Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
File: 0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft (raw, json)
Hash identifier: W08yn+MmiAg7EAHm8uMyq8ojMZVSEz+DNYwgCseCMkM=
Subject key identifier: C8:8B:39:F7:B6:52:70:FF:7B:2C:C0:BF:FA:EC:5A:5F:85:B2:91:22
Authority key identifier: D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7
Certificate issuer: /CN=d0f6b8436f6634cd31d7097ce242a549935b18d7
Certificate serial: 0199FCC67D0F223AE5EFBF3BA2C7BE27999E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
Manifest number: 16B7
Signing time: Sun 19 Oct 2025 14:01:30 +0000
Manifest this update: Sun 19 Oct 2025 14:01:30 +0000
Manifest next update: Mon 20 Oct 2025 14:01:30 +0000
Files and hashes: 1: 0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl (hash: mgqW+LPzB0YGR2q+9DK4mVBwkNJssSnPdFp4GZNbcuI=)
2: PRL7sgUPxAooAgpR2OCFKktRv4I.roa (hash: 7EnjkpMFrtIGkSxH/V71N/Yi8O1F+vC6f4Et13UAYFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:7d:0f:22:3a:e5:ef:bf:3b:a2:c7:be:27:99:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f6b8436f6634cd31d7097ce242a549935b18d7
Validity
Not Before: Oct 19 14:01:30 2025 GMT
Not After : Oct 20 14:01:30 2025 GMT
Subject: CN=c88b39f7b65270ff7b2cc0bffaec5a5f85b29122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ff:3a:ce:b1:dc:a5:d8:52:59:70:f8:be:ff:
e2:dd:0f:59:de:74:3e:74:ad:1a:c0:17:e8:5a:7a:
c1:45:9e:42:77:94:ed:02:5c:db:c7:ff:ef:f7:a8:
48:e8:02:48:9f:d4:14:20:cd:e3:0d:03:a2:59:af:
b0:c0:21:b2:df:8c:92:09:0e:44:4c:99:b4:e6:13:
a3:49:cc:38:d9:65:4e:6b:7e:2e:bf:cf:de:5f:70:
aa:2c:51:91:db:31:cf:2e:e5:c2:51:f0:08:a5:81:
5b:d0:9f:b7:a5:dd:51:4f:bf:62:03:19:2b:ee:11:
ea:92:a5:ee:60:35:e9:8a:c2:cb:77:03:3a:7c:36:
d2:59:6d:84:e5:b0:81:9f:c6:f7:0e:87:e8:08:98:
c9:a9:f1:88:08:39:b4:dc:2c:80:53:c3:c5:11:dc:
ec:77:a3:cf:99:d5:ef:c8:6c:ab:df:66:e6:fd:b3:
13:28:ed:1d:db:41:f9:fa:7c:c5:bf:1b:87:85:9a:
0f:82:2e:b7:86:a9:3d:6c:06:95:cc:50:34:bd:da:
45:58:33:24:fb:83:4c:55:9a:9a:2a:0e:9f:1f:6e:
85:ea:07:70:1d:af:7b:01:13:93:33:7a:1f:75:78:
1b:71:87:0b:c8:7f:d4:e1:e5:f1:73:6c:91:0f:70:
97:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8B:39:F7:B6:52:70:FF:7B:2C:C0:BF:FA:EC:5A:5F:85:B2:91:22
X509v3 Authority Key Identifier:
keyid:D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:5a:08:48:77:b1:9c:11:8a:af:e9:7b:81:1c:0b:a1:11:0e:
32:ba:3d:cc:55:6a:bf:bb:1f:8c:ab:b9:ba:a2:77:74:23:07:
d5:2c:c8:c8:21:1e:3d:98:cb:4f:f4:b1:86:2a:55:b6:e7:27:
e2:a0:34:44:b9:c1:f7:29:62:f7:07:85:7f:7b:f2:43:4a:12:
95:a0:c8:ae:74:45:a1:27:ca:5a:d2:5d:ea:55:82:c7:6e:66:
ed:e8:9d:07:f0:a3:69:92:f5:bb:40:f6:96:bf:6a:95:54:b9:
a8:ab:3d:65:5f:22:2c:b7:60:17:88:18:f5:0b:24:3b:dc:b9:
3a:07:42:8c:93:85:27:21:fd:67:45:fc:70:73:0e:28:bd:17:
05:0c:49:85:c6:63:b1:12:39:31:67:55:53:5d:df:87:5a:c9:
72:3d:4e:51:58:84:0b:fe:1a:05:32:bb:76:ef:0d:db:e7:18:
d4:40:78:cc:40:94:c6:c6:74:aa:90:f7:32:fd:be:2b:4d:c0:
e9:85:7d:ae:09:be:d7:43:1e:d4:4d:66:46:8e:e0:92:ae:4f:
b2:80:a0:64:a2:04:09:23:62:62:d0:c8:b4:d1:ee:5d:9b:60:
4c:6d:a5:de:75:38:28:de:20:04:f2:3c:75:f5:9b:55:83:92:
17:9c:c8:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xn0PIjrl7787ose+J5meMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZjZiODQzNmY2NjM0Y2QzMWQ3MDk3Y2UyNDJhNTQ5OTM1
YjE4ZDcwHhcNMjUxMDE5MTQwMTMwWhcNMjUxMDIwMTQwMTMwWjAzMTEwLwYDVQQD
EyhjODhiMzlmN2I2NTI3MGZmN2IyY2MwYmZmYWVjNWE1Zjg1YjI5MTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgv86zrHcpdhSWXD4vv/i3Q9Z3nQ+
dK0awBfoWnrBRZ5Cd5TtAlzbx//v96hI6AJIn9QUIM3jDQOiWa+wwCGy34ySCQ5E
TJm05hOjScw42WVOa34uv8/eX3CqLFGR2zHPLuXCUfAIpYFb0J+3pd1RT79iAxkr
7hHqkqXuYDXpisLLdwM6fDbSWW2E5bCBn8b3DofoCJjJqfGICDm03CyAU8PFEdzs
d6PPmdXvyGyr32bm/bMTKO0d20H5+nzFvxuHhZoPgi63hqk9bAaVzFA0vdpFWDMk
+4NMVZqaKg6fH26F6gdwHa97AROTM3ofdXgbcYcLyH/U4eXxc2yRD3CX8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMiLOfe2UnD/eyzAv/rsWl+FspEiMB8GA1UdIwQY
MBaAFND2uENvZjTNMdcJfOJCpUmTWxjXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFBhNFEyOW1OTTB4MXdsODRrS2xTWk5iR05jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC81MTRhNDItMGJlOC00NWU4LWE3ZjAt
NTVkYThlYzM2MDE0LzEvMFBhNFEyOW1OTTB4MXdsODRrS2xTWk5iR05jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC81MTRhNDItMGJlOC00NWU4LWE3ZjAtNTVkYThlYzM2MDE0
LzEvMFBhNFEyOW1OTTB4MXdsODRrS2xTWk5iR05jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcVoISHex
nBGKr+l7gRwLoREOMro9zFVqv7sfjKu5uqJ3dCMH1SzIyCEePZjLT/SxhipVtucn
4qA0RLnB9yli9weFf3vyQ0oSlaDIrnRFoSfKWtJd6lWCx25m7eidB/CjaZL1u0D2
lr9qlVS5qKs9ZV8iLLdgF4gY9QskO9y5OgdCjJOFJyH9Z0X8cHMOKL0XBQxJhcZj
sRI5MWdVU13fh1rJcj1OUViEC/4aBTK7du8N2+cY1EB4zECUxsZ0qpD3Mv2+K03A
6YV9rgm+10Me1E1mRo7gkq5PsoCgZKIECSNiYtDItNHuXZtgTG2l3nU4KN4gBPI8
dfWbVYOSF5zIRQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:29:42 2025 by rpki-client