Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft
File: pWMWxxKYMeBREHlTLe2B3BLIHaA.mft (raw, json)
Hash identifier: cpTrBT53gzrnyF3n7Sznp9L0ymgYta2jfTJnbyav9aA=
Subject key identifier: BE:FD:A3:68:1F:09:F5:C0:2A:36:E6:81:68:74:B1:8B:0B:68:92:EC
Authority key identifier: A5:63:16:C7:12:98:31:E0:51:10:79:53:2D:ED:81:DC:12:C8:1D:A0
Certificate issuer: /CN=a56316c7129831e0511079532ded81dc12c81da0
Certificate serial: 0199FC8F7F3712435B57F795DE0F5CC29959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWMWxxKYMeBREHlTLe2B3BLIHaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft
Manifest number: 0CF1
Signing time: Sun 19 Oct 2025 13:01:26 +0000
Manifest this update: Sun 19 Oct 2025 13:01:26 +0000
Manifest next update: Mon 20 Oct 2025 13:01:26 +0000
Files and hashes: 1: XAMH6mQExatvC2LMnoXanctLKzE.roa (hash: pCAATiBl9IRxnVx1ZfARnp3JybBqcsAW/QN7pstrTq0=)
2: pWMWxxKYMeBREHlTLe2B3BLIHaA.crl (hash: cE2eapFpntBqf4XlrxPjCYm6zZfp2Wp+zDOlJoppnls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pWMWxxKYMeBREHlTLe2B3BLIHaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:7f:37:12:43:5b:57:f7:95:de:0f:5c:c2:99:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a56316c7129831e0511079532ded81dc12c81da0
Validity
Not Before: Oct 19 13:01:26 2025 GMT
Not After : Oct 20 13:01:26 2025 GMT
Subject: CN=befda3681f09f5c02a36e6816874b18b0b6892ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8b:77:c5:09:f5:cb:e7:88:c5:56:b8:d4:f8:
1e:94:a5:79:84:f4:ad:87:34:b0:8d:bb:75:68:3f:
69:2a:1d:d9:ef:6a:57:86:7e:2c:15:b3:7a:15:15:
b7:b3:86:fc:fe:65:11:17:9e:7e:fc:ce:d0:5f:88:
02:e7:77:ab:a4:30:bb:f4:f8:9f:11:e8:85:22:c0:
d7:4d:ed:ff:18:0c:f7:67:e6:e9:e8:5b:c7:58:26:
dc:34:c5:30:f7:35:5d:d1:8f:77:a9:7a:b7:6c:b0:
2e:4b:79:30:45:04:c4:48:10:4c:62:ff:c1:23:d8:
60:8d:10:66:26:96:0e:ef:f3:fb:b3:42:f0:34:c0:
bc:c1:a0:d2:1a:c2:01:a1:16:b8:2a:6d:d1:43:85:
72:b9:a6:f7:cd:58:6c:86:7d:86:3a:5c:65:69:49:
36:a2:9d:e5:c7:5d:6b:b4:a9:5e:6a:b3:b8:8b:af:
f5:44:3d:2f:88:f7:4c:73:d2:b0:a6:43:09:4c:63:
22:d5:1f:12:fe:74:3c:cc:07:62:06:0a:00:e0:7d:
3e:ba:5c:9c:37:b6:2f:a6:d8:10:e3:87:dc:2c:0d:
f2:c1:f2:aa:9d:58:cb:00:89:83:33:56:8a:5e:48:
1e:3e:39:1e:de:58:36:71:cd:31:cc:56:03:85:bf:
ec:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:FD:A3:68:1F:09:F5:C0:2A:36:E6:81:68:74:B1:8B:0B:68:92:EC
X509v3 Authority Key Identifier:
keyid:A5:63:16:C7:12:98:31:E0:51:10:79:53:2D:ED:81:DC:12:C8:1D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWMWxxKYMeBREHlTLe2B3BLIHaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:d4:0a:55:f0:23:13:47:59:62:25:d8:56:1c:f6:9f:6e:ab:
4d:7b:42:34:7d:f6:d0:ea:df:8f:76:fa:e1:7e:93:a0:c4:c7:
2f:7a:c6:3e:f7:a8:af:b5:09:b9:5f:60:f5:bf:7e:87:a3:64:
f5:86:50:8f:0b:69:d2:72:71:81:0a:cf:18:06:2f:0c:ae:86:
98:72:53:1e:34:6e:25:e7:a9:09:b3:95:a6:8e:d5:8b:cb:08:
e7:fc:20:59:bb:98:b5:1a:d0:22:06:9a:87:02:c3:14:73:f6:
77:4b:e6:89:ce:35:cc:a9:a0:c6:6b:41:98:59:21:84:61:24:
f6:b6:09:45:d1:60:d2:f7:3f:ce:1a:2a:e7:92:d9:c0:10:66:
d0:62:c9:29:aa:1d:35:27:16:0d:01:08:e7:2a:e3:9e:90:6c:
82:a8:f6:6b:79:a7:fe:93:5d:cb:66:ad:5d:81:61:f8:7c:ee:
35:77:c0:61:b2:19:83:4c:e5:ee:c9:03:21:fb:09:4e:2c:bc:
e6:fc:43:9d:66:e4:ec:50:05:25:77:46:a0:b2:ee:a0:ea:dd:
43:b2:c1:19:00:b5:28:bb:36:8c:28:ed:fe:64:b8:70:10:2a:
00:49:7d:21:a0:1e:8d:76:33:42:0b:e3:83:c1:5d:11:30:d6:
7d:ce:c9:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j383EkNbV/eV3g9cwplZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NjMxNmM3MTI5ODMxZTA1MTEwNzk1MzJkZWQ4MWRjMTJj
ODFkYTAwHhcNMjUxMDE5MTMwMTI2WhcNMjUxMDIwMTMwMTI2WjAzMTEwLwYDVQQD
EyhiZWZkYTM2ODFmMDlmNWMwMmEzNmU2ODE2ODc0YjE4YjBiNjg5MmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlot3xQn1y+eIxVa41PgelKV5hPSt
hzSwjbt1aD9pKh3Z72pXhn4sFbN6FRW3s4b8/mURF55+/M7QX4gC53erpDC79Pif
EeiFIsDXTe3/GAz3Z+bp6FvHWCbcNMUw9zVd0Y93qXq3bLAuS3kwRQTESBBMYv/B
I9hgjRBmJpYO7/P7s0LwNMC8waDSGsIBoRa4Km3RQ4Vyuab3zVhshn2GOlxlaUk2
op3lx11rtKlearO4i6/1RD0viPdMc9KwpkMJTGMi1R8S/nQ8zAdiBgoA4H0+ulyc
N7YvptgQ44fcLA3ywfKqnVjLAImDM1aKXkgePjke3lg2cc0xzFYDhb/s6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL79o2gfCfXAKjbmgWh0sYsLaJLsMB8GA1UdIwQY
MBaAFKVjFscSmDHgURB5Uy3tgdwSyB2gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFdNV3h4S1lNZUJSRUhsVExlMkIzQkxJSGFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS80ZDkyNjctNGVhYy00MjEzLTliY2It
MjhiODJjMGExNGYwLzEvcFdNV3h4S1lNZUJSRUhsVExlMkIzQkxJSGFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS80ZDkyNjctNGVhYy00MjEzLTliY2ItMjhiODJjMGExNGYw
LzEvcFdNV3h4S1lNZUJSRUhsVExlMkIzQkxJSGFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy9QKVfAj
E0dZYiXYVhz2n26rTXtCNH320Orfj3b64X6ToMTHL3rGPveor7UJuV9g9b9+h6Nk
9YZQjwtp0nJxgQrPGAYvDK6GmHJTHjRuJeepCbOVpo7Vi8sI5/wgWbuYtRrQIgaa
hwLDFHP2d0vmic41zKmgxmtBmFkhhGEk9rYJRdFg0vc/zhoq55LZwBBm0GLJKaod
NScWDQEI5yrjnpBsgqj2a3mn/pNdy2atXYFh+HzuNXfAYbIZg0zl7skDIfsJTiy8
5vxDnWbk7FAFJXdGoLLuoOrdQ7LBGQC1KLs2jCjt/mS4cBAqAEl9IaAejXYzQgvj
g8FdETDWfc7JgQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:18 2025 by rpki-client