Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
File: PBC7uXtTnGv4MFlZhVZloOeqbZU.mft (raw, json)
Hash identifier: S5SpU47/wLXxHZ3uqIZUZwRa457DutmBHAnaGokwsLI=
Subject key identifier: C1:5D:54:87:B3:BD:98:F7:73:10:08:78:16:6D:C3:2D:6C:5D:73:B8
Authority key identifier: 3C:10:BB:B9:7B:53:9C:6B:F8:30:59:59:85:56:65:A0:E7:AA:6D:95
Certificate issuer: /CN=3c10bbb97b539c6bf8305959855665a0e7aa6d95
Certificate serial: 019A71B920537EC375769803FA86C76AAE89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
Manifest number: 0B25
Signing time: Tue 11 Nov 2025 07:02:29 +0000
Manifest this update: Tue 11 Nov 2025 07:02:29 +0000
Manifest next update: Wed 12 Nov 2025 07:02:29 +0000
Files and hashes: 1: PBC7uXtTnGv4MFlZhVZloOeqbZU.crl (hash: sBINrr+xEDpVC4K+wKjWYZRKoOa9n56Oxq3rX3qNu0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:20:53:7e:c3:75:76:98:03:fa:86:c7:6a:ae:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c10bbb97b539c6bf8305959855665a0e7aa6d95
Validity
Not Before: Nov 11 07:02:29 2025 GMT
Not After : Nov 12 07:02:29 2025 GMT
Subject: CN=c15d5487b3bd98f773100878166dc32d6c5d73b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0a:ee:31:45:37:5b:46:79:bc:6e:51:0b:0e:
42:74:e0:07:cd:ec:b3:5c:1d:6c:ae:b1:2c:31:96:
42:0e:7a:1f:f4:ac:8f:a9:a6:fa:85:67:cd:1e:1f:
df:22:38:4f:d7:c1:aa:0c:cf:cd:33:6f:d3:c7:f0:
d9:7d:82:2e:bf:04:cf:4a:65:3d:89:7f:5c:d9:23:
fd:6c:f8:3c:04:01:3d:04:d2:af:50:0a:cf:67:d5:
8f:9a:5f:3e:85:6f:eb:fd:88:86:30:60:f4:00:51:
ca:2c:41:d0:20:77:86:b6:11:db:43:0e:a0:14:a8:
31:85:8d:b8:19:c2:a5:37:f0:f1:bc:7b:6a:83:d9:
6f:47:64:a2:31:bc:8e:34:bc:67:f4:fa:0e:fe:8c:
19:5b:dd:42:e8:c1:22:1c:32:3c:4b:78:4e:fc:46:
e3:f6:b5:a3:3a:eb:03:fb:da:e2:4b:ed:db:bb:8f:
3d:31:ce:24:0f:bc:f3:47:9d:13:f1:c8:69:47:45:
3d:53:3c:d4:b6:fc:64:45:e2:ba:7d:8f:54:4f:58:
b5:e2:fb:de:2f:44:7e:b8:3f:aa:08:1d:5d:b1:df:
99:45:d6:b3:8f:5f:b9:94:97:f5:60:3d:51:a7:3b:
e9:e3:d5:15:2a:16:9a:ad:60:ce:e0:69:ef:f3:d9:
c8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5D:54:87:B3:BD:98:F7:73:10:08:78:16:6D:C3:2D:6C:5D:73:B8
X509v3 Authority Key Identifier:
keyid:3C:10:BB:B9:7B:53:9C:6B:F8:30:59:59:85:56:65:A0:E7:AA:6D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:32:c2:e6:3a:e7:c9:41:11:73:83:d7:db:cd:02:98:09:a9:
8e:05:ce:ec:8e:e9:54:9e:62:79:74:37:9e:e7:f5:52:bd:fb:
c8:fe:40:98:fa:dc:12:8d:a4:82:c9:1f:48:9f:12:6c:90:83:
64:79:38:23:54:ae:16:78:69:16:c4:16:b7:cd:82:fd:c8:ee:
a8:d4:06:9c:93:98:96:41:0a:cc:5d:54:50:46:06:68:83:09:
54:c3:b4:fe:66:34:95:86:c6:42:18:e4:7d:ee:ad:13:ef:06:
c0:96:3d:2b:13:f9:ab:21:f3:0f:f0:73:29:ac:a1:de:d7:a9:
15:b7:f2:7f:5f:53:b6:4c:70:fa:3d:cd:3a:c3:53:66:1a:2f:
30:00:10:44:a7:1b:00:c3:ed:6e:71:80:31:21:ca:58:3e:0a:
a4:43:8c:23:54:1f:4b:e4:b3:95:bc:6c:b9:b9:2d:33:df:3b:
9b:d9:21:39:3e:c1:84:53:20:f1:1e:88:ca:56:a9:14:3f:2c:
6f:31:ab:9b:0d:06:23:ad:cb:3d:20:50:0e:ef:3a:23:5b:3f:
ce:7a:d7:1d:00:ff:89:55:61:bd:fb:15:88:17:cf:00:0b:4f:
14:b3:6c:8c:05:6f:47:f5:8a:40:bd:51:bc:a3:3f:5c:91:e8:
51:b4:6e:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuSBTfsN1dpgD+obHaq6JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMTBiYmI5N2I1MzljNmJmODMwNTk1OTg1NTY2NWEwZTdh
YTZkOTUwHhcNMjUxMTExMDcwMjI5WhcNMjUxMTEyMDcwMjI5WjAzMTEwLwYDVQQD
EyhjMTVkNTQ4N2IzYmQ5OGY3NzMxMDA4NzgxNjZkYzMyZDZjNWQ3M2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygruMUU3W0Z5vG5RCw5CdOAHzeyz
XB1srrEsMZZCDnof9KyPqab6hWfNHh/fIjhP18GqDM/NM2/Tx/DZfYIuvwTPSmU9
iX9c2SP9bPg8BAE9BNKvUArPZ9WPml8+hW/r/YiGMGD0AFHKLEHQIHeGthHbQw6g
FKgxhY24GcKlN/DxvHtqg9lvR2SiMbyONLxn9PoO/owZW91C6MEiHDI8S3hO/Ebj
9rWjOusD+9riS+3bu489Mc4kD7zzR50T8chpR0U9UzzUtvxkReK6fY9UT1i14vve
L0R+uD+qCB1dsd+ZRdazj1+5lJf1YD1Rpzvp49UVKhaarWDO4Gnv89nImwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFdVIezvZj3cxAIeBZtwy1sXXO4MB8GA1UdIwQY
MBaAFDwQu7l7U5xr+DBZWYVWZaDnqm2VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEJDN3VYdFRuR3Y0TUZsWmhWWmxvT2VxYlpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9mNzYzYTktNzE3Ni00ZjMyLTk3NjAt
MjIwMTY1YzNlNmRmLzEvUEJDN3VYdFRuR3Y0TUZsWmhWWmxvT2VxYlpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9mNzYzYTktNzE3Ni00ZjMyLTk3NjAtMjIwMTY1YzNlNmRm
LzEvUEJDN3VYdFRuR3Y0TUZsWmhWWmxvT2VxYlpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjDLC5jrn
yUERc4PX280CmAmpjgXO7I7pVJ5ieXQ3nuf1Ur37yP5AmPrcEo2kgskfSJ8SbJCD
ZHk4I1SuFnhpFsQWt82C/cjuqNQGnJOYlkEKzF1UUEYGaIMJVMO0/mY0lYbGQhjk
fe6tE+8GwJY9KxP5qyHzD/BzKayh3tepFbfyf19Ttkxw+j3NOsNTZhovMAAQRKcb
AMPtbnGAMSHKWD4KpEOMI1QfS+SzlbxsubktM987m9khOT7BhFMg8R6IylapFD8s
bzGrmw0GI63LPSBQDu86I1s/znrXHQD/iVVhvfsViBfPAAtPFLNsjAVvR/WKQL1R
vKM/XJHoUbRutg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:57 2025 by rpki-client