Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
File: PGvK_z6ArkGaFdG8s24xmN744ic.mft (raw, json)
Hash identifier: zEprAjeSGXEt4ElY9oHFxE2Gr+39WeYTSnNUuXIcTn4=
Subject key identifier: B1:EA:5E:D3:93:9D:EC:CB:07:C5:33:B1:74:E0:F2:76:EF:4B:DB:B3
Authority key identifier: 3C:6B:CA:FF:3E:80:AE:41:9A:15:D1:BC:B3:6E:31:98:DE:F8:E2:27
Certificate issuer: /CN=3c6bcaff3e80ae419a15d1bcb36e3198def8e227
Certificate serial: 019A71B932EA4273DCABD7AFF605C4051A5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
Manifest number: 07D5
Signing time: Tue 11 Nov 2025 07:02:33 +0000
Manifest this update: Tue 11 Nov 2025 07:02:33 +0000
Manifest next update: Wed 12 Nov 2025 07:02:33 +0000
Files and hashes: 1: BneHQ-af6etJYnzgVpFHJTLWtfI.roa (hash: SK4P5sVwHnq6qFE+d1xG/bjzaly1qgrqi3Y+RExkIAE=)
2: PGvK_z6ArkGaFdG8s24xmN744ic.crl (hash: +YwAzpq6rWrJtqQ0spHmSN7cK/BJcPuYXVBl64ThUEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:32:ea:42:73:dc:ab:d7:af:f6:05:c4:05:1a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c6bcaff3e80ae419a15d1bcb36e3198def8e227
Validity
Not Before: Nov 11 07:02:33 2025 GMT
Not After : Nov 12 07:02:33 2025 GMT
Subject: CN=b1ea5ed3939deccb07c533b174e0f276ef4bdbb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4a:5c:a3:d5:30:fa:c3:66:87:c0:02:bd:3e:
bb:48:a7:9c:85:eb:7b:10:2d:32:00:73:ae:d8:a9:
ea:ac:da:dd:f1:b1:e3:f9:c7:c8:3b:cb:6b:67:0e:
d0:df:0a:39:75:44:6c:fe:1d:e1:3b:18:ee:6b:a9:
28:a5:7f:a0:d2:19:42:fd:53:96:97:af:31:1b:39:
d2:1b:db:a4:12:e1:f5:da:8c:c7:88:21:c7:59:55:
f7:76:7a:ef:ec:d9:95:3e:c7:5e:4a:a7:19:b6:e7:
55:83:5b:6f:a7:49:b6:41:17:ed:98:bd:41:28:3d:
3c:1c:0a:69:a4:b4:a6:40:b2:90:0e:42:8e:a7:77:
24:28:f5:4d:76:ec:db:d2:c1:d5:29:80:9b:86:a3:
09:96:bc:5f:23:ba:c9:77:b2:e0:b9:3e:1b:02:ff:
67:9a:f8:62:66:7f:cf:91:1c:53:f4:b6:06:8e:5c:
1d:21:91:17:43:18:6d:93:cc:bd:60:25:5a:42:9e:
25:1a:93:d7:0a:a8:75:f8:0d:f3:0a:a3:91:cc:f6:
ce:92:d4:03:80:f6:1e:f2:ff:71:73:d6:d4:bb:41:
18:10:9d:1e:b5:aa:69:53:0b:89:d1:1d:6e:45:37:
a9:4e:49:7e:92:ac:e9:eb:d6:14:dc:33:17:36:58:
64:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:EA:5E:D3:93:9D:EC:CB:07:C5:33:B1:74:E0:F2:76:EF:4B:DB:B3
X509v3 Authority Key Identifier:
keyid:3C:6B:CA:FF:3E:80:AE:41:9A:15:D1:BC:B3:6E:31:98:DE:F8:E2:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:4a:46:43:56:5f:a3:fb:ad:1f:62:40:99:1b:43:8e:33:0c:
e6:11:b8:de:81:a5:fa:75:3b:a2:08:26:f4:71:bb:a5:57:eb:
1a:9c:6b:0f:b5:3a:63:f7:98:12:ed:b4:cc:ac:8a:11:71:5b:
a9:aa:a3:42:2d:c5:26:e0:be:ca:cb:4d:9d:21:de:10:ee:4a:
f4:03:f7:fa:83:89:0b:e0:77:ca:04:28:3f:0e:a0:85:19:b7:
71:85:ad:11:b7:3f:fc:50:55:c4:62:8a:d0:f2:9c:39:d6:44:
f1:dc:61:2b:9f:96:8a:e9:64:c5:89:a1:59:5c:cd:0a:bd:56:
ad:d9:96:3d:a1:29:ac:77:d4:2b:37:4d:2d:e1:61:b1:b7:01:
65:bd:12:15:eb:fa:3e:f1:be:d1:68:44:67:69:68:0c:67:be:
96:8c:1e:20:dc:fb:be:ee:1b:8f:40:83:c0:cc:dd:23:69:e4:
33:03:b0:cd:a8:c4:c1:77:a6:f7:c8:69:fd:0c:f1:62:9a:ff:
9b:ee:62:50:39:75:be:a6:38:f5:66:f5:cb:74:aa:1b:8d:d9:
22:b3:93:3b:33:c4:b1:78:51:63:20:2e:66:e2:75:b2:9e:43:
5e:68:e3:fb:ad:07:0f:16:ff:fb:9e:80:9f:19:42:49:9e:a8:
d5:29:07:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuTLqQnPcq9ev9gXEBRpaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNmJjYWZmM2U4MGFlNDE5YTE1ZDFiY2IzNmUzMTk4ZGVm
OGUyMjcwHhcNMjUxMTExMDcwMjMzWhcNMjUxMTEyMDcwMjMzWjAzMTEwLwYDVQQD
EyhiMWVhNWVkMzkzOWRlY2NiMDdjNTMzYjE3NGUwZjI3NmVmNGJkYmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkpco9Uw+sNmh8ACvT67SKechet7
EC0yAHOu2KnqrNrd8bHj+cfIO8trZw7Q3wo5dURs/h3hOxjua6kopX+g0hlC/VOW
l68xGznSG9ukEuH12ozHiCHHWVX3dnrv7NmVPsdeSqcZtudVg1tvp0m2QRftmL1B
KD08HApppLSmQLKQDkKOp3ckKPVNduzb0sHVKYCbhqMJlrxfI7rJd7LguT4bAv9n
mvhiZn/PkRxT9LYGjlwdIZEXQxhtk8y9YCVaQp4lGpPXCqh1+A3zCqORzPbOktQD
gPYe8v9xc9bUu0EYEJ0etappUwuJ0R1uRTepTkl+kqzp69YU3DMXNlhkDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLHqXtOTnezLB8UzsXTg8nbvS9uzMB8GA1UdIwQY
MBaAFDxryv8+gK5BmhXRvLNuMZje+OInMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEd2S196NkFya0dhRmRHOHMyNHhtTjc0NGljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9mMzI4ZmYtOTI3Zi00MTE2LThlMzMt
NDA0M2IyYzc3YmJmLzEvUEd2S196NkFya0dhRmRHOHMyNHhtTjc0NGljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9mMzI4ZmYtOTI3Zi00MTE2LThlMzMtNDA0M2IyYzc3YmJm
LzEvUEd2S196NkFya0dhRmRHOHMyNHhtTjc0NGljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFEpGQ1Zf
o/utH2JAmRtDjjMM5hG43oGl+nU7oggm9HG7pVfrGpxrD7U6Y/eYEu20zKyKEXFb
qaqjQi3FJuC+ystNnSHeEO5K9AP3+oOJC+B3ygQoPw6ghRm3cYWtEbc//FBVxGKK
0PKcOdZE8dxhK5+WiulkxYmhWVzNCr1WrdmWPaEprHfUKzdNLeFhsbcBZb0SFev6
PvG+0WhEZ2loDGe+loweINz7vu4bj0CDwMzdI2nkMwOwzajEwXem98hp/QzxYpr/
m+5iUDl1vqY49Wb1y3SqG43ZIrOTOzPEsXhRYyAuZuJ1sp5DXmjj+60HDxb/+56A
nxlCSZ6o1SkHxA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:28 2025 by rpki-client