Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
File: PesQRGPpILRVQravGifVlQ6G6aA.mft (raw, json)
Hash identifier: sutiepKyFNN7NQptcCqB9E9GuA5T4y9U9fCxXgxZZp0=
Subject key identifier: AF:F9:78:2B:1D:3C:F8:0E:6F:57:0D:89:6C:CC:8F:C3:53:36:42:00
Authority key identifier: 3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0
Certificate issuer: /CN=3deb104463e920b45542b6af1a27d5950e86e9a0
Certificate serial: 019A5F0C71F957AE5FF7E9BD240B80093844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
Manifest number: 14E6
Signing time: Fri 07 Nov 2025 16:00:42 +0000
Manifest this update: Fri 07 Nov 2025 16:00:42 +0000
Manifest next update: Sat 08 Nov 2025 16:00:42 +0000
Files and hashes: 1: 1-gBlmRElwFozsXlk-zODgtGpAuA.roa (hash: xVfyWKViH35Kce9xfyzBsAu8tiyl2DKuvLolO3h9f4s=)
2: 3X_OCsm4wSXVQQmIGXvbWiOwwPk.roa (hash: uAifQhxv7JsH18zEmjWnpWg6H+QdTkCHwp4ioEB51v8=)
3: CGYCoXePbFBrriJrNgrZF9Uefow.roa (hash: KPb5usKgdYQ3JpgKFKA1WlcbtVkuv48+f5lB1B8M9IA=)
4: PesQRGPpILRVQravGifVlQ6G6aA.crl (hash: 2pu99wM1gCwYcbmZ0je1JNcd87ShDIcTPPmFjUTuV6I=)
5: PyMiLV0wnNJXQTQMDEPMVXWx9ZQ.roa (hash: gY7gqfT3zhDP3uAkWWCqVVxfWQ7GvCSgS8lQh0U5EGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 16:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5f:0c:71:f9:57:ae:5f:f7:e9:bd:24:0b:80:09:38:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3deb104463e920b45542b6af1a27d5950e86e9a0
Validity
Not Before: Nov 7 16:00:42 2025 GMT
Not After : Nov 8 16:00:42 2025 GMT
Subject: CN=aff9782b1d3cf80e6f570d896ccc8fc353364200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:84:90:c3:6f:71:cc:ed:36:c9:35:d1:58:25:
99:51:3b:81:ad:e6:64:6f:fe:c7:d5:90:8d:eb:8d:
7a:c6:2d:e8:d0:96:50:2a:c2:cc:78:e9:83:dd:00:
b9:ee:0d:65:8e:83:c1:60:e9:3c:36:fa:01:d4:57:
9d:0f:36:d2:f1:65:f8:48:d6:a9:51:84:4c:5a:8f:
e9:64:a2:b3:27:f5:4f:17:19:57:dd:41:68:ce:49:
65:e2:10:43:45:8b:d8:0d:06:6c:a0:08:9f:34:7b:
e5:89:36:fc:03:fa:c1:2f:85:f5:ba:68:dc:a9:72:
3b:f9:54:a1:4c:f3:7a:10:34:b5:1e:18:48:89:9e:
eb:73:fe:6a:69:5e:2f:0f:03:eb:72:6e:2b:dc:c5:
b7:f4:b8:58:01:a1:3e:81:10:88:2d:3e:02:5e:e5:
ec:03:ab:52:32:97:5d:b1:16:75:b8:67:20:db:b1:
50:6b:06:5f:00:48:de:08:0a:cd:5f:1e:16:19:d2:
59:57:5b:08:db:b6:c4:1e:47:ec:eb:86:3a:1a:0f:
c2:bc:91:03:9e:cd:5d:6b:4c:f9:66:8d:4e:e7:24:
ce:f0:d7:8d:d1:bf:ed:2a:44:5a:e8:64:42:a1:e6:
6e:ee:7b:5f:5f:b8:a9:f8:5e:41:9d:f2:57:8d:8a:
bd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F9:78:2B:1D:3C:F8:0E:6F:57:0D:89:6C:CC:8F:C3:53:36:42:00
X509v3 Authority Key Identifier:
keyid:3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c8:f6:de:cb:ba:84:ee:04:77:0b:51:b6:0a:26:d2:d4:e1:
d0:a2:20:3e:45:29:dc:47:75:90:b5:70:17:8e:9e:7e:14:05:
f0:b9:a0:ba:c1:05:f9:09:9b:17:83:ee:c0:36:8c:a7:73:b4:
b3:09:8e:18:31:88:88:16:44:b6:d8:9c:12:05:57:95:4d:1c:
ad:e4:13:ae:e5:e2:84:5e:79:43:81:5e:d8:10:6d:87:79:b6:
8a:9d:b0:6a:5c:8d:88:07:4c:c1:8d:b3:8f:65:bd:9e:5d:e9:
78:46:22:b8:79:ea:2d:8c:3b:9a:81:7d:1d:41:4d:87:18:db:
c6:61:a5:5b:30:61:e7:4c:93:d4:54:17:eb:fc:36:a8:4b:2d:
fa:0b:1d:72:bb:d1:02:f1:69:a7:8e:43:bc:cf:05:28:cf:29:
c3:6e:99:eb:78:c9:4d:77:6c:74:4c:76:59:70:68:39:b9:1e:
11:da:07:eb:78:a6:52:18:b0:ea:17:86:cf:f9:30:2b:48:6d:
3e:49:66:33:95:f3:8d:84:e9:0a:11:ee:cb:9f:16:cd:b0:9d:
74:b0:c4:c3:2b:96:cb:4f:12:1d:31:b3:09:9f:c0:72:94:66:
24:1c:9d:00:8b:c2:fb:71:ce:d4:fc:d6:ce:48:fe:5d:c3:50:
ff:0d:2b:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpfDHH5V65f9+m9JAuACThEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkZWIxMDQ0NjNlOTIwYjQ1NTQyYjZhZjFhMjdkNTk1MGU4
NmU5YTAwHhcNMjUxMTA3MTYwMDQyWhcNMjUxMTA4MTYwMDQyWjAzMTEwLwYDVQQD
EyhhZmY5NzgyYjFkM2NmODBlNmY1NzBkODk2Y2NjOGZjMzUzMzY0MjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6YSQw29xzO02yTXRWCWZUTuBreZk
b/7H1ZCN6416xi3o0JZQKsLMeOmD3QC57g1ljoPBYOk8NvoB1FedDzbS8WX4SNap
UYRMWo/pZKKzJ/VPFxlX3UFozkll4hBDRYvYDQZsoAifNHvliTb8A/rBL4X1umjc
qXI7+VShTPN6EDS1HhhIiZ7rc/5qaV4vDwPrcm4r3MW39LhYAaE+gRCILT4CXuXs
A6tSMpddsRZ1uGcg27FQawZfAEjeCArNXx4WGdJZV1sI27bEHkfs64Y6Gg/CvJED
ns1da0z5Zo1O5yTO8NeN0b/tKkRa6GRCoeZu7ntfX7ip+F5BnfJXjYq9RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/5eCsdPPgOb1cNiWzMj8NTNkIAMB8GA1UdIwQY
MBaAFD3rEERj6SC0VUK2rxon1ZUOhumgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGVzUVJHUHBJTFJWUXJhdkdpZlZsUTZHNmFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9jNjg2YjMtZTdhOS00ZjljLTg0MmMt
MTE5ZDhiZjcxN2JiLzEvUGVzUVJHUHBJTFJWUXJhdkdpZlZsUTZHNmFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9jNjg2YjMtZTdhOS00ZjljLTg0MmMtMTE5ZDhiZjcxN2Ji
LzEvUGVzUVJHUHBJTFJWUXJhdkdpZlZsUTZHNmFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANsj23su6
hO4EdwtRtgom0tTh0KIgPkUp3Ed1kLVwF46efhQF8LmgusEF+QmbF4PuwDaMp3O0
swmOGDGIiBZEtticEgVXlU0creQTruXihF55Q4Fe2BBth3m2ip2walyNiAdMwY2z
j2W9nl3peEYiuHnqLYw7moF9HUFNhxjbxmGlWzBh50yT1FQX6/w2qEst+gsdcrvR
AvFpp45DvM8FKM8pw26Z63jJTXdsdEx2WXBoObkeEdoH63imUhiw6heGz/kwK0ht
PklmM5XzjYTpChHuy58WzbCddLDEwyuWy08SHTGzCZ/AcpRmJBydAIvC+3HO1PzW
zkj+XcNQ/w0rPQ==
-----END CERTIFICATE-----
Generated at Sat Nov 8 00:01:01 2025 by rpki-client