Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
File: pX1M_mD4owpND_lLlOut_IjJrBE.mft (raw, json)
Hash identifier: Mxz7aCn1bVyRuJ/9lbCzQwBg012iPrQXQXNTT7at/mU=
Subject key identifier: C5:41:16:77:9E:76:4D:26:D7:BF:CD:BC:F4:06:66:49:43:ED:01:79
Authority key identifier: A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11
Certificate issuer: /CN=a57d4cfe60f8a30a4d0ff94b94ebadfc88c9ac11
Certificate serial: 019A2DB1F85F532B1AA80047856D736EB68A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
Manifest number: 0DCC
Signing time: Wed 29 Oct 2025 02:00:29 +0000
Manifest this update: Wed 29 Oct 2025 02:00:29 +0000
Manifest next update: Thu 30 Oct 2025 02:00:29 +0000
Files and hashes: 1: c2KmzgC2E8wnyMl3ET7bbXtsl28.roa (hash: iCu/CgeKq6j6xvBOhyPWL0bUM1p4HmortGMzXWFLmpc=)
2: pX1M_mD4owpND_lLlOut_IjJrBE.crl (hash: uknyqUDMgrdjWZmQukNr1Slpk9JrNU4VcitQlwSnY8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:b1:f8:5f:53:2b:1a:a8:00:47:85:6d:73:6e:b6:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57d4cfe60f8a30a4d0ff94b94ebadfc88c9ac11
Validity
Not Before: Oct 29 02:00:29 2025 GMT
Not After : Oct 30 02:00:29 2025 GMT
Subject: CN=c54116779e764d26d7bfcdbcf406664943ed0179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7e:07:56:ef:6d:1c:6f:1f:8a:c0:28:9a:ba:
43:bf:5b:85:37:3a:2f:13:4e:e0:39:bc:fa:c6:48:
7b:f3:2d:7d:43:43:f4:dd:f3:44:d2:e8:59:40:47:
71:96:be:5a:6d:a5:28:8f:4f:01:89:c4:95:3f:06:
14:e0:5a:a1:8a:df:96:43:9c:0d:80:b7:25:99:f9:
e6:55:cb:8a:03:fc:4d:32:0d:3b:f7:73:54:34:16:
39:51:d5:e0:7a:09:3b:a8:a1:03:58:42:3c:96:bf:
0b:30:99:0a:ab:ba:fa:44:ac:66:95:cf:b1:ca:26:
a7:c3:ce:1a:9c:b0:57:82:61:61:b8:ba:43:a1:e4:
0a:b5:a3:6d:2f:2a:a1:2a:c4:37:33:2e:a8:66:9d:
7e:82:1c:74:1c:bd:ad:52:6f:92:fd:40:ed:09:0f:
41:c3:41:cf:64:e5:d0:3f:92:7c:fa:79:4b:8b:9d:
4f:22:d7:38:e7:28:6a:15:cf:46:32:2f:4b:6a:84:
ac:eb:86:19:27:b5:b2:90:b6:d3:92:e7:97:82:52:
b7:91:99:ab:d2:e0:e3:2a:3e:3b:37:1c:47:a5:1c:
d3:0d:9e:d0:ca:a1:b5:7d:72:99:08:be:f5:e5:fc:
b7:0d:6c:b9:b8:b8:73:fc:9c:a5:09:79:e0:fb:f3:
ff:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:41:16:77:9E:76:4D:26:D7:BF:CD:BC:F4:06:66:49:43:ED:01:79
X509v3 Authority Key Identifier:
keyid:A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:5e:c0:b2:85:47:ef:68:98:f9:d0:83:12:21:3b:07:ff:5e:
8d:48:06:b9:7d:ce:ee:68:c7:03:69:74:65:10:93:c4:5f:fd:
