Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
File: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft (raw, json)
Hash identifier: 5mh8SAQUuYq9TybImvZTBS26b+BGIAf/gbIFBqnjwzU=
Subject key identifier: 1B:55:75:40:05:D1:D8:1E:B5:E6:DC:B5:89:07:2C:0D:68:2D:38:A9
Authority key identifier: A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
Certificate issuer: /CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Certificate serial: 019A50E363A3E21B1E26CB91FF858BF72B17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
Manifest number: 0B01
Signing time: Tue 04 Nov 2025 22:01:10 +0000
Manifest this update: Tue 04 Nov 2025 22:01:10 +0000
Manifest next update: Wed 05 Nov 2025 22:01:10 +0000
Files and hashes: 1: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl (hash: jCgFtDGCkAdhGaONRx1bBUX7meUEQ8jIvSLvszCamG4=)
2: po_LVWpbKXE3R88IVy-uZ3WJPNw.roa (hash: K+p2Dato5TDcm+bOMSRlFPytRWT6WZtTR14LVyHGo2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:63:a3:e2:1b:1e:26:cb:91:ff:85:8b:f7:2b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Validity
Not Before: Nov 4 22:01:10 2025 GMT
Not After : Nov 5 22:01:10 2025 GMT
Subject: CN=1b55754005d1d81eb5e6dcb589072c0d682d38a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:10:fc:52:b5:ea:c5:f5:ea:5b:21:52:2a:d4:
2b:57:1e:a8:90:fa:56:1a:2e:59:3a:dc:f5:6b:12:
1a:99:f7:f8:e8:0e:38:ec:90:4c:93:56:14:9b:6f:
39:47:0a:63:dc:c5:a2:f4:9c:92:7e:72:c6:18:db:
bf:bc:08:52:74:4e:af:ef:ca:10:5d:16:7d:2d:fb:
c7:22:ae:48:31:f7:a2:aa:a7:d9:d1:da:4b:cb:cf:
14:f0:36:00:83:2a:4e:f2:df:3e:c1:24:5b:b7:21:
a3:df:92:44:d8:d3:b4:38:9c:8d:ac:3b:08:32:02:
f9:1a:68:10:68:e6:12:d1:e9:1a:ba:04:47:6a:e9:
e5:4e:96:30:4c:f5:a2:e6:81:3f:b0:c0:2b:11:4e:
46:f8:b2:33:55:f0:db:1f:0a:7b:38:91:7c:a0:8a:
76:81:df:c2:00:80:bf:7c:5b:2b:a9:67:af:c4:ae:
b8:88:12:bc:65:ec:45:a4:e2:20:82:4a:cf:66:37:
4c:7d:6f:7f:a3:9b:d1:75:1d:e6:1f:62:78:65:bb:
25:9a:2b:6f:8b:5f:ff:ad:fa:80:75:46:3c:c3:67:
ae:6f:5e:4c:8a:ed:44:58:31:f2:91:a5:7c:2b:bf:
ef:70:9e:16:d8:2a:5f:dd:40:ac:3a:fe:2f:d1:01:
ec:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:55:75:40:05:D1:D8:1E:B5:E6:DC:B5:89:07:2C:0D:68:2D:38:A9
X509v3 Authority Key Identifier:
keyid:A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:04:5f:c9:f4:38:9d:1f:5d:89:03:87:19:7e:3c:92:eb:4f:
6d:7a:c4:95:c4:d6:c6:63:4d:80:8e:ed:26:bb:c5:e7:fc:5a:
8a:fc:13:a4:ab:c5:19:46:92:ce:89:50:3b:25:1b:2c:d9:be:
fc:2c:2e:93:d3:d0:34:a3:1f:b9:5c:bb:28:28:e3:5a:1f:3e:
23:0a:d5:56:e5:bf:d1:8a:be:80:7e:f5:0b:4f:42:6e:00:f1:
73:ef:0f:5c:66:e8:fa:f6:bf:1d:25:80:95:00:84:79:0e:d5:
f8:6a:2d:12:83:22:da:b9:02:f6:93:c9:32:04:46:27:d6:e5:
6b:35:6b:dd:1c:37:72:09:b1:26:16:6f:00:f3:32:af:a9:f1:
11:f4:4a:14:04:39:21:31:8d:04:64:e2:ea:7d:94:40:37:d2:
b3:25:e4:14:86:60:0d:7e:61:3b:2a:76:35:8c:aa:b9:77:a6:
d8:58:d8:1b:96:36:02:e4:0a:59:74:5a:66:bc:b5:2f:cd:d1:
e5:e6:0e:0e:c3:fa:85:24:02:70:c0:9b:1b:50:27:81:b3:df:
cb:60:c2:9f:cc:8f:8d:ee:9b:8d:06:f0:ba:30:b0:50:8d:e9:
6d:d0:95:49:c0:97:26:3f:c6:bb:56:9a:57:4b:62:19:49:d3:
ab:cf:8e:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ42Oj4hseJsuR/4WL9ysXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NDc4OTNmYjViMzQ4ZTY4YTY2ZDU1YTI4ZjI3OGNiZjM5
MzFkZjQwHhcNMjUxMTA0MjIwMTEwWhcNMjUxMTA1MjIwMTEwWjAzMTEwLwYDVQQD
EygxYjU1NzU0MDA1ZDFkODFlYjVlNmRjYjU4OTA3MmMwZDY4MmQzOGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hD8UrXqxfXqWyFSKtQrVx6okPpW
Gi5ZOtz1axIamff46A447JBMk1YUm285Rwpj3MWi9JySfnLGGNu/vAhSdE6v78oQ
XRZ9LfvHIq5IMfeiqqfZ0dpLy88U8DYAgypO8t8+wSRbtyGj35JE2NO0OJyNrDsI
MgL5GmgQaOYS0ekaugRHaunlTpYwTPWi5oE/sMArEU5G+LIzVfDbHwp7OJF8oIp2
gd/CAIC/fFsrqWevxK64iBK8ZexFpOIggkrPZjdMfW9/o5vRdR3mH2J4Zbslmitv
i1//rfqAdUY8w2eub15Miu1EWDHykaV8K7/vcJ4W2Cpf3UCsOv4v0QHsnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBtVdUAF0dgetebctYkHLA1oLTipMB8GA1UdIwQY
MBaAFKZHiT+1s0jmimbVWijyeMvzkx30MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGtlSlA3V3pTT2FLWnRWYUtQSjR5X09USGZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kYThjYjEtMWJmYy00M2ZkLWEwZDIt
ZDYyNDQ5NmRkY2M4LzEvcGtlSlA3V3pTT2FLWnRWYUtQSjR5X09USGZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9kYThjYjEtMWJmYy00M2ZkLWEwZDItZDYyNDQ5NmRkY2M4
LzEvcGtlSlA3V3pTT2FLWnRWYUtQSjR5X09USGZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApgRfyfQ4
nR9diQOHGX48kutPbXrElcTWxmNNgI7tJrvF5/xaivwTpKvFGUaSzolQOyUbLNm+
/Cwuk9PQNKMfuVy7KCjjWh8+IwrVVuW/0Yq+gH71C09CbgDxc+8PXGbo+va/HSWA
lQCEeQ7V+GotEoMi2rkC9pPJMgRGJ9blazVr3Rw3cgmxJhZvAPMyr6nxEfRKFAQ5
ITGNBGTi6n2UQDfSsyXkFIZgDX5hOyp2NYyquXem2FjYG5Y2AuQKWXRaZry1L83R
5eYODsP6hSQCcMCbG1AngbPfy2DCn8yPje6bjQbwujCwUI3pbdCVScCXJj/Gu1aa
V0tiGUnTq8+O1A==
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:21:13 2025 by rpki-client