Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
File: Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft (raw, json)
Hash identifier: INGHthIWZDcXn/YybfiFaCI2PqSyBiZk8NOuwtvBnqM=
Subject key identifier: 14:A7:42:A1:AC:A1:B9:6A:1E:6A:B8:A8:99:C1:3B:E9:35:BB:F7:DA
Authority key identifier: 3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
Certificate issuer: /CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Certificate serial: 019922557439A2468038DADA1742E95FC17D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
Manifest number: 05A2
Signing time: Sun 07 Sep 2025 04:00:49 +0000
Manifest this update: Sun 07 Sep 2025 04:00:49 +0000
Manifest next update: Mon 08 Sep 2025 04:00:49 +0000
Files and hashes: 1: Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl (hash: 13w0A1cv5H032bjEGBwPR9oHTcakJV5W5sQXN44F6h4=)
2: jCGGbslP38BuOy2f_eS54xc-hWg.roa (hash: rfVT0PEc4ZDXhhwqi4mRItGvqKV42ncM8sTUj9MUtx0=)
3: lFHDzTXqiwUlXqs5qOXSJRmYXfE.roa (hash: Kj0KUbB2+KfwbsuGFaPjdzmb30sagRusRai8T0ZrnFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:74:39:a2:46:80:38:da:da:17:42:e9:5f:c1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Validity
Not Before: Sep 7 04:00:49 2025 GMT
Not After : Sep 8 04:00:49 2025 GMT
Subject: CN=14a742a1aca1b96a1e6ab8a899c13be935bbf7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:66:84:95:c4:f5:82:f4:99:31:92:e8:a4:bf:
ed:43:c0:e6:a2:15:d4:29:d3:ec:fc:0b:90:3e:ae:
90:4a:1b:b6:e1:35:8e:06:72:67:c5:06:d1:56:ee:
3a:fc:fb:49:c7:e6:cd:6f:56:ff:8f:c1:be:08:c5:
fa:05:78:ae:33:74:0c:96:4c:57:c7:8d:f9:87:10:
35:4e:25:fb:1f:86:75:52:2e:3f:1f:7c:29:ac:f0:
05:86:1c:50:88:7f:be:98:dd:b4:cd:8f:89:d2:f3:
2e:83:5b:e4:80:1b:6b:ca:85:96:0f:e0:06:79:8c:
cc:fb:96:4b:18:ec:be:63:9b:82:b1:89:45:41:08:
3b:6b:5b:30:64:96:15:67:c6:96:eb:5d:78:5c:12:
fd:e8:82:c9:28:8b:c6:5c:d9:5b:b2:11:11:d0:d4:
c9:30:00:9a:6b:2f:3e:2b:05:13:b6:35:ca:6c:8a:
dc:02:bf:f8:3d:04:02:1b:f5:f0:0c:71:11:1f:bd:
db:f7:b1:87:1e:ce:21:c5:7e:51:0a:45:f9:63:d1:
da:f8:b9:04:4b:47:74:c1:12:d1:6b:b2:8d:3a:cb:
9f:41:43:87:b5:ac:45:5f:8d:0e:61:2d:96:a4:1b:
09:cb:7d:bd:7c:c0:ed:0b:4e:40:98:3c:75:c2:83:
19:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A7:42:A1:AC:A1:B9:6A:1E:6A:B8:A8:99:C1:3B:E9:35:BB:F7:DA
X509v3 Authority Key Identifier:
keyid:3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:83:d5:83:a7:ea:ff:a5:27:0f:fa:47:43:77:a7:07:a0:d7:
