Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
File: pZCvyl_rSsOMGnOFetdW9_M-Nos.mft (raw, json)
Hash identifier: uZ5geIa+frMuLvR3wA9red5JXOL66VS3RxFxfti0d8k=
Subject key identifier: 88:70:29:05:16:D0:70:ED:6C:39:F7:DA:F4:53:A6:E2:E2:EC:52:40
Authority key identifier: A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B
Certificate issuer: /CN=a590afca5feb4ac38c1a73857ad756f7f33e368b
Certificate serial: 019A4EF509BB6A142981D946683421225FA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
Manifest number: 089B
Signing time: Tue 04 Nov 2025 13:01:12 +0000
Manifest this update: Tue 04 Nov 2025 13:01:12 +0000
Manifest next update: Wed 05 Nov 2025 13:01:12 +0000
Files and hashes: 1: pZCvyl_rSsOMGnOFetdW9_M-Nos.crl (hash: 8bdRBMq4LxMZnAKKcI2cxjP8yk2+41GJi104Ae8nNd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:09:bb:6a:14:29:81:d9:46:68:34:21:22:5f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a590afca5feb4ac38c1a73857ad756f7f33e368b
Validity
Not Before: Nov 4 13:01:12 2025 GMT
Not After : Nov 5 13:01:12 2025 GMT
Subject: CN=8870290516d070ed6c39f7daf453a6e2e2ec5240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:04:5f:c8:16:66:be:25:a1:d4:10:ae:27:a9:
9d:9e:87:38:2d:f7:78:48:6e:7a:2c:91:b3:a5:6d:
b5:21:69:d0:10:1c:2b:76:62:38:68:cb:7c:65:7e:
64:cc:4f:ab:6f:f3:b6:be:dc:a7:05:08:a3:7c:52:
5c:4b:c2:67:91:ff:2c:59:59:98:c1:4f:9b:15:cc:
29:66:a7:9d:08:dd:b2:84:99:70:14:8b:1d:13:03:
df:9a:bf:ac:54:4a:4a:76:4a:fe:d9:58:aa:2c:f6:
bb:d2:3d:13:29:40:b3:b9:9a:dd:04:37:ee:e6:fb:
81:e5:43:63:43:f5:75:4c:0f:e5:55:b8:e8:5f:b0:
d0:15:87:30:e1:3e:cd:3a:21:b0:fa:1a:af:bb:d7:
9e:31:81:f9:f5:ac:57:8e:bb:ad:01:78:d3:a9:d6:
cf:23:5e:fe:bc:b8:62:a7:19:00:44:1b:48:c6:be:
0a:e0:86:47:2e:94:ce:f8:b7:cf:87:7c:f6:c7:38:
39:91:52:ea:fc:5c:b7:ef:53:47:36:55:6c:ce:8d:
cc:be:05:4c:c1:00:62:ea:ce:6c:56:08:07:ca:54:
7e:54:13:7e:1e:e7:4b:10:cb:0e:45:29:4f:3c:c7:
11:84:47:84:4b:b6:6a:a4:bf:29:ef:91:f1:93:f2:
88:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:70:29:05:16:D0:70:ED:6C:39:F7:DA:F4:53:A6:E2:E2:EC:52:40
X509v3 Authority Key Identifier:
keyid:A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:fb:d3:98:1a:bd:3f:5f:5c:cf:30:c6:0d:19:c7:b5:d8:00:
a8:b7:5d:47:4d:a4:67:05:5b:f3:5c:fa:e0:00:93:05:c9:a3:
97:43:fa:46:dd:73:d1:60:b6:9b:f8:6f:b7:4b:74:e0:a8:c9:
c9:a0:32:37:35:6d:06:b3:c6:65:10:de:39:47:ae:d8:01:78:
e8:9a:23:dc:f0:2b:f3:1c:ee:84:5a:97:00:c8:a7:44:f3:8c:
20:c0:05:87:f1:e9:76:1c:86:91:d7:ed:ef:93:b7:11:a6:4a:
1e:f4:da:85:a2:4f:76:7b:e4:c7:90:ec:22:ec:3c:f4:1d:cd:
49:8c:6a:86:ca:94:e5:2d:45:61:28:55:3c:4f:13:b8:f6:23:
87:0b:5e:0f:28:32:c6:42:d5:f9:f9:f2:39:b1:10:86:7b:ea:
06:2e:b4:83:25:35:ac:89:31:5b:7f:84:49:ed:b3:a6:ad:8c:
ca:38:88:3f:53:64:0f:c7:04:e5:ac:10:22:d3:d0:c5:b3:2d:
e6:e6:6f:ff:19:4f:fb:ae:2c:4d:7b:f3:73:f1:22:93:8c:e5:
b1:6f:60:f9:0f:d5:d5:2a:75:c1:38:1f:05:18:1c:4b:ec:f4:
21:4a:85:d2:8b:f2:d3:ee:1a:71:9f:2d:7c:a3:a0:e8:9d:c5:
56:41:f8:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9Qm7ahQpgdlGaDQhIl+oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1OTBhZmNhNWZlYjRhYzM4YzFhNzM4NTdhZDc1NmY3ZjMz
ZTM2OGIwHhcNMjUxMTA0MTMwMTEyWhcNMjUxMTA1MTMwMTEyWjAzMTEwLwYDVQQD
Eyg4ODcwMjkwNTE2ZDA3MGVkNmMzOWY3ZGFmNDUzYTZlMmUyZWM1MjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgRfyBZmviWh1BCuJ6mdnoc4Lfd4
SG56LJGzpW21IWnQEBwrdmI4aMt8ZX5kzE+rb/O2vtynBQijfFJcS8Jnkf8sWVmY
wU+bFcwpZqedCN2yhJlwFIsdEwPfmr+sVEpKdkr+2ViqLPa70j0TKUCzuZrdBDfu
5vuB5UNjQ/V1TA/lVbjoX7DQFYcw4T7NOiGw+hqvu9eeMYH59axXjrutAXjTqdbP
I17+vLhipxkARBtIxr4K4IZHLpTO+LfPh3z2xzg5kVLq/Fy371NHNlVszo3MvgVM
wQBi6s5sVggHylR+VBN+HudLEMsORSlPPMcRhEeES7ZqpL8p75Hxk/KIQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhwKQUW0HDtbDn32vRTpuLi7FJAMB8GA1UdIwQY
MBaAFKWQr8pf60rDjBpzhXrXVvfzPjaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFpDdnlsX3JTc09NR25PRmV0ZFc5X00tTm9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS82NzJiMjUtNjE5OC00ODNlLWEwNWYt
OGYwNjNhNWY2YTg2LzEvcFpDdnlsX3JTc09NR25PRmV0ZFc5X00tTm9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS82NzJiMjUtNjE5OC00ODNlLWEwNWYtOGYwNjNhNWY2YTg2
LzEvcFpDdnlsX3JTc09NR25PRmV0ZFc5X00tTm9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhfvTmBq9
P19czzDGDRnHtdgAqLddR02kZwVb81z64ACTBcmjl0P6Rt1z0WC2m/hvt0t04KjJ
yaAyNzVtBrPGZRDeOUeu2AF46Joj3PAr8xzuhFqXAMinRPOMIMAFh/HpdhyGkdft
75O3EaZKHvTahaJPdnvkx5DsIuw89B3NSYxqhsqU5S1FYShVPE8TuPYjhwteDygy
xkLV+fnyObEQhnvqBi60gyU1rIkxW3+ESe2zpq2MyjiIP1NkD8cE5awQItPQxbMt
5uZv/xlP+64sTXvzc/Eik4zlsW9g+Q/V1Sp1wTgfBRgcS+z0IUqF0ovy0+4acZ8t
fKOg6J3FVkH4eQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:55 2025 by rpki-client