Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
File: pW4itGIL0EL3OiqWIfDJJH1RJIo.mft (raw, json)
Hash identifier: XqBcHx/FSwR+CC6P6lirWR7pMBzkBAO1J/GpmXk/LeU=
Subject key identifier: 89:56:C7:44:96:9A:DC:A1:F6:5F:CB:D0:8B:68:F0:2F:F6:DC:81:4C
Authority key identifier: A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A
Certificate issuer: /CN=a56e22b4620bd042f73a2a9621f0c9247d51248a
Certificate serial: 019A54C0B8E2376A1AA0E3AAABDD523E7318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
Manifest number: 0133
Signing time: Wed 05 Nov 2025 16:01:47 +0000
Manifest this update: Wed 05 Nov 2025 16:01:47 +0000
Manifest next update: Thu 06 Nov 2025 16:01:47 +0000
Files and hashes: 1: nzgTTwbAHjDz2-zsShiAXUCqJOU.roa (hash: GBnP7tc+zXd9JtLmcvpJOSz2ArIIJJ/9cimz8hGmRDA=)
2: pW4itGIL0EL3OiqWIfDJJH1RJIo.crl (hash: p1kOjKfgCtZRlyAlk2T9+/PbUKR611xWi9IQf0z42dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 16:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:b8:e2:37:6a:1a:a0:e3:aa:ab:dd:52:3e:73:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a56e22b4620bd042f73a2a9621f0c9247d51248a
Validity
Not Before: Nov 5 16:01:47 2025 GMT
Not After : Nov 6 16:01:47 2025 GMT
Subject: CN=8956c744969adca1f65fcbd08b68f02ff6dc814c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bf:de:37:f5:74:9a:8c:45:ff:9f:28:03:3c:
10:51:e6:93:18:79:11:7a:d3:0a:82:d2:86:5e:b2:
49:3b:be:3f:01:e1:dc:48:df:d7:f8:85:db:dd:2c:
8a:3a:a0:51:7f:4c:a2:06:f4:2a:fe:51:7a:c6:fc:
17:13:e7:89:df:c4:a5:b7:0b:0a:a8:ba:1a:65:21:
f7:f2:78:5d:a8:ba:0d:a1:d5:a2:07:c2:47:dd:b1:
1c:78:08:9e:90:82:89:e2:f0:c9:a6:aa:be:1c:79:
72:c0:c7:47:0f:15:ea:24:77:c7:d6:15:37:67:20:
d4:c4:7f:21:ac:54:c1:e6:11:a6:d0:13:3f:6c:00:
df:e6:59:c4:73:a3:e5:db:ca:0c:24:5e:f0:b8:1a:
70:86:1b:0f:7b:c8:1c:34:fe:3c:64:1a:54:5b:9d:
95:3d:38:12:23:f8:75:d5:69:e0:62:db:a6:8f:5d:
ea:28:f5:80:72:bc:04:82:5c:1a:31:4e:02:ba:31:
9c:75:75:6b:55:7c:2b:0e:cd:9c:8a:d0:32:c8:70:
a9:4f:d0:0a:74:4f:15:a4:c5:e6:25:a5:e6:fb:8f:
51:cb:9f:1c:b5:21:7f:f6:3b:1e:b4:1a:c4:91:cd:
4d:ab:7b:cc:ea:26:13:2b:02:7b:5c:92:54:6f:86:
35:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:56:C7:44:96:9A:DC:A1:F6:5F:CB:D0:8B:68:F0:2F:F6:DC:81:4C
X509v3 Authority Key Identifier:
keyid:A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:70:1e:0e:d8:f9:0e:b1:67:46:d5:59:89:b6:81:21:20:20:
