Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
File: PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft (raw, json)
Hash identifier: 937bVM6AyFRgcfFvoSmbjhSgCUtiv3XrmKjJllvxQ3I=
Subject key identifier: F4:FC:A1:7F:5C:C8:24:8E:02:20:D8:00:11:9B:E4:CB:0F:ED:CD:17
Authority key identifier: 3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
Certificate issuer: /CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Certificate serial: 019A194F47F9D19FDA7CC0A9ACE7A4E419B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
Manifest number: 08A7
Signing time: Sat 25 Oct 2025 03:00:17 +0000
Manifest this update: Sat 25 Oct 2025 03:00:17 +0000
Manifest next update: Sun 26 Oct 2025 03:00:17 +0000
Files and hashes: 1: PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl (hash: d13wP+qylvrNiIOqlOjgcuICRKnM1xZy61ixAejI5Dc=)
2: WrzesfgAIkReChvkvHbeme9Obyo.roa (hash: sSRQkO+9/oNieGkByWGhrbGGDkaRr1cGKseQKtOM7es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:4f:47:f9:d1:9f:da:7c:c0:a9:ac:e7:a4:e4:19:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Validity
Not Before: Oct 25 03:00:17 2025 GMT
Not After : Oct 26 03:00:17 2025 GMT
Subject: CN=f4fca17f5cc8248e0220d800119be4cb0fedcd17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fc:fe:1e:54:ef:39:8c:3e:b7:50:d3:2f:59:
6b:a1:95:45:23:35:01:89:ae:a3:96:5b:a2:eb:d4:
fd:7b:53:28:60:70:e2:ad:be:69:d7:18:fd:8b:84:
97:c3:c0:9e:91:cc:be:f3:19:72:07:58:9e:c9:6c:
fb:ae:19:f1:11:05:e0:c3:e1:2a:06:8b:ea:65:df:
f3:52:bd:b5:00:1f:b3:ba:b0:98:9e:24:c8:89:22:
97:cb:7e:d3:62:c6:b8:cc:77:4d:a6:91:1b:a7:f8:
83:b6:98:0b:c9:c4:85:a3:66:59:19:c2:f2:e2:51:
42:24:e4:c3:35:92:79:2b:92:c1:3f:c9:9d:58:42:
63:d3:ed:ba:9c:2b:07:31:89:91:5c:18:37:42:f5:
f5:d3:e4:8e:6d:8d:10:94:a2:14:14:8e:73:47:40:
0b:e5:48:55:36:26:63:29:8f:e6:ae:eb:7c:1d:c8:
86:08:16:3e:3b:89:a4:76:9e:f2:b1:e4:df:8f:ea:
23:b1:e1:b5:d0:79:ed:a3:f0:eb:7a:0b:07:d8:b1:
56:70:69:a2:c9:ea:7c:5e:a9:ac:d8:d8:fa:8c:34:
d6:91:43:a7:4c:09:fe:fa:b8:cb:79:c9:1d:be:d1:
69:63:b9:ab:25:4c:5a:6f:07:85:df:ae:db:59:aa:
39:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FC:A1:7F:5C:C8:24:8E:02:20:D8:00:11:9B:E4:CB:0F:ED:CD:17
X509v3 Authority Key Identifier:
keyid:3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:5b:98:3c:b7:51:e5:83:ac:10:01:80:ad:e1:0d:7f:fc:2f:
55:1d:25:4d:ae:1f:c3:82:60:5a:7f:ca:17:84:be:0c:a4:86:
