Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
File: P1jM0LF5IrWNXoss8uV5zmmrOGM.mft (raw, json)
Hash identifier: F0gCrB1Z4KpSai6mAvPYbhr4xq54K3Exptx+SWrKMSQ=
Subject key identifier: 75:A7:32:77:AE:3A:E9:8C:E8:E9:10:2B:1B:58:4A:E5:4B:D5:DA:C9
Authority key identifier: 3F:58:CC:D0:B1:79:22:B5:8D:5E:8B:2C:F2:E5:79:CE:69:AB:38:63
Certificate issuer: /CN=3f58ccd0b17922b58d5e8b2cf2e579ce69ab3863
Certificate serial: 019A714A122B6D5EBA4DCA5E0830550A22FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
Manifest number: 015D
Signing time: Tue 11 Nov 2025 05:01:10 +0000
Manifest this update: Tue 11 Nov 2025 05:01:10 +0000
Manifest next update: Wed 12 Nov 2025 05:01:10 +0000
Files and hashes: 1: P1jM0LF5IrWNXoss8uV5zmmrOGM.crl (hash: spetS3Bswpysc9dUx9mFRYGCqaw1LYvKG6g+txz7rRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:12:2b:6d:5e:ba:4d:ca:5e:08:30:55:0a:22:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f58ccd0b17922b58d5e8b2cf2e579ce69ab3863
Validity
Not Before: Nov 11 05:01:10 2025 GMT
Not After : Nov 12 05:01:10 2025 GMT
Subject: CN=75a73277ae3ae98ce8e9102b1b584ae54bd5dac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5e:ea:d3:d1:bb:d4:13:c8:e8:cf:1b:78:24:
1f:00:0d:d7:2d:e8:08:bd:c3:39:6e:eb:9e:e7:60:
20:8f:a8:50:ef:8d:83:aa:63:52:23:8f:aa:65:4f:
5b:65:fb:75:f6:08:d9:c9:f4:f7:c7:f8:92:87:29:
0a:b8:1e:e7:f9:f5:d4:b2:c7:f5:14:7e:0b:54:26:
2f:d0:18:69:6f:b1:31:75:01:6e:4a:53:62:a7:83:
30:de:ba:fd:9d:dc:81:cd:ce:5b:42:68:83:65:07:
bf:1f:b3:80:d7:e8:c8:b5:ee:b3:68:b9:e9:48:48:
a8:63:9b:7e:83:03:58:33:91:8d:13:a5:20:89:73:
e2:63:30:27:14:28:f5:27:be:b3:f6:ed:51:23:12:
5d:d6:ff:a3:1d:14:1a:9d:98:e7:e4:f5:08:db:ce:
c3:c3:f5:a1:1d:06:72:47:54:22:6a:bf:3d:d9:f1:
69:39:76:af:25:ca:3f:02:03:cb:da:3e:d5:9a:40:
d6:e4:77:fd:be:27:73:91:51:6b:57:ad:a8:06:00:
cd:cb:de:49:2a:18:93:3d:7f:cb:39:66:d4:89:fa:
07:ad:7f:80:52:6f:8c:0b:cb:8b:27:7a:dc:68:f0:
ed:1c:ca:4f:04:03:22:bc:7f:42:f9:b5:5a:bc:95:
14:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A7:32:77:AE:3A:E9:8C:E8:E9:10:2B:1B:58:4A:E5:4B:D5:DA:C9
X509v3 Authority Key Identifier:
keyid:3F:58:CC:D0:B1:79:22:B5:8D:5E:8B:2C:F2:E5:79:CE:69:AB:38:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a0:1a:a1:be:7f:2e:96:2a:c9:4b:a8:2b:35:42:e5:94:f9:
0c:17:b5:66:bb:a0:67:89:c9:22:a9:6f:8e:87:ed:90:7c:ab:
7b:57:25:3f:fe:18:85:44:69:56:6c:a8:40:af:ec:5f:41:4f:
dc:05:4a:67:11:4e:35:11:23:79:69:35:0b:93:a7:bb:81:45:
95:4b:37:26:92:a6:fa:7d:e1:e5:4e:a4:ba:bd:6e:be:97:25:
e7:f7:8c:30:8a:3a:c0:4d:b6:a3:11:65:80:94:4a:11:78:60:
fd:2c:6d:62:55:75:85:5a:f4:70:35:71:4d:6d:79:a5:ca:e5:
dc:4b:03:15:41:2e:03:79:d7:20:56:5e:81:52:eb:71:d9:30:
be:62:23:77:6e:f4:54:59:6f:62:3c:e2:c7:d7:9e:f5:63:98:
ff:80:7f:eb:46:9b:db:7d:a3:87:45:e8:ca:0e:9c:a7:c4:9f:
7b:db:5a:d4:59:6b:df:10:27:cd:e9:a5:3c:36:1e:f3:1a:c1:
8c:6b:10:df:2a:39:f7:71:f2:6a:d1:d7:98:87:d2:ab:bd:b4:
2a:26:ee:16:ac:e1:11:b3:c9:c5:22:06:1f:bd:6d:3e:59:3e:
b5:31:dc:da:91:76:58:b7:6a:2e:61:51:6f:29:81:cc:08:ee:
de:b0:dc:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxShIrbV66TcpeCDBVCiL6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmNThjY2QwYjE3OTIyYjU4ZDVlOGIyY2YyZTU3OWNlNjlh
YjM4NjMwHhcNMjUxMTExMDUwMTEwWhcNMjUxMTEyMDUwMTEwWjAzMTEwLwYDVQQD
Eyg3NWE3MzI3N2FlM2FlOThjZThlOTEwMmIxYjU4NGFlNTRiZDVkYWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz17q09G71BPI6M8beCQfAA3XLegI
vcM5buue52Agj6hQ742DqmNSI4+qZU9bZft19gjZyfT3x/iShykKuB7n+fXUssf1
FH4LVCYv0Bhpb7ExdQFuSlNip4Mw3rr9ndyBzc5bQmiDZQe/H7OA1+jIte6zaLnp
SEioY5t+gwNYM5GNE6UgiXPiYzAnFCj1J76z9u1RIxJd1v+jHRQanZjn5PUI287D
w/WhHQZyR1Qiar892fFpOXavJco/AgPL2j7VmkDW5Hf9vidzkVFrV62oBgDNy95J
KhiTPX/LOWbUifoHrX+AUm+MC8uLJ3rcaPDtHMpPBAMivH9C+bVavJUUZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWnMneuOumM6OkQKxtYSuVL1drJMB8GA1UdIwQY
MBaAFD9YzNCxeSK1jV6LLPLlec5pqzhjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDFqTTBMRjVJcldOWG9zczh1VjV6bW1yT0dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8xOGRiZTItYmM2ZS00YTkyLWI5ZWYt
ZWQ3OWEyZjIyNWMwLzEvUDFqTTBMRjVJcldOWG9zczh1VjV6bW1yT0dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8xOGRiZTItYmM2ZS00YTkyLWI5ZWYtZWQ3OWEyZjIyNWMw
LzEvUDFqTTBMRjVJcldOWG9zczh1VjV6bW1yT0dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJKAaob5/
LpYqyUuoKzVC5ZT5DBe1ZrugZ4nJIqlvjoftkHyre1clP/4YhURpVmyoQK/sX0FP
3AVKZxFONREjeWk1C5Onu4FFlUs3JpKm+n3h5U6kur1uvpcl5/eMMIo6wE22oxFl
gJRKEXhg/SxtYlV1hVr0cDVxTW15pcrl3EsDFUEuA3nXIFZegVLrcdkwvmIjd270
VFlvYjzix9ee9WOY/4B/60ab232jh0Xoyg6cp8Sfe9ta1Flr3xAnzemlPDYe8xrB
jGsQ3yo593HyatHXmIfSq720KibuFqzhEbPJxSIGH71tPlk+tTHc2pF2WLdqLmFR
bymBzAju3rDcWg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:19 2025 by rpki-client