Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
File: pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft (raw, json)
Hash identifier: jkWGedw1Pt2jhWSVrHcnD+rWnYh0cO3Vok5y8rjcC+4=
Subject key identifier: 98:6F:D7:B2:F7:EC:FC:E7:B2:F4:6E:2F:E1:A8:4E:55:EC:2D:26:F1
Authority key identifier: A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A
Certificate issuer: /CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a
Certificate serial: 019A115EED02DC3E3FDADA5B4455F53E71FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
Manifest number: 09CF
Signing time: Thu 23 Oct 2025 14:00:25 +0000
Manifest this update: Thu 23 Oct 2025 14:00:25 +0000
Manifest next update: Fri 24 Oct 2025 14:00:25 +0000
Files and hashes: 1: HEFFTvFDeW6D2zdX6lHRPyk7Ea4.roa (hash: IVFC13YcAYnwyOjaJYcCEYaHPK701G8dlJpbO9aBcgU=)
2: pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl (hash: ah+qv1NY/SNqHoLYRUAdJzqiVkC7Iim3LXW7f5vk++A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:11:5e:ed:02:dc:3e:3f:da:da:5b:44:55:f5:3e:71:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a
Validity
Not Before: Oct 23 14:00:25 2025 GMT
Not After : Oct 24 14:00:25 2025 GMT
Subject: CN=986fd7b2f7ecfce7b2f46e2fe1a84e55ec2d26f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c9:25:71:b0:23:48:87:30:7f:e8:80:61:ee:
e8:d2:d4:83:9f:33:76:8d:f7:8a:f0:b1:fc:f5:b9:
52:8c:e4:3b:3c:1b:25:c8:21:02:8d:77:27:d5:fb:
da:4f:d3:9e:8f:b6:0d:1c:9a:30:8c:03:0a:c2:e5:
cc:e8:e1:85:b3:b8:df:ff:e7:d2:99:85:4b:41:75:
61:05:f0:e0:74:af:c8:0b:e5:ee:e9:a7:6e:a5:10:
0c:fe:93:29:02:79:5c:b1:09:ea:10:4f:3d:d2:ce:
d4:9b:b5:14:ea:86:61:e0:d8:a9:e0:b9:21:bd:cb:
68:dc:42:88:31:e9:5b:57:14:96:fa:ab:6f:08:ae:
b7:18:b2:bd:05:41:32:61:4f:06:bf:75:47:2c:60:
d2:46:37:eb:e3:be:8e:be:98:5b:b3:05:7a:17:18:
75:f9:24:bb:2b:48:9d:26:52:25:74:88:ce:6f:89:
d2:ba:22:24:3b:8f:3c:a1:87:16:aa:7f:75:03:d0:
38:46:a5:69:32:06:13:92:11:61:66:08:9c:f7:12:
af:3c:aa:21:66:01:7d:27:95:95:9d:e2:07:8b:d0:
c0:62:dc:c9:08:e6:e7:df:ed:1a:74:df:a6:27:74:
d6:0e:bd:18:8e:d7:10:f4:d3:50:43:eb:93:11:8e:
5a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6F:D7:B2:F7:EC:FC:E7:B2:F4:6E:2F:E1:A8:4E:55:EC:2D:26:F1
X509v3 Authority Key Identifier:
keyid:A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:df:32:5e:a9:4c:40:38:0f:3f:69:49:75:74:d5:55:d4:38:
ec:b3:88:d0:46:d3:b6:a1:43:f2:9c:f4:6d:33:84:9a:35:00:
