Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft
File: pPP3bj7O8kl-ET6ju664U_YvWP4.mft (raw, json)
Hash identifier: iwBui+efISRN6xzQPJhBoydTv0BMkNdcePYz3ulLF7Y=
Subject key identifier: FA:9E:5B:6E:EE:5D:21:54:BB:7A:78:83:BC:E7:A3:63:7F:A0:10:FA
Authority key identifier: A4:F3:F7:6E:3E:CE:F2:49:7E:11:3E:A3:BB:AE:B8:53:F6:2F:58:FE
Certificate issuer: /CN=a4f3f76e3ecef2497e113ea3bbaeb853f62f58fe
Certificate serial: 019A1D9A1A511DEE23C57920A0035861BF65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft
Manifest number: 0D88
Signing time: Sat 25 Oct 2025 23:00:29 +0000
Manifest this update: Sat 25 Oct 2025 23:00:29 +0000
Manifest next update: Sun 26 Oct 2025 23:00:29 +0000
Files and hashes: 1: 66ywR3ba4enexaVdWoqndnOvp4U.roa (hash: Qkz3r6su/bj0dLkhbVaX1i/95TsjjuS65tg9qxOjli4=)
2: pPP3bj7O8kl-ET6ju664U_YvWP4.crl (hash: gVlXtLECQXrzJCtj2Vb/gPFVZwff0XS+3fr1/8x259o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:9a:1a:51:1d:ee:23:c5:79:20:a0:03:58:61:bf:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f3f76e3ecef2497e113ea3bbaeb853f62f58fe
Validity
Not Before: Oct 25 23:00:29 2025 GMT
Not After : Oct 26 23:00:29 2025 GMT
Subject: CN=fa9e5b6eee5d2154bb7a7883bce7a3637fa010fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:95:72:4f:d2:e0:40:da:68:6b:a6:9d:39:cf:
58:41:b9:2c:1e:7b:df:c5:0c:01:ed:d2:4d:de:99:
84:6a:4d:f2:f2:36:50:c0:cb:29:6d:ff:ed:b7:de:
60:ed:97:a2:8a:dc:01:d4:20:e7:d4:29:e4:94:b0:
9b:6e:c9:f5:d6:58:a0:13:e6:05:95:00:d6:8a:2d:
8d:2a:40:14:73:1a:41:27:04:5a:5c:43:f1:0b:a9:
63:01:9f:05:90:ff:1c:97:00:ee:40:f2:4a:d9:55:
1e:37:d2:8a:45:5e:ea:cd:a9:8a:86:6d:4f:e2:86:
54:b1:de:fc:35:f7:3f:77:18:11:bf:94:e8:81:b3:
47:61:fe:a4:7c:ef:42:31:ed:9a:48:2f:01:62:af:
93:f2:73:58:98:bc:97:85:e0:ad:d8:7f:9c:3c:2f:
fd:0e:e1:58:01:14:ef:51:dd:1f:e8:0c:b9:d0:50:
a3:f8:8e:97:22:6f:0e:f0:c6:77:d2:12:1c:ae:6b:
02:4b:01:1e:99:ee:7a:72:a0:d9:37:f8:1e:88:35:
2d:44:fd:83:65:85:82:1f:94:0b:d6:fb:96:da:b6:
39:1d:5a:ff:d1:82:8c:6c:f7:b8:49:8c:ac:83:ef:
a3:a6:49:c0:11:47:03:06:7e:b7:30:33:60:01:b3:
14:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9E:5B:6E:EE:5D:21:54:BB:7A:78:83:BC:E7:A3:63:7F:A0:10:FA
X509v3 Authority Key Identifier:
keyid:A4:F3:F7:6E:3E:CE:F2:49:7E:11:3E:A3:BB:AE:B8:53:F6:2F:58:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f7:92:40:8d:bb:9a:e9:68:e7:de:4f:dd:5f:cf:69:14:75:
9d:92:05:3b:0e:53:0a:1b:4d:05:a6:d7:df:f7:42:f3:39:b6:
71:89:ab:ea:e4:3c:28:cf:94:b0:48:05:51:13:5a:74:18:a1:
1e:c6:db:e4:b2:04:30:48:0c:47:b7:cc:de:3c:a4:47:f3:09:
99:6f:a2:f8:58:8f:c0:52:a2:5c:d8:31:5f:28:53:cf:a5:dc:
84:f7:42:65:85:e1:cc:41:32:32:a4:b3:57:bc:27:4e:5a:eb:
d6:04:44:5b:e3:ad:1a:f0:0c:aa:4b:06:98:11:d6:b2:8e:92:
4d:c7:4c:f1:a7:5e:bc:f0:54:55:47:55:42:21:55:a8:a5:9e:
7b:6f:02:83:ee:7c:9d:2b:d4:84:21:ef:19:df:75:5f:2d:4c:
8f:34:39:00:18:8c:74:a1:ff:b3:38:f0:ea:b9:4c:35:61:4d:
77:2d:42:d6:f4:fd:31:1c:90:04:57:11:4c:9f:3a:82:72:05:
cc:8a:a8:3f:f7:2d:3c:e5:07:b4:b9:33:34:e9:dc:12:09:7a:
52:52:d0:a9:8a:4d:c2:a0:7b:29:1c:02:7f:5a:00:ba:ac:b6:
c3:f1:c1:be:20:2e:68:88:77:7e:49:b6:b8:00:3c:97:c6:45:
3a:b2:f5:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZodmhpRHe4jxXkgoANYYb9lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZjNmNzZlM2VjZWYyNDk3ZTExM2VhM2JiYWViODUzZjYy
ZjU4ZmUwHhcNMjUxMDI1MjMwMDI5WhcNMjUxMDI2MjMwMDI5WjAzMTEwLwYDVQQD
EyhmYTllNWI2ZWVlNWQyMTU0YmI3YTc4ODNiY2U3YTM2MzdmYTAxMGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJVyT9LgQNpoa6adOc9YQbksHnvf
xQwB7dJN3pmEak3y8jZQwMspbf/tt95g7ZeiitwB1CDn1CnklLCbbsn11ligE+YF
lQDWii2NKkAUcxpBJwRaXEPxC6ljAZ8FkP8clwDuQPJK2VUeN9KKRV7qzamKhm1P
4oZUsd78Nfc/dxgRv5TogbNHYf6kfO9CMe2aSC8BYq+T8nNYmLyXheCt2H+cPC/9
DuFYARTvUd0f6Ay50FCj+I6XIm8O8MZ30hIcrmsCSwEeme56cqDZN/geiDUtRP2D
ZYWCH5QL1vuW2rY5HVr/0YKMbPe4SYysg++jpknAEUcDBn63MDNgAbMUDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqeW27uXSFUu3p4g7zno2N/oBD6MB8GA1UdIwQY
MBaAFKTz924+zvJJfhE+o7uuuFP2L1j+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFBQM2JqN084a2wtRVQ2anU2NjRVX1l2V1A0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9kNmM1NWEtODYyOC00MjlmLWEyZWMt
NGYyYzE5YmQ1NGQ3LzEvcFBQM2JqN084a2wtRVQ2anU2NjRVX1l2V1A0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9kNmM1NWEtODYyOC00MjlmLWEyZWMtNGYyYzE5YmQ1NGQ3
LzEvcFBQM2JqN084a2wtRVQ2anU2NjRVX1l2V1A0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALfeSQI27
mulo595P3V/PaRR1nZIFOw5TChtNBabX3/dC8zm2cYmr6uQ8KM+UsEgFURNadBih
Hsbb5LIEMEgMR7fM3jykR/MJmW+i+FiPwFKiXNgxXyhTz6XchPdCZYXhzEEyMqSz
V7wnTlrr1gREW+OtGvAMqksGmBHWso6STcdM8adevPBUVUdVQiFVqKWee28Cg+58
nSvUhCHvGd91Xy1MjzQ5ABiMdKH/szjw6rlMNWFNdy1C1vT9MRyQBFcRTJ86gnIF
zIqoP/ctPOUHtLkzNOncEgl6UlLQqYpNwqB7KRwCf1oAuqy2w/HBviAuaIh3fkm2
uAA8l8ZFOrL1Mg==
-----END CERTIFICATE-----
Generated at Sun Oct 26 04:19:45 2025 by rpki-client