Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft
File: Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft (raw, json)
Hash identifier: 7QYQlE7HulABtKmuLLWyLFxMeP5lWrCvu+Vr8Tyd040=
Subject key identifier: C1:25:A8:81:A8:70:85:30:8E:24:6F:3D:DF:A3:4C:7D:85:B7:E3:8B
Authority key identifier: 3E:DD:1C:F4:37:00:85:B6:D2:57:14:09:14:36:F6:68:60:28:D5:58
Certificate issuer: /CN=3edd1cf4370085b6d25714091436f6686028d558
Certificate serial: 019A71B7AE0C7046BABA5AE4C2D75DF5170E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft
Manifest number: 01D3
Signing time: Tue 11 Nov 2025 07:00:54 +0000
Manifest this update: Tue 11 Nov 2025 07:00:54 +0000
Manifest next update: Wed 12 Nov 2025 07:00:54 +0000
Files and hashes: 1: Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.crl (hash: URmA24Uf240c2AF5A2A4noWSwYPtkchqvvIZhr51Kg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:ae:0c:70:46:ba:ba:5a:e4:c2:d7:5d:f5:17:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3edd1cf4370085b6d25714091436f6686028d558
Validity
Not Before: Nov 11 07:00:54 2025 GMT
Not After : Nov 12 07:00:54 2025 GMT
Subject: CN=c125a881a87085308e246f3ddfa34c7d85b7e38b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:17:56:7b:a4:73:37:fb:c0:4a:68:57:a8:7c:
5a:e4:74:e3:75:17:2e:40:b9:d6:a1:3d:32:49:b1:
5b:0b:67:5f:6f:22:1e:f5:d3:29:08:be:02:db:80:
af:bd:07:99:b5:6b:43:75:94:d1:c2:9e:03:eb:62:
99:14:45:fe:ba:58:08:c9:8f:df:9e:90:b0:1b:aa:
b5:52:02:51:4d:31:4e:44:e0:0f:e1:1f:6f:7c:2e:
72:28:5b:3e:a6:df:a5:bf:52:1e:58:a3:66:c3:f8:
64:27:fb:5d:45:d2:57:65:bc:da:61:f6:fd:33:99:
bd:2e:95:02:92:67:ef:1c:27:79:d4:36:28:25:75:
bb:d6:1c:aa:33:21:d7:c7:1e:f0:b5:62:78:fe:cc:
e7:4c:4c:b9:4d:f3:22:6e:48:fb:fc:9e:db:29:28:
f2:54:d8:8d:07:73:5e:6d:3e:94:c3:89:a7:18:77:
e3:e9:73:f8:44:5d:93:bb:d9:3a:07:ca:34:ff:b3:
7b:2e:b8:3b:1f:f5:43:5a:5a:18:41:1e:4d:06:0f:
59:6f:6f:a6:1d:93:ea:c2:a4:b6:68:9b:6e:d2:10:
2f:1b:b2:c6:77:d9:8e:e1:7b:69:91:b0:d2:29:05:
ef:59:c6:26:d1:91:28:39:11:98:74:ee:0c:b4:94:
2e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:25:A8:81:A8:70:85:30:8E:24:6F:3D:DF:A3:4C:7D:85:B7:E3:8B
X509v3 Authority Key Identifier:
keyid:3E:DD:1C:F4:37:00:85:B6:D2:57:14:09:14:36:F6:68:60:28:D5:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:3a:42:5d:74:6d:69:f4:bb:17:dd:9a:99:76:c9:f5:2f:77:
be:f2:b9:a0:9a:e6:42:36:7a:96:56:a8:32:34:b9:4c:b8:cf:
