Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/70d112-0221-4b04-ac83-6123fd1f5fcd/1/P8ar6uG2IiVtuy2LdFHSdJDSdLs.mft
File: P8ar6uG2IiVtuy2LdFHSdJDSdLs.mft (raw, json)
Hash identifier: yjXHh4QE/c5iDkWfSDULdTnr1z9IjFJmhV/Yfc25iC4=
Subject key identifier: 7E:6D:0E:66:3C:D5:F9:CA:15:BD:8A:DB:CF:27:47:39:D9:94:EF:40
Authority key identifier: 3F:C6:AB:EA:E1:B6:22:25:6D:BB:2D:8B:74:51:D2:74:90:D2:74:BB
Certificate issuer: /CN=3fc6abeae1b622256dbb2d8b7451d27490d274bb
Certificate serial: 019A4E869FF78497B9F9522BC0341531C0A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P8ar6uG2IiVtuy2LdFHSdJDSdLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/70d112-0221-4b04-ac83-6123fd1f5fcd/1/P8ar6uG2IiVtuy2LdFHSdJDSdLs.mft
Manifest number: 0416
Signing time: Tue 04 Nov 2025 11:00:36 +0000
Manifest this update: Tue 04 Nov 2025 11:00:36 +0000
Manifest next update: Wed 05 Nov 2025 11:00:36 +0000
Files and hashes: 1: P8ar6uG2IiVtuy2LdFHSdJDSdLs.crl (hash: RIBnFmYC7pRmVaOQ21Y/tiBAKNfZvOFf1uA5bIaRBVU=)
2: mmWIUy6R5upz2L1YINLOdfsMMT0.roa (hash: wBplVEEyq+VUYs/M8XPCNDfyw39oDDlnudAvkLvbSPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/70d112-0221-4b04-ac83-6123fd1f5fcd/1/P8ar6uG2IiVtuy2LdFHSdJDSdLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/70d112-0221-4b04-ac83-6123fd1f5fcd/1/P8ar6uG2IiVtuy2LdFHSdJDSdLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/P8ar6uG2IiVtuy2LdFHSdJDSdLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:9f:f7:84:97:b9:f9:52:2b:c0:34:15:31:c0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fc6abeae1b622256dbb2d8b7451d27490d274bb
Validity
Not Before: Nov 4 11:00:36 2025 GMT
Not After : Nov 5 11:00:36 2025 GMT
Subject: CN=7e6d0e663cd5f9ca15bd8adbcf274739d994ef40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:21:3b:e6:28:82:c3:48:aa:2d:4d:ce:3a:aa:
ae:b5:51:87:c4:3a:df:cc:ef:ce:65:1e:8a:48:9b:
31:b9:b1:e4:dc:e6:5f:98:e2:53:e1:b9:9b:f7:2c:
99:a0:ea:20:cc:c6:1b:e6:59:5f:9d:92:97:cb:d5:
1b:e5:3f:19:6e:b7:a2:79:d5:2c:2a:7c:78:3f:1d:
b9:3d:57:c6:a1:85:5f:97:03:c6:07:04:cd:91:48:
fe:35:34:13:c2:4c:68:00:4e:a8:b8:3a:4e:c2:14:
2d:fc:9a:5c:22:b8:5c:e7:ef:c4:8e:de:4a:e4:29:
b5:c6:7d:c9:5f:32:a9:5b:e9:08:32:51:a4:b4:29:
c3:f2:5d:7f:50:f0:e8:9a:94:55:22:9d:a7:1d:6f:
8f:d3:b3:49:cb:6f:02:22:79:13:73:fb:b3:56:72:
28:f4:18:2f:27:3e:bb:7c:e6:89:7e:54:42:56:0a:
dc:2c:87:a5:6d:d1:18:81:ef:2d:f4:9a:e2:32:c0:
24:6b:da:81:85:e9:ee:2b:50:e9:03:40:54:af:b9:
bc:ca:ea:5f:74:c0:ea:8e:57:98:e0:48:c8:19:d8:
3a:fb:a7:a0:61:a7:db:ed:39:8e:22:d2:da:0f:13:
e2:7e:cc:b5:1c:92:f3:2a:f2:44:d8:a3:eb:ff:cf:
31:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6D:0E:66:3C:D5:F9:CA:15:BD:8A:DB:CF:27:47:39:D9:94:EF:40
X509v3 Authority Key Identifier:
keyid:3F:C6:AB:EA:E1:B6:22:25:6D:BB:2D:8B:74:51:D2:74:90:D2:74:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P8ar6uG2IiVtuy2LdFHSdJDSdLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/70d112-0221-4b04-ac83-6123fd1f5fcd/1/P8ar6uG2IiVtuy2LdFHSdJDSdLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/70d112-0221-4b04-ac83-6123fd1f5fcd/1/P8ar6uG2IiVtuy2LdFHSdJDSdLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b7:b4:49:3f:92:e1:71:06:99:21:2e:b9:0d:0f:b4:37:d0:
24:87:e2:ea:ed:b2:5c:13:f4:e9:e3:5e:de:76:a8:3a:49:ad:
2b:97:9e:b4:94:ac:95:f7:2a:e9:03:d9:b2:4c:d6:6e:b6:11:
05:7e:85:02:70:7a:2b:43:ba:a5:2f:fb:31:e9:13:e1:17:80:
c6:17:7f:e5:f1:32:c1:3c:aa:a4:53:dd:05:aa:50:57:39:c0:
0e:3b:dd:a1:fe:9c:f3:a3:83:c8:54:18:8c:dd:c6:5b:c5:f2:
bc:79:9f:ec:fd:93:bd:26:a8:15:3a:8a:26:ba:25:8f:b4:83:
52:aa:53:73:71:d2:f4:72:3d:05:1c:ee:5a:d2:e1:6e:46:65:
51:56:a0:23:b3:e2:c7:63:93:58:ed:93:c6:53:0d:4e:f7:9d:
d0:a4:41:e2:40:86:5a:1b:17:13:35:a9:02:8a:7d:d0:47:3a:
bb:1d:76:e4:43:be:de:79:24:e9:fd:7d:7f:d5:7c:ac:2c:22:
d4:cb:e8:90:5f:ec:e2:ed:8b:2a:58:f6:22:5e:90:8e:61:63:
82:dd:cf:14:cb:91:44:8b:96:1d:da:ce:2e:00:5c:f9:59:15:
4b:0c:1f:fc:39:90:ce:ec:8f:bd:05:8f:d8:12:16:61:5a:f6:
99:e2:a5:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhp/3hJe5+VIrwDQVMcCgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmYzZhYmVhZTFiNjIyMjU2ZGJiMmQ4Yjc0NTFkMjc0OTBk
Mjc0YmIwHhcNMjUxMTA0MTEwMDM2WhcNMjUxMTA1MTEwMDM2WjAzMTEwLwYDVQQD
Eyg3ZTZkMGU2NjNjZDVmOWNhMTViZDhhZGJjZjI3NDczOWQ5OTRlZjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyE75iiCw0iqLU3OOqqutVGHxDrf
zO/OZR6KSJsxubHk3OZfmOJT4bmb9yyZoOogzMYb5llfnZKXy9Ub5T8ZbreiedUs
Knx4Px25PVfGoYVflwPGBwTNkUj+NTQTwkxoAE6ouDpOwhQt/JpcIrhc5+/Ejt5K
5Cm1xn3JXzKpW+kIMlGktCnD8l1/UPDompRVIp2nHW+P07NJy28CInkTc/uzVnIo
9BgvJz67fOaJflRCVgrcLIelbdEYge8t9JriMsAka9qBhenuK1DpA0BUr7m8yupf
dMDqjleY4EjIGdg6+6egYafb7TmOItLaDxPifsy1HJLzKvJE2KPr/88xBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5tDmY81fnKFb2K288nRznZlO9AMB8GA1UdIwQY
MBaAFD/Gq+rhtiIlbbsti3RR0nSQ0nS7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDhhcjZ1RzJJaVZ0dXkyTGRGSFNkSkRTZExzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi83MGQxMTItMDIyMS00YjA0LWFjODMt
NjEyM2ZkMWY1ZmNkLzEvUDhhcjZ1RzJJaVZ0dXkyTGRGSFNkSkRTZExzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi83MGQxMTItMDIyMS00YjA0LWFjODMtNjEyM2ZkMWY1ZmNk
LzEvUDhhcjZ1RzJJaVZ0dXkyTGRGSFNkSkRTZExzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc7e0ST+S
4XEGmSEuuQ0PtDfQJIfi6u2yXBP06eNe3naoOkmtK5eetJSslfcq6QPZskzWbrYR
BX6FAnB6K0O6pS/7MekT4ReAxhd/5fEywTyqpFPdBapQVznADjvdof6c86ODyFQY
jN3GW8XyvHmf7P2TvSaoFTqKJrolj7SDUqpTc3HS9HI9BRzuWtLhbkZlUVagI7Pi
x2OTWO2TxlMNTved0KRB4kCGWhsXEzWpAop90Ec6ux125EO+3nkk6f19f9V8rCwi
1MvokF/s4u2LKlj2Il6QjmFjgt3PFMuRRIuWHdrOLgBc+VkVSwwf/DmQzuyPvQWP
2BIWYVr2meKlIQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:26:02 2025 by rpki-client