Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft
File: pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft (raw, json)
Hash identifier: 9/w1BQzVlDnBijPoX+NPX72/aceWVsO1UujJziqu4uo=
Subject key identifier: ED:94:32:FC:90:5F:9B:D3:71:B8:28:82:30:3A:79:C5:FD:8C:5A:D6
Authority key identifier: A4:3E:2B:9F:BC:8B:47:72:CF:80:00:74:8C:47:DD:43:7B:3C:59:8F
Certificate issuer: /CN=a43e2b9fbc8b4772cf8000748c47dd437b3c598f
Certificate serial: 019A4F991B201D96923F0F08A89237DE5712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft
Manifest number: 0365
Signing time: Tue 04 Nov 2025 16:00:25 +0000
Manifest this update: Tue 04 Nov 2025 16:00:25 +0000
Manifest next update: Wed 05 Nov 2025 16:00:25 +0000
Files and hashes: 1: pD4rn7yLR3LPgAB0jEfdQ3s8WY8.crl (hash: ttfYKuGUK4x2zg2P7bBoTuxaGjs7d8rmehd+1qd/0z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:1b:20:1d:96:92:3f:0f:08:a8:92:37:de:57:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a43e2b9fbc8b4772cf8000748c47dd437b3c598f
Validity
Not Before: Nov 4 16:00:25 2025 GMT
Not After : Nov 5 16:00:25 2025 GMT
Subject: CN=ed9432fc905f9bd371b82882303a79c5fd8c5ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c2:be:d9:af:9e:68:53:5e:d5:b5:5c:ce:7b:
52:e5:e9:c8:92:65:73:1f:c2:a9:53:4a:55:72:76:
c0:d0:e1:2b:29:5d:24:28:42:ca:e2:23:81:a9:ad:
0e:b2:ef:bc:f1:46:18:50:7c:ae:ed:93:cc:73:e8:
2a:ad:b5:f2:c2:16:23:e7:06:1e:ec:e2:e5:28:a5:
1c:22:4e:1d:f7:d1:8f:52:04:4d:27:af:d9:44:17:
d7:a3:27:1e:64:e7:00:9e:76:7e:f1:e5:40:0b:70:
bf:88:2d:7d:df:34:75:79:94:79:84:55:48:ac:d9:
5d:fb:be:7b:c0:63:7c:70:d7:ef:16:19:37:e4:f4:
18:13:e4:fd:16:c3:73:5a:a9:84:11:22:92:90:af:
46:28:93:fd:57:a9:c6:52:2c:87:45:fa:53:c8:c3:
75:ca:9b:f4:5c:02:f0:d0:fc:e1:24:77:a9:cd:84:
67:3f:ea:5a:6b:fd:d7:0d:c3:5f:a3:f3:cb:57:58:
28:53:be:bd:6e:6a:3d:ce:73:fb:0b:92:48:5d:49:
04:8c:a5:df:21:66:1d:db:b9:5e:71:ff:0d:70:a4:
2c:08:27:b2:67:f3:83:86:90:ff:76:ed:7d:06:e0:
59:59:68:18:0b:14:4c:12:55:b2:5b:85:26:7d:03:
b6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:94:32:FC:90:5F:9B:D3:71:B8:28:82:30:3A:79:C5:FD:8C:5A:D6
X509v3 Authority Key Identifier:
keyid:A4:3E:2B:9F:BC:8B:47:72:CF:80:00:74:8C:47:DD:43:7B:3C:59:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:f8:15:6d:de:e5:51:47:e5:c6:03:63:52:0b:55:09:ce:bc:
8e:d2:0f:fe:a2:01:6e:6d:20:6d:84:e8:a5:76:2b:2c:6d:29:
8c:fc:95:03:3d:bd:d7:38:82:7d:71:82:d5:03:22:cf:15:13:
80:93:6a:6f:55:60:b2:3d:94:81:93:90:bc:93:84:f3:23:ee:
9f:75:77:c3:66:76:9e:07:cb:5d:c7:2a:e1:fe:08:bb:8e:e6:
23:a5:98:98:db:25:4e:32:fc:90:cc:55:39:cf:47:f0:24:59:
5e:ac:24:98:a6:a8:c9:15:e7:ef:22:97:07:27:cf:ca:4d:4a:
d2:b3:28:d3:60:65:02:30:2b:82:c2:96:b0:fb:bf:c6:9d:19:
ec:2d:6f:a6:e3:87:a7:2c:58:d1:15:04:63:19:e6:ac:28:96:
f2:ac:9d:5b:44:2a:63:35:f0:b5:32:6d:5f:28:07:ab:4c:2f:
72:82:0b:f0:6c:c5:f4:99:a8:fe:67:bd:f6:98:b3:e0:46:f4:
b5:76:18:b0:49:cb:4b:24:26:81:7a:be:00:4e:9e:26:3f:55:
cc:e0:af:4f:c8:05:ab:51:27:3b:ac:89:56:99:b8:c2:eb:e0:
99:e5:ed:57:d3:35:0a:76:68:be:89:73:24:07:e1:5c:e2:dd:
44:d7:2a:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmRsgHZaSPw8IqJI33lcSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0M2UyYjlmYmM4YjQ3NzJjZjgwMDA3NDhjNDdkZDQzN2Iz
YzU5OGYwHhcNMjUxMTA0MTYwMDI1WhcNMjUxMTA1MTYwMDI1WjAzMTEwLwYDVQQD
EyhlZDk0MzJmYzkwNWY5YmQzNzFiODI4ODIzMDNhNzljNWZkOGM1YWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcK+2a+eaFNe1bVczntS5enIkmVz
H8KpU0pVcnbA0OErKV0kKELK4iOBqa0Osu+88UYYUHyu7ZPMc+gqrbXywhYj5wYe
7OLlKKUcIk4d99GPUgRNJ6/ZRBfXoyceZOcAnnZ+8eVAC3C/iC193zR1eZR5hFVI
rNld+757wGN8cNfvFhk35PQYE+T9FsNzWqmEESKSkK9GKJP9V6nGUiyHRfpTyMN1
ypv0XALw0PzhJHepzYRnP+paa/3XDcNfo/PLV1goU769bmo9znP7C5JIXUkEjKXf
IWYd27lecf8NcKQsCCeyZ/ODhpD/du19BuBZWWgYCxRMElWyW4UmfQO2qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2UMvyQX5vTcbgogjA6ecX9jFrWMB8GA1UdIwQY
MBaAFKQ+K5+8i0dyz4AAdIxH3UN7PFmPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEQ0cm43eUxSM0xQZ0FCMGpFZmRRM3M4V1k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iOGY5ZDktNGYyNS00ODE4LWIzM2Mt
YjAwMWU1YmFkMDE3LzEvcEQ0cm43eUxSM0xQZ0FCMGpFZmRRM3M4V1k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9iOGY5ZDktNGYyNS00ODE4LWIzM2MtYjAwMWU1YmFkMDE3
LzEvcEQ0cm43eUxSM0xQZ0FCMGpFZmRRM3M4V1k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABPgVbd7l
UUflxgNjUgtVCc68jtIP/qIBbm0gbYTopXYrLG0pjPyVAz291ziCfXGC1QMizxUT
gJNqb1Vgsj2UgZOQvJOE8yPun3V3w2Z2ngfLXccq4f4Iu47mI6WYmNslTjL8kMxV
Oc9H8CRZXqwkmKaoyRXn7yKXByfPyk1K0rMo02BlAjArgsKWsPu/xp0Z7C1vpuOH
pyxY0RUEYxnmrCiW8qydW0QqYzXwtTJtXygHq0wvcoIL8GzF9Jmo/me99piz4Eb0
tXYYsEnLSyQmgXq+AE6eJj9VzOCvT8gFq1EnO6yJVpm4wuvgmeXtV9M1CnZovolz
JAfhXOLdRNcqdw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:54:54 2025 by rpki-client