e7:79:6a:ed:a9:d3:f9:52:d5:a9:1a:7c:4d:98:72:58:50:22:
b9:84:72:f8:3f:ee:65:8e:62:41:b9:e3:a1:c5:d8:a4:86:cd:
b0:be:d2:c0:44:cd:fd:28:c3:81:7c:3b:ee:63:a3:d6:90:d4:
6c:b7:7f:4d:1b:8f:96:a3:ee:d7:5c:a7:5d:46:92:60:bb:a6:
1d:fb:03:aa:7f:17:06:09:b6:c7:5e:ab:c1:b9:ee:cf:35:ae:
b5:ed:6d:9e:11:e4:eb:60:af:0e:67:ec:e4:c4:a3:bd:90:31:
d0:80:52:da:c6:d5:e0:a9:c4:af:fb:51:bc:a6:a9:d2:9e:ba:
8e:f4:5b:c6:35:4b:6d:9c:ed:6f:b5:97:eb:b0:5a:7a:76:5e:
de:8a:1e:a2:1e:49:02:dc:e0:aa:0a:a3:98:fa:b9:f2:76:68:
79:43:b4:63:21:88:9e:25:d2:cc:6f:ff:77:be:d1:b3:c7:7f:
97:58:02:89:9b:50:a8:25:2b:91:e3:64:72:8f:47:12:11:74:
e9:51:1a:ee:2d:f6:c9:c6:22:42:79:ea:0d:2a:eb:10:36:75:
3d:36:c8:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt64McEa6ulrkwtdd9RcOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZGQxY2Y0MzcwMDg1YjZkMjU3MTQwOTE0MzZmNjY4NjAy
OGQ1NTgwHhcNMjUxMTExMDcwMDU0WhcNMjUxMTEyMDcwMDU0WjAzMTEwLwYDVQQD
EyhjMTI1YTg4MWE4NzA4NTMwOGUyNDZmM2RkZmEzNGM3ZDg1YjdlMzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxdWe6RzN/vASmhXqHxa5HTjdRcu
QLnWoT0ySbFbC2dfbyIe9dMpCL4C24CvvQeZtWtDdZTRwp4D62KZFEX+ulgIyY/f
npCwG6q1UgJRTTFOROAP4R9vfC5yKFs+pt+lv1IeWKNmw/hkJ/tdRdJXZbzaYfb9
M5m9LpUCkmfvHCd51DYoJXW71hyqMyHXxx7wtWJ4/sznTEy5TfMibkj7/J7bKSjy
VNiNB3NebT6Uw4mnGHfj6XP4RF2Tu9k6B8o0/7N7Lrg7H/VDWloYQR5NBg9Zb2+m
HZPqwqS2aJtu0hAvG7LGd9mO4XtpkbDSKQXvWcYm0ZEoORGYdO4MtJQuVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMElqIGocIUwjiRvPd+jTH2Ft+OLMB8GA1UdIwQY
MBaAFD7dHPQ3AIW20lcUCRQ29mhgKNVYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHQwYzlEY0FoYmJTVnhRSkZEYjJhR0FvMVZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9hMjU4YmYtNzlkZS00YzI4LThhMGYt
ZThlZDkyN2M1NWE0LzEvUHQwYzlEY0FoYmJTVnhRSkZEYjJhR0FvMVZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9hMjU4YmYtNzlkZS00YzI4LThhMGYtZThlZDkyN2M1NWE0
LzEvUHQwYzlEY0FoYmJTVnhRSkZEYjJhR0FvMVZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmDpCXXRt
afS7F92amXbJ9S93vvK5oJrmQjZ6llaoMjS5TLjP53lq7anT+VLVqRp8TZhyWFAi
uYRy+D/uZY5iQbnjocXYpIbNsL7SwETN/SjDgXw77mOj1pDUbLd/TRuPlqPu11yn
XUaSYLumHfsDqn8XBgm2x16rwbnuzzWute1tnhHk62CvDmfs5MSjvZAx0IBS2sbV
4KnEr/tRvKap0p66jvRbxjVLbZztb7WX67BaenZe3ooeoh5JAtzgqgqjmPq58nZo
eUO0YyGIniXSzG//d77Rs8d/l1gCiZtQqCUrkeNkco9HEhF06VEa7i32ycYiQnnq
DSrrEDZ1PTbIJg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:26:53 2025 by rpki-client