Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
File: pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft (raw, json)
Hash identifier: aDfgMJAuxWOL0jWPQoHrmyVbjZsQbM/DK0elg6UbSM8=
Subject key identifier: 70:D5:83:F2:28:5B:F0:C8:96:87:94:54:F7:9E:18:BB:85:B0:3B:B9
Authority key identifier: A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
Certificate issuer: /CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Certificate serial: 019A1ACF9A4BB1398CD6855A947B6AE9ACC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
Manifest number: 16F7
Signing time: Sat 25 Oct 2025 10:00:04 +0000
Manifest this update: Sat 25 Oct 2025 10:00:04 +0000
Manifest next update: Sun 26 Oct 2025 10:00:04 +0000
Files and hashes: 1: 1-Rh4xR4UjkOh8VqSY4pK4d1pRds.roa (hash: x3ETC4RsRxr7b/UEU+/7lhOsihrtUte3yh6z17TAj9w=)
2: GISiwDWwkN55w-OPn4qwRSweA84.roa (hash: HIcUUP5vEFNT3gS3RcoPzA6F9bPL2QzZ521VNaxnhks=)
3: kT-9aZ8PqlfT-VcjyzgIGjoK45k.roa (hash: GXEy5f6ZMAPtdjysI4zwNtCcC/imdXdb1ZPEUBC58HA=)
4: lXukILbe6VXJ7h_Wf9WW21z12mw.roa (hash: +Zzql9kBnSussoen1LHmVUwZhXfkIG96Hh/jt0AAOuY=)
5: llr3G6G5AM7M10tmA9xFiPTyO0Y.roa (hash: iQGQsp8WoDcGM5vwoYe4dx6kdl9hCiwMrIHoYkwEWK0=)
6: pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl (hash: SYZND7Zu3qpa9aZpLwT1LhRgfKLqnO96aheXmBc2Gjc=)
7: rKCFva5BURgPwYBY7AhhhAP1WfI.roa (hash: yPJLL1iPDAh4jC5sDkvBCraLd8BwdjLiqxgvyLndKHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:cf:9a:4b:b1:39:8c:d6:85:5a:94:7b:6a:e9:ac:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Validity
Not Before: Oct 25 10:00:04 2025 GMT
Not After : Oct 26 10:00:04 2025 GMT
Subject: CN=70d583f2285bf0c896879454f79e18bb85b03bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:55:b0:ee:b2:27:0e:a7:6e:4c:f8:89:d5:f7:
77:50:e7:d2:3d:f9:c1:74:7c:2c:ca:59:74:d7:95:
bf:33:a1:75:1b:b2:9c:7a:43:da:44:b4:7e:36:c8:
3f:17:69:40:7f:14:ef:d9:7e:8b:89:25:4f:b8:62:
ec:b1:ba:24:d3:f7:23:11:d3:58:1a:ee:74:e5:53:
e1:ef:0c:0f:6c:0c:d8:33:b5:15:19:a6:bb:cd:ec:
33:8f:a8:8c:a0:a0:d0:4d:42:c2:2c:28:80:51:fa:
a1:32:b0:14:08:9b:25:93:00:c1:e0:a6:e1:a4:60:
d6:ec:e5:d9:8b:cc:22:e3:b2:0e:87:36:ee:5f:b5:
cc:03:62:63:41:c3:b7:15:6f:f9:27:83:06:45:1c:
9a:84:2f:2b:d6:2e:77:0c:82:dc:6e:c6:ef:fb:57:
ff:ef:2b:95:76:85:13:ab:57:3e:0b:07:05:2b:46:
82:34:fe:0c:5b:07:b1:30:ad:4f:3e:22:d9:1c:8d:
de:97:bb:49:e7:96:07:d6:f4:8b:ab:5f:90:32:fd:
8c:25:92:40:a2:07:84:fe:0b:76:4a:af:de:2a:45:
ba:9b:c7:44:24:ce:ca:fa:1e:98:6a:13:96:da:b1:
20:eb:5f:78:d7:2b:11:99:f8:5d:5e:c6:b6:f6:ac:
9f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D5:83:F2:28:5B:F0:C8:96:87:94:54:F7:9E:18:BB:85:B0:3B:B9
