Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft
File: pTJy83vudp-iPqZUueOPsCNGjZI.mft (raw, json)
Hash identifier: 9p/qxA/nGvacBKb/IF/SOjH6rCpoUawLyQ2OAE0nh4U=
Subject key identifier: BF:19:6E:83:90:90:ED:A5:F2:5A:72:FB:CB:3F:78:91:FC:95:28:7A
Authority key identifier: A5:32:72:F3:7B:EE:76:9F:A2:3E:A6:54:B9:E3:8F:B0:23:46:8D:92
Certificate issuer: /CN=a53272f37bee769fa23ea654b9e38fb023468d92
Certificate serial: 019A70DC150D3CD00D63E26950B129773890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTJy83vudp-iPqZUueOPsCNGjZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft
Manifest number: 02D4
Signing time: Tue 11 Nov 2025 03:01:02 +0000
Manifest this update: Tue 11 Nov 2025 03:01:02 +0000
Manifest next update: Wed 12 Nov 2025 03:01:02 +0000
Files and hashes: 1: kl_zb47rnd8AaAP4vBoCuK61hPA.roa (hash: e2T6+pFfv8tCYwWL0QcrJLWjz1NsTR4Qy2fxVQvCN8Q=)
2: pTJy83vudp-iPqZUueOPsCNGjZI.crl (hash: a8+P//caiVkWGl91ScE47EMj9bV4uQgml5qOOETGirc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTJy83vudp-iPqZUueOPsCNGjZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:15:0d:3c:d0:0d:63:e2:69:50:b1:29:77:38:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53272f37bee769fa23ea654b9e38fb023468d92
Validity
Not Before: Nov 11 03:01:02 2025 GMT
Not After : Nov 12 03:01:02 2025 GMT
Subject: CN=bf196e839090eda5f25a72fbcb3f7891fc95287a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7d:a3:ea:ac:60:6b:75:d1:5b:4a:bf:db:82:
23:6f:e4:64:dd:73:1e:71:bc:b7:32:14:8a:e0:f9:
ad:06:9d:3e:8a:8b:4b:09:b1:9c:ab:5e:2f:91:ee:
ba:79:f0:b7:2f:46:dc:60:24:94:23:64:83:8a:e8:
17:62:68:2e:ce:ff:22:12:b8:a9:1d:e9:71:e8:d3:
ae:30:93:b8:a2:f9:b4:3e:ea:e5:86:dd:28:80:99:
e6:53:87:e3:43:11:23:e3:8b:55:c5:46:25:e7:70:
84:22:31:51:7f:32:71:47:0e:e1:5e:5d:81:4d:db:
7b:16:17:f6:5a:41:ae:8c:98:f6:9d:77:10:f0:0c:
38:b8:fd:03:ba:e7:1d:21:23:30:d2:16:5d:76:e4:
17:57:e8:e7:54:50:68:3f:96:5c:a6:a2:fc:c7:f6:
99:c1:71:2c:a7:eb:2e:d9:fc:d4:80:32:4a:74:4a:
dc:ea:06:79:50:5d:eb:00:6c:2f:7c:e9:6b:01:cb:
7c:0b:d2:9c:e6:c9:c8:7d:d5:96:b6:40:4e:08:07:
05:4f:7f:8a:ea:c4:26:e2:21:12:47:67:94:b3:c5:
92:93:f3:ba:a5:14:58:b5:6f:96:bc:d8:98:21:ea:
31:28:58:1b:4a:a7:46:24:b7:7d:c1:2d:bc:7f:7b:
71:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:19:6E:83:90:90:ED:A5:F2:5A:72:FB:CB:3F:78:91:FC:95:28:7A
X509v3 Authority Key Identifier:
keyid:A5:32:72:F3:7B:EE:76:9F:A2:3E:A6:54:B9:E3:8F:B0:23:46:8D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTJy83vudp-iPqZUueOPsCNGjZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:c0:4c:3c:b0:c2:e4:d1:dd:2b:5a:d0:81:c0:72:db:24:a7:
