f6:ce:8f:5a:36:26:47:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3deb5817bbe7e5a1c5fb130551b84ab488016f92
Validity
Not Before: Sep 7 01:02:14 2025 GMT
Not After : Sep 8 01:02:14 2025 GMT
Subject: CN=8a91faf1708fd79edc153b9da7dec91853e2e046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0f:41:08:ea:a1:59:f4:2b:b4:17:9b:66:8c:
2f:f5:b1:ab:bf:d5:9a:73:80:1d:a5:8b:c7:dd:d1:
7b:89:c0:c1:35:94:ec:d6:06:da:2f:60:24:83:e7:
03:55:f2:49:39:77:78:3c:35:20:25:db:d3:56:36:
af:65:7d:cd:49:76:4e:ab:e6:d5:fb:7a:a1:ec:64:
1e:4c:63:bb:a7:70:31:4f:34:1f:e7:dd:4d:2f:5d:
d0:1d:db:e0:29:e1:fe:79:12:c6:54:2e:4a:12:c6:
32:30:b8:91:ce:82:2d:df:f0:aa:db:c8:aa:d1:42:
1c:43:7a:b9:31:dc:a2:b9:92:1b:6b:8c:79:df:1d:
be:79:0a:8e:1e:be:98:80:cc:11:f6:c9:8b:a1:6e:
ca:1f:7e:a0:3a:71:59:6f:dd:a1:0b:89:a0:72:ec:
2a:da:9a:3a:5e:f3:d2:f4:8e:91:54:fe:1b:ab:2d:
f5:9d:02:44:f9:0c:72:6c:81:f2:ec:b9:d8:4e:22:
21:77:9f:ba:ba:47:46:c4:93:bd:1a:39:3f:21:e5:
61:25:f9:85:e5:38:ef:8f:68:15:89:7e:3c:9e:97:
fc:f5:34:4d:91:6e:5d:0f:78:97:31:72:4f:6e:a6:
9c:cf:97:8e:6f:9b:0a:60:a1:e9:04:1e:89:ea:a1:
a9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:91:FA:F1:70:8F:D7:9E:DC:15:3B:9D:A7:DE:C9:18:53:E2:E0:46
X509v3 Authority Key Identifier:
keyid:3D:EB:58:17:BB:E7:E5:A1:C5:FB:13:05:51:B8:4A:B4:88:01:6F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:fb:d9:e4:de:97:0a:e3:eb:86:d9:bf:b1:b0:14:fc:24:89:
17:0d:a5:e8:f8:b5:8a:9b:ed:8c:8d:c3:36:f5:88:4f:77:a9:
ad:8b:e9:be:9e:db:90:ae:ee:92:23:b7:18:01:65:ba:46:e3:
f1:e4:7f:98:c3:22:48:e6:75:2d:81:fe:de:6a:65:a2:dd:c9:
68:33:5b:42:8d:de:a6:fe:3b:53:f1:a1:00:a0:86:d0:42:df:
1e:cd:17:01:66:ec:46:7e:32:52:31:48:1a:2e:ff:84:4e:07:
3f:62:8d:21:c5:04:c4:b3:19:95:f5:2f:5e:2b:0a:94:9b:8b:
2c:d0:af:e5:59:f9:0c:8f:5e:e0:2a:90:8b:4f:7a:0e:70:58:
54:9f:a5:c6:7a:07:bf:b0:dc:d5:a4:ef:28:91:48:a4:f8:c7:
2b:b7:a1:39:80:56:70:33:6d:67:69:49:0c:4f:56:d8:c4:b0:
a3:89:df:b0:02:d4:cd:e4:24:57:80:40:cc:42:83:8a:b3:6b:
c9:b2:af:7b:55:cb:85:9f:7d:fe:a3:05:e1:fc:78:d4:83:58:
05:17:1b:1c:a7:91:e2:91:73:40:1e:e1:77:b9:c9:b2:3e:c3:
fc:52:6c:59:a1:1e:9f:e9:4e:21:65:f7:e2:71:63:ba:53:04:
bb:91:cf:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsfZOIHXYUPbOj1o2Jkf5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkZWI1ODE3YmJlN2U1YTFjNWZiMTMwNTUxYjg0YWI0ODgw
MTZmOTIwHhcNMjUwOTA3MDEwMjE0WhcNMjUwOTA4MDEwMjE0WjAzMTEwLwYDVQQD
Eyg4YTkxZmFmMTcwOGZkNzllZGMxNTNiOWRhN2RlYzkxODUzZTJlMDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ9BCOqhWfQrtBebZowv9bGrv9Wa
c4AdpYvH3dF7icDBNZTs1gbaL2Akg+cDVfJJOXd4PDUgJdvTVjavZX3NSXZOq+bV
+3qh7GQeTGO7p3AxTzQf591NL13QHdvgKeH+eRLGVC5KEsYyMLiRzoIt3/Cq28iq
0UIcQ3q5MdyiuZIba4x53x2+eQqOHr6YgMwR9smLoW7KH36gOnFZb92hC4mgcuwq
2po6XvPS9I6RVP4bqy31nQJE+QxybIHy7LnYTiIhd5+6ukdGxJO9Gjk/IeVhJfmF
5Tjvj2gViX48npf89TRNkW5dD3iXMXJPbqacz5eOb5sKYKHpBB6J6qGpaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqR+vFwj9ee3BU7nafeyRhT4uBGMB8GA1UdIwQY
MBaAFD3rWBe75+WhxfsTBVG4SrSIAW+SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGV0WUY3dm41YUhGLXhNRlViaEt0SWdCYjVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wZTQ5YTEtNzNhOS00NTgxLWI4OGMt
ZjEwNDg2ZTYwYTUzLzEvUGV0WUY3dm41YUhGLXhNRlViaEt0SWdCYjVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8wZTQ5YTEtNzNhOS00NTgxLWI4OGMtZjEwNDg2ZTYwYTUz
LzEvUGV0WUY3dm41YUhGLXhNRlViaEt0SWdCYjVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIvvZ5N6X
CuPrhtm/sbAU/CSJFw2l6Pi1ipvtjI3DNvWIT3eprYvpvp7bkK7ukiO3GAFlukbj
8eR/mMMiSOZ1LYH+3mplot3JaDNbQo3epv47U/GhAKCG0ELfHs0XAWbsRn4yUjFI
Gi7/hE4HP2KNIcUExLMZlfUvXisKlJuLLNCv5Vn5DI9e4CqQi096DnBYVJ+lxnoH
v7Dc1aTvKJFIpPjHK7ehOYBWcDNtZ2lJDE9W2MSwo4nfsALUzeQkV4BAzEKDirNr
ybKve1XLhZ99/qMF4fx41INYBRcbHKeR4pFzQB7hd7nJsj7D/FJsWaEen+lOIWX3
4nFjulMEu5HP/w==
-----END CERTIFICATE-----
Generated at Sun Sep 7 09:58:25 2025 by rpki-client