Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
File: pS3-y7QxcCl5YaIbfltKPEfeCVs.mft (raw, json)
Hash identifier: 8ENq3jbgJME7U/tqcUaLQQZXxBz1XdEwPyQ/u53NKMk=
Subject key identifier: F7:02:BF:C0:A3:50:66:C9:C8:29:DD:AF:7F:D9:C3:3F:BE:93:BB:4B
Authority key identifier: A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B
Certificate issuer: /CN=a52dfecbb43170297961a21b7e5b4a3c47de095b
Certificate serial: 019A71B902A44EA364FC1677BC7822475FA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
Manifest number: 0931
Signing time: Tue 11 Nov 2025 07:02:21 +0000
Manifest this update: Tue 11 Nov 2025 07:02:21 +0000
Manifest next update: Wed 12 Nov 2025 07:02:21 +0000
Files and hashes: 1: pS3-y7QxcCl5YaIbfltKPEfeCVs.crl (hash: +NOlHbx3C5+xfAEmzra79nHmCmktv+iSwm0qtSBhVBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:02:a4:4e:a3:64:fc:16:77:bc:78:22:47:5f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52dfecbb43170297961a21b7e5b4a3c47de095b
Validity
Not Before: Nov 11 07:02:21 2025 GMT
Not After : Nov 12 07:02:21 2025 GMT
Subject: CN=f702bfc0a35066c9c829ddaf7fd9c33fbe93bb4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:72:fb:f6:eb:80:80:37:5f:3b:ee:96:9e:23:
8a:0a:4c:9f:85:4e:ce:43:b0:27:0d:11:e9:d5:d7:
24:8d:f6:be:bc:e1:6a:f9:82:ba:b4:60:7a:55:d9:
0b:9e:db:d7:af:af:47:14:6e:e4:6e:f6:fd:49:9e:
cf:c5:bc:b4:85:90:3f:46:66:9b:a0:e6:e0:fc:4d:
78:20:1b:8f:ba:20:39:d8:49:8a:1b:c2:6c:ed:bc:
69:cd:0e:d9:aa:d2:dc:08:63:15:30:84:10:61:9c:
72:e8:a0:84:a1:0f:d3:7c:d9:4e:55:fb:9a:23:29:
85:8c:47:26:77:34:7c:4c:22:bc:3b:3c:df:a7:cd:
b9:c1:9e:6c:12:ea:51:16:40:b8:83:00:b6:6d:97:
c0:7d:69:87:ae:7c:7a:c0:4c:b6:d2:5c:ee:58:5f:
ef:3e:20:c4:e1:ef:c0:a8:f8:a0:08:bf:1f:2b:b9:
fa:6f:98:7a:91:6e:85:4f:eb:95:3f:e6:7c:a6:57:
44:5b:d0:d2:61:9d:7f:b7:c4:ec:91:d9:56:5f:96:
da:e1:2e:69:82:b3:63:af:58:77:53:c6:2d:92:ff:
43:c0:98:f6:f7:69:a4:46:95:9d:13:85:a4:e9:d2:
75:cd:25:61:55:cd:8b:4f:c7:fc:e6:47:ab:13:ae:
7e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:02:BF:C0:A3:50:66:C9:C8:29:DD:AF:7F:D9:C3:3F:BE:93:BB:4B
X509v3 Authority Key Identifier:
keyid:A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:76:65:b3:21:72:6a:4c:3d:1a:f9:2f:a8:60:53:06:ad:c3:
7f:48:59:4d:74:cd:14:1c:e5:a2:0a:b8:94:7d:b0:9f:f8:ee:
0d:c2:f0:3a:cc:ed:9d:cf:f7:c7:d0:01:74:a2:57:bc:87:c2:
dc:78:6e:03:c5:84:cd:9e:1f:9d:2e:cb:97:b6:ca:20:b1:4d:
2a:af:44:5f:64:1a:a3:d4:be:df:9c:84:89:0e:0f:ac:9c:87:
e2:39:17:a9:c2:f8:1c:b1:0a:96:cd:56:ec:98:0c:03:c7:c4:
b7:bc:c3:d3:b8:8c:7e:a5:47:c2:93:c3:e5:b1:39:8e:59:93:
d5:78:3d:0d:11:13:f4:e1:c8:e5:0d:23:a9:f5:f7:b8:04:bd:
2a:4a:17:77:c6:c5:88:a8:ea:dc:57:88:54:e0:49:2e:a2:0e:
ee:a6:f6:79:d3:9c:e9:f2:0f:fd:18:6e:6f:f4:fe:66:20:12:
a7:76:70:30:cc:bc:d9:b1:06:46:72:a4:b1:ff:0d:26:10:06:
51:4d:5f:f6:2a:52:ed:0e:21:60:c6:c9:24:c2:cb:47:f6:b9:
67:43:56:ad:86:0d:65:3a:40:52:e1:cc:0b:fd:7c:2b:13:56:
40:a2:e2:2a:d0:b8:bf:64:2a:8b:f1:49:34:a2:42:da:6d:2a:
ad:f5:83:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuQKkTqNk/BZ3vHgiR1+oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MmRmZWNiYjQzMTcwMjk3OTYxYTIxYjdlNWI0YTNjNDdk
ZTA5NWIwHhcNMjUxMTExMDcwMjIxWhcNMjUxMTEyMDcwMjIxWjAzMTEwLwYDVQQD
EyhmNzAyYmZjMGEzNTA2NmM5YzgyOWRkYWY3ZmQ5YzMzZmJlOTNiYjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3L79uuAgDdfO+6WniOKCkyfhU7O
Q7AnDRHp1dckjfa+vOFq+YK6tGB6VdkLntvXr69HFG7kbvb9SZ7Pxby0hZA/Rmab
oObg/E14IBuPuiA52EmKG8Js7bxpzQ7ZqtLcCGMVMIQQYZxy6KCEoQ/TfNlOVfua
IymFjEcmdzR8TCK8Ozzfp825wZ5sEupRFkC4gwC2bZfAfWmHrnx6wEy20lzuWF/v
PiDE4e/AqPigCL8fK7n6b5h6kW6FT+uVP+Z8pldEW9DSYZ1/t8TskdlWX5ba4S5p
grNjr1h3U8Ytkv9DwJj292mkRpWdE4Wk6dJ1zSVhVc2LT8f85kerE65+4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcCv8CjUGbJyCndr3/Zwz++k7tLMB8GA1UdIwQY
MBaAFKUt/su0MXApeWGiG35bSjxH3glbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFMzLXk3UXhjQ2w1WWFJYmZsdEtQRWZlQ1ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82MzI5MTUtZTdhMS00NjEwLWJmMTUt
YmQ1NzkwYTJiYTUwLzEvcFMzLXk3UXhjQ2w1WWFJYmZsdEtQRWZlQ1ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS82MzI5MTUtZTdhMS00NjEwLWJmMTUtYmQ1NzkwYTJiYTUw
LzEvcFMzLXk3UXhjQ2w1WWFJYmZsdEtQRWZlQ1ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGXZlsyFy
akw9GvkvqGBTBq3Df0hZTXTNFBzlogq4lH2wn/juDcLwOsztnc/3x9ABdKJXvIfC
3HhuA8WEzZ4fnS7Ll7bKILFNKq9EX2Qao9S+35yEiQ4PrJyH4jkXqcL4HLEKls1W
7JgMA8fEt7zD07iMfqVHwpPD5bE5jlmT1Xg9DRET9OHI5Q0jqfX3uAS9KkoXd8bF
iKjq3FeIVOBJLqIO7qb2edOc6fIP/Rhub/T+ZiASp3ZwMMy82bEGRnKksf8NJhAG
UU1f9ipS7Q4hYMbJJMLLR/a5Z0NWrYYNZTpAUuHMC/18KxNWQKLiKtC4v2Qqi/FJ
NKJC2m0qrfWDIA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:11 2025 by rpki-client