Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.mft
File: pABDs-E67Tl_iTLPXRP_T0qv5ro.mft (raw, json)
Hash identifier: mGZF7fDcVkQGaKvCfbva/Gt8uSNH5yvsB/IoOILoMrg=
Subject key identifier: 8F:A2:A9:B1:8A:7B:D0:43:94:A9:59:E1:6F:F4:67:E8:50:62:C6:6B
Authority key identifier: A4:00:43:B3:E1:3A:ED:39:7F:89:32:CF:5D:13:FF:4F:4A:AF:E6:BA
Certificate issuer: /CN=a40043b3e13aed397f8932cf5d13ff4f4aafe6ba
Certificate serial: 019A71B83BCEB273AB5BCF70DF167D1B01DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pABDs-E67Tl_iTLPXRP_T0qv5ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.mft
Manifest number: 09DB
Signing time: Tue 11 Nov 2025 07:01:30 +0000
Manifest this update: Tue 11 Nov 2025 07:01:30 +0000
Manifest next update: Wed 12 Nov 2025 07:01:30 +0000
Files and hashes: 1: 6PmEXqzCqtOkV5rlVnjN7lD4y7o.roa (hash: oeYIl7mC76NEmwPAocr8euhDeieJStNOycGYHO+qVzg=)
2: pABDs-E67Tl_iTLPXRP_T0qv5ro.crl (hash: V2pbvsiHy5bInU0/BJp+TGbeb7bv6X/Aj7sFubEskc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/pABDs-E67Tl_iTLPXRP_T0qv5ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:3b:ce:b2:73:ab:5b:cf:70:df:16:7d:1b:01:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a40043b3e13aed397f8932cf5d13ff4f4aafe6ba
Validity
Not Before: Nov 11 07:01:30 2025 GMT
Not After : Nov 12 07:01:30 2025 GMT
Subject: CN=8fa2a9b18a7bd04394a959e16ff467e85062c66b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fd:91:54:54:f0:8c:da:42:25:b0:75:e3:1e:
f8:85:2f:6f:b2:a4:e5:45:f2:df:6d:81:2d:f2:98:
f2:40:7b:4d:28:ea:e2:e8:52:56:a5:ad:7b:ea:88:
71:bd:e7:89:9a:71:ae:4a:bc:1f:4d:84:03:aa:8f:
49:bd:a6:d7:7a:e2:67:6f:75:a3:0c:50:dc:c6:5a:
b7:ff:d9:e4:6f:2f:85:b2:b0:c9:ce:d8:97:d6:24:
c8:73:2b:9b:89:4b:1b:73:8d:db:76:4d:8a:ce:16:
27:b4:fe:a2:b5:1c:43:d7:e9:0b:b3:b7:e1:51:c8:
7c:6a:99:58:72:f0:9d:f1:d6:e2:84:b5:30:93:3e:
67:65:73:81:40:44:2b:29:dd:e2:94:f1:cb:d0:d8:
01:2d:ae:a0:d5:2c:a2:65:b8:e9:91:03:69:9f:da:
3b:b0:2a:c6:4b:bf:28:63:31:81:15:af:e1:61:22:
ac:c8:90:13:d3:96:43:e0:75:9f:a3:fc:0d:96:2f:
e4:8c:b7:0f:f6:c4:94:58:31:fc:43:7d:57:ce:ea:
6e:89:17:83:c3:29:cc:2a:6b:23:17:04:7e:21:78:
1e:92:3b:a4:5d:db:7d:84:e5:53:0e:b0:ac:4c:72:
26:3c:bd:e3:e3:82:13:17:88:84:12:76:18:d4:95:
10:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A2:A9:B1:8A:7B:D0:43:94:A9:59:E1:6F:F4:67:E8:50:62:C6:6B
X509v3 Authority Key Identifier:
keyid:A4:00:43:B3:E1:3A:ED:39:7F:89:32:CF:5D:13:FF:4F:4A:AF:E6:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pABDs-E67Tl_iTLPXRP_T0qv5ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:b3:b4:ee:b6:ee:b1:9c:4e:00:9b:51:59:04:d8:6f:98:01:
