Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft
File: pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft (raw, json)
Hash identifier: XTq37ZBDbzI8WrHaPelfAwUCEx/7PO+I6fvOR/MV5cc=
Subject key identifier: F6:09:B9:67:F1:89:D7:79:67:57:20:F8:32:5C:93:D2:70:04:E0:7F
Authority key identifier: A4:3E:2B:9F:BC:8B:47:72:CF:80:00:74:8C:47:DD:43:7B:3C:59:8F
Certificate issuer: /CN=a43e2b9fbc8b4772cf8000748c47dd437b3c598f
Certificate serial: 0199FE7DB4740FE2D3C93B797CCA1DFF6595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft
Manifest number: 033B
Signing time: Sun 19 Oct 2025 22:01:15 +0000
Manifest this update: Sun 19 Oct 2025 22:01:15 +0000
Manifest next update: Mon 20 Oct 2025 22:01:15 +0000
Files and hashes: 1: pD4rn7yLR3LPgAB0jEfdQ3s8WY8.crl (hash: 7qV0YnPWBTmIfw1ZSo58s5j0PMcf2t95ttFBSnZP+8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:b4:74:0f:e2:d3:c9:3b:79:7c:ca:1d:ff:65:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a43e2b9fbc8b4772cf8000748c47dd437b3c598f
Validity
Not Before: Oct 19 22:01:15 2025 GMT
Not After : Oct 20 22:01:15 2025 GMT
Subject: CN=f609b967f189d779675720f8325c93d27004e07f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:48:0c:54:ad:e6:41:86:62:f3:8b:60:20:5d:
87:66:2a:77:1d:9c:87:24:7a:54:34:e0:4f:f0:99:
bc:e6:38:57:8d:3b:ad:d3:e4:c1:6d:3e:f4:d1:92:
37:cc:fe:63:1f:74:11:04:25:51:bb:50:51:d0:e9:
26:38:99:1d:9c:ac:65:05:c9:92:fa:a0:8a:ba:3d:
3d:82:7b:77:ca:7d:17:3d:7e:3d:8c:78:ef:4c:96:
f8:f0:94:b9:12:ad:ae:a5:f8:2a:fd:95:e1:a1:b5:
19:f7:48:e7:b7:52:40:52:48:8a:5c:58:10:d5:3a:
3d:cb:4a:b5:9a:c7:e3:a2:c4:b2:38:a6:31:5b:e1:
f8:3a:dc:6b:39:18:c5:90:85:f8:27:f5:77:a0:ea:
2e:ef:f7:19:72:27:b6:58:be:78:59:a4:89:be:1b:
56:f2:20:e9:b4:18:4f:73:40:0c:b8:d8:21:5f:39:
93:7a:48:8f:f5:e6:ea:a7:c1:df:65:a8:99:01:8e:
73:99:18:f4:76:fb:0f:f2:36:9b:c7:96:dd:4b:16:
ff:83:85:55:90:98:2a:e2:15:ac:d6:c1:88:c9:80:
a4:f0:d8:31:cd:08:53:dd:08:5a:2d:9d:6b:41:a5:
96:a7:95:57:f0:29:09:02:c5:04:3f:77:15:9c:de:
9e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:09:B9:67:F1:89:D7:79:67:57:20:F8:32:5C:93:D2:70:04:E0:7F
X509v3 Authority Key Identifier:
keyid:A4:3E:2B:9F:BC:8B:47:72:CF:80:00:74:8C:47:DD:43:7B:3C:59:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:9c:ba:4b:29:42:f7:81:ad:f1:72:79:f8:83:e9:92:96:29:
e7:18:aa:48:86:76:48:5e:cf:7e:e6:0a:d4:66:b0:88:13:1d:
98:08:b3:c2:6d:ca:04:e2:65:6f:0c:cd:0f:88:fe:a7:b2:3b:
3d:4b:7f:2e:e3:0d:f8:7a:c8:0a:8d:c9:f7:92:81:ff:ed:41:
10:5c:3c:ae:35:6f:e1:4a:11:2f:2e:f8:de:87:e6:ad:ca:51:
ca:8b:8b:4b:62:19:63:ad:8b:1b:80:56:24:62:56:e2:8e:69:
ad:c2:b1:e2:1d:26:88:27:cf:f5:53:33:8f:a8:2e:94:3b:0a:
be:da:b8:04:c1:9e:af:b5:be:03:a1:f2:6e:ad:4b:f8:fe:95:
3a:22:59:e7:25:bb:13:f6:c6:8c:02:92:16:d8:21:12:eb:f8:
8c:ba:cd:be:31:a5:9f:4c:7c:51:cf:ad:64:1f:2e:a2:98:02:
62:3b:61:17:d5:2a:cb:9b:d7:38:e4:80:54:c6:37:2e:23:ef:
4b:c8:3c:5e:35:fe:2d:38:58:1e:83:6b:17:94:e9:f3:71:66:
cf:75:99:a2:5c:02:37:4c:21:99:5a:f7:8a:61:07:10:bf:57:
6b:df:ed:cd:d3:cf:76:79:63:2a:76:25:eb:f7:98:73:52:6b:
66:ff:e1:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+fbR0D+LTyTt5fMod/2WVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0M2UyYjlmYmM4YjQ3NzJjZjgwMDA3NDhjNDdkZDQzN2Iz
YzU5OGYwHhcNMjUxMDE5MjIwMTE1WhcNMjUxMDIwMjIwMTE1WjAzMTEwLwYDVQQD
EyhmNjA5Yjk2N2YxODlkNzc5Njc1NzIwZjgzMjVjOTNkMjcwMDRlMDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0gMVK3mQYZi84tgIF2HZip3HZyH
JHpUNOBP8Jm85jhXjTut0+TBbT700ZI3zP5jH3QRBCVRu1BR0OkmOJkdnKxlBcmS
+qCKuj09gnt3yn0XPX49jHjvTJb48JS5Eq2upfgq/ZXhobUZ90jnt1JAUkiKXFgQ
1To9y0q1msfjosSyOKYxW+H4OtxrORjFkIX4J/V3oOou7/cZcie2WL54WaSJvhtW
8iDptBhPc0AMuNghXzmTekiP9ebqp8HfZaiZAY5zmRj0dvsP8jabx5bdSxb/g4VV
kJgq4hWs1sGIyYCk8NgxzQhT3QhaLZ1rQaWWp5VX8CkJAsUEP3cVnN6etwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYJuWfxidd5Z1cg+DJck9JwBOB/MB8GA1UdIwQY
MBaAFKQ+K5+8i0dyz4AAdIxH3UN7PFmPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEQ0cm43eUxSM0xQZ0FCMGpFZmRRM3M4V1k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iOGY5ZDktNGYyNS00ODE4LWIzM2Mt
YjAwMWU1YmFkMDE3LzEvcEQ0cm43eUxSM0xQZ0FCMGpFZmRRM3M4V1k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9iOGY5ZDktNGYyNS00ODE4LWIzM2MtYjAwMWU1YmFkMDE3
LzEvcEQ0cm43eUxSM0xQZ0FCMGpFZmRRM3M4V1k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADZy6SylC
94Gt8XJ5+IPpkpYp5xiqSIZ2SF7PfuYK1GawiBMdmAizwm3KBOJlbwzND4j+p7I7
PUt/LuMN+HrICo3J95KB/+1BEFw8rjVv4UoRLy743ofmrcpRyouLS2IZY62LG4BW
JGJW4o5prcKx4h0miCfP9VMzj6gulDsKvtq4BMGer7W+A6Hybq1L+P6VOiJZ5yW7
E/bGjAKSFtghEuv4jLrNvjGln0x8Uc+tZB8uopgCYjthF9Uqy5vXOOSAVMY3LiPv
S8g8XjX+LThYHoNrF5Tp83Fmz3WZolwCN0whmVr3imEHEL9Xa9/tzdPPdnljKnYl
6/eYc1JrZv/hqg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:11:16 2025 by rpki-client