Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.mft
File: pUiu2QpeI7SnNpVgjztleL_exhU.mft (raw, json)
Hash identifier: Qt/WzDUmHve3LBLsNVVu2P0Klk340oKQT1Lk6Aw0HNs=
Subject key identifier: 39:5D:B4:E5:56:A9:2A:5F:B2:54:D4:4E:21:31:E1:B6:A7:9C:2C:F1
Authority key identifier: A5:48:AE:D9:0A:5E:23:B4:A7:36:95:60:8F:3B:65:78:BF:DE:C6:15
Certificate issuer: /CN=a548aed90a5e23b4a73695608f3b6578bfdec615
Certificate serial: 019A4D7461EB862C76EA94A7279C46951501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUiu2QpeI7SnNpVgjztleL_exhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.mft
Manifest number: 0FD3
Signing time: Tue 04 Nov 2025 06:01:04 +0000
Manifest this update: Tue 04 Nov 2025 06:01:04 +0000
Manifest next update: Wed 05 Nov 2025 06:01:04 +0000
Files and hashes: 1: O4HPjKtfYNvc1lksPI1mIC2KoZE.roa (hash: G5jnz6Oa7fbgHp+PjYrqWRfRXq38tvNWQ9FfwitWKvo=)
2: pUiu2QpeI7SnNpVgjztleL_exhU.crl (hash: H1ACf6BhRmnW1ykNySdaxQOA2KZQXswouNHvmEgg3MA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pUiu2QpeI7SnNpVgjztleL_exhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:61:eb:86:2c:76:ea:94:a7:27:9c:46:95:15:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a548aed90a5e23b4a73695608f3b6578bfdec615
Validity
Not Before: Nov 4 06:01:04 2025 GMT
Not After : Nov 5 06:01:04 2025 GMT
Subject: CN=395db4e556a92a5fb254d44e2131e1b6a79c2cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:17:05:d4:08:5a:4c:b4:a3:1c:b1:1c:14:f8:
18:68:4b:18:0e:de:6c:51:4d:69:c1:0e:3e:f4:d4:
9f:de:ba:d2:54:7d:1c:35:85:ac:57:d1:e5:37:ad:
4d:10:6b:b9:3b:b9:57:1f:43:91:4c:0b:5f:d1:dd:
05:46:8a:b6:46:c6:f0:ea:8c:97:00:d2:cd:36:cb:
61:92:5f:18:f5:d8:45:be:5c:77:4c:7e:93:3b:35:
b9:98:fd:82:70:8f:d3:d6:34:97:bc:93:a2:7a:12:
44:bd:28:74:eb:e9:a2:64:59:30:86:46:d0:29:97:
a6:c6:31:16:78:75:bb:54:82:32:a4:43:1c:02:44:
5f:93:32:5b:5d:f2:1c:76:05:9b:6e:fd:88:6e:0c:
bf:48:62:98:b0:6d:e8:cd:7a:20:e7:43:18:51:9e:
3b:c8:a1:8d:43:bc:e4:11:3f:c4:b0:0c:4a:5e:86:
4a:26:2a:60:b0:89:1c:1b:08:f3:7e:3e:6c:12:7a:
f8:22:b0:a9:4b:c7:8c:ab:f9:a7:a4:5b:5f:f5:67:
09:a6:3a:62:8e:6d:b8:12:8a:84:a9:fe:fe:b5:e6:
42:a6:aa:52:fe:7b:51:69:ab:ae:35:a5:b9:0f:5b:
f6:37:39:b9:56:fd:2f:a6:71:51:86:7f:48:48:91:
5e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5D:B4:E5:56:A9:2A:5F:B2:54:D4:4E:21:31:E1:B6:A7:9C:2C:F1
X509v3 Authority Key Identifier:
keyid:A5:48:AE:D9:0A:5E:23:B4:A7:36:95:60:8F:3B:65:78:BF:DE:C6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUiu2QpeI7SnNpVgjztleL_exhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:7e:6d:99:46:f3:80:11:49:74:86:9e:54:13:c2:97:80:a5:
9f:27:01:6c:36:c6:7c:7c:ce:81:61:31:86:cb:7d:fe:fa:f8:
04:b9:db:e7:99:b8:6f:32:61:fa:a0:e2:ac:8d:2c:07:3d:a8:
97:56:f6:f3:7b:cb:b3:41:27:3f:1e:7d:e9:06:3c:6f:69:2e:
4e:aa:f3:c8:c5:45:8d:01:ad:9a:f2:a1:e6:66:34:56:05:46:
7c:0f:5a:7f:56:b7:de:e9:75:be:c2:12:ca:91:a9:b8:21:c9:
ab:63:d7:4d:df:76:42:b4:83:91:ed:d2:ee:ff:00:ad:54:61:
d2:05:26:3b:35:1e:a5:d1:1f:5f:11:c4:f0:d7:da:5b:22:a8:
aa:a4:39:87:0b:cf:56:d8:8a:0a:7a:81:cb:86:87:9a:ce:7d:
f5:64:7a:d1:c6:55:ba:5c:5c:18:1e:5d:88:12:6e:24:9a:86:
d4:bd:fb:48:4c:6e:12:72:20:63:95:05:12:74:6d:b7:1e:b2:
fb:04:00:49:1b:23:57:7f:8c:b9:3a:c9:d7:ec:bc:ed:09:b1:
c5:29:4e:cd:01:86:05:00:dc:98:09:12:92:d2:c3:90:74:5d:
c3:93:dd:6f:9e:41:18:52:ff:9d:d4:a7:1d:12:5b:3c:57:ec:
34:da:5a:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdGHrhix26pSnJ5xGlRUBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NDhhZWQ5MGE1ZTIzYjRhNzM2OTU2MDhmM2I2NTc4YmZk
ZWM2MTUwHhcNMjUxMTA0MDYwMTA0WhcNMjUxMTA1MDYwMTA0WjAzMTEwLwYDVQQD
EygzOTVkYjRlNTU2YTkyYTVmYjI1NGQ0NGUyMTMxZTFiNmE3OWMyY2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhcF1AhaTLSjHLEcFPgYaEsYDt5s
UU1pwQ4+9NSf3rrSVH0cNYWsV9HlN61NEGu5O7lXH0ORTAtf0d0FRoq2Rsbw6oyX
ANLNNsthkl8Y9dhFvlx3TH6TOzW5mP2CcI/T1jSXvJOiehJEvSh06+miZFkwhkbQ
KZemxjEWeHW7VIIypEMcAkRfkzJbXfIcdgWbbv2Ibgy/SGKYsG3ozXog50MYUZ47
yKGNQ7zkET/EsAxKXoZKJipgsIkcGwjzfj5sEnr4IrCpS8eMq/mnpFtf9WcJpjpi
jm24EoqEqf7+teZCpqpS/ntRaauuNaW5D1v2Nzm5Vv0vpnFRhn9ISJFenwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDldtOVWqSpfslTUTiEx4bannCzxMB8GA1UdIwQY
MBaAFKVIrtkKXiO0pzaVYI87ZXi/3sYVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFVpdTJRcGVJN1NuTnBWZ2p6dGxlTF9leGhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83NDY2YzItNTZkNC00OTRhLWIyNjct
NTQ2M2I3MWUyNmRlLzEvcFVpdTJRcGVJN1NuTnBWZ2p6dGxlTF9leGhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83NDY2YzItNTZkNC00OTRhLWIyNjctNTQ2M2I3MWUyNmRl
LzEvcFVpdTJRcGVJN1NuTnBWZ2p6dGxlTF9leGhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFX5tmUbz
gBFJdIaeVBPCl4ClnycBbDbGfHzOgWExhst9/vr4BLnb55m4bzJh+qDirI0sBz2o
l1b283vLs0EnPx596QY8b2kuTqrzyMVFjQGtmvKh5mY0VgVGfA9af1a33ul1vsIS
ypGpuCHJq2PXTd92QrSDke3S7v8ArVRh0gUmOzUepdEfXxHE8NfaWyKoqqQ5hwvP
VtiKCnqBy4aHms599WR60cZVulxcGB5diBJuJJqG1L37SExuEnIgY5UFEnRttx6y
+wQASRsjV3+MuTrJ1+y87QmxxSlOzQGGBQDcmAkSktLDkHRdw5Pdb55BGFL/ndSn
HRJbPFfsNNpaDg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:16 2025 by rpki-client