Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.mft
File: pj6AVRuSNrvAzXHFHRlZGA58j3w.mft (raw, json)
Hash identifier: i7moKFwQyoH1khKSKlnlaCf4rzhFiE37H0VlaRFkP70=
Subject key identifier: BD:7D:2C:C7:76:89:C5:FB:60:89:0B:A6:D9:1B:06:E1:D6:BB:77:B7
Authority key identifier: A6:3E:80:55:1B:92:36:BB:C0:CD:71:C5:1D:19:59:18:0E:7C:8F:7C
Certificate issuer: /CN=a63e80551b9236bbc0cd71c51d1959180e7c8f7c
Certificate serial: 0199FDDA3AA210565D9F98662D1EB6121C49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pj6AVRuSNrvAzXHFHRlZGA58j3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.mft
Manifest number: 1424
Signing time: Sun 19 Oct 2025 19:02:41 +0000
Manifest this update: Sun 19 Oct 2025 19:02:41 +0000
Manifest next update: Mon 20 Oct 2025 19:02:41 +0000
Files and hashes: 1: pj6AVRuSNrvAzXHFHRlZGA58j3w.crl (hash: O4YWNsr8OrwZkJ/SxMIaq4C6yEsvsr/qky8DGfETXIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/pj6AVRuSNrvAzXHFHRlZGA58j3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:3a:a2:10:56:5d:9f:98:66:2d:1e:b6:12:1c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63e80551b9236bbc0cd71c51d1959180e7c8f7c
Validity
Not Before: Oct 19 19:02:41 2025 GMT
Not After : Oct 20 19:02:41 2025 GMT
Subject: CN=bd7d2cc77689c5fb60890ba6d91b06e1d6bb77b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2f:75:ac:78:d6:c6:58:77:02:b8:86:5d:f7:
0f:d6:15:9c:c1:a6:26:7c:ac:78:f4:bf:05:df:30:
77:f6:6d:d6:9e:98:fc:4f:fb:ff:27:c2:d6:7d:3e:
5a:ba:a1:b5:0a:3b:38:57:fb:b3:b9:e6:fb:94:fa:
b7:fb:19:da:d5:3d:f3:ad:a9:fe:cb:2c:ec:1b:41:
6b:dd:f5:91:df:cc:3f:3a:0a:e3:7a:df:bb:08:6e:
26:cc:87:67:d2:01:5a:9a:06:36:f6:4f:ce:fa:73:
92:5a:53:98:c9:c3:08:26:3b:5f:11:1d:e6:5a:a5:
90:97:21:00:16:6f:4d:26:c8:63:67:af:d6:b7:cb:
ce:96:5c:b7:7b:be:ce:77:ef:a7:19:c0:a6:fb:12:
6b:89:01:4e:5c:a2:de:88:60:b2:e0:0e:fe:aa:78:
3a:fc:6a:4e:57:8b:92:20:9f:86:4e:51:9a:f6:3e:
9a:cd:1f:43:fc:95:df:4f:b3:4a:64:35:59:d9:82:
f2:8e:c7:18:ea:ba:d0:58:45:81:bf:c0:dd:cb:4d:
a2:8f:77:b4:a8:3e:20:32:03:db:83:24:df:8b:23:
65:96:4c:65:78:75:83:b5:9d:31:02:2b:ed:1e:bb:
23:35:ff:5d:c9:ba:7d:f1:0a:aa:1e:37:71:6d:59:
84:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7D:2C:C7:76:89:C5:FB:60:89:0B:A6:D9:1B:06:E1:D6:BB:77:B7
X509v3 Authority Key Identifier:
keyid:A6:3E:80:55:1B:92:36:BB:C0:CD:71:C5:1D:19:59:18:0E:7C:8F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj6AVRuSNrvAzXHFHRlZGA58j3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:31:38:2b:7c:35:fe:c4:40:0c:9a:55:55:be:a0:fa:06:aa:
d4:4a:27:65:1c:67:01:4b:d6:15:9b:85:af:6c:c1:bc:a1:13:
1e:ac:2f:54:08:aa:b5:63:8e:bb:30:2c:29:55:14:d1:58:ae:
1b:9b:c7:6e:5d:55:ac:a9:d7:aa:bb:1b:32:91:73:7d:ef:94:
a3:2f:2c:0d:d7:c7:d9:70:ce:49:17:83:d4:50:a0:d2:dd:7a:
e4:7b:4a:05:36:38:d1:85:b4:38:bb:22:6d:08:8e:cb:ba:ac:
32:65:fa:c1:13:dc:5e:32:78:a2:b3:a5:16:32:78:b4:65:9c:
49:38:85:42:d8:bc:73:80:6d:8c:47:14:6f:31:dd:df:2f:3e:
db:83:0d:4f:0d:ed:47:45:47:f3:16:c0:94:a3:18:c4:b8:93:
c0:04:fd:26:7f:70:51:fe:f7:09:6c:02:33:b5:75:08:83:dc:
a0:36:b9:6c:d9:94:6f:ea:af:64:56:56:80:af:45:eb:25:5d:
45:c6:c9:9e:a7:77:20:76:3f:c1:15:54:9b:50:76:68:c7:03:
33:25:77:b6:ef:67:a3:ea:19:f2:ff:75:10:ed:b8:60:9e:d9:
e8:c4:00:ba:08:20:a9:21:44:a5:11:ab:41:aa:27:23:5e:c3:
4b:3c:a7:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92jqiEFZdn5hmLR62EhxJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2M2U4MDU1MWI5MjM2YmJjMGNkNzFjNTFkMTk1OTE4MGU3
YzhmN2MwHhcNMjUxMDE5MTkwMjQxWhcNMjUxMDIwMTkwMjQxWjAzMTEwLwYDVQQD
EyhiZDdkMmNjNzc2ODljNWZiNjA4OTBiYTZkOTFiMDZlMWQ2YmI3N2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArC91rHjWxlh3AriGXfcP1hWcwaYm
fKx49L8F3zB39m3Wnpj8T/v/J8LWfT5auqG1Cjs4V/uzueb7lPq3+xna1T3zran+
yyzsG0Fr3fWR38w/Ogrjet+7CG4mzIdn0gFamgY29k/O+nOSWlOYycMIJjtfER3m
WqWQlyEAFm9NJshjZ6/Wt8vOlly3e77Od++nGcCm+xJriQFOXKLeiGCy4A7+qng6
/GpOV4uSIJ+GTlGa9j6azR9D/JXfT7NKZDVZ2YLyjscY6rrQWEWBv8Ddy02ij3e0
qD4gMgPbgyTfiyNllkxleHWDtZ0xAivtHrsjNf9dybp98QqqHjdxbVmEXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL19LMd2icX7YIkLptkbBuHWu3e3MB8GA1UdIwQY
MBaAFKY+gFUbkja7wM1xxR0ZWRgOfI98MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGo2QVZSdVNOcnZBelhIRkhSbFpHQTU4ajN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9mNTg0Y2YtZThmMi00NGNiLWJkY2Ut
NDFiNjEwNjlhN2UyLzEvcGo2QVZSdVNOcnZBelhIRkhSbFpHQTU4ajN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9mNTg0Y2YtZThmMi00NGNiLWJkY2UtNDFiNjEwNjlhN2Uy
LzEvcGo2QVZSdVNOcnZBelhIRkhSbFpHQTU4ajN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnDE4K3w1
/sRADJpVVb6g+gaq1EonZRxnAUvWFZuFr2zBvKETHqwvVAiqtWOOuzAsKVUU0Viu
G5vHbl1VrKnXqrsbMpFzfe+Uoy8sDdfH2XDOSReD1FCg0t165HtKBTY40YW0OLsi
bQiOy7qsMmX6wRPcXjJ4orOlFjJ4tGWcSTiFQti8c4BtjEcUbzHd3y8+24MNTw3t
R0VH8xbAlKMYxLiTwAT9Jn9wUf73CWwCM7V1CIPcoDa5bNmUb+qvZFZWgK9F6yVd
RcbJnqd3IHY/wRVUm1B2aMcDMyV3tu9no+oZ8v91EO24YJ7Z6MQAugggqSFEpRGr
QaonI17DSzynJw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:11:22 2025 by rpki-client