Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
File: pC0LgmZEoYOHz4Mi235kavY9mGo.mft (raw, json)
Hash identifier: HwpG7bafPgV7U8CfRUHqGjFvIitGN3n5GR5AfNtkECY=
Subject key identifier: C5:5F:56:1B:E7:65:0D:54:02:B9:04:C5:C2:0C:93:D0:1F:59:67:C9
Authority key identifier: A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A
Certificate issuer: /CN=a42d0b826644a18387cf8322db7e646af63d986a
Certificate serial: 019A1BAC0CEE2C9631D7BE87E2181ACECADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
Manifest number: 045D
Signing time: Sat 25 Oct 2025 14:00:51 +0000
Manifest this update: Sat 25 Oct 2025 14:00:51 +0000
Manifest next update: Sun 26 Oct 2025 14:00:51 +0000
Files and hashes: 1: pC0LgmZEoYOHz4Mi235kavY9mGo.crl (hash: bxYkIO1w7D1vVrGO5zeaT/a4L3bp/ZJVOEkvIq7sxf4=)
2: tHHfiSksDZsfZV-Vj9_kGC4h-Ro.roa (hash: EIcBQ1/xG4TmRqAx5pqcLS0viz8fwAhZIDtmSkzjKwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:ac:0c:ee:2c:96:31:d7:be:87:e2:18:1a:ce:ca:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42d0b826644a18387cf8322db7e646af63d986a
Validity
Not Before: Oct 25 14:00:51 2025 GMT
Not After : Oct 26 14:00:51 2025 GMT
Subject: CN=c55f561be7650d5402b904c5c20c93d01f5967c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:2d:9d:07:37:18:80:6c:bc:94:45:f8:34:4d:
ca:a1:74:69:7e:34:10:f1:dc:7a:bf:a7:4e:64:81:
59:6b:04:be:4e:ed:8a:81:8a:49:73:ae:bc:6b:c1:
b0:80:0f:e2:c8:a5:91:43:28:d4:8a:a1:31:cb:48:
05:7d:8b:ea:ac:ee:03:71:e7:fd:56:87:36:f2:91:
f7:45:eb:6e:9c:70:17:2b:2b:55:1d:6b:66:d7:be:
b3:a4:61:ef:43:91:d0:d8:c4:a6:03:29:4f:dc:32:
52:b9:e3:22:f1:fb:ec:8d:4c:43:30:b8:8d:81:d1:
27:9b:20:ad:66:40:c7:a1:a6:a0:cd:c5:54:c5:aa:
45:a6:2b:3f:d4:77:6b:c8:12:33:a8:b3:d1:cb:b5:
97:6b:50:e2:30:f1:82:49:71:f5:54:77:95:02:bb:
11:25:94:36:c6:7c:0f:bd:0b:6a:17:aa:60:7e:08:
eb:f3:cd:48:46:29:24:e9:d1:45:34:47:87:7f:aa:
55:2b:25:a4:93:4d:48:0a:24:7d:73:e8:a0:3b:38:
62:c5:e3:d9:5d:d0:ef:7c:d4:31:d1:d4:2e:0e:4a:
ed:11:32:9f:78:b4:34:39:df:4d:cb:98:83:4c:5c:
93:72:5a:00:87:00:42:b7:6f:78:bb:67:1f:da:9e:
5e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5F:56:1B:E7:65:0D:54:02:B9:04:C5:C2:0C:93:D0:1F:59:67:C9
X509v3 Authority Key Identifier:
keyid:A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:1b:6d:b7:98:c2:e8:52:bd:ec:0b:b2:59:a7:86:c9:d9:40:
8b:ba:67:ce:10:c6:4b:f1:04:26:85:86:41:60:b2:02:bb:28:
78:e3:17:55:82:88:19:7b:eb:bd:8e:4c:3d:62:97:2d:44:f7:
f2:00:42:c7:5a:4c:60:6c:9b:03:aa:ce:a4:d2:76:e3:52:71:
0d:92:37:b2:e0:5c:30:31:f6:c5:d5:65:d3:79:66:83:3b:47:
6e:59:39:56:01:30:20:ae:f1:67:1c:cc:40:84:d8:e7:2f:07:
1d:15:8e:18:33:15:50:c1:3f:84:98:98:5e:ff:96:f1:e1:f3:
12:89:92:ee:86:71:1f:51:0f:75:e3:fd:0b:78:01:e6:2a:4e:
e2:38:31:9f:f2:63:ad:a3:d1:f3:31:49:cd:17:4c:c5:05:13:
a2:70:c8:4d:69:a7:ab:8b:65:25:ee:e3:bb:83:f8:8e:a4:95:
79:a1:88:5e:dd:d3:dd:fd:96:18:34:0e:15:6c:63:4a:a1:f9:
15:40:33:a5:af:fc:3e:7d:06:e9:64:33:07:62:2b:ae:12:b9:
e1:65:92:8a:ed:1b:21:cb:47:b8:72:b1:75:ae:33:53:a4:bf:
88:9d:e6:44:17:9f:09:c8:ce:ff:5c:9e:7e:6c:b2:cc:24:f0:
a6:4c:f4:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZobrAzuLJYx176H4hgazsreMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MmQwYjgyNjY0NGExODM4N2NmODMyMmRiN2U2NDZhZjYz
ZDk4NmEwHhcNMjUxMDI1MTQwMDUxWhcNMjUxMDI2MTQwMDUxWjAzMTEwLwYDVQQD
EyhjNTVmNTYxYmU3NjUwZDU0MDJiOTA0YzVjMjBjOTNkMDFmNTk2N2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7i2dBzcYgGy8lEX4NE3KoXRpfjQQ
8dx6v6dOZIFZawS+Tu2KgYpJc668a8GwgA/iyKWRQyjUiqExy0gFfYvqrO4Dcef9
Voc28pH3RetunHAXKytVHWtm176zpGHvQ5HQ2MSmAylP3DJSueMi8fvsjUxDMLiN
gdEnmyCtZkDHoaagzcVUxapFpis/1HdryBIzqLPRy7WXa1DiMPGCSXH1VHeVArsR
JZQ2xnwPvQtqF6pgfgjr881IRikk6dFFNEeHf6pVKyWkk01ICiR9c+igOzhixePZ
XdDvfNQx0dQuDkrtETKfeLQ0Od9Ny5iDTFyTcloAhwBCt294u2cf2p5ewQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVfVhvnZQ1UArkExcIMk9AfWWfJMB8GA1UdIwQY
MBaAFKQtC4JmRKGDh8+DItt+ZGr2PZhqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEMwTGdtWkVvWU9IejRNaTIzNWthdlk5bUdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8yMjYwZjItM2NjZC00NGU1LTg0Mjgt
ZTgyZDVlZTRlNDBmLzEvcEMwTGdtWkVvWU9IejRNaTIzNWthdlk5bUdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8yMjYwZjItM2NjZC00NGU1LTg0MjgtZTgyZDVlZTRlNDBm
LzEvcEMwTGdtWkVvWU9IejRNaTIzNWthdlk5bUdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAChttt5jC
6FK97AuyWaeGydlAi7pnzhDGS/EEJoWGQWCyArsoeOMXVYKIGXvrvY5MPWKXLUT3
8gBCx1pMYGybA6rOpNJ241JxDZI3suBcMDH2xdVl03lmgztHblk5VgEwIK7xZxzM
QITY5y8HHRWOGDMVUME/hJiYXv+W8eHzEomS7oZxH1EPdeP9C3gB5ipO4jgxn/Jj
raPR8zFJzRdMxQUTonDITWmnq4tlJe7ju4P4jqSVeaGIXt3T3f2WGDQOFWxjSqH5
FUAzpa/8Pn0G6WQzB2IrrhK54WWSiu0bIctHuHKxda4zU6S/iJ3mRBefCcjO/1ye
fmyyzCTwpkz0Rw==
-----END CERTIFICATE-----
Generated at Sat Oct 25 22:31:59 2025 by rpki-client