Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
File: 0pigcUzBvyWsfH8c9sKIbIxhkqM.mft (raw, json)
Hash identifier: LVftrmfvssZLzh6JmvrhBwU7bsmB65Y+VruXH+a7pg8=
Subject key identifier: F9:77:B3:93:4A:2C:EF:25:2B:41:C6:EF:DA:64:69:92:DB:21:8A:66
Authority key identifier: D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3
Certificate issuer: /CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3
Certificate serial: 019A71EE9E4FC7897E6B5DA0FC1A6D03A943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
Manifest number: 049A
Signing time: Tue 11 Nov 2025 08:00:54 +0000
Manifest this update: Tue 11 Nov 2025 08:00:54 +0000
Manifest next update: Wed 12 Nov 2025 08:00:54 +0000
Files and hashes: 1: 0pigcUzBvyWsfH8c9sKIbIxhkqM.crl (hash: b1CqJA3/nwB3vLeh11H5J8crPD54IRUDxiVN7yqJ5CY=)
2: eBrn60Df7uG_ub_L-IV105lzs58.roa (hash: O8+G2XvuPwR1yEXnK+zmEZeJLzoyxFForxI59j5WNAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:9e:4f:c7:89:7e:6b:5d:a0:fc:1a:6d:03:a9:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3
Validity
Not Before: Nov 11 08:00:54 2025 GMT
Not After : Nov 12 08:00:54 2025 GMT
Subject: CN=f977b3934a2cef252b41c6efda646992db218a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7d:1a:6a:78:0a:39:ee:e1:29:02:03:54:a8:
73:6a:4b:ae:80:bc:e3:72:0b:0e:d5:38:d9:b7:85:
2e:29:0e:cc:dd:cd:a9:cb:ef:6f:10:fb:71:de:a8:
88:3f:32:0c:85:e3:ff:8f:1f:61:93:de:95:8e:65:
f0:a9:09:e5:da:29:ba:96:07:af:c8:a6:8a:ff:33:
2a:b0:b9:c6:34:af:ba:b4:7a:b4:32:44:cd:b2:c9:
1a:dc:2d:e5:6c:da:d4:3b:b0:2a:83:8f:5f:6e:e8:
c4:20:25:3f:02:94:c8:47:c0:d7:86:7b:5d:02:91:
0d:c3:52:e4:da:91:81:d1:d8:ac:3f:f9:2c:ad:85:
e8:b5:9d:a2:7f:46:e0:24:a8:92:b0:6e:4a:ae:aa:
84:c5:54:c4:db:51:f4:7a:9c:8b:45:95:3e:15:6e:
6d:82:30:02:81:40:b9:d9:fd:fc:95:2f:d9:5b:74:
a2:4b:1a:02:91:92:da:24:6e:4a:1b:75:fa:6a:a7:
34:9d:2c:41:26:5c:17:26:d1:be:1d:62:6d:64:2f:
57:a3:72:c4:dc:cf:f0:62:1f:fa:fb:6d:5f:50:1c:
d1:2b:27:df:32:90:62:b7:d7:0d:79:e0:e2:31:a5:
01:fa:4c:3e:bb:83:47:02:d4:a5:0c:f4:dc:80:c3:
6a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:77:B3:93:4A:2C:EF:25:2B:41:C6:EF:DA:64:69:92:DB:21:8A:66
X509v3 Authority Key Identifier:
keyid:D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:f8:af:8f:78:ff:8f:f8:bb:42:95:44:84:6d:6d:55:70:11:
4c:7d:ba:6d:2d:73:1d:70:6d:df:4f:a0:53:59:ce:54:11:4f:
28:1f:91:15:17:80:68:15:fb:05:d3:79:11:fa:b8:b7:48:16:
e8:ba:cd:a4:7a:dd:5d:b3:0b:c7:1f:47:5b:a9:e1:94:da:de:
6f:38:c6:17:6a:3b:7d:38:0b:90:19:4a:d4:49:5d:1c:14:fd:
f1:2c:9a:0d:0b:5e:37:25:bf:55:f8:19:4a:a5:ac:c2:21:d9:
25:64:fa:95:aa:e5:64:1c:8c:e1:33:ae:dd:92:5b:27:f5:a1:
7c:01:e7:4c:0f:06:20:ec:1b:cd:e5:77:20:6a:b9:71:be:cb:
38:44:34:1c:bb:0a:d5:ad:e0:7a:e5:b1:1b:a6:86:d8:8b:9c:
64:79:02:60:59:b2:49:d7:09:9c:47:68:ae:24:bc:d7:0c:45:
5c:c2:9e:5b:5e:a2:8e:90:ae:0d:5e:92:f6:58:ef:92:04:72:
0b:29:e3:d4:48:3d:68:39:7a:c8:a7:0d:b7:6d:f7:31:bd:ef:
1c:02:ed:3f:d5:b7:af:49:75:37:8f:29:d0:f0:78:4c:64:a1:
fe:fd:c1:c7:5a:fb:e0:39:8c:c3:f0:a1:8c:35:9c:c6:6e:43:
8e:26:99:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7p5Px4l+a12g/BptA6lDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyOThhMDcxNGNjMWJmMjVhYzdjN2YxY2Y2YzI4ODZjOGM2
MTkyYTMwHhcNMjUxMTExMDgwMDU0WhcNMjUxMTEyMDgwMDU0WjAzMTEwLwYDVQQD
EyhmOTc3YjM5MzRhMmNlZjI1MmI0MWM2ZWZkYTY0Njk5MmRiMjE4YTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxH0aangKOe7hKQIDVKhzakuugLzj
cgsO1TjZt4UuKQ7M3c2py+9vEPtx3qiIPzIMheP/jx9hk96VjmXwqQnl2im6lgev
yKaK/zMqsLnGNK+6tHq0MkTNsska3C3lbNrUO7Aqg49fbujEICU/ApTIR8DXhntd
ApENw1Lk2pGB0disP/ksrYXotZ2if0bgJKiSsG5KrqqExVTE21H0epyLRZU+FW5t
gjACgUC52f38lS/ZW3SiSxoCkZLaJG5KG3X6aqc0nSxBJlwXJtG+HWJtZC9Xo3LE
3M/wYh/6+21fUBzRKyffMpBit9cNeeDiMaUB+kw+u4NHAtSlDPTcgMNqgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPl3s5NKLO8lK0HG79pkaZLbIYpmMB8GA1UdIwQY
MBaAFNKYoHFMwb8lrHx/HPbCiGyMYZKjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHBpZ2NVekJ2eVdzZkg4YzlzS0liSXhoa3FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kOTdhZWEtZmEzMi00NmRhLTg1MWUt
NzVhNDcyNWFhNmZkLzEvMHBpZ2NVekJ2eVdzZkg4YzlzS0liSXhoa3FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9kOTdhZWEtZmEzMi00NmRhLTg1MWUtNzVhNDcyNWFhNmZk
LzEvMHBpZ2NVekJ2eVdzZkg4YzlzS0liSXhoa3FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASPivj3j/
j/i7QpVEhG1tVXARTH26bS1zHXBt30+gU1nOVBFPKB+RFReAaBX7BdN5Efq4t0gW
6LrNpHrdXbMLxx9HW6nhlNrebzjGF2o7fTgLkBlK1EldHBT98SyaDQteNyW/VfgZ
SqWswiHZJWT6larlZByM4TOu3ZJbJ/WhfAHnTA8GIOwbzeV3IGq5cb7LOEQ0HLsK
1a3geuWxG6aG2IucZHkCYFmySdcJnEdoriS81wxFXMKeW16ijpCuDV6S9ljvkgRy
Cynj1Eg9aDl6yKcNt233Mb3vHALtP9W3r0l1N48p0PB4TGSh/v3Bx1r74DmMw/Ch
jDWcxm5DjiaZ/w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:17:06 2025 by rpki-client