Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
File: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft (raw, json)
Hash identifier: gXzdjiRww4oZwleqtkpjPndhnoTQKDNShh13poFx7gU=
Subject key identifier: 85:1D:0E:32:96:1A:D9:A6:22:7A:15:69:16:75:67:67:2F:25:44:87
Authority key identifier: A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
Certificate issuer: /CN=a4a37878c14f216c32649819ea428a58225504fb
Certificate serial: 019A4EF58ED7064596820628A65706613C30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
Manifest number: 06B5
Signing time: Tue 04 Nov 2025 13:01:47 +0000
Manifest this update: Tue 04 Nov 2025 13:01:47 +0000
Manifest next update: Wed 05 Nov 2025 13:01:47 +0000
Files and hashes: 1: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl (hash: 0S6kcYcl25dTSc1F3tcgQZXe6n7mVVp8kJQ3FrognfM=)
2: ro12KKiX-LBkOFDMXKVrhIyQ9tA.roa (hash: 3rfI99WFfWKHo+rtyifcnFcBumsIBP/guPHdSOGN9zM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:8e:d7:06:45:96:82:06:28:a6:57:06:61:3c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a37878c14f216c32649819ea428a58225504fb
Validity
Not Before: Nov 4 13:01:47 2025 GMT
Not After : Nov 5 13:01:47 2025 GMT
Subject: CN=851d0e32961ad9a6227a1569167567672f254487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c9:21:c6:64:c4:89:50:64:b6:02:8c:eb:34:
b6:16:eb:c0:07:82:f2:72:c1:35:04:64:28:c0:bd:
ef:05:dd:08:92:08:09:91:80:aa:b7:31:e3:e8:d6:
b9:86:29:e1:bc:7d:e3:f8:b7:69:0b:6f:23:f2:ee:
31:9a:17:76:b8:f3:6b:76:bd:61:7c:c9:36:70:74:
d7:9e:5e:a8:f7:ac:dc:79:d4:40:14:ce:3f:7d:75:
af:57:aa:a2:0e:d7:a4:2c:cb:a8:25:62:5f:b1:e9:
55:4b:fb:0e:d4:a2:da:79:8b:cc:74:75:b8:06:f6:
07:94:97:e5:60:b0:a4:3e:a3:21:9b:57:cb:ab:e0:
07:82:94:b0:66:83:29:9f:cb:10:cd:b3:0a:1a:1b:
75:e6:f7:84:f2:84:7e:38:d8:99:1a:cd:2a:fd:84:
27:41:7c:f8:29:55:ac:72:f6:02:bd:7e:72:39:51:
65:c4:7e:78:1f:cf:c7:b7:ff:9d:69:5b:bd:fd:51:
97:b2:b5:14:fb:37:0d:12:7e:61:0e:34:db:c0:cb:
3f:ce:16:cf:6e:bc:1b:4d:9d:e8:34:92:32:79:2a:
b2:84:d5:16:10:92:eb:96:13:a7:2e:df:59:15:52:
ea:30:d5:c5:ed:07:32:48:32:49:21:bb:7c:12:38:
dc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1D:0E:32:96:1A:D9:A6:22:7A:15:69:16:75:67:67:2F:25:44:87
X509v3 Authority Key Identifier:
keyid:A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:df:84:40:2c:e7:40:31:1e:7a:0f:61:86:60:83:da:5c:6d:
46:06:4f:ee:9d:cc:a9:0f:3f:91:d1:fe:84:d4:9f:c0:e9:72:
4b:0e:23:b0:9c:2e:76:e9:11:7c:a7:b0:45:46:92:36:4f:d0:
c0:c4:1b:f9:ac:de:ac:68:fc:e6:3e:76:b8:13:ce:a9:c8:10:
84:b7:3d:44:5f:93:32:f4:89:58:3b:f4:3c:47:e7:30:55:c3:
87:91:99:da:30:09:ed:f2:ba:57:4f:97:d4:d3:b3:8e:ca:db:
c2:bd:52:82:3a:74:ae:d9:4a:a5:3f:bc:05:c9:93:db:94:d0:
83:c1:df:50:86:b6:ca:96:e0:4e:56:f2:3e:36:2d:58:93:c5:
d4:46:1f:ef:0f:89:e7:d2:92:51:07:24:00:1f:b5:e3:9c:62:
43:f7:80:82:a9:42:b3:11:7a:1e:14:a2:b4:09:80:14:08:cf:
2c:a0:d2:71:09:b6:39:c7:aa:e8:3f:65:22:0c:74:79:0b:61:
82:83:d3:33:37:7d:ad:b9:b0:9b:c3:bd:64:7a:1a:90:a0:e8:
5b:94:fd:c9:73:9a:22:55:ce:c0:0e:47:6d:e0:a2:ae:3d:73:
82:b0:fe:b4:19:74:1e:dd:65:20:04:50:c7:fc:71:82:71:61:
5e:46:e3:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9Y7XBkWWggYoplcGYTwwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YTM3ODc4YzE0ZjIxNmMzMjY0OTgxOWVhNDI4YTU4MjI1
NTA0ZmIwHhcNMjUxMTA0MTMwMTQ3WhcNMjUxMTA1MTMwMTQ3WjAzMTEwLwYDVQQD
Eyg4NTFkMGUzMjk2MWFkOWE2MjI3YTE1NjkxNjc1Njc2NzJmMjU0NDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8khxmTEiVBktgKM6zS2FuvAB4Ly
csE1BGQowL3vBd0IkggJkYCqtzHj6Na5hinhvH3j+LdpC28j8u4xmhd2uPNrdr1h
fMk2cHTXnl6o96zcedRAFM4/fXWvV6qiDtekLMuoJWJfselVS/sO1KLaeYvMdHW4
BvYHlJflYLCkPqMhm1fLq+AHgpSwZoMpn8sQzbMKGht15veE8oR+ONiZGs0q/YQn
QXz4KVWscvYCvX5yOVFlxH54H8/Ht/+daVu9/VGXsrUU+zcNEn5hDjTbwMs/zhbP
brwbTZ3oNJIyeSqyhNUWEJLrlhOnLt9ZFVLqMNXF7QcySDJJIbt8EjjcCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIUdDjKWGtmmInoVaRZ1Z2cvJUSHMB8GA1UdIwQY
MBaAFKSjeHjBTyFsMmSYGepCilgiVQT7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEtONGVNRlBJV3d5WkpnWjZrS0tXQ0pWQlBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9lNjA2ZmItMTA3Zi00Mjk2LTg4NzAt
NGIwZTBhYzhkMjI5LzEvcEtONGVNRlBJV3d5WkpnWjZrS0tXQ0pWQlBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9lNjA2ZmItMTA3Zi00Mjk2LTg4NzAtNGIwZTBhYzhkMjI5
LzEvcEtONGVNRlBJV3d5WkpnWjZrS0tXQ0pWQlBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkN+EQCzn
QDEeeg9hhmCD2lxtRgZP7p3MqQ8/kdH+hNSfwOlySw4jsJwudukRfKewRUaSNk/Q
wMQb+azerGj85j52uBPOqcgQhLc9RF+TMvSJWDv0PEfnMFXDh5GZ2jAJ7fK6V0+X
1NOzjsrbwr1Sgjp0rtlKpT+8BcmT25TQg8HfUIa2ypbgTlbyPjYtWJPF1EYf7w+J
59KSUQckAB+145xiQ/eAgqlCsxF6HhSitAmAFAjPLKDScQm2Oceq6D9lIgx0eQth
goPTMzd9rbmwm8O9ZHoakKDoW5T9yXOaIlXOwA5HbeCirj1zgrD+tBl0Ht1lIARQ
x/xxgnFhXkbjmA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:39 2025 by rpki-client