Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
File: pJMvpJVkpXamFD5F-BVmjyANdjc.mft (raw, json)
Hash identifier: 9o5ztO+SxQTQXKDggUcrJ1kAKLfGGGPaWRgH6dR+bac=
Subject key identifier: 84:E4:5F:9E:04:D2:BC:33:E8:55:B4:DE:F1:DB:AF:E9:6D:B8:4F:67
Authority key identifier: A4:93:2F:A4:95:64:A5:76:A6:14:3E:45:F8:15:66:8F:20:0D:76:37
Certificate issuer: /CN=a4932fa49564a576a6143e45f815668f200d7637
Certificate serial: 019A71808CDC707EE21BDB7C92F672DD46C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
Manifest number: 07CB
Signing time: Tue 11 Nov 2025 06:00:41 +0000
Manifest this update: Tue 11 Nov 2025 06:00:41 +0000
Manifest next update: Wed 12 Nov 2025 06:00:41 +0000
Files and hashes: 1: iSvukQiHuclGtd8pfRMbiEnBLFw.roa (hash: vbZa2xzxuysE29r0DoXtqTPn6Mvw10H9Gc8C3jS/Yw8=)
2: pJMvpJVkpXamFD5F-BVmjyANdjc.crl (hash: /lYXeFOu2fCND15Klb2EqHZO9QcPx0hq73aakj2csHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:8c:dc:70:7e:e2:1b:db:7c:92:f6:72:dd:46:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4932fa49564a576a6143e45f815668f200d7637
Validity
Not Before: Nov 11 06:00:41 2025 GMT
Not After : Nov 12 06:00:41 2025 GMT
Subject: CN=84e45f9e04d2bc33e855b4def1dbafe96db84f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:00:07:b7:4f:9d:2b:27:52:14:28:90:cd:da:
55:9e:8d:9b:c9:34:d7:3f:ea:eb:68:41:d5:23:00:
64:47:54:2a:2a:44:87:36:47:c9:4e:5d:1f:0e:e7:
72:53:5b:a2:56:26:b2:32:77:ea:67:7b:f2:b9:df:
43:c4:2e:33:ff:f8:21:dc:fa:52:62:3a:a1:f7:af:
e0:e3:5b:28:ba:5a:62:5a:b3:82:12:14:fb:b4:2c:
b0:10:12:a2:5a:3b:82:66:b0:44:34:37:9c:14:74:
7d:fc:88:91:1b:13:28:f8:1b:22:a9:66:19:d1:cf:
c9:fa:dd:9a:cd:61:bb:72:e8:52:e8:88:3b:3b:29:
c6:7b:92:bf:27:34:cb:9d:17:85:c3:74:07:27:53:
7d:a6:86:9c:2c:85:8e:8e:a6:4f:a6:e5:0e:00:32:
82:b2:f3:b0:25:03:bc:14:79:71:7b:7c:62:20:b4:
50:c7:34:2b:3c:d9:70:cd:c4:c1:28:c2:8b:7b:93:
5e:09:ce:83:de:5c:04:b5:67:8d:3e:0b:77:4d:9f:
23:4d:18:18:c4:55:a6:e5:4a:50:84:52:3b:4d:6e:
3e:bf:17:4f:77:10:db:f0:f3:2c:7e:7b:a1:96:b5:
ad:d6:fb:a1:35:ea:95:71:40:51:32:63:67:e1:a4:
ae:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E4:5F:9E:04:D2:BC:33:E8:55:B4:DE:F1:DB:AF:E9:6D:B8:4F:67
X509v3 Authority Key Identifier:
keyid:A4:93:2F:A4:95:64:A5:76:A6:14:3E:45:F8:15:66:8F:20:0D:76:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d6:72:ed:e5:29:6d:ca:15:14:9b:de:19:4d:7b:96:e2:04:
61:fb:0a:7f:86:34:46:f1:b1:11:c4:74:4a:4f:37:bf:2c:65:
41:58:6d:14:51:45:ef:a6:df:82:68:08:51:e6:41:ed:7c:70:
99:9b:28:22:fa:dc:91:0b:71:c0:bc:b3:29:90:1d:ff:e9:47:
77:44:35:f7:d8:a7:ba:18:db:fc:bd:65:f7:4a:01:af:7e:43:
e3:d9:47:d9:d6:b2:68:1d:85:1a:54:0b:95:b1:94:e3:66:a3:
1b:61:d0:23:17:23:4f:d5:d1:d5:21:6c:d6:f3:32:a6:1b:58:
e2:14:0c:50:10:88:71:93:4b:e4:c2:7a:22:17:25:1d:1a:89:
ab:97:71:02:60:51:e8:07:6a:fb:32:e6:a7:5e:97:0a:cb:84:
50:9b:25:5e:05:9e:61:fe:13:2e:c4:fe:92:26:3f:b8:b6:9f:
df:31:2a:31:d4:66:67:41:07:13:bb:51:cb:0c:6d:a1:63:35:
d6:af:ba:a3:da:3c:3a:be:b6:ab:cc:38:0a:14:89:0f:af:45:
0a:96:69:fb:3b:0c:ea:fb:2b:17:f5:2a:40:f5:9b:3e:14:a4:
af:7f:0e:fd:97:3d:1a:e6:b7:89:f5:cd:4a:1a:b8:a5:f8:a4:
a7:67:4e:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxgIzccH7iG9t8kvZy3UbJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OTMyZmE0OTU2NGE1NzZhNjE0M2U0NWY4MTU2NjhmMjAw
ZDc2MzcwHhcNMjUxMTExMDYwMDQxWhcNMjUxMTEyMDYwMDQxWjAzMTEwLwYDVQQD
Eyg4NGU0NWY5ZTA0ZDJiYzMzZTg1NWI0ZGVmMWRiYWZlOTZkYjg0ZjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgAHt0+dKydSFCiQzdpVno2byTTX
P+rraEHVIwBkR1QqKkSHNkfJTl0fDudyU1uiViayMnfqZ3vyud9DxC4z//gh3PpS
Yjqh96/g41soulpiWrOCEhT7tCywEBKiWjuCZrBENDecFHR9/IiRGxMo+BsiqWYZ
0c/J+t2azWG7cuhS6Ig7OynGe5K/JzTLnReFw3QHJ1N9poacLIWOjqZPpuUOADKC
svOwJQO8FHlxe3xiILRQxzQrPNlwzcTBKMKLe5NeCc6D3lwEtWeNPgt3TZ8jTRgY
xFWm5UpQhFI7TW4+vxdPdxDb8PMsfnuhlrWt1vuhNeqVcUBRMmNn4aSuzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITkX54E0rwz6FW03vHbr+ltuE9nMB8GA1UdIwQY
MBaAFKSTL6SVZKV2phQ+RfgVZo8gDXY3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEpNdnBKVmtwWGFtRkQ1Ri1CVm1qeUFOZGpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8wNGFiNDYtODNmMy00MTViLTg4M2Et
YzdjMzI2ZDdhMzY0LzEvcEpNdnBKVmtwWGFtRkQ1Ri1CVm1qeUFOZGpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8wNGFiNDYtODNmMy00MTViLTg4M2EtYzdjMzI2ZDdhMzY0
LzEvcEpNdnBKVmtwWGFtRkQ1Ri1CVm1qeUFOZGpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYdZy7eUp
bcoVFJveGU17luIEYfsKf4Y0RvGxEcR0Sk83vyxlQVhtFFFF76bfgmgIUeZB7Xxw
mZsoIvrckQtxwLyzKZAd/+lHd0Q199inuhjb/L1l90oBr35D49lH2dayaB2FGlQL
lbGU42ajG2HQIxcjT9XR1SFs1vMyphtY4hQMUBCIcZNL5MJ6IhclHRqJq5dxAmBR
6Adq+zLmp16XCsuEUJslXgWeYf4TLsT+kiY/uLaf3zEqMdRmZ0EHE7tRywxtoWM1
1q+6o9o8Or62q8w4ChSJD69FCpZp+zsM6vsrF/UqQPWbPhSkr38O/Zc9Gua3ifXN
Shq4pfikp2dO1g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:44 2025 by rpki-client