Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
File: pUR4T8L1atrefbdiM9E27pt768c.mft (raw, json)
Hash identifier: 7Radhp3x6fXCRFTjeOnrDbNlKlxuEdBsmueanYPSavo=
Subject key identifier: BA:26:E4:10:A9:BB:06:F6:74:EE:1A:68:A8:57:F5:73:DD:94:AA:A5
Authority key identifier: A5:44:78:4F:C2:F5:6A:DA:DE:7D:B7:62:33:D1:36:EE:9B:7B:EB:C7
Certificate issuer: /CN=a544784fc2f56adade7db76233d136ee9b7bebc7
Certificate serial: 019A0110FC1007ABE05C1BEB70CFD36E77C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUR4T8L1atrefbdiM9E27pt768c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
Manifest number: 0689
Signing time: Mon 20 Oct 2025 10:01:21 +0000
Manifest this update: Mon 20 Oct 2025 10:01:21 +0000
Manifest next update: Tue 21 Oct 2025 10:01:21 +0000
Files and hashes: 1: pUR4T8L1atrefbdiM9E27pt768c.crl (hash: nOpBGeNgN0LlQRPyDBvgswQTGQs7qJ7Igp+mxAe8Fwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
rsync://rpki.ripe.net/repository/DEFAULT/pUR4T8L1atrefbdiM9E27pt768c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:10:fc:10:07:ab:e0:5c:1b:eb:70:cf:d3:6e:77:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a544784fc2f56adade7db76233d136ee9b7bebc7
Validity
Not Before: Oct 20 10:01:21 2025 GMT
Not After : Oct 21 10:01:21 2025 GMT
Subject: CN=ba26e410a9bb06f674ee1a68a857f573dd94aaa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:75:ea:6b:9e:59:75:ef:6f:3f:96:55:cb:32:
f3:da:4a:ab:58:8b:80:f6:f0:64:87:d7:6d:36:26:
51:60:7f:dd:8b:02:ff:ac:91:85:78:90:79:5d:34:
88:d8:64:90:e6:25:6a:18:64:fc:0b:8f:bb:bc:3f:
df:08:53:f6:23:4a:7b:2a:60:37:c7:03:36:f9:07:
92:87:bd:13:8e:06:e0:2f:2a:f0:a0:15:d4:9f:5d:
6a:a1:01:52:bd:11:e9:db:1b:56:f2:06:4a:d9:fd:
97:80:33:8d:c9:a9:a9:15:b2:3b:bc:b3:f5:c9:b9:
1b:bd:10:b5:f5:0e:e5:bb:6c:26:c1:19:2d:15:c5:
42:b8:e6:8d:94:96:bc:6e:9a:64:31:e0:ef:e5:ef:
d2:28:a5:06:f5:d4:28:38:72:a8:2c:94:7b:3a:c1:
b8:d1:68:5c:8b:cd:f7:27:ff:1d:87:01:8e:43:18:
b1:23:6c:10:3a:24:ea:e9:6b:6f:d5:6e:cf:4f:0f:
bf:f8:1a:63:6e:89:2d:0f:91:4e:df:9b:f3:f4:98:
15:2e:da:b7:47:0a:85:11:9b:03:8e:5d:40:9b:fd:
8d:84:f1:60:e6:e7:81:3c:a0:4d:92:0b:4e:ac:da:
a6:a3:00:80:ae:e5:b4:9a:4f:38:42:06:59:8d:d0:
67:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:26:E4:10:A9:BB:06:F6:74:EE:1A:68:A8:57:F5:73:DD:94:AA:A5
X509v3 Authority Key Identifier:
keyid:A5:44:78:4F:C2:F5:6A:DA:DE:7D:B7:62:33:D1:36:EE:9B:7B:EB:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUR4T8L1atrefbdiM9E27pt768c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:5d:71:89:a6:76:de:d2:19:6f:1a:96:ec:c6:74:af:c4:a1:
