Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
File: pAoIH7qPsz77RiWe-T9oeNcBUOs.mft (raw, json)
Hash identifier: TpaQp1oBqWVnRozyg1NXw6LuSN07dv0xo/ZN7WYtH7E=
Subject key identifier: 6F:6B:FF:6F:8F:87:49:2A:29:7A:C6:54:1E:F3:23:6B:7F:9B:41:FA
Authority key identifier: A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
Certificate issuer: /CN=a40a081fba8fb33efb46259ef93f6878d70150eb
Certificate serial: 019A0711F2C3F5F796BDEDEA0486C5E26698
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
Manifest number: 0C44
Signing time: Tue 21 Oct 2025 14:00:07 +0000
Manifest this update: Tue 21 Oct 2025 14:00:07 +0000
Manifest next update: Wed 22 Oct 2025 14:00:07 +0000
Files and hashes: 1: YA2knZBu4eCfckA4blXB6sNuHgY.roa (hash: shDh2slGwfDF1H72vnxsQTQ+XE9meHhIbU3+zi7hhrg=)
2: da6BAAfAoBTasYkztEyeFbO3dYM.roa (hash: svpwmdWuctN25b8D5PcCmhJa0TO40FFmvswQDucJFfQ=)
3: pAoIH7qPsz77RiWe-T9oeNcBUOs.crl (hash: wAhFWJA2GtBPeGh+N7bh2Rda2OnpafY6rcALi0UcF5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:11:f2:c3:f5:f7:96:bd:ed:ea:04:86:c5:e2:66:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a40a081fba8fb33efb46259ef93f6878d70150eb
Validity
Not Before: Oct 21 14:00:07 2025 GMT
Not After : Oct 22 14:00:07 2025 GMT
Subject: CN=6f6bff6f8f87492a297ac6541ef3236b7f9b41fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:29:6e:03:ff:a2:29:ad:e3:03:0c:76:b9:d9:
c2:db:4c:e5:d9:a8:3a:ce:e1:1e:0d:13:c9:5e:a2:
74:6b:59:00:ba:25:bf:06:9c:25:ef:38:a8:f8:4e:
ea:35:8e:7f:56:2a:1d:2d:46:b9:81:fa:16:10:cd:
02:08:ea:b2:c3:ea:e6:5e:6e:4d:96:72:be:ea:69:
64:dd:03:dc:0d:f6:09:cb:1e:bb:af:81:39:7c:65:
6d:72:69:ac:ae:1c:3f:3e:0d:e7:1e:ce:6f:7e:0d:
9e:88:59:56:b6:0a:2a:d4:17:ab:cf:1a:61:10:b9:
5a:a4:30:94:01:1b:a4:70:83:6e:69:01:16:1f:e1:
2e:02:2b:da:19:0e:49:83:90:87:02:36:29:e0:20:
de:4c:35:ce:7a:bf:00:8a:21:2d:3b:b9:f0:a9:27:
1b:f5:ee:ab:eb:58:a2:cd:0f:7f:23:f0:62:e8:97:
85:0d:26:8a:58:b7:db:67:e3:5f:90:c9:5c:2c:09:
67:f6:f8:35:aa:91:02:7b:c9:66:e4:a0:58:ee:cb:
1c:cb:83:4e:4a:1f:76:b8:03:ff:6b:3f:50:9f:f3:
29:6c:56:19:7b:c2:51:89:88:2b:07:1a:73:6b:7c:
24:a5:ec:80:d0:55:a2:7c:01:76:c8:a3:41:9f:7c:
36:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6B:FF:6F:8F:87:49:2A:29:7A:C6:54:1E:F3:23:6B:7F:9B:41:FA
X509v3 Authority Key Identifier:
keyid:A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b3:17:db:68:35:a6:e5:73:0b:5a:38:ad:df:0f:3d:5d:8d:
b0:fa:01:ad:28:49:c0:93:5f:75:89:fc:f3:b1:db:82:39:d1:
88:be:72:31:52:6f:b0:00:c8:d1:6e:05:36:e8:fc:5b:38:9d:
f3:9e:e2:f9:7b:40:b4:ff:14:d8:9a:dd:32:61:ed:1b:4d:80:
e5:ba:d2:2b:39:d2:5a:1e:8d:bb:e8:2b:32:e5:44:d8:75:25:
dd:0d:ef:d8:54:fe:19:5c:eb:09:c2:51:62:4a:cf:9c:f0:47:
68:54:95:df:17:ce:ee:a7:40:be:2f:8b:84:34:aa:8a:45:c9:
6d:fc:03:cd:15:07:1d:35:f7:29:9c:d6:af:62:ed:78:73:d4:
ca:6b:9f:85:08:70:0a:80:11:cb:5f:a1:73:3a:15:ef:4e:5f:
a4:22:96:f3:f2:24:f2:ec:46:bf:50:51:0d:1e:e3:84:57:0d:
b2:eb:55:71:73:40:e1:42:6b:e6:7d:ed:41:16:c0:c9:3f:23:
5a:cc:7b:41:3c:97:90:0d:47:5a:1d:d7:8a:b5:ee:be:9c:8a:
7b:6b:98:41:c3:80:12:9f:f5:7d:1f:fe:54:9f:6c:98:5b:c8:
6d:89:14:8d:df:4d:c5:98:a9:5f:06:75:02:47:2d:8f:f5:c1:
09:30:84:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoHEfLD9feWve3qBIbF4maYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MGEwODFmYmE4ZmIzM2VmYjQ2MjU5ZWY5M2Y2ODc4ZDcw
MTUwZWIwHhcNMjUxMDIxMTQwMDA3WhcNMjUxMDIyMTQwMDA3WjAzMTEwLwYDVQQD
Eyg2ZjZiZmY2ZjhmODc0OTJhMjk3YWM2NTQxZWYzMjM2YjdmOWI0MWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+iluA/+iKa3jAwx2udnC20zl2ag6
zuEeDRPJXqJ0a1kAuiW/Bpwl7zio+E7qNY5/ViodLUa5gfoWEM0CCOqyw+rmXm5N
lnK+6mlk3QPcDfYJyx67r4E5fGVtcmmsrhw/Pg3nHs5vfg2eiFlWtgoq1Berzxph
ELlapDCUARukcINuaQEWH+EuAivaGQ5Jg5CHAjYp4CDeTDXOer8AiiEtO7nwqScb
9e6r61iizQ9/I/Bi6JeFDSaKWLfbZ+NfkMlcLAln9vg1qpECe8lm5KBY7sscy4NO
Sh92uAP/az9Qn/MpbFYZe8JRiYgrBxpza3wkpeyA0FWifAF2yKNBn3w24QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9r/2+Ph0kqKXrGVB7zI2t/m0H6MB8GA1UdIwQY
MBaAFKQKCB+6j7M++0Ylnvk/aHjXAVDrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEFvSUg3cVBzejc3UmlXZS1UOW9lTmNCVU9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jYjI3YTAtOTRkMi00OWFhLTg1ZWEt
YWU5MWU0NjYyZDkzLzEvcEFvSUg3cVBzejc3UmlXZS1UOW9lTmNCVU9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9jYjI3YTAtOTRkMi00OWFhLTg1ZWEtYWU5MWU0NjYyZDkz
LzEvcEFvSUg3cVBzejc3UmlXZS1UOW9lTmNCVU9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYbMX22g1
puVzC1o4rd8PPV2NsPoBrShJwJNfdYn887HbgjnRiL5yMVJvsADI0W4FNuj8Wzid
857i+XtAtP8U2JrdMmHtG02A5brSKznSWh6Nu+grMuVE2HUl3Q3v2FT+GVzrCcJR
YkrPnPBHaFSV3xfO7qdAvi+LhDSqikXJbfwDzRUHHTX3KZzWr2LteHPUymufhQhw
CoARy1+hczoV705fpCKW8/Ik8uxGv1BRDR7jhFcNsutVcXNA4UJr5n3tQRbAyT8j
Wsx7QTyXkA1HWh3XirXuvpyKe2uYQcOAEp/1fR/+VJ9smFvIbYkUjd9NxZipXwZ1
Akctj/XBCTCEFw==
-----END CERTIFICATE-----
Generated at Tue Oct 21 20:19:30 2025 by rpki-client