71:28:b8:95:b2:46:d0:94:19:a2:1b:6d:35:e6:cf:45:30:7b:
69:3e:50:68:25:7d:7a:61:20:41:36:29:bf:d1:eb:02:5d:93:
2f:3f:01:de:50:4c:c2:b3:a4:b1:78:de:53:61:c0:d4:ef:68:
0c:7a:73:a9:13:5e:05:59:44:dd:f8:53:d4:45:60:ac:9f:b7:
6e:d7:fe:c1:40:5c:8e:8c:01:8b:bb:ef:0d:6c:a5:76:05:13:
eb:22:7a:bd:fe:1c:67:1b:bb:b7:03:70:e4:16:1b:6b:3c:a2:
df:fb:b1:4e:6a:79:94:f3:7c:11:e0:6f:2a:2d:5c:bb:9c:be:
e4:3c:b2:e4:3d:22:12:75:2a:74:20:21:7a:d0:92:88:09:e8:
43:52:c3:03:66:46:09:37:28:9c:de:a5:7a:2f:5f:07:16:d0:
27:56:35:d9:c8:f2:4f:44:d6:fb:10:e0:7a:66:13:a3:08:56:
ed:81:f1:fc:a6:c5:e1:26:38:fe:18:6f:90:e7:63:7c:00:25:
03:97:00:d3:9f:83:0a:d7:77:f0:70:6d:9f:57:e0:98:67:12:
53:95:87:51:84:b7:8e:c0:db:2e:7d:8d:93:5d:e8:06:2b:9b:
04:be:f0:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuDvOsnOrW89w3xZ9GwHeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MDA0M2IzZTEzYWVkMzk3Zjg5MzJjZjVkMTNmZjRmNGFh
ZmU2YmEwHhcNMjUxMTExMDcwMTMwWhcNMjUxMTEyMDcwMTMwWjAzMTEwLwYDVQQD
Eyg4ZmEyYTliMThhN2JkMDQzOTRhOTU5ZTE2ZmY0NjdlODUwNjJjNjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmf2RVFTwjNpCJbB14x74hS9vsqTl
RfLfbYEt8pjyQHtNKOri6FJWpa176ohxveeJmnGuSrwfTYQDqo9JvabXeuJnb3Wj
DFDcxlq3/9nkby+FsrDJztiX1iTIcyubiUsbc43bdk2KzhYntP6itRxD1+kLs7fh
Uch8aplYcvCd8dbihLUwkz5nZXOBQEQrKd3ilPHL0NgBLa6g1SyiZbjpkQNpn9o7
sCrGS78oYzGBFa/hYSKsyJAT05ZD4HWfo/wNli/kjLcP9sSUWDH8Q31XzupuiReD
wynMKmsjFwR+IXgekjukXdt9hOVTDrCsTHImPL3j44ITF4iEEnYY1JUQtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+iqbGKe9BDlKlZ4W/0Z+hQYsZrMB8GA1UdIwQY
MBaAFKQAQ7PhOu05f4kyz10T/09Kr+a6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEFCRHMtRTY3VGxfaVRMUFhSUF9UMHF2NXJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9hM2Q4ZjUtMGQzYy00MmZhLThjNjkt
YjljMGRmNzBhZDNmLzEvcEFCRHMtRTY3VGxfaVRMUFhSUF9UMHF2NXJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9hM2Q4ZjUtMGQzYy00MmZhLThjNjktYjljMGRmNzBhZDNm
LzEvcEFCRHMtRTY3VGxfaVRMUFhSUF9UMHF2NXJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiLO07rbu
sZxOAJtRWQTYb5gBcSi4lbJG0JQZohttNebPRTB7aT5QaCV9emEgQTYpv9HrAl2T
Lz8B3lBMwrOksXjeU2HA1O9oDHpzqRNeBVlE3fhT1EVgrJ+3btf+wUBcjowBi7vv
DWyldgUT6yJ6vf4cZxu7twNw5BYbazyi3/uxTmp5lPN8EeBvKi1cu5y+5Dyy5D0i
EnUqdCAhetCSiAnoQ1LDA2ZGCTconN6lei9fBxbQJ1Y12cjyT0TW+xDgemYTowhW
7YHx/KbF4SY4/hhvkOdjfAAlA5cA05+DCtd38HBtn1fgmGcSU5WHUYS3jsDbLn2N
k13oBiubBL7whg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:54 2025 by rpki-client