Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
File: Pznde9c8PhuifReNVcJvipbNtKk.mft (raw, json)
Hash identifier: 2J5RKAkrPEyNHO23YV0rLU4nw1u+P6nc2sqkX+V1BVo=
Subject key identifier: 07:FD:92:88:EE:2E:0D:40:FF:D8:5A:73:7C:09:28:44:83:E8:1D:C9
Authority key identifier: 3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
Certificate issuer: /CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
Certificate serial: 019A72937BFF37FB240B452BB728C43F71C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 11:00:59 +0000
Manifest this update: Tue 11 Nov 2025 11:00:59 +0000
Manifest next update: Wed 12 Nov 2025 11:00:59 +0000
Files and hashes: 1: Is-TnbCqT0sZMmHzE0DOERlyuyA.roa (hash: ZwxuieDg5KwfHUePylCdnkHIJ18zptrPuU4i92UJi24=)
2: Ng8LWoHpOFI_Feu0HqtCDWsTm2U.roa (hash: T0h4+Xqtg7Y1viZ/7IiB5TqFGqH+QZrG/sWcCxZLrOw=)
3: Pznde9c8PhuifReNVcJvipbNtKk.crl (hash: 95l1Al1JI9GCwfWeWy6Kx/IoMKn7RrtCQIzXGhSvIrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:7b:ff:37:fb:24:0b:45:2b:b7:28:c4:3f:71:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
Validity
Not Before: Nov 11 11:00:59 2025 GMT
Not After : Nov 12 11:00:59 2025 GMT
Subject: CN=07fd9288ee2e0d40ffd85a737c09284483e81dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d5:0a:98:5d:b8:16:d7:1c:3d:5d:84:5d:b6:
0f:bd:f2:d1:60:04:a4:ac:32:09:7c:d0:32:28:6d:
a4:87:10:1b:16:77:8b:7f:9b:97:db:d9:a1:00:52:
34:99:0b:82:f9:9c:4f:bc:5c:10:98:38:f5:d6:f9:
09:27:0c:14:2c:44:5f:cd:22:39:28:9d:fb:99:1f:
68:4b:12:99:4d:f5:f4:84:b8:34:2d:6f:99:d1:44:
51:33:a8:7e:79:9d:00:51:e9:31:42:24:f2:cb:20:
c9:37:78:c3:47:0a:4a:80:15:3a:95:cc:57:29:b1:
6a:b6:bb:0c:41:04:03:d1:f7:00:6b:fe:97:d7:1c:
b9:40:cb:69:ef:b2:97:22:14:11:47:72:4c:95:ce:
bd:76:6f:4c:71:d7:b8:64:07:b6:a3:4d:52:c4:c7:
52:3c:7e:1d:87:4f:be:e8:10:29:88:83:02:32:ca:
d1:96:d1:ee:e7:e3:13:14:5b:b0:0d:4a:7e:b1:b7:
28:74:33:db:74:28:4d:6e:2a:c5:92:c2:d6:3f:68:
aa:75:b5:c5:64:11:6a:69:8d:e3:26:73:ae:58:1d:
99:34:6b:41:e9:a5:5b:a8:e8:e1:8e:7c:eb:88:cd:
56:dc:fd:85:7e:b8:33:97:47:6b:dd:46:6b:6a:8f:
da:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FD:92:88:EE:2E:0D:40:FF:D8:5A:73:7C:09:28:44:83:E8:1D:C9
X509v3 Authority Key Identifier:
keyid:3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ed:46:f5:9f:b9:5e:9c:81:a6:5a:0d:64:3d:b0:5f:93:fc:
a9:2b:2b:1d:7e:9d:90:b2:ec:44:93:bf:36:ed:39:70:6f:1e:
a1:35:94:eb:58:54:73:5e:b2:cb:34:de:11:dd:06:df:50:bf:
d4:72:65:26:bd:6e:ca:c0:7c:25:03:8c:42:e7:9e:09:e2:cd:
6d:c0:53:0e:d0:2d:89:37:d6:d4:11:fc:ac:8e:fb:3e:86:f3:
4b:1c:95:43:2a:be:dc:79:a3:f3:fc:55:94:11:dd:74:3c:a8:
f0:27:89:67:59:c7:33:1b:75:ab:79:48:2d:60:e1:57:ab:a7:
e0:80:98:86:c6:8a:7c:38:b2:3c:35:a3:39:ab:3a:98:60:46:
d7:d0:b1:47:ff:d0:2a:4e:0f:3f:18:07:b7:b6:f7:69:69:8d:
58:09:8c:73:8e:54:47:4a:9c:1c:23:7d:96:72:85:76:5e:67:
42:c2:ec:93:0a:a6:c0:1b:01:35:2f:0c:75:fe:f1:05:35:23:
d9:8a:46:e1:2f:3c:71:69:3c:22:61:17:2a:e5:26:d8:6b:08:
54:b1:ec:ab:7d:fd:74:5f:48:78:d1:5b:65:ce:c9:9e:67:73:
78:ae:0d:77:a1:4a:e7:9f:75:a3:6e:28:9f:53:29:54:dd:63:
27:93:93:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk3v/N/skC0UrtyjEP3HGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMzlkZDdiZDczYzNlMWJhMjdkMTc4ZDU1YzI2ZjhhOTZj
ZGI0YTkwHhcNMjUxMTExMTEwMDU5WhcNMjUxMTEyMTEwMDU5WjAzMTEwLwYDVQQD
EygwN2ZkOTI4OGVlMmUwZDQwZmZkODVhNzM3YzA5Mjg0NDgzZTgxZGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNUKmF24FtccPV2EXbYPvfLRYASk
rDIJfNAyKG2khxAbFneLf5uX29mhAFI0mQuC+ZxPvFwQmDj11vkJJwwULERfzSI5
KJ37mR9oSxKZTfX0hLg0LW+Z0URRM6h+eZ0AUekxQiTyyyDJN3jDRwpKgBU6lcxX
KbFqtrsMQQQD0fcAa/6X1xy5QMtp77KXIhQRR3JMlc69dm9Mcde4ZAe2o01SxMdS
PH4dh0++6BApiIMCMsrRltHu5+MTFFuwDUp+sbcodDPbdChNbirFksLWP2iqdbXF
ZBFqaY3jJnOuWB2ZNGtB6aVbqOjhjnzriM1W3P2Ffrgzl0dr3UZrao/aJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAf9kojuLg1A/9hac3wJKESD6B3JMB8GA1UdIwQY
MBaAFD853XvXPD4bon0XjVXCb4qWzbSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHpuZGU5YzhQaHVpZlJlTlZjSnZpcGJOdEtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82MjFlZGQtMWI1YS00NmFjLWJhMTMt
MDRmOWU2MTZhZjYwLzEvUHpuZGU5YzhQaHVpZlJlTlZjSnZpcGJOdEtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi82MjFlZGQtMWI1YS00NmFjLWJhMTMtMDRmOWU2MTZhZjYw
LzEvUHpuZGU5YzhQaHVpZlJlTlZjSnZpcGJOdEtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAle1G9Z+5
XpyBploNZD2wX5P8qSsrHX6dkLLsRJO/Nu05cG8eoTWU61hUc16yyzTeEd0G31C/
1HJlJr1uysB8JQOMQueeCeLNbcBTDtAtiTfW1BH8rI77PobzSxyVQyq+3Hmj8/xV
lBHddDyo8CeJZ1nHMxt1q3lILWDhV6un4ICYhsaKfDiyPDWjOas6mGBG19CxR//Q
Kk4PPxgHt7b3aWmNWAmMc45UR0qcHCN9lnKFdl5nQsLskwqmwBsBNS8Mdf7xBTUj
2YpG4S88cWk8ImEXKuUm2GsIVLHsq339dF9IeNFbZc7JnmdzeK4Nd6FK5591o24o
n1MpVN1jJ5OTrA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:38:39 2025 by rpki-client