Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft
File: pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft (raw, json)
Hash identifier: SzVMNZiIPmRRV94PlF2VdMRKsQ9F51CZm9D7kpi2rlM=
Subject key identifier: BE:71:68:B9:DF:1E:4B:93:51:D6:92:AC:ED:16:0A:CB:F7:F0:04:FF
Authority key identifier: A5:1E:2D:BB:F0:19:D8:D3:74:7E:57:30:39:25:54:DF:11:F6:ED:93
Certificate issuer: /CN=a51e2dbbf019d8d3747e5730392554df11f6ed93
Certificate serial: 019A71B8A4AA6BFC09F63718CEC30806E209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pR4tu_AZ2NN0flcwOSVU3xH27ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:01:57 +0000
Manifest this update: Tue 11 Nov 2025 07:01:57 +0000
Manifest next update: Wed 12 Nov 2025 07:01:57 +0000
Files and hashes: 1: pR4tu_AZ2NN0flcwOSVU3xH27ZM.crl (hash: LRPVIxFgwdezX+0S3O/mqapq2rDK1/RIgtfCa/h13h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pR4tu_AZ2NN0flcwOSVU3xH27ZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:a4:aa:6b:fc:09:f6:37:18:ce:c3:08:06:e2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a51e2dbbf019d8d3747e5730392554df11f6ed93
Validity
Not Before: Nov 11 07:01:57 2025 GMT
Not After : Nov 12 07:01:57 2025 GMT
Subject: CN=be7168b9df1e4b9351d692aced160acbf7f004ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c6:00:b4:9d:e4:a0:b1:47:69:67:68:63:3d:
e7:42:f5:e6:e9:35:88:a6:bb:d0:e5:70:61:6b:e3:
15:f3:e3:ba:e2:9d:a4:3f:2b:87:fe:f0:81:f9:10:
71:c1:d0:b7:1b:5f:f3:41:cc:3d:e7:7e:19:59:b0:
b0:ee:b6:d4:4f:0a:bf:64:e1:3c:da:54:75:9f:c5:
75:2f:25:6b:0f:a7:cd:a3:18:41:2c:bf:e0:98:90:
3c:7d:39:85:98:0c:f8:1d:3e:5f:72:1c:13:35:31:
31:3e:68:3c:46:de:6b:78:d8:4c:d2:40:a0:61:6c:
b6:a5:8d:d2:b5:90:42:32:ff:ed:a7:5d:43:f5:b5:
c4:d2:9e:46:04:ac:19:d7:13:c7:69:e1:a0:fe:c9:
aa:14:f1:67:a7:8c:1e:6e:99:3e:14:cb:11:f7:4f:
6a:66:51:df:43:d3:00:1c:2b:cc:72:fc:81:ef:2d:
44:e2:b4:bf:b6:6e:7b:4c:8d:17:78:ee:83:10:fd:
25:92:fd:45:39:5c:ba:c7:57:ca:62:c8:6a:ed:29:
8b:cc:bc:c4:df:64:88:c8:9c:12:16:0a:d5:24:26:
06:ea:1d:f2:19:5e:b9:07:8d:06:d6:86:ee:dd:5f:
57:ee:4c:8d:70:7b:22:fc:c6:15:00:67:e9:a3:74:
40:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:71:68:B9:DF:1E:4B:93:51:D6:92:AC:ED:16:0A:CB:F7:F0:04:FF
X509v3 Authority Key Identifier:
keyid:A5:1E:2D:BB:F0:19:D8:D3:74:7E:57:30:39:25:54:DF:11:F6:ED:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pR4tu_AZ2NN0flcwOSVU3xH27ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a4:c7:80:bf:91:34:c3:21:de:b8:ad:a9:15:8d:a0:5e:fa:
18:e3:5b:6d:23:0c:a6:e6:54:6a:e8:96:0d:74:97:a3:fc:a8:
75:f6:b9:6f:bf:db:da:ac:95:33:eb:32:6c:ad:ff:5e:80:f7:
bf:f9:60:90:7c:12:ed:98:16:0a:10:91:4b:3a:c4:8b:ab:da:
7d:77:1d:6e:0e:44:55:3a:e5:a8:5e:b3:a1:de:16:d7:ee:f5:
b8:67:3d:37:7e:85:dd:ec:63:b4:59:af:53:5a:b7:7b:39:0b:
c3:cb:a6:8a:78:b7:1c:61:d0:0b:99:04:ba:f3:12:f6:8a:b8:
5f:62:7d:ca:50:ba:3e:13:ed:ec:b3:05:ed:15:14:5a:2b:d7:
96:37:bd:4f:fc:29:09:b1:f0:a9:e5:b4:a0:50:60:6d:02:c6:
8b:ef:74:24:3b:25:0a:78:e7:89:35:9f:85:1d:ae:5c:42:d4:
dc:08:8d:bb:c4:af:2d:95:0b:77:bd:7e:77:df:18:57:52:85:
ae:a7:fa:b3:a8:db:f5:4d:77:7c:67:ec:72:f9:dc:bf:41:f9:
c3:f7:2f:13:c7:d2:4c:f3:57:35:7f:34:e6:34:51:b2:c2:c0:
ef:b4:39:33:ec:4f:11:92:1c:2a:7a:d6:23:08:0e:8c:3e:c4:
74:0b:57:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuKSqa/wJ9jcYzsMIBuIJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MWUyZGJiZjAxOWQ4ZDM3NDdlNTczMDM5MjU1NGRmMTFm
NmVkOTMwHhcNMjUxMTExMDcwMTU3WhcNMjUxMTEyMDcwMTU3WjAzMTEwLwYDVQQD
EyhiZTcxNjhiOWRmMWU0YjkzNTFkNjkyYWNlZDE2MGFjYmY3ZjAwNGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMYAtJ3koLFHaWdoYz3nQvXm6TWI
prvQ5XBha+MV8+O64p2kPyuH/vCB+RBxwdC3G1/zQcw9534ZWbCw7rbUTwq/ZOE8
2lR1n8V1LyVrD6fNoxhBLL/gmJA8fTmFmAz4HT5fchwTNTExPmg8Rt5reNhM0kCg
YWy2pY3StZBCMv/tp11D9bXE0p5GBKwZ1xPHaeGg/smqFPFnp4webpk+FMsR909q
ZlHfQ9MAHCvMcvyB7y1E4rS/tm57TI0XeO6DEP0lkv1FOVy6x1fKYshq7SmLzLzE
32SIyJwSFgrVJCYG6h3yGV65B40G1obu3V9X7kyNcHsi/MYVAGfpo3RARQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5xaLnfHkuTUdaSrO0WCsv38AT/MB8GA1UdIwQY
MBaAFKUeLbvwGdjTdH5XMDklVN8R9u2TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFI0dHVfQVoyTk4wZmxjd09TVlUzeEgyN1pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9iNWZjMDQtZmY4Ni00Y2VkLTkxYzIt
MGUzODZhM2RiZTZhLzEvcFI0dHVfQVoyTk4wZmxjd09TVlUzeEgyN1pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9iNWZjMDQtZmY4Ni00Y2VkLTkxYzItMGUzODZhM2RiZTZh
LzEvcFI0dHVfQVoyTk4wZmxjd09TVlUzeEgyN1pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFaTHgL+R
NMMh3ritqRWNoF76GONbbSMMpuZUauiWDXSXo/yodfa5b7/b2qyVM+sybK3/XoD3
v/lgkHwS7ZgWChCRSzrEi6vafXcdbg5EVTrlqF6zod4W1+71uGc9N36F3exjtFmv
U1q3ezkLw8umini3HGHQC5kEuvMS9oq4X2J9ylC6PhPt7LMF7RUUWivXlje9T/wp
CbHwqeW0oFBgbQLGi+90JDslCnjniTWfhR2uXELU3AiNu8SvLZULd71+d98YV1KF
rqf6s6jb9U13fGfscvncv0H5w/cvE8fSTPNXNX805jRRssLA77Q5M+xPEZIcKnrW
IwgOjD7EdAtXYg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:30 2025 by rpki-client