Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
File: pTjytsVCHgpCkQBAxbhlCKiVuRY.mft (raw, json)
Hash identifier: /sy7JjdanQupkROOWeSdpBGiiIaa04DmhKYRyZSxCkU=
Subject key identifier: B5:CC:E9:AF:3E:01:20:20:21:7D:07:E4:67:99:5A:A5:F0:D8:99:A2
Authority key identifier: A5:38:F2:B6:C5:42:1E:0A:42:91:00:40:C5:B8:65:08:A8:95:B9:16
Certificate issuer: /CN=a538f2b6c5421e0a42910040c5b86508a895b916
Certificate serial: 0199FB7CAD3B6365F2BCF008E3DCA4B17405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
Manifest number: 0571
Signing time: Sun 19 Oct 2025 08:01:15 +0000
Manifest this update: Sun 19 Oct 2025 08:01:15 +0000
Manifest next update: Mon 20 Oct 2025 08:01:15 +0000
Files and hashes: 1: pTjytsVCHgpCkQBAxbhlCKiVuRY.crl (hash: xvssEFKvMqHdMI4eGtULuw7Mu67sfSJyrSBAk9XhMcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ad:3b:63:65:f2:bc:f0:08:e3:dc:a4:b1:74:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a538f2b6c5421e0a42910040c5b86508a895b916
Validity
Not Before: Oct 19 08:01:15 2025 GMT
Not After : Oct 20 08:01:15 2025 GMT
Subject: CN=b5cce9af3e012020217d07e467995aa5f0d899a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:26:f2:34:2d:9c:f0:bf:18:38:1b:ca:50:c6:
5d:40:3a:fa:14:2c:bd:83:14:47:68:4c:ae:22:e7:
c1:b4:5a:19:f5:70:6e:a7:3d:5f:a8:91:9b:c5:bf:
a4:ee:5a:ba:1f:6c:b3:dc:f5:94:68:4e:87:9b:0e:
fc:aa:6d:50:f8:ee:d5:c2:a9:7a:95:4d:cd:a1:ad:
02:44:06:0f:d0:cd:c2:d8:dd:f6:2a:05:ad:46:d8:
f7:a4:94:bb:3b:02:60:e9:b5:cb:45:dd:43:a7:9c:
60:3f:43:76:99:66:05:78:09:34:f1:9c:2b:2a:88:
f3:ef:93:ae:b0:43:d6:0b:4d:5c:42:3d:2b:2d:90:
88:97:91:04:5d:29:91:da:c0:c9:ed:21:01:dd:fc:
8c:fd:4d:8f:65:3c:57:14:49:81:f0:53:68:a6:ef:
4d:8b:c1:3e:9a:03:31:9d:14:34:99:32:d1:2f:12:
d1:c8:84:bf:db:5b:c0:87:58:a9:96:ef:10:7b:65:
82:6a:3b:35:c9:f5:7a:42:ae:8d:da:b0:2e:fd:86:
20:61:d4:cc:1c:b0:26:c8:36:c0:68:ae:da:1f:1a:
2d:ec:c2:7d:8a:a2:5f:6b:e7:d2:6e:44:de:4d:ce:
05:23:4a:aa:9a:0b:6f:06:8b:75:1f:a7:31:a1:aa:
c4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CC:E9:AF:3E:01:20:20:21:7D:07:E4:67:99:5A:A5:F0:D8:99:A2
X509v3 Authority Key Identifier:
keyid:A5:38:F2:B6:C5:42:1E:0A:42:91:00:40:C5:B8:65:08:A8:95:B9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:3d:b0:3f:fb:2c:95:0d:a3:ec:e8:f8:c0:df:e9:25:84:c4:
3b:df:01:e6:ca:bc:d6:59:24:12:e8:96:ee:57:df:7e:63:29:
dc:4e:1c:5e:ad:f3:d6:53:08:57:ec:83:92:5f:2e:74:e2:76:
46:f5:7c:00:34:8a:fd:1d:27:55:09:24:aa:2d:ea:e1:3a:d9:
61:76:26:fd:e6:af:c0:f2:12:51:22:67:9a:7e:64:ff:0c:db:
24:30:ad:22:9e:f8:d7:83:56:81:18:f3:1c:0c:06:01:7c:1f:
51:20:d3:de:97:92:f2:f0:70:ab:ab:29:8d:81:92:f9:19:b9:
32:c0:7b:84:50:c5:cb:c7:18:63:3f:a8:44:be:cb:12:78:30:
88:87:82:1e:28:7e:99:9d:14:09:c2:91:e3:81:fb:57:16:c2:
ab:1d:ee:e2:d2:22:b1:5a:a8:bf:22:68:8e:a8:66:6b:88:b8:
31:f7:eb:0d:d7:df:9a:cc:74:9d:cc:70:a5:36:a8:92:78:c8:
18:fa:96:57:e9:8a:aa:51:78:8e:7f:ef:c7:dc:db:82:97:a7:
39:9b:84:97:c5:b2:b4:54:80:78:ed:a8:bb:f4:79:fc:dd:55:
b1:c6:54:e5:49:4c:0e:8f:fa:43:b6:52:9e:e4:f2:d1:59:65:
44:e0:d6:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fK07Y2XyvPAI49yksXQFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MzhmMmI2YzU0MjFlMGE0MjkxMDA0MGM1Yjg2NTA4YTg5
NWI5MTYwHhcNMjUxMDE5MDgwMTE1WhcNMjUxMDIwMDgwMTE1WjAzMTEwLwYDVQQD
EyhiNWNjZTlhZjNlMDEyMDIwMjE3ZDA3ZTQ2Nzk5NWFhNWYwZDg5OWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArybyNC2c8L8YOBvKUMZdQDr6FCy9
gxRHaEyuIufBtFoZ9XBupz1fqJGbxb+k7lq6H2yz3PWUaE6Hmw78qm1Q+O7Vwql6
lU3Noa0CRAYP0M3C2N32KgWtRtj3pJS7OwJg6bXLRd1Dp5xgP0N2mWYFeAk08Zwr
Kojz75OusEPWC01cQj0rLZCIl5EEXSmR2sDJ7SEB3fyM/U2PZTxXFEmB8FNopu9N
i8E+mgMxnRQ0mTLRLxLRyIS/21vAh1iplu8Qe2WCajs1yfV6Qq6N2rAu/YYgYdTM
HLAmyDbAaK7aHxot7MJ9iqJfa+fSbkTeTc4FI0qqmgtvBot1H6cxoarErwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXM6a8+ASAgIX0H5GeZWqXw2JmiMB8GA1UdIwQY
MBaAFKU48rbFQh4KQpEAQMW4ZQiolbkWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFRqeXRzVkNIZ3BDa1FCQXhiaGxDS2lWdVJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81YWU5MzUtZjZlMC00MDczLTlmNzkt
ZWM2YzAxZjQ3MjRlLzEvcFRqeXRzVkNIZ3BDa1FCQXhiaGxDS2lWdVJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81YWU5MzUtZjZlMC00MDczLTlmNzktZWM2YzAxZjQ3MjRl
LzEvcFRqeXRzVkNIZ3BDa1FCQXhiaGxDS2lWdVJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGz2wP/ss
lQ2j7Oj4wN/pJYTEO98B5sq81lkkEuiW7lfffmMp3E4cXq3z1lMIV+yDkl8udOJ2
RvV8ADSK/R0nVQkkqi3q4TrZYXYm/eavwPISUSJnmn5k/wzbJDCtIp7414NWgRjz
HAwGAXwfUSDT3peS8vBwq6spjYGS+Rm5MsB7hFDFy8cYYz+oRL7LEngwiIeCHih+
mZ0UCcKR44H7VxbCqx3u4tIisVqovyJojqhma4i4MffrDdffmsx0ncxwpTaoknjI
GPqWV+mKqlF4jn/vx9zbgpenOZuEl8WytFSAeO2ou/R5/N1VscZU5UlMDo/6Q7ZS
nuTy0VllRODWNw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:23 2025 by rpki-client