Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.mft
File: pWT0IqqXs96coPZ5Gfv4LrH93dI.mft (raw, json)
Hash identifier: MDGbccHvXM2qHIaKNZ9AU5RhaGT9hJG+MzDjZgXegk0=
Subject key identifier: C7:86:AF:39:09:84:C4:6E:52:5C:F7:0F:78:70:0A:5B:20:D0:7C:C2
Authority key identifier: A5:64:F4:22:AA:97:B3:DE:9C:A0:F6:79:19:FB:F8:2E:B1:FD:DD:D2
Certificate issuer: /CN=a564f422aa97b3de9ca0f67919fbf82eb1fdddd2
Certificate serial: 019A4EF49B3DE672FB3417AB629F87AE0FFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWT0IqqXs96coPZ5Gfv4LrH93dI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.mft
Manifest number: 0737
Signing time: Tue 04 Nov 2025 13:00:44 +0000
Manifest this update: Tue 04 Nov 2025 13:00:44 +0000
Manifest next update: Wed 05 Nov 2025 13:00:44 +0000
Files and hashes: 1: pWT0IqqXs96coPZ5Gfv4LrH93dI.crl (hash: SRVXyYRli1q+kh1D4VcYnansLBmpBnGeUWDQEe3dlaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pWT0IqqXs96coPZ5Gfv4LrH93dI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:9b:3d:e6:72:fb:34:17:ab:62:9f:87:ae:0f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a564f422aa97b3de9ca0f67919fbf82eb1fdddd2
Validity
Not Before: Nov 4 13:00:44 2025 GMT
Not After : Nov 5 13:00:44 2025 GMT
Subject: CN=c786af390984c46e525cf70f78700a5b20d07cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:05:aa:e6:c9:1b:02:42:1d:9e:96:ce:14:a9:
0e:bd:de:3c:17:b1:8a:52:3b:62:1b:47:b3:4c:73:
23:bd:4a:23:b5:b1:71:89:92:47:51:e0:69:5f:b0:
67:d7:8d:94:78:00:6c:60:11:da:88:f5:17:dd:8a:
6c:5b:04:cd:5d:32:b4:a2:da:14:b6:a7:1c:b2:1f:
3d:a0:0a:ef:24:00:df:6b:84:f7:65:59:51:ee:1c:
d6:5f:bb:8a:8b:a7:d3:3e:da:8a:11:03:b7:44:e7:
82:87:bb:ce:f3:ab:d4:57:1d:a6:ca:6f:ac:2d:a9:
4d:3e:4c:fe:e3:ec:7d:cd:91:8e:3b:a8:bb:48:34:
7c:0f:88:eb:5d:f4:07:3c:70:f3:33:04:e9:12:21:
65:10:36:59:d6:6f:4e:6e:2e:a4:6d:40:5b:d5:9a:
72:af:b5:df:2d:68:7c:7c:e0:e5:c9:15:8d:f8:0e:
95:a1:b0:0b:65:88:f7:6b:13:37:b7:c5:b3:0b:99:
23:f9:bd:51:ed:02:46:e6:1a:aa:61:ba:a4:9a:5e:
35:bb:a6:49:d3:27:61:f4:25:81:0e:48:b8:c7:e5:
62:82:57:80:4e:39:e2:bb:7a:2e:d3:5f:09:b4:94:
4c:3b:54:e7:9a:eb:f5:a2:ca:75:12:25:db:9d:17:
24:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:86:AF:39:09:84:C4:6E:52:5C:F7:0F:78:70:0A:5B:20:D0:7C:C2
X509v3 Authority Key Identifier:
keyid:A5:64:F4:22:AA:97:B3:DE:9C:A0:F6:79:19:FB:F8:2E:B1:FD:DD:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWT0IqqXs96coPZ5Gfv4LrH93dI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:87:6e:51:b7:41:9f:6e:78:1c:ad:fb:fa:01:92:1b:39:b0:
57:0c:80:ee:07:1c:11:bd:d7:43:71:c6:80:1d:2e:57:df:7b:
75:bb:06:6c:12:72:92:5d:d7:03:6d:da:8b:30:1d:c1:70:77:
8d:fc:d8:5f:6e:8f:55:e8:11:65:76:58:71:7c:3d:8a:53:31:
a1:95:0a:3a:ce:bc:3c:97:8f:4c:3a:b5:56:14:b5:db:3e:63:
ab:04:7f:ee:cb:6b:f9:c4:d9:65:d8:0d:80:73:1a:30:29:c0:
3e:2f:ec:5a:6b:65:81:04:2f:d7:c2:44:9d:46:c8:50:92:c1:
bf:bf:7b:58:9b:a5:55:6b:a0:bd:23:a0:92:82:36:6d:ed:3d:
a7:4c:70:f4:d0:8d:c1:28:b1:b0:f8:10:f1:1a:97:02:22:ff:
20:73:01:cf:f5:1b:1f:e4:d8:9b:d6:33:ff:1f:5e:44:dc:2c:
53:a1:b6:f9:77:b2:4a:b1:72:00:72:b6:6a:42:97:74:ee:2e:
04:93:41:4f:c4:2d:cf:79:e1:d6:8d:fb:f2:ea:6a:c0:12:67:
29:ac:07:2c:48:15:f1:28:6b:e1:44:25:1c:8b:e3:12:e7:f5:
8c:5b:2b:7e:50:6c:b4:77:84:b7:f8:15:d7:98:0a:38:a5:10:
dd:dc:31:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9Js95nL7NBerYp+Hrg//MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NjRmNDIyYWE5N2IzZGU5Y2EwZjY3OTE5ZmJmODJlYjFm
ZGRkZDIwHhcNMjUxMTA0MTMwMDQ0WhcNMjUxMTA1MTMwMDQ0WjAzMTEwLwYDVQQD
EyhjNzg2YWYzOTA5ODRjNDZlNTI1Y2Y3MGY3ODcwMGE1YjIwZDA3Y2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAWq5skbAkIdnpbOFKkOvd48F7GK
UjtiG0ezTHMjvUojtbFxiZJHUeBpX7Bn142UeABsYBHaiPUX3YpsWwTNXTK0otoU
tqccsh89oArvJADfa4T3ZVlR7hzWX7uKi6fTPtqKEQO3ROeCh7vO86vUVx2mym+s
LalNPkz+4+x9zZGOO6i7SDR8D4jrXfQHPHDzMwTpEiFlEDZZ1m9Obi6kbUBb1Zpy
r7XfLWh8fODlyRWN+A6VobALZYj3axM3t8WzC5kj+b1R7QJG5hqqYbqkml41u6ZJ
0ydh9CWBDki4x+VigleATjniu3ou018JtJRMO1Tnmuv1osp1EiXbnRckewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMeGrzkJhMRuUlz3D3hwClsg0HzCMB8GA1UdIwQY
MBaAFKVk9CKql7PenKD2eRn7+C6x/d3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFdUMElxcVhzOTZjb1BaNUdmdjRMckg5M2RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kNTllOTgtMjEwZi00YjU1LWFjNGEt
MDI2ODM4MTEwN2FmLzEvcFdUMElxcVhzOTZjb1BaNUdmdjRMckg5M2RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9kNTllOTgtMjEwZi00YjU1LWFjNGEtMDI2ODM4MTEwN2Fm
LzEvcFdUMElxcVhzOTZjb1BaNUdmdjRMckg5M2RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL4duUbdB
n254HK37+gGSGzmwVwyA7gccEb3XQ3HGgB0uV997dbsGbBJykl3XA23aizAdwXB3
jfzYX26PVegRZXZYcXw9ilMxoZUKOs68PJePTDq1VhS12z5jqwR/7str+cTZZdgN
gHMaMCnAPi/sWmtlgQQv18JEnUbIUJLBv797WJulVWugvSOgkoI2be09p0xw9NCN
wSixsPgQ8RqXAiL/IHMBz/UbH+TYm9Yz/x9eRNwsU6G2+XeySrFyAHK2akKXdO4u
BJNBT8Qtz3nh1o378upqwBJnKawHLEgV8Shr4UQlHIvjEuf1jFsrflBstHeEt/gV
15gKOKUQ3dwxNQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:38 2025 by rpki-client