Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.mft
File: pNyKTpFqo_eO94BHrCDQ0PipUPk.mft (raw, json)
Hash identifier: lWpVscW0xqqLWZr3gIRPrT6wuKdMwPDDBn1Yg4zGVGM=
Subject key identifier: 54:07:2C:A7:DB:56:1F:F2:BD:1B:49:E9:C1:75:8A:F5:94:E1:73:2D
Authority key identifier: A4:DC:8A:4E:91:6A:A3:F7:8E:F7:80:47:AC:20:D0:D0:F8:A9:50:F9
Certificate issuer: /CN=a4dc8a4e916aa3f78ef78047ac20d0d0f8a950f9
Certificate serial: 019A71B8B183C8232C81FE5F0CAE78E0B460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNyKTpFqo_eO94BHrCDQ0PipUPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.mft
Manifest number: 0D9A
Signing time: Tue 11 Nov 2025 07:02:00 +0000
Manifest this update: Tue 11 Nov 2025 07:02:00 +0000
Manifest next update: Wed 12 Nov 2025 07:02:00 +0000
Files and hashes: 1: UTvK6gSJU03H7EOW3gSzFazwB7M.roa (hash: fFNxwITyp66ny+cQJs93d3VRTa/z6HUTvmCKvoybY9I=)
2: pNyKTpFqo_eO94BHrCDQ0PipUPk.crl (hash: 1A2eFojveEhDvbKwXdFdFVdDr1Vbg1Plu3NpApr0WSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNyKTpFqo_eO94BHrCDQ0PipUPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b1:83:c8:23:2c:81:fe:5f:0c:ae:78:e0:b4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4dc8a4e916aa3f78ef78047ac20d0d0f8a950f9
Validity
Not Before: Nov 11 07:02:00 2025 GMT
Not After : Nov 12 07:02:00 2025 GMT
Subject: CN=54072ca7db561ff2bd1b49e9c1758af594e1732d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:94:9a:8f:b1:83:eb:e4:02:65:09:3f:0d:b7:
ec:38:27:35:f8:d7:15:cd:b7:54:55:8a:dc:13:14:
2d:45:2f:ba:c0:8c:fb:61:a3:7a:f7:85:4e:52:d9:
79:0b:f6:ce:d8:6c:10:7d:5d:d6:d3:36:46:d7:d2:
ee:42:32:98:98:04:78:f6:72:62:38:93:47:85:5a:
9d:3c:32:af:19:80:22:18:ae:ab:0d:5e:ff:f9:97:
34:ac:ba:d3:2d:30:8c:be:ce:46:f8:de:cc:5a:c2:
86:54:9c:0a:b4:76:43:05:b5:5a:50:f7:7d:95:32:
d8:77:33:da:e9:9b:06:76:5e:69:d6:32:98:21:1f:
eb:7e:be:9e:d7:90:6b:ce:a0:69:77:56:00:6c:fb:
0e:2a:e0:35:22:df:3d:f2:89:c2:69:84:cb:2a:8c:
12:e4:13:87:c2:a3:72:05:e8:90:14:4b:97:41:52:
a3:57:15:4f:28:0e:b1:5b:f7:d3:82:20:a6:ff:37:
22:32:24:ce:42:a5:ae:71:c1:ef:14:f6:73:58:b5:
73:54:0f:a1:a1:e2:15:ab:e1:a4:b6:82:e6:82:96:
a8:3a:53:e2:cd:42:65:ac:ae:34:f3:5d:2a:33:6e:
c5:28:16:bf:af:06:d6:7d:ae:69:83:5a:63:09:cb:
7f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:07:2C:A7:DB:56:1F:F2:BD:1B:49:E9:C1:75:8A:F5:94:E1:73:2D
X509v3 Authority Key Identifier:
keyid:A4:DC:8A:4E:91:6A:A3:F7:8E:F7:80:47:AC:20:D0:D0:F8:A9:50:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNyKTpFqo_eO94BHrCDQ0PipUPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:14:a9:15:9e:79:06:ed:fa:3b:30:ca:bc:c5:5e:5e:f1:44:
84:3a:7b:62:fd:c4:03:33:74:bc:e7:b5:ea:74:bd:28:9b:e6:
1b:88:ad:15:3b:78:d8:3c:d8:a4:a3:1d:6c:ef:41:36:5f:14:
09:a5:d7:40:aa:9e:42:2f:ba:b0:8d:29:49:28:6a:77:93:22:
f7:20:3d:de:92:bd:ae:ff:80:48:a7:d6:6b:bd:97:75:a0:76:
37:7d:52:29:90:10:23:36:1e:d7:7c:d2:58:e3:ce:04:52:fd:
19:ca:ba:71:87:d0:5b:9c:42:85:a8:43:0a:6f:94:a7:51:8e:
12:cc:f5:57:43:f9:1c:0a:99:e0:eb:bc:e8:70:83:c6:32:e9:
14:55:2e:6e:fd:e6:e8:aa:f1:c8:e6:dc:67:55:5f:af:45:27:
f7:b1:5e:55:22:9a:a6:85:13:93:a3:47:b5:1c:ae:48:0c:f6:
89:bd:27:de:0a:f9:27:66:bf:32:1b:6c:e0:67:08:f6:5b:5c:
a6:f9:a4:ca:b0:5a:8f:63:3d:18:3f:0c:c8:e9:02:3b:14:07:
ce:98:5d:89:75:6a:c1:63:cd:38:85:3f:09:07:c4:ad:dc:9d:
dc:0a:04:8b:28:8a:0b:6e:90:a9:64:91:87:49:ad:83:c6:42:
f7:9e:f6:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuLGDyCMsgf5fDK544LRgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZGM4YTRlOTE2YWEzZjc4ZWY3ODA0N2FjMjBkMGQwZjhh
OTUwZjkwHhcNMjUxMTExMDcwMjAwWhcNMjUxMTEyMDcwMjAwWjAzMTEwLwYDVQQD
Eyg1NDA3MmNhN2RiNTYxZmYyYmQxYjQ5ZTljMTc1OGFmNTk0ZTE3MzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZSaj7GD6+QCZQk/DbfsOCc1+NcV
zbdUVYrcExQtRS+6wIz7YaN694VOUtl5C/bO2GwQfV3W0zZG19LuQjKYmAR49nJi
OJNHhVqdPDKvGYAiGK6rDV7/+Zc0rLrTLTCMvs5G+N7MWsKGVJwKtHZDBbVaUPd9
lTLYdzPa6ZsGdl5p1jKYIR/rfr6e15BrzqBpd1YAbPsOKuA1It898onCaYTLKowS
5BOHwqNyBeiQFEuXQVKjVxVPKA6xW/fTgiCm/zciMiTOQqWuccHvFPZzWLVzVA+h
oeIVq+GktoLmgpaoOlPizUJlrK40810qM27FKBa/rwbWfa5pg1pjCct/xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQHLKfbVh/yvRtJ6cF1ivWU4XMtMB8GA1UdIwQY
MBaAFKTcik6RaqP3jveAR6wg0ND4qVD5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE55S1RwRnFvX2VPOTRCSHJDRFEwUGlwVVBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9hZTFiODktZmQ0OC00YjJkLWE4OGUt
OTY2YmU0ODMyODE1LzEvcE55S1RwRnFvX2VPOTRCSHJDRFEwUGlwVVBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9hZTFiODktZmQ0OC00YjJkLWE4OGUtOTY2YmU0ODMyODE1
LzEvcE55S1RwRnFvX2VPOTRCSHJDRFEwUGlwVVBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxRSpFZ55
Bu36OzDKvMVeXvFEhDp7Yv3EAzN0vOe16nS9KJvmG4itFTt42DzYpKMdbO9BNl8U
CaXXQKqeQi+6sI0pSShqd5Mi9yA93pK9rv+ASKfWa72XdaB2N31SKZAQIzYe13zS
WOPOBFL9Gcq6cYfQW5xChahDCm+Up1GOEsz1V0P5HAqZ4Ou86HCDxjLpFFUubv3m
6KrxyObcZ1Vfr0Un97FeVSKapoUTk6NHtRyuSAz2ib0n3gr5J2a/Mhts4GcI9ltc
pvmkyrBaj2M9GD8MyOkCOxQHzphdiXVqwWPNOIU/CQfErdyd3AoEiyiKC26QqWSR
h0mtg8ZC9572OQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:47 2025 by rpki-client