Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.mft
File: PKE4ItxLDjEIGkhX_QQHDW2svgw.mft (raw, json)
Hash identifier: dy63jYfymcKp0n4Apc3H0oWpWx+rYSX5Smn7UGW1Rew=
Subject key identifier: D4:86:AD:35:9B:2C:6E:C0:E8:79:21:D6:79:C7:9A:70:56:D5:DC:62
Authority key identifier: 3C:A1:38:22:DC:4B:0E:31:08:1A:48:57:FD:04:07:0D:6D:AC:BE:0C
Certificate issuer: /CN=3ca13822dc4b0e31081a4857fd04070d6dacbe0c
Certificate serial: 019A4E4F5F85EC937B767EA2E2195883C510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKE4ItxLDjEIGkhX_QQHDW2svgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 10:00:15 +0000
Manifest this update: Tue 04 Nov 2025 10:00:15 +0000
Manifest next update: Wed 05 Nov 2025 10:00:15 +0000
Files and hashes: 1: PKE4ItxLDjEIGkhX_QQHDW2svgw.crl (hash: E2q0vbS++oIDS4mMwQEzSKNiOdFB+K9CXF46/JY7h0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PKE4ItxLDjEIGkhX_QQHDW2svgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:5f:85:ec:93:7b:76:7e:a2:e2:19:58:83:c5:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ca13822dc4b0e31081a4857fd04070d6dacbe0c
Validity
Not Before: Nov 4 10:00:15 2025 GMT
Not After : Nov 5 10:00:15 2025 GMT
Subject: CN=d486ad359b2c6ec0e87921d679c79a7056d5dc62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:98:e6:e9:10:a3:5b:33:75:76:e7:de:66:27:
c2:9d:19:4e:cc:b5:e5:73:f9:cc:d8:e6:6e:ac:5f:
37:c9:8d:a0:c3:48:32:0c:7c:f0:b1:cb:a2:eb:fb:
d2:10:3a:fb:30:c5:05:a1:05:e2:e4:ab:f0:66:d3:
29:80:d7:f3:43:03:25:7a:87:01:31:b8:d7:42:f8:
ea:7d:81:9e:72:10:17:63:50:31:79:34:db:f5:66:
95:31:e2:df:d1:67:c8:66:31:3e:c2:b7:8a:31:f0:
5a:1a:f6:a5:b5:b6:c9:82:ff:15:1b:79:d4:f6:c8:
3f:20:93:cc:f5:ea:b1:3e:9e:d1:e4:76:94:d6:00:
3f:59:cd:9c:4a:07:af:0e:c3:63:45:1a:2d:9e:10:
7d:ff:2f:30:f1:d0:e2:d0:b9:c1:0f:41:c7:6f:50:
c6:23:da:cd:42:f5:26:5e:c8:de:36:fd:d8:31:95:
80:6e:18:d2:71:d2:08:b0:6d:51:d6:ae:7d:0d:e4:
8e:90:3a:ee:ad:28:e9:97:6d:81:00:f8:d3:31:86:
82:c6:88:be:f2:1b:98:4a:ee:2e:1b:f0:a4:8a:f9:
6b:26:2f:1a:b3:88:e4:1d:b0:4b:02:27:9b:01:57:
0b:de:de:71:13:fc:3d:58:99:14:09:3d:70:9e:9d:
36:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:86:AD:35:9B:2C:6E:C0:E8:79:21:D6:79:C7:9A:70:56:D5:DC:62
X509v3 Authority Key Identifier:
keyid:3C:A1:38:22:DC:4B:0E:31:08:1A:48:57:FD:04:07:0D:6D:AC:BE:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKE4ItxLDjEIGkhX_QQHDW2svgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:00:80:5d:9e:37:2a:30:a8:94:6c:75:9f:c3:af:5a:15:58:
15:bc:d5:3f:ab:0e:0b:bb:20:40:b1:44:07:e2:30:46:80:f2:
85:20:f0:cf:f1:71:e6:e9:31:36:ff:20:74:ce:90:5d:3b:93:
cd:90:e2:09:f6:47:ef:c9:c6:77:13:73:28:a8:cd:18:a8:e8:
5f:7e:df:02:51:97:04:a6:65:ac:f6:f9:02:67:28:42:13:30:
c7:c3:c9:38:73:4b:df:e8:0b:59:12:b7:0d:02:43:52:46:ff:
e9:70:fa:bd:f3:51:52:25:ba:c3:9a:5a:07:18:59:2b:fa:6d:
96:90:a8:42:2d:d9:ee:54:a0:26:fe:2e:ca:e3:7a:f0:f2:da:
5c:62:4c:df:5b:33:be:b8:39:58:b6:86:d5:12:a2:44:ea:3c:
36:50:f8:61:a5:5e:0b:a5:7d:c2:50:be:9d:de:5d:54:f5:db:
62:c7:27:5c:80:4b:bd:e0:7c:68:ca:c6:ec:0f:12:9a:a4:48:
31:a6:90:02:0e:15:e6:ad:dd:91:33:4f:ae:26:cb:c6:5a:85:
60:8d:f5:fa:84:a9:fa:12:e3:37:06:4c:24:fe:d6:e3:ee:28:
c5:47:b7:9a:95:f8:9f:2d:1b:8a:e8:24:d5:78:cb:80:7e:48:
53:8d:e9:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT1+F7JN7dn6i4hlYg8UQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjYTEzODIyZGM0YjBlMzEwODFhNDg1N2ZkMDQwNzBkNmRh
Y2JlMGMwHhcNMjUxMTA0MTAwMDE1WhcNMjUxMTA1MTAwMDE1WjAzMTEwLwYDVQQD
EyhkNDg2YWQzNTliMmM2ZWMwZTg3OTIxZDY3OWM3OWE3MDU2ZDVkYzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJjm6RCjWzN1dufeZifCnRlOzLXl
c/nM2OZurF83yY2gw0gyDHzwscui6/vSEDr7MMUFoQXi5KvwZtMpgNfzQwMleocB
MbjXQvjqfYGechAXY1AxeTTb9WaVMeLf0WfIZjE+wreKMfBaGvaltbbJgv8VG3nU
9sg/IJPM9eqxPp7R5HaU1gA/Wc2cSgevDsNjRRotnhB9/y8w8dDi0LnBD0HHb1DG
I9rNQvUmXsjeNv3YMZWAbhjScdIIsG1R1q59DeSOkDrurSjpl22BAPjTMYaCxoi+
8huYSu4uG/CkivlrJi8as4jkHbBLAiebAVcL3t5xE/w9WJkUCT1wnp022wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNSGrTWbLG7A6Hkh1nnHmnBW1dxiMB8GA1UdIwQY
MBaAFDyhOCLcSw4xCBpIV/0EBw1trL4MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEtFNEl0eExEakVJR2toWF9RUUhEVzJzdmd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zN2YwYmQtYWQxYS00MmY5LWI5NDgt
YjI5NGY2YmY4MTM3LzEvUEtFNEl0eExEakVJR2toWF9RUUhEVzJzdmd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8zN2YwYmQtYWQxYS00MmY5LWI5NDgtYjI5NGY2YmY4MTM3
LzEvUEtFNEl0eExEakVJR2toWF9RUUhEVzJzdmd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtwCAXZ43
KjColGx1n8OvWhVYFbzVP6sOC7sgQLFEB+IwRoDyhSDwz/Fx5ukxNv8gdM6QXTuT
zZDiCfZH78nGdxNzKKjNGKjoX37fAlGXBKZlrPb5AmcoQhMwx8PJOHNL3+gLWRK3
DQJDUkb/6XD6vfNRUiW6w5paBxhZK/ptlpCoQi3Z7lSgJv4uyuN68PLaXGJM31sz
vrg5WLaG1RKiROo8NlD4YaVeC6V9wlC+nd5dVPXbYscnXIBLveB8aMrG7A8SmqRI
MaaQAg4V5q3dkTNPribLxlqFYI31+oSp+hLjNwZMJP7W4+4oxUe3mpX4ny0biugk
1XjLgH5IU43pHg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:26 2025 by rpki-client