Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
File: PtQqBIdwVgYBXlow2h5w9Aflnpk.mft (raw, json)
Hash identifier: UIkUawdeXLrFLuiU3w+n7GWYaktM45wYGAIASSWbPhg=
Subject key identifier: BE:44:DB:17:AB:D1:08:EB:DA:05:23:42:98:24:AC:5C:53:A3:7B:A0
Authority key identifier: 3E:D4:2A:04:87:70:56:06:01:5E:5A:30:DA:1E:70:F4:07:E5:9E:99
Certificate issuer: /CN=3ed42a0487705606015e5a30da1e70f407e59e99
Certificate serial: 019922FADF1868B9FA91AED1547317F9139B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 07:01:30 +0000
Manifest this update: Sun 07 Sep 2025 07:01:30 +0000
Manifest next update: Mon 08 Sep 2025 07:01:30 +0000
Files and hashes: 1: PtQqBIdwVgYBXlow2h5w9Aflnpk.crl (hash: C7yLtttCiPixjcC3G0O+p5h6iXu2D0wdaKmAKVqPEZg=)
2: Ygud2H3mQvpplx2m1ZwaXdOogYA.roa (hash: /wnaFbQu+otS41ERWGG+1dFZ6eGw9L5BsokLI2OTM5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:df:18:68:b9:fa:91:ae:d1:54:73:17:f9:13:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ed42a0487705606015e5a30da1e70f407e59e99
Validity
Not Before: Sep 7 07:01:30 2025 GMT
Not After : Sep 8 07:01:30 2025 GMT
Subject: CN=be44db17abd108ebda0523429824ac5c53a37ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0d:b9:fd:1b:c4:fa:52:0f:99:2f:d4:fa:23:
7e:d5:af:5a:34:38:d5:84:5d:64:a2:89:54:45:04:
9d:a3:8d:5c:5d:d2:cc:9a:5e:50:4c:7c:cc:3e:20:
9b:d2:61:72:54:d8:49:9d:83:37:35:30:04:3f:0e:
a0:9d:63:d8:c2:37:30:a8:14:e8:d3:50:6f:53:9d:
17:93:dc:42:04:00:bd:64:be:5b:e6:ff:da:35:43:
4e:ac:7c:4f:25:7e:29:b9:a3:fa:eb:15:4f:59:37:
db:99:df:fa:0c:bf:13:6a:62:6a:a1:ac:fc:fe:eb:
af:6e:5a:68:ce:e8:05:bd:eb:e3:b3:b6:e8:85:54:
5f:1a:43:0f:cb:dd:ca:21:73:82:ad:03:45:c6:fd:
bf:e3:58:b3:53:71:a2:e8:dc:60:3d:a1:d7:9b:6c:
bc:52:0f:1a:e7:94:58:c8:63:e7:02:c3:c4:52:da:
68:5b:69:69:19:47:99:02:22:61:38:fc:fb:4e:10:
5b:a9:9e:50:72:ae:f4:90:b0:64:65:4a:93:fb:9c:
31:c0:7e:16:d0:31:46:f8:33:61:b7:6f:d8:25:51:
17:b5:5c:83:2b:4e:4a:78:ce:22:1a:e0:84:b0:6a:
23:db:5b:47:75:d3:28:8c:00:2c:b5:37:27:9d:cd:
e7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:44:DB:17:AB:D1:08:EB:DA:05:23:42:98:24:AC:5C:53:A3:7B:A0
X509v3 Authority Key Identifier:
keyid:3E:D4:2A:04:87:70:56:06:01:5E:5A:30:DA:1E:70:F4:07:E5:9E:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:36:08:50:22:8b:db:8f:b3:42:c7:0d:34:7a:d3:c8:66:8e:
b3:2f:32:2e:1d:3a:1f:d5:e7:42:5d:98:63:16:2b:2b:32:97:
ec:73:2b:fd:92:1a:d3:56:22:99:68:98:25:d0:11:44:d1:16:
a8:2d:be:fe:fc:0e:c1:27:b9:48:2a:f6:48:f2:04:2b:ee:c3:
b6:3d:e4:c5:c5:66:9f:d7:fb:95:88:68:c2:fe:e7:9c:50:10:
4b:05:99:e7:ec:7e:5b:b4:49:58:b1:4d:f1:48:fb:33:33:0f:
a0:de:64:93:fb:45:c2:ea:3e:22:fd:5b:b8:95:80:45:5b:b2:
c9:95:4c:ac:d3:5f:a9:e4:de:49:d9:38:43:e0:91:4b:ae:ed:
dc:8b:70:b1:40:63:c6:79:8d:08:42:f0:5a:7f:14:b1:81:28:
fc:ab:03:da:22:26:13:46:3c:f7:83:f3:17:fe:db:c3:45:7e:
fb:66:5f:60:87:f4:06:ad:49:1e:e1:06:2d:4f:d4:78:aa:76:
8d:72:df:38:1e:0b:8a:47:ce:01:a7:8b:cb:f3:5e:c4:ac:9b:
51:6a:76:16:d0:c2:61:b3:44:70:0f:71:8f:44:a3:1f:49:92:
e1:01:0d:8f:a2:01:d1:a6:40:39:1e:9b:a4:96:d6:14:a7:cb:
08:1c:83:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+t8YaLn6ka7RVHMX+RObMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZDQyYTA0ODc3MDU2MDYwMTVlNWEzMGRhMWU3MGY0MDdl
NTllOTkwHhcNMjUwOTA3MDcwMTMwWhcNMjUwOTA4MDcwMTMwWjAzMTEwLwYDVQQD
EyhiZTQ0ZGIxN2FiZDEwOGViZGEwNTIzNDI5ODI0YWM1YzUzYTM3YmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA25/RvE+lIPmS/U+iN+1a9aNDjV
hF1koolURQSdo41cXdLMml5QTHzMPiCb0mFyVNhJnYM3NTAEPw6gnWPYwjcwqBTo
01BvU50Xk9xCBAC9ZL5b5v/aNUNOrHxPJX4puaP66xVPWTfbmd/6DL8TamJqoaz8
/uuvblpozugFvevjs7bohVRfGkMPy93KIXOCrQNFxv2/41izU3Gi6NxgPaHXm2y8
Ug8a55RYyGPnAsPEUtpoW2lpGUeZAiJhOPz7ThBbqZ5Qcq70kLBkZUqT+5wxwH4W
0DFG+DNht2/YJVEXtVyDK05KeM4iGuCEsGoj21tHddMojAAstTcnnc3nwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5E2xer0Qjr2gUjQpgkrFxTo3ugMB8GA1UdIwQY
MBaAFD7UKgSHcFYGAV5aMNoecPQH5Z6ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHRRcUJJZHdWZ1lCWGxvdzJoNXc5QWZsbnBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9mYzkzYjEtMDY0ZS00NGFiLTkwZGEt
ODI2MjUzOWRlNDZmLzEvUHRRcUJJZHdWZ1lCWGxvdzJoNXc5QWZsbnBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9mYzkzYjEtMDY0ZS00NGFiLTkwZGEtODI2MjUzOWRlNDZm
LzEvUHRRcUJJZHdWZ1lCWGxvdzJoNXc5QWZsbnBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALDYIUCKL
24+zQscNNHrTyGaOsy8yLh06H9XnQl2YYxYrKzKX7HMr/ZIa01YimWiYJdARRNEW
qC2+/vwOwSe5SCr2SPIEK+7Dtj3kxcVmn9f7lYhowv7nnFAQSwWZ5+x+W7RJWLFN
8Uj7MzMPoN5kk/tFwuo+Iv1buJWARVuyyZVMrNNfqeTeSdk4Q+CRS67t3ItwsUBj
xnmNCELwWn8UsYEo/KsD2iImE0Y894PzF/7bw0V++2ZfYIf0Bq1JHuEGLU/UeKp2
jXLfOB4LikfOAaeLy/NexKybUWp2FtDCYbNEcA9xj0SjH0mS4QENj6IB0aZAOR6b
pJbWFKfLCByDIA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:18:43 2025 by rpki-client