Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
File: p0FyV8tjZv81cjOybSXdWIfaifs.mft (raw, json)
Hash identifier: 8Ajm60/ZZQ5xeCPxFL35X0NFPxvpuCD3byA2DauPoLA=
Subject key identifier: 70:73:57:B8:14:E7:47:24:A8:6C:CD:D0:40:50:6A:76:F5:F8:EF:39
Authority key identifier: A7:41:72:57:CB:63:66:FF:35:72:33:B2:6D:25:DD:58:87:DA:89:FB
Certificate issuer: /CN=a7417257cb6366ff357233b26d25dd5887da89fb
Certificate serial: 019A4EF51E95E32C9CFA5B908DE6774BE23E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 13:01:18 +0000
Manifest this update: Tue 04 Nov 2025 13:01:18 +0000
Manifest next update: Wed 05 Nov 2025 13:01:18 +0000
Files and hashes: 1: p0FyV8tjZv81cjOybSXdWIfaifs.crl (hash: TFV3E4cvPgKaP80xtJICl5fyXuy0zG+LNs+5lMGUe9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:1e:95:e3:2c:9c:fa:5b:90:8d:e6:77:4b:e2:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7417257cb6366ff357233b26d25dd5887da89fb
Validity
Not Before: Nov 4 13:01:18 2025 GMT
Not After : Nov 5 13:01:18 2025 GMT
Subject: CN=707357b814e74724a86ccdd040506a76f5f8ef39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:59:94:26:e7:e2:84:5c:d5:48:29:fe:36:89:
c2:cb:f3:0d:e6:bb:6a:53:fe:5d:b7:6a:bf:1b:b4:
5c:ec:2e:2f:87:fa:96:e5:82:45:39:bc:5c:de:31:
e2:d2:16:62:18:98:ac:60:79:d7:2e:81:2f:ac:47:
e6:9c:3f:41:0e:df:ad:77:a2:f8:36:9a:16:4e:55:
60:95:51:88:3b:e1:e0:d2:96:6e:dd:df:98:f5:2c:
1c:4d:1b:86:51:6f:6f:27:e3:94:01:9b:4f:c8:db:
1b:82:6d:55:a6:03:fe:0b:63:41:2a:2f:84:8c:2a:
07:9c:3c:2f:cf:e7:db:14:77:e8:a1:1d:09:28:68:
01:04:7f:7a:f2:d5:22:f3:4e:49:76:02:3a:de:ee:
f3:7c:0c:80:57:0a:e2:ce:2c:c7:be:97:a0:a1:96:
2e:4a:e9:30:61:69:7d:3b:ec:ca:3b:87:6b:cc:a7:
0a:9d:44:30:a0:35:fa:29:43:2c:a4:f7:c0:6e:c2:
3f:79:f3:5e:15:1c:88:29:1a:74:2f:46:04:f3:53:
c6:e9:c8:37:03:b8:e7:f5:02:5d:4a:4c:89:7f:54:
d6:bc:78:db:2e:1a:27:e3:46:2b:4d:44:2a:03:26:
83:00:27:3a:72:57:9e:02:53:43:40:ba:80:fe:40:
cd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:73:57:B8:14:E7:47:24:A8:6C:CD:D0:40:50:6A:76:F5:F8:EF:39
X509v3 Authority Key Identifier:
keyid:A7:41:72:57:CB:63:66:FF:35:72:33:B2:6D:25:DD:58:87:DA:89:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:13:bf:c0:77:c8:13:d8:65:f3:17:e2:9b:c3:f9:c4:3f:54:
a3:7c:16:c9:be:ab:bb:46:82:f9:d5:62:d0:46:6a:4f:32:fc:
75:c1:3d:72:d7:dc:1b:10:eb:6c:31:4e:78:ea:eb:6a:49:5e:
7c:b3:66:31:9e:2c:0e:f6:61:80:b2:d7:6e:25:87:c5:29:e4:
9d:90:45:3e:13:7b:82:82:ff:cb:29:60:da:9e:2b:ec:0b:fc:
78:ab:63:e1:17:c0:8f:71:c4:f5:01:4d:05:ff:56:de:47:ae:
e2:e3:9d:96:f4:64:7e:2b:44:26:94:c7:f2:a9:4b:a3:be:7c:
c2:22:92:3e:ab:20:cb:32:00:2f:30:e2:96:05:05:14:f6:a8:
8e:c2:d9:15:7e:ee:dc:5a:71:fd:3c:e8:5b:f1:b5:69:fa:0b:
b2:27:ed:47:55:a3:f8:9f:3e:11:f8:98:50:21:e7:e3:c7:df:
7f:58:cd:24:5f:08:4b:d5:f4:55:03:56:b9:00:76:d1:58:2a:
1e:a6:7d:b5:43:a1:d1:fd:12:52:49:8d:d0:3d:c0:6e:29:7d:
c8:7d:8a:ed:3e:14:a3:36:67:96:20:28:b6:70:4f:47:22:b5:
37:6a:b7:60:a9:96:b4:73:69:2d:18:5c:17:ef:0d:46:40:04:
53:c8:f0:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9R6V4yyc+luQjeZ3S+I+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NDE3MjU3Y2I2MzY2ZmYzNTcyMzNiMjZkMjVkZDU4ODdk
YTg5ZmIwHhcNMjUxMTA0MTMwMTE4WhcNMjUxMTA1MTMwMTE4WjAzMTEwLwYDVQQD
Eyg3MDczNTdiODE0ZTc0NzI0YTg2Y2NkZDA0MDUwNmE3NmY1ZjhlZjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7VmUJufihFzVSCn+NonCy/MN5rtq
U/5dt2q/G7Rc7C4vh/qW5YJFObxc3jHi0hZiGJisYHnXLoEvrEfmnD9BDt+td6L4
NpoWTlVglVGIO+Hg0pZu3d+Y9SwcTRuGUW9vJ+OUAZtPyNsbgm1VpgP+C2NBKi+E
jCoHnDwvz+fbFHfooR0JKGgBBH968tUi805JdgI63u7zfAyAVwrizizHvpegoZYu
SukwYWl9O+zKO4drzKcKnUQwoDX6KUMspPfAbsI/efNeFRyIKRp0L0YE81PG6cg3
A7jn9QJdSkyJf1TWvHjbLhon40YrTUQqAyaDACc6cleeAlNDQLqA/kDNVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBzV7gU50ckqGzN0EBQanb1+O85MB8GA1UdIwQY
MBaAFKdBclfLY2b/NXIzsm0l3ViH2on7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDBGeVY4dGpadjgxY2pPeWJTWGRXSWZhaWZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lMmFkZmYtZDEwNi00YWI4LWE5OTQt
ZmY4ZmUyNTUyNmM2LzEvcDBGeVY4dGpadjgxY2pPeWJTWGRXSWZhaWZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9lMmFkZmYtZDEwNi00YWI4LWE5OTQtZmY4ZmUyNTUyNmM2
LzEvcDBGeVY4dGpadjgxY2pPeWJTWGRXSWZhaWZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWhO/wHfI
E9hl8xfim8P5xD9Uo3wWyb6ru0aC+dVi0EZqTzL8dcE9ctfcGxDrbDFOeOrrakle
fLNmMZ4sDvZhgLLXbiWHxSnknZBFPhN7goL/yylg2p4r7Av8eKtj4RfAj3HE9QFN
Bf9W3keu4uOdlvRkfitEJpTH8qlLo758wiKSPqsgyzIALzDilgUFFPaojsLZFX7u
3Fpx/TzoW/G1afoLsiftR1Wj+J8+EfiYUCHn48fff1jNJF8IS9X0VQNWuQB20Vgq
HqZ9tUOh0f0SUkmN0D3Abil9yH2K7T4UozZnliAotnBPRyK1N2q3YKmWtHNpLRhc
F+8NRkAEU8jwhw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:52 2025 by rpki-client