Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
File: PyixvqC1iXcj6nxfu918zSlSsFw.mft (raw, json)
Hash identifier: bsdNBhUhj1MgKHvDmGe8ILAI88WeZZLV9Vu2jUGlp44=
Subject key identifier: 91:74:32:F3:B1:DD:19:BC:A7:81:DB:5F:FF:81:70:AD:BD:C9:02:82
Authority key identifier: 3F:28:B1:BE:A0:B5:89:77:23:EA:7C:5F:BB:DD:7C:CD:29:52:B0:5C
Certificate issuer: /CN=3f28b1bea0b5897723ea7c5fbbdd7ccd2952b05c
Certificate serial: 019A72CA5AC067175765D3BFC1FFD2350F41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
Manifest number: 07E5
Signing time: Tue 11 Nov 2025 12:00:55 +0000
Manifest this update: Tue 11 Nov 2025 12:00:55 +0000
Manifest next update: Wed 12 Nov 2025 12:00:55 +0000
Files and hashes: 1: 1F_TkFNUb-s2_7y4TclItI2rQso.roa (hash: CLIjr10SKvI8VikQ8I8lxU5GeLh25bWphMtR56ykfWg=)
2: PyixvqC1iXcj6nxfu918zSlSsFw.crl (hash: WwJyjy+V53Qv7QkoY21yq++381hyTYWlDygsN3vUw7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:5a:c0:67:17:57:65:d3:bf:c1:ff:d2:35:0f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f28b1bea0b5897723ea7c5fbbdd7ccd2952b05c
Validity
Not Before: Nov 11 12:00:55 2025 GMT
Not After : Nov 12 12:00:55 2025 GMT
Subject: CN=917432f3b1dd19bca781db5fff8170adbdc90282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:45:57:0a:53:e5:fd:47:aa:47:42:0e:92:07:
dc:ad:4e:a5:57:48:7e:2b:bf:23:d5:91:37:14:3c:
5b:a4:0c:61:7b:d0:09:61:46:0d:db:ff:6b:9a:56:
00:2f:0b:ad:a4:39:3f:5d:d0:8b:39:f8:ef:5a:4e:
dc:f7:c0:2c:ca:7b:b0:b9:b0:4a:b6:ca:fc:0b:9c:
d5:a7:5e:6c:43:aa:3c:de:12:d5:01:66:fa:2d:8a:
c3:c1:30:15:a8:d1:25:82:26:d3:42:65:be:28:54:
54:b6:dc:b3:39:48:f5:86:fb:95:bd:4a:29:40:8b:
89:8e:bc:81:59:4f:6c:49:40:f8:d5:58:3d:88:df:
19:f3:92:ca:d5:35:4e:73:a2:3c:2e:df:6f:ef:9b:
c7:ec:41:c9:7b:ea:1e:f2:86:13:97:8e:96:d8:38:
76:27:71:78:dc:b7:01:cd:ed:ae:f3:41:86:a0:6a:
f9:82:e7:91:9e:73:86:0c:39:8b:f3:f3:17:fd:4d:
f9:be:ce:e4:33:88:b8:a9:16:0d:2b:5e:99:6c:5a:
67:bf:c1:53:2f:de:79:93:82:43:cd:57:c4:f4:42:
7a:38:f5:2c:45:31:f1:ae:9e:00:0b:6d:00:3b:b5:
eb:7f:8d:05:5c:8a:56:3a:2a:8f:bc:fa:fa:97:72:
84:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:74:32:F3:B1:DD:19:BC:A7:81:DB:5F:FF:81:70:AD:BD:C9:02:82
X509v3 Authority Key Identifier:
keyid:3F:28:B1:BE:A0:B5:89:77:23:EA:7C:5F:BB:DD:7C:CD:29:52:B0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:1c:b1:8f:b6:71:6c:c7:bc:f8:0a:ac:c5:80:e5:f6:b7:38:
77:b9:74:e1:a0:2c:3b:3f:e8:f5:ec:bb:d9:a0:8d:63:a0:33:
15:53:29:a8:24:de:11:53:67:9e:8b:a0:a4:5a:98:db:15:b1:
f8:27:50:01:84:d7:e8:00:d9:81:1f:15:ca:1d:39:17:64:9f:
12:68:dd:f7:74:e0:50:e4:19:cf:05:0e:55:14:87:d9:e3:c1:
66:e6:5e:1d:6b:71:41:ec:59:61:70:a5:e4:6c:8d:d4:14:bf:
fa:51:03:70:a3:df:a0:24:f4:16:76:b4:8a:f5:94:2e:d2:de:
22:52:68:9d:7a:51:8c:73:b7:82:97:24:1a:3f:ee:e4:81:22:
87:08:e2:85:4d:70:6b:17:a4:ce:f5:cc:65:97:af:a1:d5:a9:
07:d2:26:ba:c1:c6:95:ee:4f:69:cc:db:81:4c:c8:08:02:2f:
71:fe:d2:8b:bb:3b:ee:60:87:31:77:e8:b6:30:43:98:c6:47:
bd:57:3d:6b:d0:bc:e4:e6:b0:a6:0b:5e:41:4a:3c:91:4e:49:
f4:33:e3:91:47:e4:1c:81:4e:4e:1b:c4:9b:7d:9c:87:75:82:
7a:bc:ed:62:69:32:d7:5b:f1:e9:d8:73:fa:64:04:79:23:37:
fd:94:a4:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyylrAZxdXZdO/wf/SNQ9BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMjhiMWJlYTBiNTg5NzcyM2VhN2M1ZmJiZGQ3Y2NkMjk1
MmIwNWMwHhcNMjUxMTExMTIwMDU1WhcNMjUxMTEyMTIwMDU1WjAzMTEwLwYDVQQD
Eyg5MTc0MzJmM2IxZGQxOWJjYTc4MWRiNWZmZjgxNzBhZGJkYzkwMjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEVXClPl/UeqR0IOkgfcrU6lV0h+
K78j1ZE3FDxbpAxhe9AJYUYN2/9rmlYALwutpDk/XdCLOfjvWk7c98AsynuwubBK
tsr8C5zVp15sQ6o83hLVAWb6LYrDwTAVqNElgibTQmW+KFRUttyzOUj1hvuVvUop
QIuJjryBWU9sSUD41Vg9iN8Z85LK1TVOc6I8Lt9v75vH7EHJe+oe8oYTl46W2Dh2
J3F43LcBze2u80GGoGr5gueRnnOGDDmL8/MX/U35vs7kM4i4qRYNK16ZbFpnv8FT
L955k4JDzVfE9EJ6OPUsRTHxrp4AC20AO7Xrf40FXIpWOiqPvPr6l3KEswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJF0MvOx3Rm8p4HbX/+BcK29yQKCMB8GA1UdIwQY
MBaAFD8osb6gtYl3I+p8X7vdfM0pUrBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHlpeHZxQzFpWGNqNm54ZnU5MTh6U2xTc0Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9kODhiNDYtNmVmOS00NjI0LTg5ODQt
YmZhNmQzNDA3ODdhLzEvUHlpeHZxQzFpWGNqNm54ZnU5MTh6U2xTc0Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9kODhiNDYtNmVmOS00NjI0LTg5ODQtYmZhNmQzNDA3ODdh
LzEvUHlpeHZxQzFpWGNqNm54ZnU5MTh6U2xTc0Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsByxj7Zx
bMe8+AqsxYDl9rc4d7l04aAsOz/o9ey72aCNY6AzFVMpqCTeEVNnnougpFqY2xWx
+CdQAYTX6ADZgR8Vyh05F2SfEmjd93TgUOQZzwUOVRSH2ePBZuZeHWtxQexZYXCl
5GyN1BS/+lEDcKPfoCT0Fna0ivWULtLeIlJonXpRjHO3gpckGj/u5IEihwjihU1w
axekzvXMZZevodWpB9ImusHGle5PaczbgUzICAIvcf7Si7s77mCHMXfotjBDmMZH
vVc9a9C85OawpgteQUo8kU5J9DPjkUfkHIFOThvEm32ch3WCerztYmky11vx6dhz
+mQEeSM3/ZSk9g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:59:36 2025 by rpki-client