Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
File: P_xBJyHAxuekxXZ66YxFId71FQE.mft (raw, json)
Hash identifier: 1hlPN+a7Baz/CMqwEUYm7xJOfwf0lpXd0Pcf2ArN7n8=
Subject key identifier: 57:A5:4F:D4:01:79:DF:8E:5A:16:68:6D:B9:81:6D:66:0B:CF:A6:45
Authority key identifier: 3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01
Certificate issuer: /CN=3ffc412721c0c6e7a4c5767ae98c4521def51501
Certificate serial: 019A7225F49658BB5B3EEDE183E32C8C33A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
Manifest number: 162B
Signing time: Tue 11 Nov 2025 09:01:21 +0000
Manifest this update: Tue 11 Nov 2025 09:01:21 +0000
Manifest next update: Wed 12 Nov 2025 09:01:21 +0000
Files and hashes: 1: P_xBJyHAxuekxXZ66YxFId71FQE.crl (hash: LMsIH0LlMRXB/XelysfV3T1qrTZksGznevgH1Un8RH4=)
2: nmitwXvuuY6MKgCsxEX1cJcowok.roa (hash: oh69tebd8y4Ws34XumPPpVkiRFbzbzoksJJOP2JTe+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f4:96:58:bb:5b:3e:ed:e1:83:e3:2c:8c:33:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ffc412721c0c6e7a4c5767ae98c4521def51501
Validity
Not Before: Nov 11 09:01:21 2025 GMT
Not After : Nov 12 09:01:21 2025 GMT
Subject: CN=57a54fd40179df8e5a16686db9816d660bcfa645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c0:5f:44:2c:f4:fc:65:7d:d9:c8:72:71:bc:
21:52:6f:a7:46:c9:62:6c:8f:8c:8d:78:3c:1f:b9:
ec:06:9a:64:71:7f:8b:64:a6:37:cb:7e:97:2d:54:
0e:48:0d:bf:5a:01:96:ef:a4:4a:d0:88:3c:17:db:
e2:f9:8f:c2:10:ee:a2:41:fd:21:b1:27:cf:61:fc:
e5:ea:24:06:4d:67:39:1f:4e:69:84:aa:e1:07:60:
34:29:1e:2c:e1:4c:fc:bf:43:86:0b:f7:00:8b:fe:
84:81:2c:ef:60:a7:ed:e7:0a:c7:44:69:30:a0:bf:
e0:d6:a1:80:6e:75:10:38:d4:c8:18:22:89:24:dc:
04:72:d9:fd:5f:d8:c5:ff:af:1b:96:f5:40:6a:d6:
fb:ff:91:47:ae:ba:d6:cc:5c:54:7b:03:a7:2c:47:
7d:9b:70:89:80:0c:71:c6:f1:e3:e5:e4:ac:71:38:
09:6e:b5:74:d6:05:2b:95:1b:d9:e6:b4:ec:02:3a:
7c:9d:41:4d:10:51:3f:46:3a:c2:b8:e8:cd:13:64:
f7:ab:72:59:0c:f6:0d:91:47:02:cd:25:46:10:7c:
86:8c:b6:4f:b8:52:18:59:24:1a:3a:32:ea:ce:b3:
7e:24:75:4a:10:a1:c4:09:88:51:94:73:70:91:b7:
a7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A5:4F:D4:01:79:DF:8E:5A:16:68:6D:B9:81:6D:66:0B:CF:A6:45
X509v3 Authority Key Identifier:
keyid:3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ad:da:08:a3:25:a6:9f:82:b2:a7:dd:23:1e:d6:d1:8b:02:
8e:46:c7:c2:4d:54:46:91:5e:6a:82:cb:30:ec:f8:22:67:e6:
18:79:ba:53:00:f6:c8:f7:52:16:4d:02:74:34:52:c6:44:89:
13:72:56:a9:da:5d:72:07:e6:43:da:f2:ff:8b:39:e0:71:37:
cf:07:99:32:02:60:62:73:a3:86:54:0c:1b:e1:ef:2d:85:e8:
c9:4c:fb:6e:28:ac:29:69:4a:0c:d0:c0:9d:bb:0c:a1:30:4d:
86:6b:76:c2:81:3e:3a:ac:6f:fe:34:f4:22:2c:91:4e:e7:3d:
ae:54:c8:1c:0d:a8:ae:18:f1:06:81:87:b6:5a:96:ec:26:84:
4a:b2:47:a4:66:3c:54:1a:5d:f4:1e:8e:6b:1d:9e:f7:d0:d5:
e7:aa:1c:dd:c6:85:91:22:fb:cc:cf:23:c7:14:d5:1f:c7:67:
f3:fc:df:69:4f:29:09:ed:8b:9b:89:a8:5f:f3:5a:f0:e1:13:
fa:1e:4d:a3:7b:50:ae:92:ce:e7:1b:07:c0:28:d2:6d:ce:9e:
89:ce:ac:63:de:67:71:32:65:ee:ce:c3:c6:51:42:88:f7:11:
af:78:49:71:e9:43:7a:0e:6f:27:a7:9f:57:69:2f:01:93:f6:
cd:22:bf:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJfSWWLtbPu3hg+MsjDOmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZmM0MTI3MjFjMGM2ZTdhNGM1NzY3YWU5OGM0NTIxZGVm
NTE1MDEwHhcNMjUxMTExMDkwMTIxWhcNMjUxMTEyMDkwMTIxWjAzMTEwLwYDVQQD
Eyg1N2E1NGZkNDAxNzlkZjhlNWExNjY4NmRiOTgxNmQ2NjBiY2ZhNjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMBfRCz0/GV92chycbwhUm+nRsli
bI+MjXg8H7nsBppkcX+LZKY3y36XLVQOSA2/WgGW76RK0Ig8F9vi+Y/CEO6iQf0h
sSfPYfzl6iQGTWc5H05phKrhB2A0KR4s4Uz8v0OGC/cAi/6EgSzvYKft5wrHRGkw
oL/g1qGAbnUQONTIGCKJJNwEctn9X9jF/68blvVAatb7/5FHrrrWzFxUewOnLEd9
m3CJgAxxxvHj5eSscTgJbrV01gUrlRvZ5rTsAjp8nUFNEFE/RjrCuOjNE2T3q3JZ
DPYNkUcCzSVGEHyGjLZPuFIYWSQaOjLqzrN+JHVKEKHECYhRlHNwkbendwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFelT9QBed+OWhZobbmBbWYLz6ZFMB8GA1UdIwQY
MBaAFD/8QSchwMbnpMV2eumMRSHe9RUBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUF94Qkp5SEF4dWVreFhaNjZZeEZJZDcxRlFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jZDkwYjktZmE4OC00YmQ5LWE3ZDUt
MjIxMThiMzYxNDkwLzEvUF94Qkp5SEF4dWVreFhaNjZZeEZJZDcxRlFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9jZDkwYjktZmE4OC00YmQ5LWE3ZDUtMjIxMThiMzYxNDkw
LzEvUF94Qkp5SEF4dWVreFhaNjZZeEZJZDcxRlFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKK3aCKMl
pp+CsqfdIx7W0YsCjkbHwk1URpFeaoLLMOz4ImfmGHm6UwD2yPdSFk0CdDRSxkSJ
E3JWqdpdcgfmQ9ry/4s54HE3zweZMgJgYnOjhlQMG+HvLYXoyUz7biisKWlKDNDA
nbsMoTBNhmt2woE+Oqxv/jT0IiyRTuc9rlTIHA2orhjxBoGHtlqW7CaESrJHpGY8
VBpd9B6Oax2e99DV56oc3caFkSL7zM8jxxTVH8dn8/zfaU8pCe2Lm4moX/Na8OET
+h5No3tQrpLO5xsHwCjSbc6eic6sY95ncTJl7s7DxlFCiPcRr3hJcelDeg5vJ6ef
V2kvAZP2zSK/+w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:33 2025 by rpki-client