Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft
File: pnac0wPoTc03o3XW52tgKfzDZ7Q.mft (raw, json)
Hash identifier: XW/ALYJLNfGg3XUrnWcbO6u0BVvWM43lNPvNQlmKtiA=
Subject key identifier: E2:94:E0:91:AB:E9:E1:3B:4B:78:44:4B:50:7D:CA:CC:3A:35:97:D9
Authority key identifier: A6:76:9C:D3:03:E8:4D:CD:37:A3:75:D6:E7:6B:60:29:FC:C3:67:B4
Certificate issuer: /CN=a6769cd303e84dcd37a375d6e76b6029fcc367b4
Certificate serial: 019A0B93DB7535E7724B7D80A0BD0EE4B1B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnac0wPoTc03o3XW52tgKfzDZ7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft
Manifest number: 75
Signing time: Wed 22 Oct 2025 11:00:30 +0000
Manifest this update: Wed 22 Oct 2025 11:00:30 +0000
Manifest next update: Thu 23 Oct 2025 11:00:30 +0000
Files and hashes: 1: EE9b_IGVAxMVGIMQVaokUb3eWtk.roa (hash: v5264EvTSTGFV4n/KSp3fqpJgAmsmpyri2CC0Ruz9ng=)
2: pnac0wPoTc03o3XW52tgKfzDZ7Q.crl (hash: ujiHkIN763RlR07qKjOHAFpJso+sEUvZ/L2M8H03Ggw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/pnac0wPoTc03o3XW52tgKfzDZ7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:93:db:75:35:e7:72:4b:7d:80:a0:bd:0e:e4:b1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6769cd303e84dcd37a375d6e76b6029fcc367b4
Validity
Not Before: Oct 22 11:00:30 2025 GMT
Not After : Oct 23 11:00:30 2025 GMT
Subject: CN=e294e091abe9e13b4b78444b507dcacc3a3597d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a8:6c:40:6d:d3:1b:84:7f:31:f3:a0:75:48:
eb:11:19:b2:11:f4:e5:54:59:7c:81:66:0a:1e:0a:
bf:a9:5f:0d:39:5e:96:84:80:90:b7:8b:fa:07:c3:
c3:90:12:4c:c4:40:35:11:60:af:12:19:65:8b:e2:
08:22:26:3f:f5:26:12:10:98:ac:79:76:cb:7b:eb:
94:f1:88:cc:60:c2:6b:90:12:96:97:7f:e0:7c:96:
93:d9:8a:48:fb:9b:34:73:08:68:95:5e:da:1b:83:
c9:57:4c:e6:1c:27:5f:7e:48:16:72:bb:b3:32:5e:
91:25:24:dc:b1:3e:12:3f:8b:68:37:b7:b3:e7:72:
e0:18:be:f3:85:55:e2:97:25:fe:64:66:d7:1f:31:
0f:dc:07:8d:55:0a:90:d5:6d:af:71:8b:98:c3:13:
01:22:eb:24:3d:0e:f2:ca:62:bd:41:6d:a2:5c:bc:
dc:7f:3b:55:06:a9:45:57:85:62:94:e2:8a:dd:14:
2b:56:7b:fa:81:67:06:44:2b:ec:87:ce:52:08:1f:
5b:99:a3:63:8e:0b:22:2b:52:08:9e:fb:e7:66:b7:
ae:9e:cf:02:16:dd:84:dc:6f:5f:d1:54:2c:a9:c7:
12:60:8a:21:44:01:f7:c7:a4:73:ae:e4:eb:75:ef:
83:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:94:E0:91:AB:E9:E1:3B:4B:78:44:4B:50:7D:CA:CC:3A:35:97:D9
X509v3 Authority Key Identifier:
keyid:A6:76:9C:D3:03:E8:4D:CD:37:A3:75:D6:E7:6B:60:29:FC:C3:67:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnac0wPoTc03o3XW52tgKfzDZ7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a6:8a:f6:c1:de:90:c1:fa:3c:35:c9:bb:07:56:58:1c:de:
f8:6c:dc:8c:81:5e:49:a0:c4:b7:a3:17:b7:8a:64:b6:86:1b:
08:5c:10:7f:a5:cf:b7:b1:7b:aa:3d:93:35:d5:63:7d:56:2a:
8e:24:8a:05:fc:67:0a:19:6c:96:36:a0:61:46:d1:36:3c:e5:
2d:fa:e4:7b:af:31:c4:08:41:88:51:08:98:91:52:30:2d:de:
ad:8a:b7:da:12:14:7f:f8:5b:9d:1c:9c:e9:fe:06:9f:f2:48:
12:d2:c1:b9:d3:e7:2b:24:bf:71:df:50:f2:a4:73:64:fe:2d:
95:1c:da:72:23:f7:49:ef:cf:5f:26:1b:48:61:6f:6a:78:6b:
65:81:28:29:e6:4e:f8:29:65:53:64:c9:04:32:e6:5d:68:f6:
90:a8:d2:36:f5:2d:ac:55:79:08:7c:9f:52:3f:f5:9e:af:60:
4c:df:72:8a:a4:fe:78:42:34:2d:9e:6b:e5:6b:0c:78:a8:ed:
ef:33:5e:8c:f3:45:51:2c:21:5d:fa:9e:38:ea:01:3e:15:bc:
c7:6c:d6:f8:2c:01:f4:96:ef:1f:04:c5:e7:6a:bb:ec:0c:dd:
78:47:d2:a8:54:68:22:ca:33:f1:36:2e:0a:0f:1f:4d:f8:09:
0b:12:85:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoLk9t1NedyS32AoL0O5LGyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NzY5Y2QzMDNlODRkY2QzN2EzNzVkNmU3NmI2MDI5ZmNj
MzY3YjQwHhcNMjUxMDIyMTEwMDMwWhcNMjUxMDIzMTEwMDMwWjAzMTEwLwYDVQQD
EyhlMjk0ZTA5MWFiZTllMTNiNGI3ODQ0NGI1MDdkY2FjYzNhMzU5N2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ahsQG3TG4R/MfOgdUjrERmyEfTl
VFl8gWYKHgq/qV8NOV6WhICQt4v6B8PDkBJMxEA1EWCvEhlli+IIIiY/9SYSEJis
eXbLe+uU8YjMYMJrkBKWl3/gfJaT2YpI+5s0cwholV7aG4PJV0zmHCdffkgWcruz
Ml6RJSTcsT4SP4toN7ez53LgGL7zhVXilyX+ZGbXHzEP3AeNVQqQ1W2vcYuYwxMB
IuskPQ7yymK9QW2iXLzcfztVBqlFV4VilOKK3RQrVnv6gWcGRCvsh85SCB9bmaNj
jgsiK1IInvvnZreuns8CFt2E3G9f0VQsqccSYIohRAH3x6RzruTrde+D6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKU4JGr6eE7S3hES1B9ysw6NZfZMB8GA1UdIwQY
MBaAFKZ2nNMD6E3NN6N11udrYCn8w2e0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcG5hYzB3UG9UYzAzbzNYVzUydGdLZnpEWjdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wMjM3YmMtOWQ1ZC00ZGI0LWFmOWIt
OTdhN2I5MzI3Nzg3LzEvcG5hYzB3UG9UYzAzbzNYVzUydGdLZnpEWjdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8wMjM3YmMtOWQ1ZC00ZGI0LWFmOWItOTdhN2I5MzI3Nzg3
LzEvcG5hYzB3UG9UYzAzbzNYVzUydGdLZnpEWjdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY6aK9sHe
kMH6PDXJuwdWWBze+GzcjIFeSaDEt6MXt4pktoYbCFwQf6XPt7F7qj2TNdVjfVYq
jiSKBfxnChlsljagYUbRNjzlLfrke68xxAhBiFEImJFSMC3erYq32hIUf/hbnRyc
6f4Gn/JIEtLBudPnKyS/cd9Q8qRzZP4tlRzaciP3Se/PXyYbSGFvanhrZYEoKeZO
+CllU2TJBDLmXWj2kKjSNvUtrFV5CHyfUj/1nq9gTN9yiqT+eEI0LZ5r5WsMeKjt
7zNejPNFUSwhXfqeOOoBPhW8x2zW+CwB9JbvHwTF52q77AzdeEfSqFRoIsoz8TYu
Cg8fTfgJCxKFVQ==
-----END CERTIFICATE-----
Generated at Wed Oct 22 19:24:36 2025 by rpki-client