Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
File: pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft (raw, json)
Hash identifier: R5Bfm71m1vXsj04GirD8szMwPprkKcmY6rIhFN7IxUg=
Subject key identifier: 88:DD:46:A8:85:C6:9F:36:60:72:4A:C7:2A:BB:73:59:7A:D1:E4:55
Authority key identifier: A5:C2:28:64:E3:92:0E:16:0A:D9:B8:4F:F0:1D:A8:66:AA:40:97:85
Certificate issuer: /CN=a5c22864e3920e160ad9b84ff01da866aa409785
Certificate serial: 0199FCC62076E3502F58CB0D9F8C2498FC51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
Manifest number: 05B6
Signing time: Sun 19 Oct 2025 14:01:06 +0000
Manifest this update: Sun 19 Oct 2025 14:01:06 +0000
Manifest next update: Mon 20 Oct 2025 14:01:06 +0000
Files and hashes: 1: pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl (hash: /DLEFSMqSjckXYK+Ujud1V3urvaucpOpST2jbC7xH20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:20:76:e3:50:2f:58:cb:0d:9f:8c:24:98:fc:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c22864e3920e160ad9b84ff01da866aa409785
Validity
Not Before: Oct 19 14:01:06 2025 GMT
Not After : Oct 20 14:01:06 2025 GMT
Subject: CN=88dd46a885c69f3660724ac72abb73597ad1e455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5f:83:05:f1:e6:4f:36:0b:e6:ff:86:1f:fe:
8b:94:35:f7:76:40:1f:f5:a3:92:b3:e6:1b:c4:5f:
2f:16:97:a4:b3:7b:62:75:d8:2f:a0:98:e6:21:40:
79:b2:42:98:b5:a8:9c:ac:bd:e3:a4:10:43:be:e1:
a1:fd:6a:a0:3e:4f:ff:6c:74:ae:06:70:df:56:e9:
20:6e:d5:47:20:78:ed:5c:4f:e1:63:34:62:de:46:
11:51:44:3a:f2:93:17:0d:a8:c4:95:75:bf:b6:fa:
11:a8:2d:e9:3d:4e:ff:37:64:61:1e:4c:8a:6d:81:
43:68:15:e8:13:d3:cd:7f:08:64:40:75:32:62:2d:
ff:4d:50:88:7a:1d:6c:f6:21:ab:af:60:08:71:30:
c6:ad:09:12:6d:a9:ee:62:c5:0c:ef:cd:f1:00:7f:
91:50:cf:ae:28:46:f6:66:45:ba:81:84:6d:1c:9b:
45:96:90:79:ae:44:ed:c8:82:3a:28:70:74:08:17:
29:87:ce:f8:0b:dc:5e:7b:a1:bb:f4:71:78:17:74:
cc:70:20:5e:6f:89:7b:d9:01:c5:92:1c:d7:40:f7:
57:6c:0b:f4:da:1a:15:18:b1:bf:2f:29:44:f9:d5:
52:54:fa:d5:3e:a9:34:53:ae:2f:1e:45:a8:76:b3:
f2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:DD:46:A8:85:C6:9F:36:60:72:4A:C7:2A:BB:73:59:7A:D1:E4:55
X509v3 Authority Key Identifier:
keyid:A5:C2:28:64:E3:92:0E:16:0A:D9:B8:4F:F0:1D:A8:66:AA:40:97:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:cd:22:aa:01:d4:d5:63:61:bd:f9:55:d3:97:da:a4:6a:28:
cd:7f:e4:c3:ce:8b:c0:c3:af:29:07:f5:41:77:3c:f6:20:85:
5c:e8:0e:6d:75:e1:0e:07:c5:5a:cb:3c:56:5f:08:9e:cf:ff:
89:6e:27:ae:3b:46:cc:c4:69:5e:70:2d:56:3d:e1:8c:27:22:
f4:9e:00:de:f2:9b:e3:e7:79:ef:e9:19:85:3f:6c:ad:55:74:
7d:2e:0d:54:6e:cd:a7:ac:67:03:09:b3:d6:07:08:2d:40:94:
9f:bc:93:8d:e4:1c:f6:87:4e:a4:af:e9:32:aa:61:c5:bb:7f:
c7:aa:ad:05:b1:e4:20:c2:d7:1d:11:01:cc:31:90:fb:36:4b:
60:f1:d0:e4:c6:ed:6f:11:61:a6:d8:94:a6:e5:c6:18:b4:ba:
4f:85:41:8b:cd:d8:c7:ac:11:c9:9c:18:39:e3:9d:8d:6a:87:
43:a7:b9:8a:dd:5d:c7:b9:9f:89:5a:1e:c7:3c:30:f5:77:93:
fa:c4:e2:2e:40:5b:a3:91:2f:8f:ec:c2:57:a2:21:e8:74:d4:
83:c8:81:f5:39:80:75:ff:49:95:7d:7c:a8:75:03:ee:51:4d:
f6:34:8f:8e:df:61:c4:85:c7:05:9b:9a:23:f7:0f:e3:80:66:
0f:cd:06:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xiB241AvWMsNn4wkmPxRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YzIyODY0ZTM5MjBlMTYwYWQ5Yjg0ZmYwMWRhODY2YWE0
MDk3ODUwHhcNMjUxMDE5MTQwMTA2WhcNMjUxMDIwMTQwMTA2WjAzMTEwLwYDVQQD
Eyg4OGRkNDZhODg1YzY5ZjM2NjA3MjRhYzcyYWJiNzM1OTdhZDFlNDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyF+DBfHmTzYL5v+GH/6LlDX3dkAf
9aOSs+YbxF8vFpeks3tiddgvoJjmIUB5skKYtaicrL3jpBBDvuGh/WqgPk//bHSu
BnDfVukgbtVHIHjtXE/hYzRi3kYRUUQ68pMXDajElXW/tvoRqC3pPU7/N2RhHkyK
bYFDaBXoE9PNfwhkQHUyYi3/TVCIeh1s9iGrr2AIcTDGrQkSbanuYsUM783xAH+R
UM+uKEb2ZkW6gYRtHJtFlpB5rkTtyII6KHB0CBcph874C9xee6G79HF4F3TMcCBe
b4l72QHFkhzXQPdXbAv02hoVGLG/LylE+dVSVPrVPqk0U64vHkWodrPySwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjdRqiFxp82YHJKxyq7c1l60eRVMB8GA1UdIwQY
MBaAFKXCKGTjkg4WCtm4T/AdqGaqQJeFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGNJb1pPT1NEaFlLMmJoUDhCMm9acXBBbDRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9hZDk4NGEtOTlhYy00MTNhLWJkZGUt
NTRjODg5MGRmZjJkLzEvcGNJb1pPT1NEaFlLMmJoUDhCMm9acXBBbDRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9hZDk4NGEtOTlhYy00MTNhLWJkZGUtNTRjODg5MGRmZjJk
LzEvcGNJb1pPT1NEaFlLMmJoUDhCMm9acXBBbDRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuc0iqgHU
1WNhvflV05fapGoozX/kw86LwMOvKQf1QXc89iCFXOgObXXhDgfFWss8Vl8Ins//
iW4nrjtGzMRpXnAtVj3hjCci9J4A3vKb4+d57+kZhT9srVV0fS4NVG7Np6xnAwmz
1gcILUCUn7yTjeQc9odOpK/pMqphxbt/x6qtBbHkIMLXHREBzDGQ+zZLYPHQ5Mbt
bxFhptiUpuXGGLS6T4VBi83Yx6wRyZwYOeOdjWqHQ6e5it1dx7mfiVoexzww9XeT
+sTiLkBbo5Evj+zCV6Ih6HTUg8iB9TmAdf9JlX18qHUD7lFN9jSPjt9hxIXHBZua
I/cP44BmD80GcQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:57:03 2025 by rpki-client