Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
File: PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft (raw, json)
Hash identifier: 0Bx/QyJ4u49xPu5pmPFtSklsYZoEJvQHz4MkJr7qVUc=
Subject key identifier: 16:0E:AC:85:0B:DD:2C:E7:E6:63:0F:A7:06:F2:B2:4B:9A:45:7B:12
Authority key identifier: 3C:8A:04:98:EC:3B:4E:B4:4F:4D:F2:54:1A:E3:91:80:AB:B6:5F:44
Certificate issuer: /CN=3c8a0498ec3b4eb44f4df2541ae39180abb65f44
Certificate serial: 019A22F7DF892B0076373722745CE7335576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
Manifest number: 30
Signing time: Mon 27 Oct 2025 00:01:01 +0000
Manifest this update: Mon 27 Oct 2025 00:01:01 +0000
Manifest next update: Tue 28 Oct 2025 00:01:01 +0000
Files and hashes: 1: 7alJhVEJ8xj6IpTwu6Ih8OhjFkA.roa (hash: 7jCnG6JINMEyq9hp7eyBgT5bk5thbVgVLLuXRq467tI=)
2: PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl (hash: KiPGyypZ6TAXxYAD3ZugdPaYRp8dgwGkQ+Hv1b0zNp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:df:89:2b:00:76:37:37:22:74:5c:e7:33:55:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8a0498ec3b4eb44f4df2541ae39180abb65f44
Validity
Not Before: Oct 27 00:01:01 2025 GMT
Not After : Oct 28 00:01:01 2025 GMT
Subject: CN=160eac850bdd2ce7e6630fa706f2b24b9a457b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:82:e0:b6:3e:6b:ab:7f:19:46:48:98:c1:4e:
9c:2b:d2:c0:49:80:84:5e:3e:51:d2:d9:55:a6:59:
c0:ff:bc:c3:bf:14:a7:ef:65:13:e5:b7:77:22:9d:
e5:01:e0:54:1c:75:52:61:5f:0b:16:bb:64:da:cd:
22:04:3e:16:bc:be:86:6a:14:28:77:fe:f2:23:2d:
a9:6c:5e:79:08:60:bc:91:63:e7:c8:4a:b8:d4:fe:
c8:b6:2a:60:98:56:1f:00:96:2d:c3:23:75:d4:10:
21:fd:1c:c9:8e:57:eb:5f:2b:55:bb:88:f4:e4:2f:
8e:9d:0e:f1:07:65:f0:2e:b5:49:6f:08:2d:8a:08:
32:09:20:5e:f6:b5:ab:06:20:25:ec:13:e0:e6:89:
39:71:ff:bb:9d:36:4a:59:85:ce:6b:5e:fb:c9:84:
78:22:5c:53:d5:2d:4d:e5:16:82:97:86:af:10:f0:
86:c7:b0:f8:c9:46:4f:62:ae:8a:c6:cd:e6:c4:be:
e0:0f:e7:39:58:5e:63:66:cb:5a:02:83:8a:15:ca:
80:69:08:5e:6f:b9:26:1a:97:f8:11:09:ba:8f:8c:
ee:f8:10:3f:0c:37:c0:0a:aa:83:d8:71:58:82:bc:
a5:a4:6b:01:52:a2:d1:ce:76:3b:83:3e:93:0b:27:
28:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0E:AC:85:0B:DD:2C:E7:E6:63:0F:A7:06:F2:B2:4B:9A:45:7B:12
X509v3 Authority Key Identifier:
keyid:3C:8A:04:98:EC:3B:4E:B4:4F:4D:F2:54:1A:E3:91:80:AB:B6:5F:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:60:8d:c2:06:96:4f:d1:57:d4:46:b9:94:5e:cb:ec:9c:07:
e9:0f:73:e9:f8:84:a3:23:01:24:08:02:b4:0f:be:61:7b:25:
5e:0b:0c:6e:ee:7d:70:5c:da:79:07:fd:7b:e9:1a:9e:86:18:
ae:c3:67:1f:74:a0:bd:18:55:91:4c:81:34:06:42:89:eb:a2:
fc:48:ce:24:8a:54:bd:0f:16:71:db:fc:0e:4b:64:98:6c:21:
87:fc:a9:33:31:72:30:37:58:b4:cc:06:80:f2:77:23:a7:ea:
81:bf:ff:b7:00:2e:6f:18:5a:79:fc:f2:35:52:9d:c2:5b:5f:
68:09:d6:4e:5b:de:9b:e7:f9:12:d1:8c:37:b2:81:d8:cf:01:
25:ff:19:c0:d2:46:9d:75:36:4e:fb:8d:67:50:34:48:fc:78:
10:01:85:13:89:8e:30:ad:82:5e:99:b6:d6:16:00:53:1d:7c:
7c:ed:25:b1:98:4d:90:a0:54:c5:b7:1a:ea:c4:cd:9f:24:b1:
f1:0d:27:d4:ec:b6:b2:26:2b:86:6c:46:c2:42:07:c5:4f:e7:
06:8b:45:25:e4:33:19:f4:29:23:82:59:b1:ae:10:8d:13:37:
3d:03:2e:f6:2c:b3:ee:c0:f9:9b:e5:96:9e:bc:69:2e:80:67:
3e:64:e1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:46:05 2025 by rpki-client