Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
File: pu1EK5HU6Dpt45-2eXGh55xrHtU.mft (raw, json)
Hash identifier: NVqAIgAI7jstMPFCFc6+RFypQdAgWtBYTL2Hem2bsmA=
Subject key identifier: 78:9C:EE:12:DD:CF:A7:36:38:3E:2D:16:4B:BE:69:F4:56:80:F8:78
Authority key identifier: A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
Certificate issuer: /CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Certificate serial: 019A500754B4006B55B0032BA7A2DB7AB7FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 18:00:48 +0000
Manifest this update: Tue 04 Nov 2025 18:00:48 +0000
Manifest next update: Wed 05 Nov 2025 18:00:48 +0000
Files and hashes: 1: BuG2OAiPDQnyx6d-WMA8tpFdnHw.roa (hash: uZBmZl0o3YtVzo0taGTcZqTYaNccqkyd0kSYhjubo7I=)
2: lfrC4B88Afpo1TBPZMxOLIcU1Ck.roa (hash: t/3zF86JRbmij67yXF/+H8nTDumbM7s5DdE5qv8C5Js=)
3: pu1EK5HU6Dpt45-2eXGh55xrHtU.crl (hash: 65ZOaTi4cwhU83JQ2x49H9zFO+lz4FTSf2cYDUooE7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:54:b4:00:6b:55:b0:03:2b:a7:a2:db:7a:b7:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Validity
Not Before: Nov 4 18:00:48 2025 GMT
Not After : Nov 5 18:00:48 2025 GMT
Subject: CN=789cee12ddcfa736383e2d164bbe69f45680f878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:54:5b:67:25:1f:8b:04:fb:6d:0b:ee:e6:05:
f4:8d:66:1a:c8:a5:b1:b0:5b:bf:b4:d7:5b:21:78:
7d:bf:f3:e2:96:d0:42:45:32:f5:0b:58:78:2a:7a:
7f:50:18:5f:c2:03:23:c7:f7:10:63:50:82:fa:18:
c1:1c:4a:15:d4:23:f4:9f:da:6c:eb:dd:21:21:bc:
57:85:31:f9:ff:e1:9a:86:ea:cd:41:02:50:79:5b:
c9:63:9e:ab:27:1f:62:9e:22:5f:a7:5c:9f:90:62:
77:b7:1e:f1:6a:93:ef:67:16:a9:8b:0c:a9:1b:3e:
3b:c1:06:14:e1:c1:12:81:55:87:3d:e9:2a:fa:91:
27:de:2d:da:19:24:12:77:81:59:c8:34:fe:5e:62:
ae:b2:2e:ad:cb:ed:90:70:3b:dc:d1:f6:67:45:75:
ae:eb:3d:74:98:79:cc:c0:ea:d3:95:2f:5b:c6:4a:
fe:77:d0:ff:b7:ec:9d:8b:4e:b4:ed:fb:97:c0:bb:
08:ad:b8:e9:2e:fa:8d:f8:d5:1a:e2:4a:6e:db:32:
7b:7a:72:91:b2:b3:38:09:59:a7:32:e3:8f:4c:8b:
8c:93:ea:d0:dc:37:26:f7:12:d4:bc:0b:1c:29:84:
f1:1b:bd:52:58:37:0a:fe:d1:6c:d4:e7:b0:e0:58:
9c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9C:EE:12:DD:CF:A7:36:38:3E:2D:16:4B:BE:69:F4:56:80:F8:78
X509v3 Authority Key Identifier:
keyid:A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:05:1e:6b:0b:a6:34:24:83:bc:89:a9:dc:43:0f:f6:ab:51:
2c:22:e1:76:3c:51:12:59:39:0e:6a:ec:a9:9b:0b:eb:a7:80:
34:7e:7f:bf:31:d6:d8:85:e6:79:9e:ad:95:05:30:f3:73:82:
b8:f2:63:e2:67:2d:f8:e3:7d:08:17:80:cd:49:ae:19:5d:be:
97:9d:70:df:cf:30:df:c7:81:31:71:1e:ed:6a:28:41:91:b1:
a3:d0:37:6a:96:94:34:fb:b3:32:a2:d6:d5:0e:b7:db:a9:eb:
e8:32:be:9f:c4:f4:ad:6b:f8:52:17:11:cb:9d:9e:b7:97:b1:
65:a7:4f:6e:9d:56:23:ab:27:3b:d5:b3:74:4c:32:22:63:25:
d6:48:cc:f1:1f:86:1f:da:99:4b:95:a3:12:b9:0f:16:47:e1:
c6:6a:7a:a3:a7:6f:e5:00:f0:9b:d8:35:87:9d:dd:4e:dc:ca:
30:bd:f2:83:2a:f3:7d:05:b5:2d:79:cb:84:e8:58:ae:27:1d:
fd:21:74:43:58:35:20:fb:13:cb:77:ba:5e:1f:18:86:62:3e:
19:d3:45:3c:1d:9f:4d:91:41:72:b9:0b:ee:c0:a2:74:07:17:
db:ab:f0:04:f8:12:c3:1e:bc:96:68:2b:13:e8:a6:5f:ec:42:
d5:3f:04:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQB1S0AGtVsAMrp6Lberf+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2ZWQ0NDJiOTFkNGU4M2E2ZGUzOWZiNjc5NzFhMWU3OWM2
YjFlZDUwHhcNMjUxMTA0MTgwMDQ4WhcNMjUxMTA1MTgwMDQ4WjAzMTEwLwYDVQQD
Eyg3ODljZWUxMmRkY2ZhNzM2MzgzZTJkMTY0YmJlNjlmNDU2ODBmODc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1RbZyUfiwT7bQvu5gX0jWYayKWx
sFu/tNdbIXh9v/PiltBCRTL1C1h4Knp/UBhfwgMjx/cQY1CC+hjBHEoV1CP0n9ps
690hIbxXhTH5/+GahurNQQJQeVvJY56rJx9iniJfp1yfkGJ3tx7xapPvZxapiwyp
Gz47wQYU4cESgVWHPekq+pEn3i3aGSQSd4FZyDT+XmKusi6ty+2QcDvc0fZnRXWu
6z10mHnMwOrTlS9bxkr+d9D/t+ydi0607fuXwLsIrbjpLvqN+NUa4kpu2zJ7enKR
srM4CVmnMuOPTIuMk+rQ3Dcm9xLUvAscKYTxG71SWDcK/tFs1Oew4Fic5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHic7hLdz6c2OD4tFku+afRWgPh4MB8GA1UdIwQY
MBaAFKbtRCuR1Og6beOftnlxoeecax7VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHUxRUs1SFU2RHB0NDUtMmVYR2g1NXhySHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS81NTNkYzYtMTJkMC00ZDRhLWEyOTQt
OTdjNWQ1OWIwYmJmLzEvcHUxRUs1SFU2RHB0NDUtMmVYR2g1NXhySHRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS81NTNkYzYtMTJkMC00ZDRhLWEyOTQtOTdjNWQ1OWIwYmJm
LzEvcHUxRUs1SFU2RHB0NDUtMmVYR2g1NXhySHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjQUeawum
NCSDvImp3EMP9qtRLCLhdjxRElk5DmrsqZsL66eANH5/vzHW2IXmeZ6tlQUw83OC
uPJj4mct+ON9CBeAzUmuGV2+l51w388w38eBMXEe7WooQZGxo9A3apaUNPuzMqLW
1Q6326nr6DK+n8T0rWv4UhcRy52et5exZadPbp1WI6snO9WzdEwyImMl1kjM8R+G
H9qZS5WjErkPFkfhxmp6o6dv5QDwm9g1h53dTtzKML3ygyrzfQW1LXnLhOhYricd
/SF0Q1g1IPsTy3e6Xh8YhmI+GdNFPB2fTZFBcrkL7sCidAcX26vwBPgSwx68lmgr
E+imX+xC1T8EZA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:08:12 2025 by rpki-client