X509v3 Authority Key Identifier:
keyid:A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:69:13:45:13:86:bf:10:5e:79:e7:d3:d8:23:67:bc:ee:c7:
24:8d:16:8f:68:c4:cf:f3:0e:3c:5e:51:1d:df:7b:98:e1:50:
b8:d7:cb:8c:17:cc:80:06:b1:0a:e6:69:d6:b2:5f:74:34:92:
89:b6:94:2f:03:3c:0c:80:db:8a:5f:df:4c:3f:7f:42:5c:2b:
ac:60:fc:ad:0b:fc:de:e6:7b:93:b8:99:80:b3:3d:66:35:ad:
cc:65:78:46:70:ad:ad:2e:ca:01:5d:d8:20:dd:f9:74:49:5a:
04:e0:a8:01:9d:8b:c2:72:47:ef:5b:46:94:75:2e:21:c4:3d:
b4:14:da:26:cd:17:b8:2f:09:47:e9:2d:fa:e0:3e:c8:87:70:
2f:db:92:f4:0f:76:69:fe:07:e6:de:27:65:05:0f:c9:4e:66:
36:4f:ee:39:b9:49:35:d0:56:e1:0d:a5:74:54:a7:55:89:4b:
73:6b:c7:f4:00:c8:9d:95:0d:2c:a6:b9:44:eb:7d:7f:51:1d:
a8:6f:c2:72:5c:f6:10:6e:cc:a2:4b:ed:8f:54:1b:80:fa:fc:
3b:dd:a7:d0:68:0c:54:17:bf:6f:a9:f8:0c:be:40:1e:26:dd:
17:10:1b:ea:e7:27:db:bc:93:4c:69:86:5f:12:e1:c3:9c:e3:
ec:82:2e:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoaz5pLsTmM1oValHtq6azEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OTk5MDNkYWI4NWY2YTU5NzcyYjNlZGZkNGJmMGU0OTFh
ZjU3YzQwHhcNMjUxMDI1MTAwMDA0WhcNMjUxMDI2MTAwMDA0WjAzMTEwLwYDVQQD
Eyg3MGQ1ODNmMjI4NWJmMGM4OTY4Nzk0NTRmNzllMThiYjg1YjAzYmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lWw7rInDqduTPiJ1fd3UOfSPfnB
dHwsyll015W/M6F1G7KcekPaRLR+Nsg/F2lAfxTv2X6LiSVPuGLssbok0/cjEdNY
Gu505VPh7wwPbAzYM7UVGaa7zewzj6iMoKDQTULCLCiAUfqhMrAUCJslkwDB4Kbh
pGDW7OXZi8wi47IOhzbuX7XMA2JjQcO3FW/5J4MGRRyahC8r1i53DILcbsbv+1f/
7yuVdoUTq1c+CwcFK0aCNP4MWwexMK1PPiLZHI3el7tJ55YH1vSLq1+QMv2MJZJA
ogeE/gt2Sq/eKkW6m8dEJM7K+h6YahOW2rEg61941ysRmfhdXsa29qyf5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDVg/IoW/DIloeUVPeeGLuFsDu5MB8GA1UdIwQY
MBaAFKSZkD2rhfall3Kz7f1L8OSRr1fEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEptUVBhdUY5cVdYY3JQdF9Vdnc1Skd2VjhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC84ZWRhOWEtZDEzYy00NDMwLThjZjQt
NTdlYzEyZTg2NDFlLzEvcEptUVBhdUY5cVdYY3JQdF9Vdnc1Skd2VjhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC84ZWRhOWEtZDEzYy00NDMwLThjZjQtNTdlYzEyZTg2NDFl
LzEvcEptUVBhdUY5cVdYY3JQdF9Vdnc1Skd2VjhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABmkTRROG
vxBeeefT2CNnvO7HJI0Wj2jEz/MOPF5RHd97mOFQuNfLjBfMgAaxCuZp1rJfdDSS
ibaULwM8DIDbil/fTD9/QlwrrGD8rQv83uZ7k7iZgLM9ZjWtzGV4RnCtrS7KAV3Y
IN35dElaBOCoAZ2LwnJH71tGlHUuIcQ9tBTaJs0XuC8JR+kt+uA+yIdwL9uS9A92
af4H5t4nZQUPyU5mNk/uOblJNdBW4Q2ldFSnVYlLc2vH9ADInZUNLKa5ROt9f1Ed
qG/Cclz2EG7Mokvtj1QbgPr8O92n0GgMVBe/b6n4DL5AHibdFxAb6ucn27yTTGmG
XxLhw5zj7IIuEw==
-----END CERTIFICATE-----
Generated at Sat Oct 25 13:41:39 2025 by rpki-client