Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
File: pfanGhgNz4sjDEFPCfe3G66peBw.mft (raw, json)
Hash identifier: yO1iUjWHewtavkrCyak7Nyt044Yy4CvjAmuuaTeIwTM=
Subject key identifier: E6:D7:1D:A6:B2:19:C0:F3:A6:F1:94:4D:EB:6D:65:4F:89:A5:00:57
Authority key identifier: A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C
Certificate issuer: /CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
Certificate serial: 019A299E2EA7ADE3EB28D7DA45E77951602A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
Manifest number: 03C5
Signing time: Tue 28 Oct 2025 07:00:23 +0000
Manifest this update: Tue 28 Oct 2025 07:00:23 +0000
Manifest next update: Wed 29 Oct 2025 07:00:23 +0000
Files and hashes: 1: 4ztGIasVEwEbakF0ec-7K0e5IU4.roa (hash: IY2hXYNDBxgugsXRkJWFvDBibE33L3+eqXYnL7k07xY=)
2: pfanGhgNz4sjDEFPCfe3G66peBw.crl (hash: 93EVU0PZGGg9YaDy355N4xMfsnvrZ4nnd1YZLlgafBw=)
3: yQmkLUR6MH6h1RvFVHhe4DDu7QY.roa (hash: 7D7oyqrxVnp9P9+upqmUz5U0xALaurO7hGz+98jrtEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:9e:2e:a7:ad:e3:eb:28:d7:da:45:e7:79:51:60:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
Validity
Not Before: Oct 28 07:00:23 2025 GMT
Not After : Oct 29 07:00:23 2025 GMT
Subject: CN=e6d71da6b219c0f3a6f1944deb6d654f89a50057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bf:96:88:85:50:de:37:01:7d:f8:93:60:7a:
e9:34:41:7d:f1:c0:6f:91:5b:70:1c:a7:d2:0b:37:
bd:91:93:0d:9b:fe:01:88:8a:38:37:65:8e:27:22:
db:9b:f1:09:aa:ab:71:16:35:5b:83:67:26:8b:ca:
8c:3e:b0:9e:b4:bc:d3:b2:45:57:6b:c3:d4:36:8e:
5c:ae:ce:93:78:bf:88:59:85:18:22:fd:9a:ee:4c:
00:d5:99:14:e5:d3:e8:9b:ef:a3:2c:f0:8d:11:56:
c8:3e:3d:ed:93:25:55:36:14:ec:34:49:db:d8:6d:
7c:15:9c:49:fb:b1:a2:b4:13:64:a7:3b:d0:a6:fc:
c5:07:a8:de:52:a1:07:c2:01:d0:c6:e1:4a:99:47:
fa:62:51:a7:35:bd:63:05:7e:20:07:47:1f:db:ef:
e7:ab:05:a3:f2:4a:24:d6:ff:2b:6f:95:d0:ee:09:
78:a0:1b:d7:a8:22:95:e0:df:5f:cd:b5:53:cb:36:
2a:0f:ea:e7:61:1f:47:c2:87:0d:58:2c:1e:1f:10:
f0:7b:e2:d5:78:4f:ca:0a:0a:65:7a:c1:8b:70:67:
6c:39:2b:0a:f5:7b:e6:17:b8:a0:7e:8a:c7:78:82:
df:d0:7f:1a:05:d0:29:38:94:64:40:64:1e:9b:6f:
6c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D7:1D:A6:B2:19:C0:F3:A6:F1:94:4D:EB:6D:65:4F:89:A5:00:57
X509v3 Authority Key Identifier:
keyid:A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3e:b3:31:81:c5:8c:e0:db:ea:e0:50:55:3d:55:40:8e:7e:
45:38:9e:6b:47:d7:c3:21:ea:d3:98:6b:9b:61:29:65:61:c4:
89:d3:09:69:ff:1c:85:3b:c7:6d:5f:8a:92:fb:a3:c1:10:6d:
a6:2f:a2:60:0a:ca:aa:6b:f3:c8:f3:a1:4b:82:95:f5:60:a8:
a8:af:54:8d:36:a5:a8:6e:af:4f:3a:c3:75:21:ae:38:88:fa:
d2:82:87:32:d3:01:c1:e0:a0:3e:9e:48:72:54:eb:7b:6e:bf:
77:ab:7b:5d:44:f6:6b:f6:13:fb:2a:c6:ef:67:5a:51:77:5e:
ed:05:1a:a9:e0:8c:5d:6c:5a:47:f9:3a:38:1f:d5:21:1d:cf:
3c:a7:67:67:bc:a9:d9:f3:6b:6f:9a:be:e8:43:88:ca:42:05:
35:f1:68:be:62:cd:bb:0d:9d:b2:73:a7:6c:9a:90:38:23:80:
65:f5:c8:8c:99:bd:ac:74:0b:f6:fd:79:c3:cc:0e:c8:bb:da:
1e:dc:16:58:df:e1:86:b6:9c:de:50:92:84:12:a8:c7:60:37:
90:13:24:dc:6c:e9:8f:4b:ba:b3:85:e6:65:9d:24:3c:88:fd:
4e:44:63:58:92:55:cf:2a:a7:8e:5c:77:48:49:8e:a0:9e:df:
4a:e9:e7:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZopni6nrePrKNfaRed5UWAqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ZjZhNzFhMTgwZGNmOGIyMzBjNDE0ZjA5ZjdiNzFiYWVh
OTc4MWMwHhcNMjUxMDI4MDcwMDIzWhcNMjUxMDI5MDcwMDIzWjAzMTEwLwYDVQQD
EyhlNmQ3MWRhNmIyMTljMGYzYTZmMTk0NGRlYjZkNjU0Zjg5YTUwMDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyL+WiIVQ3jcBffiTYHrpNEF98cBv
kVtwHKfSCze9kZMNm/4BiIo4N2WOJyLbm/EJqqtxFjVbg2cmi8qMPrCetLzTskVX
a8PUNo5crs6TeL+IWYUYIv2a7kwA1ZkU5dPom++jLPCNEVbIPj3tkyVVNhTsNEnb
2G18FZxJ+7GitBNkpzvQpvzFB6jeUqEHwgHQxuFKmUf6YlGnNb1jBX4gB0cf2+/n
qwWj8kok1v8rb5XQ7gl4oBvXqCKV4N9fzbVTyzYqD+rnYR9HwocNWCweHxDwe+LV
eE/KCgplesGLcGdsOSsK9XvmF7igforHeILf0H8aBdApOJRkQGQem29szwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFObXHaayGcDzpvGUTettZU+JpQBXMB8GA1UdIwQY
MBaAFKX2pxoYDc+LIwxBTwn3txuuqXgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGZhbkdoZ056NHNqREVGUENmZTNHNjZwZUJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iM2Y5MTItMzZkMS00MzY2LWFjM2Mt
NjY2MDIzOGIwM2NlLzEvcGZhbkdoZ056NHNqREVGUENmZTNHNjZwZUJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9iM2Y5MTItMzZkMS00MzY2LWFjM2MtNjY2MDIzOGIwM2Nl
LzEvcGZhbkdoZ056NHNqREVGUENmZTNHNjZwZUJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADz6zMYHF
jODb6uBQVT1VQI5+RTiea0fXwyHq05hrm2EpZWHEidMJaf8chTvHbV+KkvujwRBt
pi+iYArKqmvzyPOhS4KV9WCoqK9UjTalqG6vTzrDdSGuOIj60oKHMtMBweCgPp5I
clTre26/d6t7XUT2a/YT+yrG72daUXde7QUaqeCMXWxaR/k6OB/VIR3PPKdnZ7yp
2fNrb5q+6EOIykIFNfFovmLNuw2dsnOnbJqQOCOAZfXIjJm9rHQL9v15w8wOyLva
HtwWWN/hhrac3lCShBKox2A3kBMk3Gzpj0u6s4XmZZ0kPIj9TkRjWJJVzyqnjlx3
SEmOoJ7fSunnjw==
-----END CERTIFICATE-----
Generated at Tue Oct 28 13:48:49 2025 by rpki-client