9f:a8:66:4d:91:f9:49:40:e5:db:4e:57:e5:a4:41:07:88:a7:
b8:52:92:79:1e:51:dc:01:db:ef:a3:9d:63:98:b6:e0:0b:2d:
50:bc:25:34:36:b0:0b:10:4f:87:ce:19:b3:e9:26:6f:f2:c2:
d5:e9:97:e6:12:b9:73:b9:b9:11:2a:14:12:9e:23:f2:7c:71:
9b:14:d2:98:ba:1b:a5:56:ab:d0:a8:c4:6a:20:6e:e0:94:ea:
3c:e8:9d:32:df:36:09:38:71:a4:96:bb:1c:34:b0:6b:a4:14:
82:d5:a0:23:41:23:a2:5a:c1:92:02:a3:3a:1a:f5:be:0a:58:
08:e8:41:50:95:ac:1a:e2:18:85:fc:3a:c9:92:c3:36:58:78:
0f:66:d5:8d:de:d1:c9:fb:6f:f6:cf:20:66:8e:46:21:93:a3:
42:f9:55:2b:a3:96:f8:44:01:47:c2:6b:0b:87:7c:cb:1d:44:
57:fc:83:bd:39:55:07:da:ab:aa:e4:8d:14:99:99:e6:ed:75:
f5:ff:56:25:01:19:61:59:50:b9:c2:20:77:f9:61:35:31:4f:
be:74:66:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoZT0f50Z/afMCprOek5BmwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNDMyNzdiN2NhNzlkMGU5ZTA3ZmM0YTRiMzE4MDQxZGY0
MTVjYjMwHhcNMjUxMDI1MDMwMDE3WhcNMjUxMDI2MDMwMDE3WjAzMTEwLwYDVQQD
EyhmNGZjYTE3ZjVjYzgyNDhlMDIyMGQ4MDAxMTliZTRjYjBmZWRjZDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofz+HlTvOYw+t1DTL1lroZVFIzUB
ia6jllui69T9e1MoYHDirb5p1xj9i4SXw8Cekcy+8xlyB1ieyWz7rhnxEQXgw+Eq
BovqZd/zUr21AB+zurCYniTIiSKXy37TYsa4zHdNppEbp/iDtpgLycSFo2ZZGcLy
4lFCJOTDNZJ5K5LBP8mdWEJj0+26nCsHMYmRXBg3QvX10+SObY0QlKIUFI5zR0AL
5UhVNiZjKY/mrut8HciGCBY+O4mkdp7yseTfj+ojseG10Hnto/DregsH2LFWcGmi
yep8Xqms2Nj6jDTWkUOnTAn++rjLeckdvtFpY7mrJUxabweF367bWao5dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPT8oX9cyCSOAiDYABGb5MsP7c0XMB8GA1UdIwQY
MBaAFD5DJ3t8p50Ongf8SksxgEHfQVyzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGtNbmUzeW5uUTZlQl94S1N6R0FRZDlCWExNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yMjE5NDUtYTc0ZS00Nzc1LWFlYTUt
M2NmMmE0NjIyZmJjLzEvUGtNbmUzeW5uUTZlQl94S1N6R0FRZDlCWExNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8yMjE5NDUtYTc0ZS00Nzc1LWFlYTUtM2NmMmE0NjIyZmJj
LzEvUGtNbmUzeW5uUTZlQl94S1N6R0FRZDlCWExNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJluYPLdR
5YOsEAGAreENf/wvVR0lTa4fw4JgWn/KF4S+DKSGn6hmTZH5SUDl205X5aRBB4in
uFKSeR5R3AHb76OdY5i24AstULwlNDawCxBPh84Zs+kmb/LC1emX5hK5c7m5ESoU
Ep4j8nxxmxTSmLobpVar0KjEaiBu4JTqPOidMt82CThxpJa7HDSwa6QUgtWgI0Ej
olrBkgKjOhr1vgpYCOhBUJWsGuIYhfw6yZLDNlh4D2bVjd7Ryftv9s8gZo5GIZOj
QvlVK6OW+EQBR8JrC4d8yx1EV/yDvTlVB9qrquSNFJmZ5u119f9WJQEZYVlQucIg
d/lhNTFPvnRmPQ==
-----END CERTIFICATE-----
Generated at Sat Oct 25 12:36:23 2025 by rpki-client