Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
File: pCqe9isMK_HTQWU5sqBKJlmMLEM.mft (raw, json)
Hash identifier: EjyPZ8JEqTf1C+vpAfLe5fhgSPxM15+mpAKT9DMg7/s=
Subject key identifier: 8A:E2:81:85:3F:03:CB:F8:0B:CA:38:37:86:EC:16:2C:4F:BE:2B:FD
Authority key identifier: A4:2A:9E:F6:2B:0C:2B:F1:D3:41:65:39:B2:A0:4A:26:59:8C:2C:43
Certificate issuer: /CN=a42a9ef62b0c2bf1d3416539b2a04a26598c2c43
Certificate serial: 019A50E3903D0A7B8EB6FBEE19352D7284DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 22:01:22 +0000
Manifest this update: Tue 04 Nov 2025 22:01:22 +0000
Manifest next update: Wed 05 Nov 2025 22:01:22 +0000
Files and hashes: 1: pCqe9isMK_HTQWU5sqBKJlmMLEM.crl (hash: +nWynuJBTCU294rZRnvjEKXj/jUZAnPcLRkEpOsh+Os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:90:3d:0a:7b:8e:b6:fb:ee:19:35:2d:72:84:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42a9ef62b0c2bf1d3416539b2a04a26598c2c43
Validity
Not Before: Nov 4 22:01:22 2025 GMT
Not After : Nov 5 22:01:22 2025 GMT
Subject: CN=8ae281853f03cbf80bca383786ec162c4fbe2bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b2:fc:8c:ae:7c:2b:63:04:36:eb:a0:cb:d8:
cb:c9:d9:3d:41:7b:a1:94:83:e5:ab:b0:b1:bc:89:
af:62:81:9c:db:9f:1a:82:9d:99:1f:86:df:20:d9:
1b:55:03:2e:ab:13:30:47:86:c6:03:7b:14:a0:ac:
dc:a7:15:d5:22:6a:15:39:b5:75:19:bb:2c:34:d3:
2c:1e:28:cf:41:91:48:60:ae:8c:bc:f6:1b:17:9d:
82:31:37:42:25:bb:68:8f:de:41:10:8d:85:3d:0a:
03:66:54:6c:20:06:bd:8f:e7:ec:15:60:2f:9a:92:
ad:a9:71:97:43:63:3a:ff:7c:e5:21:30:96:5d:46:
a5:a0:80:d3:31:5b:af:91:6e:57:d8:e4:99:f8:09:
f3:c8:ed:8c:0c:9a:d9:1d:aa:17:e8:ea:29:de:5f:
e8:99:5b:de:47:8f:89:e0:ef:c4:e0:a2:0f:8d:41:
bd:58:45:70:ff:69:27:06:d7:d7:00:7d:a8:fd:64:
61:06:db:fa:85:00:53:36:f7:b5:9e:a1:37:85:66:
e1:6d:c5:3f:94:93:f1:54:89:cf:75:ea:fc:fb:0a:
55:26:73:7b:b1:07:cc:8b:2c:1e:24:17:3c:1d:4f:
d0:12:7e:22:00:13:14:90:4e:b2:5a:bb:1a:3f:00:
84:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E2:81:85:3F:03:CB:F8:0B:CA:38:37:86:EC:16:2C:4F:BE:2B:FD
X509v3 Authority Key Identifier:
keyid:A4:2A:9E:F6:2B:0C:2B:F1:D3:41:65:39:B2:A0:4A:26:59:8C:2C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:e0:87:ae:64:41:17:b2:59:0a:7e:ab:a7:06:ff:95:02:6a:
9f:2c:88:2e:66:33:b7:f7:d3:66:7b:44:8d:a7:cc:c5:d9:1f:
8c:c9:7a:a0:17:de:f1:2e:8b:3f:ce:39:57:91:91:19:21:33:
67:1b:d4:50:fd:f8:af:5a:90:9c:aa:7f:16:e5:db:52:ee:88:
94:77:04:bf:39:f3:1e:42:11:2d:88:9b:c3:a6:fa:d8:20:d7:
f9:62:7f:dd:84:cf:5f:7a:5e:c8:4a:5a:9e:5d:3e:2e:5c:3c:
c3:3f:2e:62:cb:f8:90:94:e8:e7:23:30:f8:fc:88:68:9b:e4:
7b:78:ef:87:40:80:2a:df:cf:00:32:14:7d:f2:f6:04:17:6a:
75:ba:20:78:88:9b:87:75:84:4b:05:57:41:64:aa:74:8c:69:
fc:41:82:86:f5:01:fd:92:d2:a8:63:f5:a8:5a:04:d4:05:df:
c5:a2:06:78:1e:69:01:43:7c:66:ae:d9:b2:7b:a5:5f:c0:cb:
66:f9:ff:b9:e6:91:f6:a1:67:75:2a:b8:e1:ab:d4:74:9c:cc:
9a:96:1d:b0:46:fb:1f:26:90:bc:bf:77:0f:ce:5c:d0:65:05:
ee:b2:43:e7:8b:60:38:e8:5f:a5:aa:14:56:69:e0:e8:6b:d3:
37:a5:5b:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ45A9CnuOtvvuGTUtcoTdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MmE5ZWY2MmIwYzJiZjFkMzQxNjUzOWIyYTA0YTI2NTk4
YzJjNDMwHhcNMjUxMTA0MjIwMTIyWhcNMjUxMTA1MjIwMTIyWjAzMTEwLwYDVQQD
Eyg4YWUyODE4NTNmMDNjYmY4MGJjYTM4Mzc4NmVjMTYyYzRmYmUyYmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrL8jK58K2MENuugy9jLydk9QXuh
lIPlq7CxvImvYoGc258agp2ZH4bfINkbVQMuqxMwR4bGA3sUoKzcpxXVImoVObV1
GbssNNMsHijPQZFIYK6MvPYbF52CMTdCJbtoj95BEI2FPQoDZlRsIAa9j+fsFWAv
mpKtqXGXQ2M6/3zlITCWXUaloIDTMVuvkW5X2OSZ+AnzyO2MDJrZHaoX6Oop3l/o
mVveR4+J4O/E4KIPjUG9WEVw/2knBtfXAH2o/WRhBtv6hQBTNve1nqE3hWbhbcU/
lJPxVInPder8+wpVJnN7sQfMiyweJBc8HU/QEn4iABMUkE6yWrsaPwCEzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIrigYU/A8v4C8o4N4bsFixPviv9MB8GA1UdIwQY
MBaAFKQqnvYrDCvx00FlObKgSiZZjCxDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcENxZTlpc01LX0hUUVdVNXNxQktKbG1NTEVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8yZDUyYWUtMzkyOC00NDllLTg2ZWIt
NjZmMDUzZjZhNGY4LzEvcENxZTlpc01LX0hUUVdVNXNxQktKbG1NTEVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8yZDUyYWUtMzkyOC00NDllLTg2ZWItNjZmMDUzZjZhNGY4
LzEvcENxZTlpc01LX0hUUVdVNXNxQktKbG1NTEVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAouCHrmRB
F7JZCn6rpwb/lQJqnyyILmYzt/fTZntEjafMxdkfjMl6oBfe8S6LP845V5GRGSEz
ZxvUUP34r1qQnKp/FuXbUu6IlHcEvznzHkIRLYibw6b62CDX+WJ/3YTPX3peyEpa
nl0+Llw8wz8uYsv4kJTo5yMw+PyIaJvke3jvh0CAKt/PADIUffL2BBdqdbogeIib
h3WESwVXQWSqdIxp/EGChvUB/ZLSqGP1qFoE1AXfxaIGeB5pAUN8Zq7ZsnulX8DL
Zvn/ueaR9qFndSq44avUdJzMmpYdsEb7HyaQvL93D85c0GUF7rJD54tgOOhfpaoU
Vmng6GvTN6Vbag==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:19:47 2025 by rpki-client