Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
File: prEMlxD_hEDaQeVJvif-h38Uuwc.mft (raw, json)
Hash identifier: uRnaRW5nka56UrzdtS4S0G9dpGGo6OPILpX8Bw8kdq4=
Subject key identifier: 54:03:A4:8A:67:87:E7:B5:BC:F7:8F:33:5C:DC:77:E6:A3:F3:72:15
Authority key identifier: A6:B1:0C:97:10:FF:84:40:DA:41:E5:49:BE:27:FE:87:7F:14:BB:07
Certificate issuer: /CN=a6b10c9710ff8440da41e549be27fe877f14bb07
Certificate serial: 019A4EF4A5A218D54700FA6F117B0E630372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
Manifest number: 0A69
Signing time: Tue 04 Nov 2025 13:00:47 +0000
Manifest this update: Tue 04 Nov 2025 13:00:47 +0000
Manifest next update: Wed 05 Nov 2025 13:00:47 +0000
Files and hashes: 1: prEMlxD_hEDaQeVJvif-h38Uuwc.crl (hash: nSMVlYoHwgB5PQA0KKlOyfWOvVg8vGDcTWY4AUtQvP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:a5:a2:18:d5:47:00:fa:6f:11:7b:0e:63:03:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b10c9710ff8440da41e549be27fe877f14bb07
Validity
Not Before: Nov 4 13:00:47 2025 GMT
Not After : Nov 5 13:00:47 2025 GMT
Subject: CN=5403a48a6787e7b5bcf78f335cdc77e6a3f37215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:28:70:42:d4:30:2e:e8:f3:36:d6:f0:68:24:
41:be:12:c3:72:ff:31:9a:72:e9:72:b3:11:d2:f2:
aa:e4:5a:00:76:2e:2f:d3:6d:7f:f5:b3:38:e1:03:
ab:8d:58:6b:6f:94:3f:e7:c5:36:d6:7a:59:0d:df:
21:33:da:bf:5f:3f:2b:2a:d1:6d:be:ab:b5:20:ff:
43:6c:8e:dc:e0:69:2a:70:37:51:a9:df:e5:76:23:
ee:84:2f:5d:1e:c5:0c:87:4f:10:6b:94:02:55:42:
44:5e:9b:77:a2:0b:0a:3d:0d:17:ed:0b:37:9b:b0:
d0:56:a0:b2:25:91:36:1d:95:6e:84:9e:04:8e:8c:
54:fe:d2:81:d0:47:f9:55:20:dd:2d:4d:09:8f:c9:
ef:5a:e4:0f:cc:e4:dc:78:82:d6:01:69:32:00:7b:
c2:c5:d9:f4:f4:39:c5:f0:25:e6:4e:d7:32:21:d2:
76:d1:5d:d0:05:3e:c8:0b:4b:7f:a5:43:45:2d:6f:
f5:71:82:66:cb:df:5e:cd:d1:0c:f6:41:a5:71:30:
35:87:71:33:0c:86:06:da:6b:f6:af:02:ea:be:b1:
23:1d:b0:11:ed:22:63:2c:bc:03:cc:8a:df:70:ee:
68:a7:90:b2:64:ee:44:f6:e7:74:2c:a7:9a:a9:95:
49:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:03:A4:8A:67:87:E7:B5:BC:F7:8F:33:5C:DC:77:E6:A3:F3:72:15
X509v3 Authority Key Identifier:
keyid:A6:B1:0C:97:10:FF:84:40:DA:41:E5:49:BE:27:FE:87:7F:14:BB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:06:60:ed:54:eb:ad:4d:5c:61:57:4a:c4:70:92:2b:8e:de:
e6:27:89:f9:08:e9:2e:0c:93:a3:33:2a:87:ea:5c:9a:0d:67:
d8:d9:aa:06:bf:e3:d3:eb:f1:e1:b1:93:c1:bb:42:fb:45:91:
68:a7:23:2a:2d:02:ec:d6:2b:08:10:3c:12:39:0e:09:7b:99:
30:45:11:b1:72:0f:af:e8:56:e6:42:e0:e1:ea:3a:cf:66:3b:
ae:36:79:7e:86:b4:78:0d:56:f9:4a:f8:d7:0f:fa:38:7c:fe:
2b:b9:2d:a0:22:83:95:9b:fa:c9:70:78:82:9e:31:b5:3a:cf:
fd:88:48:c9:e3:7e:92:f1:20:76:4b:8b:2a:ac:e2:76:ff:c7:
ae:6d:0f:25:b7:07:01:fc:0d:3d:37:93:64:2f:0a:c4:b2:55:
24:c3:65:a7:f0:e3:ee:48:d8:ee:c1:54:ab:32:b5:ba:a3:d1:
d2:71:61:5a:4a:f8:e8:2e:d6:50:7a:73:a4:d5:13:11:4e:cb:
36:8f:a4:fd:49:f1:a6:7f:a9:62:0e:50:b0:b5:47:23:ee:80:
4f:a3:86:dd:5e:b5:e5:0e:f9:41:2d:b4:c7:02:b3:80:10:44:
f9:cf:7d:68:04:b9:e1:6e:88:96:84:e3:0c:88:9d:d9:47:ba:
22:4e:6e:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9KWiGNVHAPpvEXsOYwNyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YjEwYzk3MTBmZjg0NDBkYTQxZTU0OWJlMjdmZTg3N2Yx
NGJiMDcwHhcNMjUxMTA0MTMwMDQ3WhcNMjUxMTA1MTMwMDQ3WjAzMTEwLwYDVQQD
Eyg1NDAzYTQ4YTY3ODdlN2I1YmNmNzhmMzM1Y2RjNzdlNmEzZjM3MjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryhwQtQwLujzNtbwaCRBvhLDcv8x
mnLpcrMR0vKq5FoAdi4v021/9bM44QOrjVhrb5Q/58U21npZDd8hM9q/Xz8rKtFt
vqu1IP9DbI7c4GkqcDdRqd/ldiPuhC9dHsUMh08Qa5QCVUJEXpt3ogsKPQ0X7Qs3
m7DQVqCyJZE2HZVuhJ4EjoxU/tKB0Ef5VSDdLU0Jj8nvWuQPzOTceILWAWkyAHvC
xdn09DnF8CXmTtcyIdJ20V3QBT7IC0t/pUNFLW/1cYJmy99ezdEM9kGlcTA1h3Ez
DIYG2mv2rwLqvrEjHbAR7SJjLLwDzIrfcO5op5CyZO5E9ud0LKeaqZVJeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQDpIpnh+e1vPePM1zcd+aj83IVMB8GA1UdIwQY
MBaAFKaxDJcQ/4RA2kHlSb4n/od/FLsHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHJFTWx4RF9oRURhUWVWSnZpZi1oMzhVdXdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9iMjFjZjMtZTU3Ni00MjdiLTkxYzkt
Y2U3Zjk1OGQ4MTM1LzEvcHJFTWx4RF9oRURhUWVWSnZpZi1oMzhVdXdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9iMjFjZjMtZTU3Ni00MjdiLTkxYzktY2U3Zjk1OGQ4MTM1
LzEvcHJFTWx4RF9oRURhUWVWSnZpZi1oMzhVdXdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWQZg7VTr
rU1cYVdKxHCSK47e5ieJ+QjpLgyTozMqh+pcmg1n2NmqBr/j0+vx4bGTwbtC+0WR
aKcjKi0C7NYrCBA8EjkOCXuZMEURsXIPr+hW5kLg4eo6z2Y7rjZ5foa0eA1W+Ur4
1w/6OHz+K7ktoCKDlZv6yXB4gp4xtTrP/YhIyeN+kvEgdkuLKqzidv/Hrm0PJbcH
AfwNPTeTZC8KxLJVJMNlp/Dj7kjY7sFUqzK1uqPR0nFhWkr46C7WUHpzpNUTEU7L
No+k/Unxpn+pYg5QsLVHI+6AT6OG3V615Q75QS20xwKzgBBE+c99aAS54W6IloTj
DIid2Ue6Ik5utw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:38:54 2025 by rpki-client