Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
File: pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft (raw, json)
Hash identifier: A7SUDhBB9aEc0e6y3lHXas8MA9aa1A4OLAhW2bxUplk=
Subject key identifier: 72:1E:B5:6B:41:18:82:FB:86:13:65:6C:BE:8A:54:A8:71:7E:EE:DA
Authority key identifier: A4:33:E3:2A:C0:C6:FA:73:5A:6C:7B:E1:44:CF:A3:FC:29:7C:0B:98
Certificate issuer: /CN=a433e32ac0c6fa735a6c7be144cfa3fc297c0b98
Certificate serial: 019A0222BB196027C5AB32FE6C7EDC5B1ACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 15:00:21 +0000
Manifest this update: Mon 20 Oct 2025 15:00:21 +0000
Manifest next update: Tue 21 Oct 2025 15:00:21 +0000
Files and hashes: 1: 1-y3mku53CxfcZTDAjLzjGLNjKug.roa (hash: tkrqALFJZS9oKOrZg8mNnpPdOdg26RzEKwv9Z2r59k4=)
2: pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl (hash: 0yUAeDV279XDrkZAZeMMt37hRc3z20Q10A27YKZ3sqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:22:bb:19:60:27:c5:ab:32:fe:6c:7e:dc:5b:1a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a433e32ac0c6fa735a6c7be144cfa3fc297c0b98
Validity
Not Before: Oct 20 15:00:21 2025 GMT
Not After : Oct 21 15:00:21 2025 GMT
Subject: CN=721eb56b411882fb8613656cbe8a54a8717eeeda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:09:78:57:24:42:75:de:61:e2:05:c6:3f:3d:
aa:c0:93:d8:8c:4d:e5:d9:7b:bf:c5:cb:01:38:10:
5c:50:80:f7:da:59:04:0b:4f:33:4b:58:6a:7c:0b:
53:4e:15:29:44:6a:72:be:c8:6a:c4:2d:1e:1a:23:
7b:67:84:9d:28:d1:25:04:32:2b:22:06:fe:24:d8:
f0:aa:5b:13:6b:4e:9a:cb:9d:ee:f5:d7:7a:ed:f9:
96:6c:5d:78:02:e9:d0:22:dd:c6:78:1b:57:33:78:
07:26:51:97:c5:3b:ae:63:08:62:3a:71:20:55:77:
65:a9:ae:0a:d8:3f:92:cb:23:a7:18:ca:65:2c:a4:
c4:b1:a3:83:93:61:e7:1a:ae:b9:e0:57:3d:f1:28:
ca:b3:46:e1:b8:51:54:7c:b0:c3:32:6b:45:ac:26:
b9:c2:08:b4:3c:8b:96:2b:2c:4c:70:07:45:9a:b8:
76:77:fd:cf:b6:7c:86:9d:a0:e7:4a:f0:01:2e:ca:
cd:bf:78:ad:9e:f0:e6:90:63:b3:41:e2:41:30:0a:
1a:31:bd:3d:3e:10:58:a4:85:56:ad:40:a4:1d:b6:
d1:6a:f8:0c:e2:04:9e:67:96:fa:20:fa:b8:35:cb:
2a:81:5c:52:93:4b:4f:b2:1c:e9:bc:18:e8:8f:6e:
44:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1E:B5:6B:41:18:82:FB:86:13:65:6C:BE:8A:54:A8:71:7E:EE:DA
X509v3 Authority Key Identifier:
keyid:A4:33:E3:2A:C0:C6:FA:73:5A:6C:7B:E1:44:CF:A3:FC:29:7C:0B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f5:1d:15:e0:8a:a5:96:d3:82:17:04:c2:b4:4d:33:82:e7:
30:ca:c3:48:26:11:82:2f:54:86:17:ce:b5:4e:4d:d2:b8:21:
b1:96:ab:fb:28:59:98:ed:e4:42:78:64:75:b0:3b:45:5e:97:
d8:b0:c5:64:55:6f:60:68:f6:6f:16:af:79:49:b6:fd:f6:4b:
9c:0a:00:f3:b8:b3:17:e7:44:b2:76:8d:f4:c7:2f:4f:93:a5:
a0:cf:c2:04:fa:d9:f3:ce:80:ea:1a:5d:d9:94:d7:e6:8d:b5:
13:c5:fa:22:26:20:17:e6:c6:2b:4d:6b:d3:ea:0c:c7:d1:30:
f9:f8:e0:84:a4:88:a4:f5:79:f6:6e:d6:14:d1:0f:a4:d9:39:
e6:13:6e:67:34:00:15:a4:70:42:c6:fc:a8:b1:16:8c:2e:03:
46:b9:9d:0f:5b:a2:3a:0c:31:3a:81:39:e9:ff:da:64:ac:f3:
b0:e8:0f:ad:88:80:04:e6:67:01:68:76:2e:77:2d:70:38:dd:
8a:41:cb:7e:cd:01:da:35:b0:9d:98:9a:a9:6d:12:b6:42:67:
4e:b4:8a:4c:30:83:4d:ca:5b:3a:40:5e:a1:33:4b:79:98:e5:
85:52:ec:de:1f:42:dc:68:34:7b:78:27:a5:78:e1:9c:7e:73:
28:c8:77:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoCIrsZYCfFqzL+bH7cWxrPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MzNlMzJhYzBjNmZhNzM1YTZjN2JlMTQ0Y2ZhM2ZjMjk3
YzBiOTgwHhcNMjUxMDIwMTUwMDIxWhcNMjUxMDIxMTUwMDIxWjAzMTEwLwYDVQQD
Eyg3MjFlYjU2YjQxMTg4MmZiODYxMzY1NmNiZThhNTRhODcxN2VlZWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwl4VyRCdd5h4gXGPz2qwJPYjE3l
2Xu/xcsBOBBcUID32lkEC08zS1hqfAtTThUpRGpyvshqxC0eGiN7Z4SdKNElBDIr
Igb+JNjwqlsTa06ay53u9dd67fmWbF14AunQIt3GeBtXM3gHJlGXxTuuYwhiOnEg
VXdlqa4K2D+SyyOnGMplLKTEsaODk2HnGq654Fc98SjKs0bhuFFUfLDDMmtFrCa5
wgi0PIuWKyxMcAdFmrh2d/3PtnyGnaDnSvABLsrNv3itnvDmkGOzQeJBMAoaMb09
PhBYpIVWrUCkHbbRavgM4gSeZ5b6IPq4NcsqgVxSk0tPshzpvBjoj25EJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIetWtBGIL7hhNlbL6KVKhxfu7aMB8GA1UdIwQY
MBaAFKQz4yrAxvpzWmx74UTPo/wpfAuYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcERQaktzREctbk5hYkh2aFJNLWpfQ2w4QzVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi84NjU5Y2YtZjgyNC00ZjkzLTg2MDQt
YjgxMmJkNTk0NzM5LzEvcERQaktzREctbk5hYkh2aFJNLWpfQ2w4QzVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi84NjU5Y2YtZjgyNC00ZjkzLTg2MDQtYjgxMmJkNTk0NzM5
LzEvcERQaktzREctbk5hYkh2aFJNLWpfQ2w4QzVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/UdFeCK
pZbTghcEwrRNM4LnMMrDSCYRgi9UhhfOtU5N0rghsZar+yhZmO3kQnhkdbA7RV6X
2LDFZFVvYGj2bxaveUm2/fZLnAoA87izF+dEsnaN9McvT5OloM/CBPrZ886A6hpd
2ZTX5o21E8X6IiYgF+bGK01r0+oMx9Ew+fjghKSIpPV59m7WFNEPpNk55hNuZzQA
FaRwQsb8qLEWjC4DRrmdD1uiOgwxOoE56f/aZKzzsOgPrYiABOZnAWh2LnctcDjd
ikHLfs0B2jWwnZiaqW0StkJnTrSKTDCDTcpbOkBeoTNLeZjlhVLs3h9C3Gg0e3gn
pXjhnH5zKMh3lw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:38:30 2025 by rpki-client