63:5d:73:6c:e6:b3:9b:54:81:4d:29:09:7e:b6:15:cc:f7:71:
ae:be:25:94:74:b2:2d:bc:3d:8b:17:21:b7:2b:33:50:ea:e7:
35:09:bb:12:3d:44:c5:c4:03:2f:1c:40:f1:45:d3:21:e4:9b:
96:69:07:1e:cc:4a:ae:76:18:f2:98:aa:80:7a:90:92:a3:ab:
cc:50:e4:27:b8:bb:43:b6:b7:8b:f9:f8:15:34:bd:54:6a:f9:
74:f2:1c:13:6e:dc:a9:90:82:64:ba:83:55:fb:5a:a1:ed:b5:
2a:ae:96:50:d3:6f:6f:69:1c:8c:07:40:f9:4f:66:db:a5:0f:
ef:a8:54:8f:31:1b:2e:b8:de:3e:09:01:bb:cd:a9:b1:08:cb:
37:ea:7e:2a:a0:39:89:e1:0d:2d:10:bd:ee:7a:f7:9d:cf:f5:
31:dd:7f:10:89:76:90:32:bb:80:44:19:d7:ba:9a:39:de:e8:
b1:7b:56:a3:0a:9a:69:33:c0:21:33:8d:a3:72:32:6e:6a:1f:
a6:fd:e4:c5:38:a3:fc:68:34:6e:46:3f:08:90:9d:92:05:fa:
8d:41:49:4a:3c:c3:18:dd:ee:00:60:99:09:50:3f:dc:80:ab:
82:a6:2b:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBEPwQB6vgXBvrcM/TbnfIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NDQ3ODRmYzJmNTZhZGFkZTdkYjc2MjMzZDEzNmVlOWI3
YmViYzcwHhcNMjUxMDIwMTAwMTIxWhcNMjUxMDIxMTAwMTIxWjAzMTEwLwYDVQQD
EyhiYTI2ZTQxMGE5YmIwNmY2NzRlZTFhNjhhODU3ZjU3M2RkOTRhYWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnXqa55Zde9vP5ZVyzLz2kqrWIuA
9vBkh9dtNiZRYH/diwL/rJGFeJB5XTSI2GSQ5iVqGGT8C4+7vD/fCFP2I0p7KmA3
xwM2+QeSh70TjgbgLyrwoBXUn11qoQFSvRHp2xtW8gZK2f2XgDONyampFbI7vLP1
ybkbvRC19Q7lu2wmwRktFcVCuOaNlJa8bppkMeDv5e/SKKUG9dQoOHKoLJR7OsG4
0Whci833J/8dhwGOQxixI2wQOiTq6Wtv1W7PTw+/+BpjboktD5FO35vz9JgVLtq3
RwqFEZsDjl1Am/2NhPFg5ueBPKBNkgtOrNqmowCAruW0mk84QgZZjdBn7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLom5BCpuwb2dO4aaKhX9XPdlKqlMB8GA1UdIwQY
MBaAFKVEeE/C9Wra3n23YjPRNu6be+vHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFVSNFQ4TDFhdHJlZmJkaU05RTI3cHQ3NjhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC80OGY3OTktNDQ0My00OWY4LTkyNDIt
OGNiZWVmYzkyZjlhLzEvcFVSNFQ4TDFhdHJlZmJkaU05RTI3cHQ3NjhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC80OGY3OTktNDQ0My00OWY4LTkyNDItOGNiZWVmYzkyZjlh
LzEvcFVSNFQ4TDFhdHJlZmJkaU05RTI3cHQ3NjhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn11xiaZ2
3tIZbxqW7MZ0r8ShY11zbOazm1SBTSkJfrYVzPdxrr4llHSyLbw9ixchtyszUOrn
NQm7Ej1ExcQDLxxA8UXTIeSblmkHHsxKrnYY8piqgHqQkqOrzFDkJ7i7Q7a3i/n4
FTS9VGr5dPIcE27cqZCCZLqDVftaoe21Kq6WUNNvb2kcjAdA+U9m26UP76hUjzEb
LrjePgkBu82psQjLN+p+KqA5ieENLRC97nr3nc/1Md1/EIl2kDK7gEQZ17qaOd7o
sXtWowqaaTPAITONo3Iybmofpv3kxTij/Gg0bkY/CJCdkgX6jUFJSjzDGN3uAGCZ
CVA/3ICrgqYrgw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:31:10 2025 by rpki-client