10:a7:49:4a:61:3e:11:01:22:09:db:c1:61:e0:76:65:5e:ba:
c1:c1:9e:74:16:c9:5a:b8:5e:ac:55:b9:5d:a7:65:92:ec:f7:
b5:e8:6a:8e:e2:22:ef:54:16:5b:d2:2f:95:e0:4e:c3:6d:04:
1c:3d:83:64:60:1a:d7:0d:34:33:37:31:d3:b3:de:4d:a5:b8:
e3:e2:2d:2a:82:a1:fa:67:4b:e2:ce:25:eb:13:86:a2:f6:fd:
bc:87:e1:3e:91:46:9a:5b:be:33:0c:97:e3:dc:f5:ef:96:b9:
d0:1b:59:b5:a9:2c:67:bf:27:dc:29:5e:3e:f4:a4:16:08:18:
9f:28:54:1a:bb:f8:5c:4e:94:a0:f5:93:03:e7:01:58:9a:86:
24:16:2c:e3:ce:33:0f:3a:2e:0a:bc:ba:f8:4e:10:af:21:99:
14:2e:8a:b3:81:25:7a:b8:eb:f6:59:ca:f5:6e:9d:16:94:b4:
c4:59:5b:ed:82:1f:9d:30:f2:8e:ac:ff:73:64:60:bd:96:8d:
11:cd:6f:d6:3a:ff:c6:a5:b4:56:55:1e:6d:ef:32:f8:1e:95:
0d:19:3b:54:32:a0:90:dc:b6:b4:46:eb:4c:7b:59:35:4a:3d:
21:4b:48:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3BUNPNANY+JpULEpdziQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MzI3MmYzN2JlZTc2OWZhMjNlYTY1NGI5ZTM4ZmIwMjM0
NjhkOTIwHhcNMjUxMTExMDMwMTAyWhcNMjUxMTEyMDMwMTAyWjAzMTEwLwYDVQQD
EyhiZjE5NmU4MzkwOTBlZGE1ZjI1YTcyZmJjYjNmNzg5MWZjOTUyODdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0X2j6qxga3XRW0q/24Ijb+Rk3XMe
cby3MhSK4PmtBp0+iotLCbGcq14vke66efC3L0bcYCSUI2SDiugXYmguzv8iErip
Helx6NOuMJO4ovm0Purlht0ogJnmU4fjQxEj44tVxUYl53CEIjFRfzJxRw7hXl2B
Tdt7Fhf2WkGujJj2nXcQ8Aw4uP0DuucdISMw0hZdduQXV+jnVFBoP5ZcpqL8x/aZ
wXEsp+su2fzUgDJKdErc6gZ5UF3rAGwvfOlrAct8C9Kc5snIfdWWtkBOCAcFT3+K
6sQm4iESR2eUs8WSk/O6pRRYtW+WvNiYIeoxKFgbSqdGJLd9wS28f3txdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8ZboOQkO2l8lpy+8s/eJH8lSh6MB8GA1UdIwQY
MBaAFKUycvN77nafoj6mVLnjj7AjRo2SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFRKeTgzdnVkcC1pUHFaVXVlT1BzQ05HalpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mM2YwNmQtNGIyNy00OTgxLTk1YzYt
MmY1NmE1YTlhNzU2LzEvcFRKeTgzdnVkcC1pUHFaVXVlT1BzQ05HalpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9mM2YwNmQtNGIyNy00OTgxLTk1YzYtMmY1NmE1YTlhNzU2
LzEvcFRKeTgzdnVkcC1pUHFaVXVlT1BzQ05HalpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiMBMPLDC
5NHdK1rQgcBy2ySnEKdJSmE+EQEiCdvBYeB2ZV66wcGedBbJWrherFW5Xadlkuz3
tehqjuIi71QWW9IvleBOw20EHD2DZGAa1w00Mzcx07PeTaW44+ItKoKh+mdL4s4l
6xOGovb9vIfhPpFGmlu+MwyX49z175a50BtZtaksZ78n3ClePvSkFggYnyhUGrv4
XE6UoPWTA+cBWJqGJBYs484zDzouCry6+E4QryGZFC6Ks4Elerjr9lnK9W6dFpS0
xFlb7YIfnTDyjqz/c2RgvZaNEc1v1jr/xqW0VlUebe8y+B6VDRk7VDKgkNy2tEbr
THtZNUo9IUtI8g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:28:21 2025 by rpki-client