3b:0e:19:1d:ec:3d:df:06:3a:0e:b8:f5:43:d4:2d:ff:51:29:
74:2e:46:d2:42:de:82:95:1a:b5:84:eb:48:94:c3:dd:ed:6b:
53:ee:20:e0:65:2d:21:bb:91:a0:9e:c7:80:b3:b8:b8:e9:be:
67:88:4f:78:14:fc:97:24:a0:c7:a5:dd:26:6e:3d:7c:e3:4b:
0b:a9:e0:36:eb:27:f9:95:eb:c4:b9:4a:67:5e:28:a4:ba:d7:
8c:8b:54:63:76:b1:d5:1a:16:ad:f4:48:0c:5b:b9:10:e6:12:
72:e8:20:89:fa:78:46:ea:8b:f4:33:c5:ba:94:89:08:35:7a:
ba:b3:3b:e6:ca:03:39:9e:79:8d:24:93:a5:88:f8:06:0f:d1:
76:77:51:be:59:28:f6:bf:a4:9e:11:94:ae:41:07:8f:bc:13:
50:ec:be:27:d3:87:98:af:a0:2b:35:82:2b:2f:92:df:ae:85:
b3:bd:25:24:9b:85:bb:3e:a7:a0:90:04:90:bb:81:74:33:d3:
f8:d8:e2:02:ab:b5:62:58:07:44:6b:14:14:a8:73:58:6f:e7:
2a:44:68:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZotsfhfUysaqABHhW1zbraKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1N2Q0Y2ZlNjBmOGEzMGE0ZDBmZjk0Yjk0ZWJhZGZjODhj
OWFjMTEwHhcNMjUxMDI5MDIwMDI5WhcNMjUxMDMwMDIwMDI5WjAzMTEwLwYDVQQD
EyhjNTQxMTY3NzllNzY0ZDI2ZDdiZmNkYmNmNDA2NjY0OTQzZWQwMTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs34HVu9tHG8fisAomrpDv1uFNzov
E07gObz6xkh78y19Q0P03fNE0uhZQEdxlr5abaUoj08BicSVPwYU4Fqhit+WQ5wN
gLclmfnmVcuKA/xNMg0793NUNBY5UdXgegk7qKEDWEI8lr8LMJkKq7r6RKxmlc+x
yianw84anLBXgmFhuLpDoeQKtaNtLyqhKsQ3My6oZp1+ghx0HL2tUm+S/UDtCQ9B
w0HPZOXQP5J8+nlLi51PItc45yhqFc9GMi9LaoSs64YZJ7WykLbTkueXglK3kZmr
0uDjKj47NxxHpRzTDZ7QyqG1fXKZCL715fy3DWy5uLhz/JylCXng+/P/jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVBFneedk0m17/NvPQGZklD7QF5MB8GA1UdIwQY
MBaAFKV9TP5g+KMKTQ/5S5TrrfyIyawRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFgxTV9tRDRvd3BORF9sTGxPdXRfSWpKckJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80OGMwNzItMjJkZS00NGQ3LWJlZDgt
ZTgwZjMyMDczZjNkLzEvcFgxTV9tRDRvd3BORF9sTGxPdXRfSWpKckJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80OGMwNzItMjJkZS00NGQ3LWJlZDgtZTgwZjMyMDczZjNk
LzEvcFgxTV9tRDRvd3BORF9sTGxPdXRfSWpKckJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYl7AsoVH
72iY+dCDEiE7B/9ejUgGuX3O7mjHA2l0ZRCTxF/9Ow4ZHew93wY6Drj1Q9Qt/1Ep
dC5G0kLegpUatYTrSJTD3e1rU+4g4GUtIbuRoJ7HgLO4uOm+Z4hPeBT8lySgx6Xd
Jm49fONLC6ngNusn+ZXrxLlKZ14opLrXjItUY3ax1RoWrfRIDFu5EOYScuggifp4
RuqL9DPFupSJCDV6urM75soDOZ55jSSTpYj4Bg/RdndRvlko9r+knhGUrkEHj7wT
UOy+J9OHmK+gKzWCKy+S366Fs70lJJuFuz6noJAEkLuBdDPT+NjiAqu1YlgHRGsU
FKhzWG/nKkRofA==
-----END CERTIFICATE-----
Generated at Wed Oct 29 11:33:31 2025 by rpki-client