Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
File: P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft (raw, json)
Hash identifier: NG7KhGT4fBDwnWvaVOW4/Y2j418qp/4w6KueqQEaeIA=
Subject key identifier: 0D:D2:17:82:99:8B:2C:11:07:59:20:FC:E8:7A:C4:09:0A:7B:16:9A
Authority key identifier: 3F:47:F7:57:57:41:3C:CC:17:2D:3D:1B:82:6F:AE:5A:E9:38:5A:1B
Certificate issuer: /CN=3f47f75757413ccc172d3d1b826fae5ae9385a1b
Certificate serial: 019A7149CA811C4CA129EA084FD5E8E79B10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 05:00:52 +0000
Manifest this update: Tue 11 Nov 2025 05:00:52 +0000
Manifest next update: Wed 12 Nov 2025 05:00:52 +0000
Files and hashes: 1: P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl (hash: 1sbwiDei11G9zovJZ+jjeaVpZDet9OjFW9amiNbYWrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:ca:81:1c:4c:a1:29:ea:08:4f:d5:e8:e7:9b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f47f75757413ccc172d3d1b826fae5ae9385a1b
Validity
Not Before: Nov 11 05:00:52 2025 GMT
Not After : Nov 12 05:00:52 2025 GMT
Subject: CN=0dd21782998b2c11075920fce87ac4090a7b169a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b2:54:fd:e5:fd:35:cd:b7:f2:d3:a5:97:29:
a4:c2:27:11:5e:86:e5:dd:51:16:51:68:09:46:46:
c1:fc:29:1c:df:ca:6d:a2:f8:77:ef:22:45:4c:6b:
b3:53:9e:7f:13:38:25:f5:1a:da:21:8f:ec:5f:68:
24:b9:86:d5:b3:04:fa:6a:d8:e4:05:34:9e:08:db:
5c:df:7c:99:fd:57:76:a4:15:37:bb:77:3a:a1:f6:
9c:37:38:c8:aa:d2:de:c6:0e:02:d3:e5:4b:9b:0c:
c9:98:d1:c6:ee:f1:24:b9:04:ca:55:bb:58:72:4c:
c3:bb:2d:d7:7b:70:a7:86:ba:40:ff:2f:4c:09:27:
fe:48:dd:42:db:26:33:30:47:4a:a2:5f:0b:69:67:
39:24:53:0a:22:dc:8b:cc:1c:ad:e7:5e:bf:a3:58:
b4:4b:0f:f6:c7:98:5b:62:4e:a2:69:ee:8c:e0:80:
c6:a7:ec:52:5b:93:93:3a:a1:65:3c:a6:4c:16:55:
27:4f:26:5d:c9:26:01:a3:87:00:1f:c3:6a:e8:b9:
47:26:39:65:1e:66:82:9e:27:68:22:37:56:45:a7:
6a:8b:8a:eb:bb:03:bd:c9:65:79:30:df:7b:0c:d5:
dc:1d:29:83:f2:38:7f:d9:0c:3a:d8:d7:ed:72:fe:
1e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D2:17:82:99:8B:2C:11:07:59:20:FC:E8:7A:C4:09:0A:7B:16:9A
X509v3 Authority Key Identifier:
keyid:3F:47:F7:57:57:41:3C:CC:17:2D:3D:1B:82:6F:AE:5A:E9:38:5A:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:da:d7:15:6f:85:2f:76:a7:51:20:20:d3:82:2f:32:11:38:
b1:e0:2a:9d:29:97:01:58:4f:d1:4c:9d:e8:9e:0b:75:fa:e3:
b0:c9:50:0a:2e:fe:7b:27:64:12:af:74:e1:73:37:7c:36:7d:
50:df:2e:66:d6:64:e4:0e:10:94:e2:b2:69:c0:68:84:12:03:
6e:a2:5c:a8:8b:55:33:67:b8:fd:ee:bc:ce:9d:c9:ed:a6:12:
bd:67:8b:54:79:ce:20:0a:e7:e8:ab:76:cf:b9:9a:d2:b5:ab:
43:71:5d:99:dc:7e:06:7e:c4:0d:29:ea:2f:de:78:7c:75:a9:
49:b2:03:3d:24:42:83:4e:86:61:84:a9:82:5d:9a:96:ee:41:
9d:43:55:30:bc:b2:c0:96:b8:80:13:6d:66:c1:32:8c:12:72:
f2:6d:9e:e8:1e:ae:6f:e8:22:75:03:ed:fe:c8:50:36:79:ca:
e8:a3:de:01:b5:40:ca:2a:88:ab:ef:ac:bd:46:64:d8:c4:50:
33:d2:af:19:f3:ae:ce:f2:93:d8:82:e7:4d:e3:65:61:ea:ea:
79:aa:5b:67:85:66:05:24:a9:4a:88:ca:07:d2:5e:c0:79:2d:
f4:03:72:5d:af:ea:25:b6:ed:8b:ee:96:89:85:0e:d8:66:15:
b2:d7:b5:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxScqBHEyhKeoIT9Xo55sQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmNDdmNzU3NTc0MTNjY2MxNzJkM2QxYjgyNmZhZTVhZTkz
ODVhMWIwHhcNMjUxMTExMDUwMDUyWhcNMjUxMTEyMDUwMDUyWjAzMTEwLwYDVQQD
EygwZGQyMTc4Mjk5OGIyYzExMDc1OTIwZmNlODdhYzQwOTBhN2IxNjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LJU/eX9Nc238tOllymkwicRXobl
3VEWUWgJRkbB/Ckc38ptovh37yJFTGuzU55/Ezgl9RraIY/sX2gkuYbVswT6atjk
BTSeCNtc33yZ/Vd2pBU3u3c6ofacNzjIqtLexg4C0+VLmwzJmNHG7vEkuQTKVbtY
ckzDuy3Xe3CnhrpA/y9MCSf+SN1C2yYzMEdKol8LaWc5JFMKItyLzByt516/o1i0
Sw/2x5hbYk6iae6M4IDGp+xSW5OTOqFlPKZMFlUnTyZdySYBo4cAH8Nq6LlHJjll
HmaCnidoIjdWRadqi4rruwO9yWV5MN97DNXcHSmD8jh/2Qw62Nftcv4ehwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3SF4KZiywRB1kg/Oh6xAkKexaaMB8GA1UdIwQY
MBaAFD9H91dXQTzMFy09G4JvrlrpOFobMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDBmM1YxZEJQTXdYTFQwYmdtLXVXdWs0V2hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC85Zjg4ZDgtOGE2ZC00YzVjLWIxOTQt
ZTE1NWFjYzZiODRlLzEvUDBmM1YxZEJQTXdYTFQwYmdtLXVXdWs0V2hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC85Zjg4ZDgtOGE2ZC00YzVjLWIxOTQtZTE1NWFjYzZiODRl
LzEvUDBmM1YxZEJQTXdYTFQwYmdtLXVXdWs0V2hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd9rXFW+F
L3anUSAg04IvMhE4seAqnSmXAVhP0Uyd6J4LdfrjsMlQCi7+eydkEq904XM3fDZ9
UN8uZtZk5A4QlOKyacBohBIDbqJcqItVM2e4/e68zp3J7aYSvWeLVHnOIArn6Kt2
z7ma0rWrQ3Fdmdx+Bn7EDSnqL954fHWpSbIDPSRCg06GYYSpgl2alu5BnUNVMLyy
wJa4gBNtZsEyjBJy8m2e6B6ub+gidQPt/shQNnnK6KPeAbVAyiqIq++svUZk2MRQ
M9KvGfOuzvKT2ILnTeNlYerqeapbZ4VmBSSpSojKB9JewHkt9ANyXa/qJbbti+6W
iYUO2GYVste1LA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:18 2025 by rpki-client