Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/PxP6dbPOiUzEZAQaipX4WffBxNI.mft
File: PxP6dbPOiUzEZAQaipX4WffBxNI.mft (raw, json)
Hash identifier: OIuOC3XNo6wz60y8KBBVdmeVEQJC6NkWSJItw1kMMEE=
Subject key identifier: 65:D2:DB:AA:00:26:20:0E:5F:79:60:BA:F0:E4:B9:04:AB:D3:76:BF
Authority key identifier: 3F:13:FA:75:B3:CE:89:4C:C4:64:04:1A:8A:95:F8:59:F7:C1:C4:D2
Certificate issuer: /CN=3f13fa75b3ce894cc464041a8a95f859f7c1c4d2
Certificate serial: 0199FC8F35BBC3B1CCCECBF0189C49D69B95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxP6dbPOiUzEZAQaipX4WffBxNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/PxP6dbPOiUzEZAQaipX4WffBxNI.mft
Manifest number: 0267
Signing time: Sun 19 Oct 2025 13:01:07 +0000
Manifest this update: Sun 19 Oct 2025 13:01:07 +0000
Manifest next update: Mon 20 Oct 2025 13:01:07 +0000
Files and hashes: 1: PxP6dbPOiUzEZAQaipX4WffBxNI.crl (hash: SuCADBe5GSfYrgvgZNL34CE5CDNe3sOyk6qI5QKqGCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/PxP6dbPOiUzEZAQaipX4WffBxNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/PxP6dbPOiUzEZAQaipX4WffBxNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxP6dbPOiUzEZAQaipX4WffBxNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:35:bb:c3:b1:cc:ce:cb:f0:18:9c:49:d6:9b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f13fa75b3ce894cc464041a8a95f859f7c1c4d2
Validity
Not Before: Oct 19 13:01:07 2025 GMT
Not After : Oct 20 13:01:07 2025 GMT
Subject: CN=65d2dbaa0026200e5f7960baf0e4b904abd376bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ab:2a:b8:a7:c3:33:a5:f9:b2:a8:2a:cd:12:
0c:0c:e7:d0:50:7f:68:71:a7:5d:f6:f3:2a:8b:11:
c0:46:7f:cb:47:8f:22:21:46:b3:65:ec:77:6f:df:
94:0f:aa:3c:17:84:ee:96:0a:d2:63:de:bc:8b:90:
6e:29:28:8f:81:c1:9a:02:3a:05:fd:2e:3d:98:55:
05:5e:f9:5f:b8:0e:d2:ad:df:64:cd:4e:7f:df:31:
d5:00:6a:0f:d8:91:16:8d:94:1a:60:d8:fd:cd:e8:
5f:26:22:d8:a0:57:7a:c9:2c:8e:76:a1:a5:f5:2a:
68:30:75:81:81:e2:be:ab:e1:00:d4:1e:11:bf:29:
57:57:c7:db:b9:5c:89:f3:b9:96:57:8f:d4:c5:c8:
c9:5e:ba:7b:2a:0d:7a:5f:2a:91:48:92:2b:eb:5f:
cc:8e:13:84:97:3e:fc:b8:e8:92:8f:05:35:b2:74:
40:b8:00:0e:fd:9e:e6:11:ac:be:2a:cb:0a:2d:73:
0c:83:7e:ba:fa:99:dd:ef:a8:7a:06:9b:5a:42:39:
3a:da:f7:d9:b3:5d:bc:93:aa:18:e0:80:a5:fd:ec:
6a:f9:69:e2:a8:fc:ee:20:22:dc:8c:0a:6d:a6:99:
45:c7:90:eb:01:c1:51:2b:ce:e5:4e:e1:e6:6f:42:
c1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D2:DB:AA:00:26:20:0E:5F:79:60:BA:F0:E4:B9:04:AB:D3:76:BF
X509v3 Authority Key Identifier:
keyid:3F:13:FA:75:B3:CE:89:4C:C4:64:04:1A:8A:95:F8:59:F7:C1:C4:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxP6dbPOiUzEZAQaipX4WffBxNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/PxP6dbPOiUzEZAQaipX4WffBxNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/PxP6dbPOiUzEZAQaipX4WffBxNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:4d:98:85:fa:64:6e:2c:b2:a3:2c:fe:a2:30:5a:8d:6f:6d:
57:f5:f7:f9:91:2d:6f:0b:f1:a3:9c:a0:cc:65:2d:29:fd:fa:
b3:cc:fb:f1:8c:bb:c9:8f:f6:97:03:e0:3a:5c:3e:04:a8:bd:
c4:4b:33:22:7a:22:da:f3:7e:e4:97:df:3a:7e:56:21:18:de:
66:58:73:3f:3e:79:ff:55:52:b8:e1:64:5a:71:10:ae:a7:3e:
1b:a9:c5:6f:c0:e5:95:88:4f:5c:50:f0:77:3d:b6:f0:49:e4:
c0:cf:55:c1:2a:4a:0b:81:21:92:2c:37:4c:6d:b6:08:06:8e:
06:98:20:a6:e9:11:71:85:ae:03:fc:dd:fc:42:e7:8c:60:30:
eb:0a:9d:92:78:69:d1:84:34:09:0d:81:1c:14:24:f6:e2:4e:
85:20:94:08:96:2b:b4:fb:05:61:ce:19:0b:fb:bc:30:0d:67:
1f:2a:1a:0e:9d:fc:0b:bc:a1:7f:42:2f:b2:ba:c9:6a:fe:fa:
7a:22:fe:1a:03:fa:e0:1f:63:6c:bb:44:ab:96:26:ce:23:47:
d2:27:b3:95:ab:b5:f3:ac:fc:82:3e:cc:3b:56:13:40:4b:30:
12:05:43:6b:89:64:f6:1f:bf:6b:ae:8d:57:82:7f:3a:c6:b0:
81:89:cc:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8jzW7w7HMzsvwGJxJ1puVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMTNmYTc1YjNjZTg5NGNjNDY0MDQxYThhOTVmODU5Zjdj
MWM0ZDIwHhcNMjUxMDE5MTMwMTA3WhcNMjUxMDIwMTMwMTA3WjAzMTEwLwYDVQQD
Eyg2NWQyZGJhYTAwMjYyMDBlNWY3OTYwYmFmMGU0YjkwNGFiZDM3NmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnasquKfDM6X5sqgqzRIMDOfQUH9o
cadd9vMqixHARn/LR48iIUazZex3b9+UD6o8F4TulgrSY968i5BuKSiPgcGaAjoF
/S49mFUFXvlfuA7Srd9kzU5/3zHVAGoP2JEWjZQaYNj9zehfJiLYoFd6ySyOdqGl
9SpoMHWBgeK+q+EA1B4RvylXV8fbuVyJ87mWV4/UxcjJXrp7Kg16XyqRSJIr61/M
jhOElz78uOiSjwU1snRAuAAO/Z7mEay+KssKLXMMg366+pnd76h6BptaQjk62vfZ
s128k6oY4ICl/exq+WniqPzuICLcjAptpplFx5DrAcFRK87lTuHmb0LBhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGXS26oAJiAOX3lguvDkuQSr03a/MB8GA1UdIwQY
MBaAFD8T+nWzzolMxGQEGoqV+Fn3wcTSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHhQNmRiUE9pVXpFWkFRYWlwWDRXZmZCeE5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84MmMyNjMtNDc5MS00MjIzLTg5NzAt
NGFlN2FkNmVhMjg1LzEvUHhQNmRiUE9pVXpFWkFRYWlwWDRXZmZCeE5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS84MmMyNjMtNDc5MS00MjIzLTg5NzAtNGFlN2FkNmVhMjg1
LzEvUHhQNmRiUE9pVXpFWkFRYWlwWDRXZmZCeE5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg02Yhfpk
biyyoyz+ojBajW9tV/X3+ZEtbwvxo5ygzGUtKf36s8z78Yy7yY/2lwPgOlw+BKi9
xEszInoi2vN+5JffOn5WIRjeZlhzPz55/1VSuOFkWnEQrqc+G6nFb8DllYhPXFDw
dz228EnkwM9VwSpKC4Ehkiw3TG22CAaOBpggpukRcYWuA/zd/ELnjGAw6wqdknhp
0YQ0CQ2BHBQk9uJOhSCUCJYrtPsFYc4ZC/u8MA1nHyoaDp38C7yhf0IvsrrJav76
eiL+GgP64B9jbLtEq5YmziNH0iezlau186z8gj7MO1YTQEswEgVDa4lk9h+/a66N
V4J/OsawgYnMLA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:41:47 2025 by rpki-client