74:f1:0a:f8:13:f0:f7:6e:4c:6b:a0:45:10:c6:ad:53:b0:43:
13:0a:e1:b6:1f:4f:02:02:73:17:e1:aa:b8:36:28:9b:b5:86:
96:b1:a3:de:2b:df:2c:17:90:78:c8:4b:fd:a6:bc:34:37:bb:
30:0f:18:c7:21:8d:2b:ac:ec:60:fa:b9:f8:66:1e:36:2b:54:
6a:c7:cf:7e:2b:81:6e:3e:a5:40:1f:c7:b4:11:81:89:57:b6:
ac:70:08:36:9e:d4:ba:1e:c3:b3:2a:13:97:70:e8:79:d3:a4:
e0:07:93:e7:22:fb:69:6e:d7:72:c8:d6:ec:d3:0f:51:8f:aa:
72:66:c0:34:61:87:6f:b2:dc:c6:6a:12:d4:b1:a1:e4:5f:af:
12:8b:87:a2:0a:42:fd:a8:e0:a0:e1:9e:b5:cb:2e:c6:52:3e:
a1:eb:f8:de:90:0d:09:92:79:7e:b6:5d:95:6c:56:c4:e3:2c:
63:04:af:70:b9:c4:c6:44:ed:da:49:a5:97:bd:c7:12:b8:1b:
e3:90:d2:53:94:62:a0:aa:fe:f9:99:f3:56:29:5a:21:af:f0:
68:32:28:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoRXu0C3D4/2tpbRFX1PnH9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1OWRhNGE4NjM4ZGJkZDZmYTQzYzI3ZDNhYzZlYzhkOWFj
Yzg3OGEwHhcNMjUxMDIzMTQwMDI1WhcNMjUxMDI0MTQwMDI1WjAzMTEwLwYDVQQD
Eyg5ODZmZDdiMmY3ZWNmY2U3YjJmNDZlMmZlMWE4NGU1NWVjMmQyNmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMklcbAjSIcwf+iAYe7o0tSDnzN2
jfeK8LH89blSjOQ7PBslyCECjXcn1fvaT9Oej7YNHJowjAMKwuXM6OGFs7jf/+fS
mYVLQXVhBfDgdK/IC+Xu6adupRAM/pMpAnlcsQnqEE890s7Um7UU6oZh4Nip4Lkh
vcto3EKIMelbVxSW+qtvCK63GLK9BUEyYU8Gv3VHLGDSRjfr476OvphbswV6Fxh1
+SS7K0idJlIldIjOb4nSuiIkO488oYcWqn91A9A4RqVpMgYTkhFhZgic9xKvPKoh
ZgF9J5WVneIHi9DAYtzJCObn3+0adN+mJ3TWDr0YjtcQ9NNQQ+uTEY5aAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJhv17L37PznsvRuL+GoTlXsLSbxMB8GA1UdIwQY
MBaAFKWdpKhjjb3W+kPCfTrG7I2azIeKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFoya3FHT052ZGI2UThKOU9zYnNqWnJNaDRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9hZTY3NTEtMTc4ZC00MWUxLWFlYzIt
MGY2OGU1YmZmYzdkLzEvcFoya3FHT052ZGI2UThKOU9zYnNqWnJNaDRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9hZTY3NTEtMTc4ZC00MWUxLWFlYzItMGY2OGU1YmZmYzdk
LzEvcFoya3FHT052ZGI2UThKOU9zYnNqWnJNaDRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD98yXqlM
QDgPP2lJdXTVVdQ47LOI0EbTtqFD8pz0bTOEmjUAdPEK+BPw925Ma6BFEMatU7BD
Ewrhth9PAgJzF+GquDYom7WGlrGj3ivfLBeQeMhL/aa8NDe7MA8YxyGNK6zsYPq5
+GYeNitUasfPfiuBbj6lQB/HtBGBiVe2rHAINp7Uuh7DsyoTl3DoedOk4AeT5yL7
aW7XcsjW7NMPUY+qcmbANGGHb7LcxmoS1LGh5F+vEouHogpC/ajgoOGetcsuxlI+
oev43pANCZJ5frZdlWxWxOMsYwSvcLnExkTt2kmll73HErgb45DSU5RioKr++Znz
VilaIa/waDIolg==
-----END CERTIFICATE-----
Generated at Thu Oct 23 16:28:36 2025 by rpki-client