Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
File: PCr6XHBtPrCpLaibXUG5NutJzLg.mft (raw, json)
Hash identifier: B5nSbrb+5dNEqCwAQcMDygN63BHvC5mSfyQ5fH1lJ9o=
Subject key identifier: 44:74:AA:6C:E5:3E:9A:C2:07:BC:F6:C1:33:F3:A0:B3:E6:73:F3:50
Authority key identifier: 3C:2A:FA:5C:70:6D:3E:B0:A9:2D:A8:9B:5D:41:B9:36:EB:49:CC:B8
Certificate issuer: /CN=3c2afa5c706d3eb0a92da89b5d41b936eb49ccb8
Certificate serial: 0199221F10761E7C781AA82072D553079F2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
Manifest number: 1129
Signing time: Sun 07 Sep 2025 03:01:25 +0000
Manifest this update: Sun 07 Sep 2025 03:01:25 +0000
Manifest next update: Mon 08 Sep 2025 03:01:25 +0000
Files and hashes: 1: PCr6XHBtPrCpLaibXUG5NutJzLg.crl (hash: 52ihQj1utgA7eA/SkRFzmBIrcXZ+sob6W5ZfeJ8OjEo=)
2: gS9qTUkzusPVnwIVsvZEcIJfkGw.roa (hash: vAfS5SaRlx1aspB2qU2R3kxZGRQKFuwGAmKIB/uyw98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:10:76:1e:7c:78:1a:a8:20:72:d5:53:07:9f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c2afa5c706d3eb0a92da89b5d41b936eb49ccb8
Validity
Not Before: Sep 7 03:01:25 2025 GMT
Not After : Sep 8 03:01:25 2025 GMT
Subject: CN=4474aa6ce53e9ac207bcf6c133f3a0b3e673f350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cc:1f:0b:86:e8:25:42:8b:27:3a:c0:ce:e2:
f7:d4:ee:d3:f3:fc:5a:e3:d3:df:1a:ef:51:7a:56:
1b:fa:df:a7:74:aa:c7:18:ef:37:76:d3:6c:36:d8:
19:b6:68:bd:05:ed:24:38:94:c5:7c:4c:6b:fa:8a:
a6:e0:1d:43:be:33:f7:1c:98:ff:e9:fd:3b:ff:3d:
92:bd:a3:3b:82:c8:82:4c:ec:03:5d:08:bf:ab:4d:
3d:b2:bf:51:25:37:89:6f:49:c6:0d:e6:c4:14:a0:
4d:bb:a5:34:1b:46:1f:3e:7d:38:13:99:79:ca:84:
12:48:40:48:f7:94:05:37:2a:49:44:5b:0a:95:5b:
62:fb:5a:fc:23:ca:3c:71:20:80:e0:ad:fb:58:57:
95:60:79:7b:25:59:15:aa:a5:18:bd:08:b4:75:65:
9b:2e:ea:f5:98:20:9b:f9:eb:42:2a:d1:77:13:92:
21:10:4c:74:9a:ee:31:50:6d:ad:b8:9f:a1:72:ec:
f1:e8:3f:42:5e:18:74:dd:63:e3:2c:f5:91:3f:bb:
cb:79:2b:fa:07:a1:35:3c:68:88:2c:8c:28:d5:97:
37:57:4f:1f:9b:ef:e2:29:5b:e3:2e:a1:a1:e7:99:
15:34:20:5f:05:e6:7c:2c:5a:0b:74:a8:97:26:98:
7f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:74:AA:6C:E5:3E:9A:C2:07:BC:F6:C1:33:F3:A0:B3:E6:73:F3:50
X509v3 Authority Key Identifier:
keyid:3C:2A:FA:5C:70:6D:3E:B0:A9:2D:A8:9B:5D:41:B9:36:EB:49:CC:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:00:db:e2:cb:31:df:49:19:e5:00:73:1d:91:cc:1a:ff:76:
4d:77:29:f2:e7:e9:fe:35:d4:3a:d6:0a:ba:19:a5:69:1d:03:
e0:53:e4:95:7e:9e:9e:b2:3c:80:d3:b1:55:42:f3:6e:f0:2e:
67:e5:ce:21:a8:46:90:0e:e8:22:e3:55:53:1b:14:b1:01:5d:
f6:dd:38:a4:35:05:a4:f4:99:c6:65:f5:4d:72:b9:5f:59:ef:
cb:8c:9f:8d:26:fe:06:c9:f3:cb:f2:66:2f:1c:ff:4e:43:c0:
4e:bb:50:78:41:7f:52:da:a3:67:eb:6d:16:8c:a2:a7:e2:81:
9f:1b:9f:cd:d8:2a:56:d3:e4:87:cf:44:d3:0a:86:3f:56:ac:
3f:7b:03:eb:bd:70:06:3d:59:d8:f1:42:fc:c3:ee:d9:94:5d:
d9:36:0f:70:00:62:98:83:62:50:7a:44:49:16:65:98:bc:b5:
26:e4:61:fd:fb:ee:16:12:c2:81:b7:a6:1c:5e:bd:5f:30:8a:
f0:d4:7f:e0:38:77:85:58:76:c2:82:9e:8c:ea:05:1d:18:ef:
24:fc:9f:c4:f4:36:94:00:fb:72:25:16:43:d6:fd:dc:ef:91:
83:f7:8a:ce:fa:89:71:cf:29:16:de:d2:dc:9e:ff:93:5f:d9:
0a:28:44:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHxB2Hnx4GqggctVTB58uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMmFmYTVjNzA2ZDNlYjBhOTJkYTg5YjVkNDFiOTM2ZWI0
OWNjYjgwHhcNMjUwOTA3MDMwMTI1WhcNMjUwOTA4MDMwMTI1WjAzMTEwLwYDVQQD
Eyg0NDc0YWE2Y2U1M2U5YWMyMDdiY2Y2YzEzM2YzYTBiM2U2NzNmMzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MwfC4boJUKLJzrAzuL31O7T8/xa
49PfGu9RelYb+t+ndKrHGO83dtNsNtgZtmi9Be0kOJTFfExr+oqm4B1DvjP3HJj/
6f07/z2SvaM7gsiCTOwDXQi/q009sr9RJTeJb0nGDebEFKBNu6U0G0YfPn04E5l5
yoQSSEBI95QFNypJRFsKlVti+1r8I8o8cSCA4K37WFeVYHl7JVkVqqUYvQi0dWWb
Lur1mCCb+etCKtF3E5IhEEx0mu4xUG2tuJ+hcuzx6D9CXhh03WPjLPWRP7vLeSv6
B6E1PGiILIwo1Zc3V08fm+/iKVvjLqGh55kVNCBfBeZ8LFoLdKiXJph/YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFER0qmzlPprCB7z2wTPzoLPmc/NQMB8GA1UdIwQY
MBaAFDwq+lxwbT6wqS2om11BuTbrScy4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUENyNlhIQnRQckNwTGFpYlhVRzVOdXRKekxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9lYjFjNGYtZmQ4MC00OTE5LWIxODUt
Zjc4MzNhM2YyNDg1LzEvUENyNlhIQnRQckNwTGFpYlhVRzVOdXRKekxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9lYjFjNGYtZmQ4MC00OTE5LWIxODUtZjc4MzNhM2YyNDg1
LzEvUENyNlhIQnRQckNwTGFpYlhVRzVOdXRKekxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADgDb4ssx
30kZ5QBzHZHMGv92TXcp8ufp/jXUOtYKuhmlaR0D4FPklX6enrI8gNOxVULzbvAu
Z+XOIahGkA7oIuNVUxsUsQFd9t04pDUFpPSZxmX1TXK5X1nvy4yfjSb+Bsnzy/Jm
Lxz/TkPATrtQeEF/UtqjZ+ttFoyip+KBnxufzdgqVtPkh89E0wqGP1asP3sD671w
Bj1Z2PFC/MPu2ZRd2TYPcABimINiUHpESRZlmLy1JuRh/fvuFhLCgbemHF69XzCK
8NR/4Dh3hVh2woKejOoFHRjvJPyfxPQ2lAD7ciUWQ9b93O+Rg/eKzvqJcc8pFt7S
3J7/k1/ZCihECw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:21 2025 by rpki-client