17:fa:58:95:19:1f:ac:0a:d6:83:69:38:9d:59:64:04:75:2c:
b2:3e:fd:3e:1a:90:c7:b6:36:b0:de:98:e0:12:62:56:da:5c:
69:6c:33:fd:74:b0:25:31:2e:36:96:48:65:ed:56:a7:2e:ad:
12:d3:1a:7d:d7:f5:90:12:0d:63:11:3d:86:bb:e9:eb:59:19:
34:71:63:2b:e3:5f:52:ba:ff:91:20:f6:d5:d5:24:97:85:c2:
3e:6b:df:e6:23:50:e5:10:9d:62:03:4a:17:51:4e:ae:e6:15:
04:8f:21:fb:43:cc:e2:ca:d3:e2:50:8a:56:f4:c4:f6:31:9f:
d6:5f:45:7f:cd:19:5f:c3:73:b0:de:54:5c:39:5e:cc:16:4a:
a8:8d:b3:db:63:e8:b3:07:17:1e:a6:22:62:23:bd:04:e2:90:
76:31:af:8f:42:6f:78:36:19:36:cb:90:58:d0:0d:9b:b3:a6:
1a:f5:d5:a7:5d:75:45:aa:ef:ce:43:e0:67:3c:45:d9:34:86:
cf:7d:e3:2e:21:1c:69:86:e1:82:1d:7c:a6:e8:cd:65:9f:7b:
46:22:40:1f:18:b2:79:aa:63:2e:b8:52:6f:d6:89:1b:19:37:
99:33:fc:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpUwLjiN2oaoOOqq91SPnMYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NmUyMmI0NjIwYmQwNDJmNzNhMmE5NjIxZjBjOTI0N2Q1
MTI0OGEwHhcNMjUxMTA1MTYwMTQ3WhcNMjUxMTA2MTYwMTQ3WjAzMTEwLwYDVQQD
Eyg4OTU2Yzc0NDk2OWFkY2ExZjY1ZmNiZDA4YjY4ZjAyZmY2ZGM4MTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3b/eN/V0moxF/58oAzwQUeaTGHkR
etMKgtKGXrJJO74/AeHcSN/X+IXb3SyKOqBRf0yiBvQq/lF6xvwXE+eJ38SltwsK
qLoaZSH38nhdqLoNodWiB8JH3bEceAiekIKJ4vDJpqq+HHlywMdHDxXqJHfH1hU3
ZyDUxH8hrFTB5hGm0BM/bADf5lnEc6Pl28oMJF7wuBpwhhsPe8gcNP48ZBpUW52V
PTgSI/h11WngYtumj13qKPWAcrwEglwaMU4CujGcdXVrVXwrDs2citAyyHCpT9AK
dE8VpMXmJaXm+49Ry58ctSF/9jsetBrEkc1Nq3vM6iYTKwJ7XJJUb4Y1mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIlWx0SWmtyh9l/L0Ito8C/23IFMMB8GA1UdIwQY
MBaAFKVuIrRiC9BC9zoqliHwySR9USSKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFc0aXRHSUwwRUwzT2lxV0lmREpKSDFSSklvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9iNzgxOGQtMzI5OC00MDY5LTgyOTAt
YzZlMWNmZDYwNjYxLzEvcFc0aXRHSUwwRUwzT2lxV0lmREpKSDFSSklvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9iNzgxOGQtMzI5OC00MDY5LTgyOTAtYzZlMWNmZDYwNjYx
LzEvcFc0aXRHSUwwRUwzT2lxV0lmREpKSDFSSklvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj3AeDtj5
DrFnRtVZibaBISAgF/pYlRkfrArWg2k4nVlkBHUssj79PhqQx7Y2sN6Y4BJiVtpc
aWwz/XSwJTEuNpZIZe1Wpy6tEtMafdf1kBINYxE9hrvp61kZNHFjK+NfUrr/kSD2
1dUkl4XCPmvf5iNQ5RCdYgNKF1FOruYVBI8h+0PM4srT4lCKVvTE9jGf1l9Ff80Z
X8NzsN5UXDlezBZKqI2z22PoswcXHqYiYiO9BOKQdjGvj0JveDYZNsuQWNANm7Om
GvXVp111RarvzkPgZzxF2TSGz33jLiEcaYbhgh18pujNZZ97RiJAHxiyeapjLrhS
b9aJGxk3mTP8ZQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 23:46:50 2025 by rpki-client