Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.mft
File: P591E-0Eyp_o96RU6CeY0E8agKg.mft (raw, json)
Hash identifier: LsKtFZFDoiUINYEj6w4qSCtzli3ZijnmbuoKVTp/xoU=
Subject key identifier: CB:F2:E9:09:D3:41:6E:AF:6E:DA:2C:1F:37:22:A6:6A:A5:E0:07:37
Authority key identifier: 3F:9F:75:13:ED:04:CA:9F:E8:F7:A4:54:E8:27:98:D0:4F:1A:80:A8
Certificate issuer: /CN=3f9f7513ed04ca9fe8f7a454e82798d04f1a80a8
Certificate serial: 0199FBEB658306AAF339AB676336BC9F1C35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P591E-0Eyp_o96RU6CeY0E8agKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.mft
Manifest number: 0603
Signing time: Sun 19 Oct 2025 10:02:12 +0000
Manifest this update: Sun 19 Oct 2025 10:02:12 +0000
Manifest next update: Mon 20 Oct 2025 10:02:12 +0000
Files and hashes: 1: P591E-0Eyp_o96RU6CeY0E8agKg.crl (hash: USRz91YhaYA0eg7+UUaconxzbR6c62iHjvHpBbRhaik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/P591E-0Eyp_o96RU6CeY0E8agKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:65:83:06:aa:f3:39:ab:67:63:36:bc:9f:1c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f9f7513ed04ca9fe8f7a454e82798d04f1a80a8
Validity
Not Before: Oct 19 10:02:12 2025 GMT
Not After : Oct 20 10:02:12 2025 GMT
Subject: CN=cbf2e909d3416eaf6eda2c1f3722a66aa5e00737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8b:59:76:93:43:07:f0:07:6f:ef:97:ab:17:
04:e1:53:9f:b1:66:2f:54:00:e6:e9:6f:21:ea:7c:
45:27:21:88:b0:a1:79:78:6c:bb:60:49:1a:37:59:
46:c3:9c:8c:c4:70:ff:55:fb:17:f0:e7:58:89:39:
33:3c:24:22:bb:38:82:38:e6:d4:3d:ee:38:83:bb:
d2:4a:53:cb:9b:99:0f:57:61:ba:e5:70:2c:ae:17:
42:06:1e:f8:54:81:4c:a1:a3:cc:a1:ab:41:78:33:
9d:8d:81:34:79:63:9c:07:59:b1:dd:fa:08:6e:34:
86:8b:ca:31:98:45:25:ca:12:fe:1c:38:ee:39:17:
dc:ba:a7:30:a4:c8:4e:75:35:43:9a:8e:ab:fc:9a:
1f:fb:8b:f4:63:df:cc:6a:fb:a2:f6:0a:24:5c:ec:
79:aa:43:5c:ba:09:8e:1d:5a:fe:fa:cc:b5:65:d3:
15:49:a8:0e:16:ec:49:1f:76:6a:ba:da:25:02:ad:
ec:fb:82:80:99:ae:e1:7b:bd:61:8c:43:93:18:3f:
18:1b:7c:8c:97:bf:d8:3a:17:ad:68:fc:a6:71:3a:
2b:8e:11:4c:8f:69:7c:31:00:fd:6a:df:21:8c:4d:
54:3d:53:37:3f:0b:49:b8:fc:e4:1e:96:3d:6e:21:
aa:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F2:E9:09:D3:41:6E:AF:6E:DA:2C:1F:37:22:A6:6A:A5:E0:07:37
X509v3 Authority Key Identifier:
keyid:3F:9F:75:13:ED:04:CA:9F:E8:F7:A4:54:E8:27:98:D0:4F:1A:80:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P591E-0Eyp_o96RU6CeY0E8agKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:6c:f4:f2:8d:6a:29:de:ee:81:e7:a2:96:54:5f:51:20:67:
9a:27:e2:b8:2f:15:ab:3a:23:f2:88:97:71:be:56:9e:c3:a1:
6d:3c:be:d1:1d:8f:b0:e0:03:ee:f7:3a:c2:68:bb:7b:81:f7:
e5:88:e3:64:49:f1:6c:e1:56:58:fe:e1:36:f1:2d:e6:d5:61:
d2:62:f7:d3:b7:45:5b:3c:08:b1:5f:bd:e7:9c:e6:1b:22:84:
bc:86:21:83:a0:65:58:fa:aa:5c:c0:1e:a7:9f:f2:84:4b:b8:
bb:38:8e:76:8a:9b:36:b0:cc:0f:f2:8d:96:af:3b:93:75:bd:
29:b8:e3:69:ca:49:d0:02:73:39:2c:e8:56:ad:06:ed:7b:98:
da:87:bb:e9:ec:06:df:b5:96:c2:9e:d2:95:e3:37:20:92:aa:
52:9d:47:74:4a:ff:98:69:0a:dd:91:57:77:88:16:9a:17:42:
70:e3:0d:b2:69:56:34:a3:45:84:1b:d9:f0:04:df:4b:c7:55:
97:af:e4:36:c8:8b:61:90:8c:d1:3c:8f:be:ad:b5:c6:f2:5b:
c1:f0:65:fa:ed:fc:66:9a:0e:3d:65:d5:d9:c5:c2:54:ed:84:
69:ec:22:3b:97:57:96:b3:0b:3c:6e:f6:cf:ac:c2:6c:a0:83:
48:08:7d:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn762WDBqrzOatnYza8nxw1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmOWY3NTEzZWQwNGNhOWZlOGY3YTQ1NGU4Mjc5OGQwNGYx
YTgwYTgwHhcNMjUxMDE5MTAwMjEyWhcNMjUxMDIwMTAwMjEyWjAzMTEwLwYDVQQD
EyhjYmYyZTkwOWQzNDE2ZWFmNmVkYTJjMWYzNzIyYTY2YWE1ZTAwNzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4tZdpNDB/AHb++XqxcE4VOfsWYv
VADm6W8h6nxFJyGIsKF5eGy7YEkaN1lGw5yMxHD/VfsX8OdYiTkzPCQiuziCOObU
Pe44g7vSSlPLm5kPV2G65XAsrhdCBh74VIFMoaPMoatBeDOdjYE0eWOcB1mx3foI
bjSGi8oxmEUlyhL+HDjuORfcuqcwpMhOdTVDmo6r/Jof+4v0Y9/Mavui9gokXOx5
qkNcugmOHVr++sy1ZdMVSagOFuxJH3ZqutolAq3s+4KAma7he71hjEOTGD8YG3yM
l7/YOhetaPymcTorjhFMj2l8MQD9at8hjE1UPVM3PwtJuPzkHpY9biGqUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvy6QnTQW6vbtosHzcipmql4Ac3MB8GA1UdIwQY
MBaAFD+fdRPtBMqf6PekVOgnmNBPGoCoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDU5MUUtMEV5cF9vOTZSVTZDZVkwRThhZ0tnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8wZGYzMGUtYjBiZi00ZDEwLWEwNjYt
NjkxN2NiNGM5OWJjLzEvUDU5MUUtMEV5cF9vOTZSVTZDZVkwRThhZ0tnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8wZGYzMGUtYjBiZi00ZDEwLWEwNjYtNjkxN2NiNGM5OWJj
LzEvUDU5MUUtMEV5cF9vOTZSVTZDZVkwRThhZ0tnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1mz08o1q
Kd7ugeeillRfUSBnmifiuC8Vqzoj8oiXcb5WnsOhbTy+0R2PsOAD7vc6wmi7e4H3
5YjjZEnxbOFWWP7hNvEt5tVh0mL307dFWzwIsV+955zmGyKEvIYhg6BlWPqqXMAe
p5/yhEu4uziOdoqbNrDMD/KNlq87k3W9KbjjacpJ0AJzOSzoVq0G7XuY2oe76ewG
37WWwp7SleM3IJKqUp1HdEr/mGkK3ZFXd4gWmhdCcOMNsmlWNKNFhBvZ8ATfS8dV
l6/kNsiLYZCM0TyPvq21xvJbwfBl+u38ZpoOPWXV2cXCVO2EaewiO5dXlrMLPG72
z6zCbKCDSAh9Rw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:52 2025 by rpki-client