31:5c:b5:98:a9:5e:49:17:bd:91:b1:76:d9:a8:9e:7c:42:47:
23:4c:e3:15:46:fc:d2:90:d8:8a:0d:30:73:fb:a7:d7:b2:f9:
fa:32:7e:2c:d0:c5:9a:79:e9:f7:ea:95:59:9f:31:56:23:87:
89:98:8f:c1:81:e1:cb:36:e2:9d:bd:02:3f:8e:fd:36:61:95:
ae:be:53:7a:9e:8f:5a:e2:47:56:e0:a8:9f:e2:50:8b:61:03:
93:75:b6:95:9a:b9:be:f5:1a:ce:a0:9f:aa:c7:2a:5d:be:d8:
e5:b6:d9:18:a8:4a:a2:d3:ee:66:dd:c8:1e:a7:6e:f6:e5:ec:
da:a2:73:45:76:0b:2c:bf:85:50:d4:d3:62:8e:11:c5:f9:dd:
5b:73:d9:36:55:a2:27:69:59:0e:24:3f:fa:fb:92:20:5d:e5:
37:b0:90:05:1b:73:c7:c9:9a:bb:54:82:0a:2d:76:ad:5a:b6:
42:77:9b:8b:95:fb:ad:ca:19:32:7a:13:08:27:bd:bc:d2:3a:
e7:7c:b5:ba:f2:c5:1f:02:24:73:d0:aa:c7:a0:11:50:52:ca:
31:23:29:0a:cd:48:4a:9d:09:f0:f7:a5:01:a0:0a:2e:fa:65:
0e:61:c3:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVXQ5okaAONraF0LpX8F9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmM2Y1NTRiODAyODFkZWEyYTMwMDMxOGFhYWQ2ZDJkOTdm
MWNlNDQwHhcNMjUwOTA3MDQwMDQ5WhcNMjUwOTA4MDQwMDQ5WjAzMTEwLwYDVQQD
EygxNGE3NDJhMWFjYTFiOTZhMWU2YWI4YTg5OWMxM2JlOTM1YmJmN2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2aElcT1gvSZMZLopL/tQ8DmohXU
KdPs/AuQPq6QShu24TWOBnJnxQbRVu46/PtJx+bNb1b/j8G+CMX6BXiuM3QMlkxX
x435hxA1TiX7H4Z1Ui4/H3wprPAFhhxQiH++mN20zY+J0vMug1vkgBtryoWWD+AG
eYzM+5ZLGOy+Y5uCsYlFQQg7a1swZJYVZ8aW6114XBL96ILJKIvGXNlbshER0NTJ
MACaay8+KwUTtjXKbIrcAr/4PQQCG/XwDHERH73b97GHHs4hxX5RCkX5Y9Ha+LkE
S0d0wRLRa7KNOsufQUOHtaxFX40OYS2WpBsJy329fMDtC05AmDx1woMZiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSnQqGsoblqHmq4qJnBO+k1u/faMB8GA1UdIwQY
MBaAFD8/VUuAKB3qKjADGKqtbS2X8c5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHo5VlM0QW9IZW9xTUFNWXFxMXRMWmZ4emtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83OGQ1MjgtN2NkZi00NGMwLWFjZGQt
ZjUzM2I4ZGY4MGE5LzEvUHo5VlM0QW9IZW9xTUFNWXFxMXRMWmZ4emtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy83OGQ1MjgtN2NkZi00NGMwLWFjZGQtZjUzM2I4ZGY4MGE5
LzEvUHo5VlM0QW9IZW9xTUFNWXFxMXRMWmZ4emtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjoPVg6fq
/6UnD/pHQ3enB6DXMVy1mKleSRe9kbF22aiefEJHI0zjFUb80pDYig0wc/un17L5
+jJ+LNDFmnnp9+qVWZ8xViOHiZiPwYHhyzbinb0CP479NmGVrr5Tep6PWuJHVuCo
n+JQi2EDk3W2lZq5vvUazqCfqscqXb7Y5bbZGKhKotPuZt3IHqdu9uXs2qJzRXYL
LL+FUNTTYo4RxfndW3PZNlWiJ2lZDiQ/+vuSIF3lN7CQBRtzx8mau1SCCi12rVq2
Qnebi5X7rcoZMnoTCCe9vNI653y1uvLFHwIkc9Cqx6ARUFLKMSMpCs1ISp0J8Pel
AaAKLvplDmHDrQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:44 2025 by rpki-client