Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
File: pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft (raw, json)
Hash identifier: 6VUe2ZeX/jczxetrX+A3r7ozIzyJGq2bmuTHOZCQ/A4=
Subject key identifier: 64:D8:47:4C:F5:C7:D3:FF:80:82:AA:23:E9:27:18:9C:8E:B0:D2:00
Authority key identifier: A4:C9:3A:B3:64:C8:78:32:E7:77:62:26:EE:E6:C1:31:DB:E1:53:BB
Certificate issuer: /CN=a4c93ab364c87832e7776226eee6c131dbe153bb
Certificate serial: 019A266694FDBE0D28F31DBDDC5722F41E76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
Manifest number: 16F9
Signing time: Mon 27 Oct 2025 16:00:48 +0000
Manifest this update: Mon 27 Oct 2025 16:00:48 +0000
Manifest next update: Tue 28 Oct 2025 16:00:48 +0000
Files and hashes: 1: pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl (hash: mjRAAWYto2/8jjDv1dIP7zy8GOoGvmca9pyV3gOXUeM=)
2: pV9OuJfGvboWa4RSwyOam_iwesY.roa (hash: RTkqdqbXmblScuzpz+Ud/Jj/+DA6UotPUIkNIsu6BJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:66:94:fd:be:0d:28:f3:1d:bd:dc:57:22:f4:1e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c93ab364c87832e7776226eee6c131dbe153bb
Validity
Not Before: Oct 27 16:00:48 2025 GMT
Not After : Oct 28 16:00:48 2025 GMT
Subject: CN=64d8474cf5c7d3ff8082aa23e927189c8eb0d200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a9:0c:d9:f7:fc:60:8a:7f:55:09:c5:1b:dd:
d0:51:ed:26:a9:1d:34:df:d2:84:a4:ef:60:08:13:
4e:27:ed:5c:b8:89:49:d3:86:da:d7:79:9b:28:fe:
c7:d9:16:87:48:9a:29:22:ce:9d:79:8d:83:83:c5:
ce:6f:dd:52:15:99:12:6d:b0:05:c2:27:a4:e9:d3:
8d:f2:25:ed:de:75:b3:e9:2b:d1:4c:91:4c:12:cd:
6e:d9:42:f6:02:e4:cd:b6:75:c8:c4:6d:7f:38:33:
33:44:74:eb:d4:cf:39:e4:c4:3a:7a:60:a3:8a:04:
a5:6d:cf:15:62:f8:1b:46:46:2e:11:e9:57:fc:7e:
8d:b7:ff:a0:4c:99:04:a4:30:70:d2:a2:54:5a:da:
85:c2:9f:79:4d:bd:2e:73:5a:ec:25:dd:d8:54:ca:
7e:6e:6c:01:b1:9d:7f:26:04:ac:69:40:8a:b9:67:
80:e6:e5:35:e6:72:f3:6b:eb:c5:16:a6:1f:f0:28:
3e:d7:40:f0:b4:24:0e:14:59:b5:c0:37:fb:36:b3:
5f:9a:be:a6:30:6c:85:f9:48:85:00:00:9c:7e:cc:
9d:54:60:3f:01:d2:c7:73:4b:a9:ad:54:37:4a:27:
64:49:b2:60:cf:dc:55:05:9a:35:f7:ce:46:b9:ec:
ee:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D8:47:4C:F5:C7:D3:FF:80:82:AA:23:E9:27:18:9C:8E:B0:D2:00
X509v3 Authority Key Identifier:
keyid:A4:C9:3A:B3:64:C8:78:32:E7:77:62:26:EE:E6:C1:31:DB:E1:53:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:07:fc:79:bb:2f:5f:92:4a:dd:c1:55:65:93:c1:1b:04:71:
df:93:ca:1e:e4:78:95:ec:43:f8:2c:4c:81:7c:67:52:a9:6c:
e3:ca:67:75:97:16:e7:d8:2d:1f:88:61:fa:42:1f:6b:4c:f8:
d4:90:67:a6:e6:94:d2:30:c8:4b:c9:d5:6e:0d:8d:e3:b7:3e:
60:0f:d8:0d:09:bc:4e:93:c3:81:7d:69:50:85:6e:03:00:20:
3e:4b:01:42:11:86:37:e8:96:66:7c:f7:c4:3b:b1:73:42:81:
58:45:f8:17:22:f0:db:c1:79:b7:af:eb:81:30:ea:1d:6d:20:
18:7e:50:75:41:11:1e:b8:05:81:9e:28:54:38:97:ab:f7:0b:
22:10:5f:38:55:6e:8e:e2:55:6f:18:4a:65:f3:09:ce:93:fc:
63:d8:ac:b2:d4:34:48:d7:7f:5b:f6:6c:4b:6c:f3:d5:f6:e4:
dc:59:4f:f6:41:ae:61:9e:c7:54:ab:18:ee:98:66:d0:34:a2:
92:46:d4:e9:a1:e2:06:04:d3:b4:ef:1d:1d:87:5e:72:89:96:
91:c6:11:97:e4:d8:fe:52:fd:70:60:a3:e4:f1:3d:f7:00:53:
ea:09:aa:f2:ed:37:58:bb:c6:b0:5c:6f:a1:f3:5a:e9:f4:69:
40:50:5f:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZomZpT9vg0o8x293Fci9B52MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YzkzYWIzNjRjODc4MzJlNzc3NjIyNmVlZTZjMTMxZGJl
MTUzYmIwHhcNMjUxMDI3MTYwMDQ4WhcNMjUxMDI4MTYwMDQ4WjAzMTEwLwYDVQQD
Eyg2NGQ4NDc0Y2Y1YzdkM2ZmODA4MmFhMjNlOTI3MTg5YzhlYjBkMjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKkM2ff8YIp/VQnFG93QUe0mqR00
39KEpO9gCBNOJ+1cuIlJ04ba13mbKP7H2RaHSJopIs6deY2Dg8XOb91SFZkSbbAF
wiek6dON8iXt3nWz6SvRTJFMEs1u2UL2AuTNtnXIxG1/ODMzRHTr1M855MQ6emCj
igSlbc8VYvgbRkYuEelX/H6Nt/+gTJkEpDBw0qJUWtqFwp95Tb0uc1rsJd3YVMp+
bmwBsZ1/JgSsaUCKuWeA5uU15nLza+vFFqYf8Cg+10DwtCQOFFm1wDf7NrNfmr6m
MGyF+UiFAACcfsydVGA/AdLHc0uprVQ3SidkSbJgz9xVBZo1985GuezuoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTYR0z1x9P/gIKqI+knGJyOsNIAMB8GA1UdIwQY
MBaAFKTJOrNkyHgy53diJu7mwTHb4VO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE1rNnMyVEllRExuZDJJbTd1YkJNZHZoVTdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80OWRmZWEtYzc4OS00NDAxLWEyNTEt
ZTI1MzNjZGQyNWFmLzEvcE1rNnMyVEllRExuZDJJbTd1YkJNZHZoVTdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy80OWRmZWEtYzc4OS00NDAxLWEyNTEtZTI1MzNjZGQyNWFm
LzEvcE1rNnMyVEllRExuZDJJbTd1YkJNZHZoVTdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsgf8ebsv
X5JK3cFVZZPBGwRx35PKHuR4lexD+CxMgXxnUqls48pndZcW59gtH4hh+kIfa0z4
1JBnpuaU0jDIS8nVbg2N47c+YA/YDQm8TpPDgX1pUIVuAwAgPksBQhGGN+iWZnz3
xDuxc0KBWEX4FyLw28F5t6/rgTDqHW0gGH5QdUERHrgFgZ4oVDiXq/cLIhBfOFVu
juJVbxhKZfMJzpP8Y9isstQ0SNd/W/ZsS2zz1fbk3FlP9kGuYZ7HVKsY7phm0DSi
kkbU6aHiBgTTtO8dHYdecomWkcYRl+TY/lL9cGCj5PE99wBT6gmq8u03WLvGsFxv
ofNa6fRpQFBfrA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 22:06:16 2025 by rpki-client