Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
File: PZijti1aux3K9oriP1Me6CJA8gM.mft (raw, json)
Hash identifier: VhpFpduftecTSMwM3hpOsv9rK+T+joZBt75SDnge4P8=
Subject key identifier: 21:A3:71:24:D9:8B:28:A6:C0:09:50:5F:FC:95:37:78:02:D8:19:8F
Authority key identifier: 3D:98:A3:B6:2D:5A:BB:1D:CA:F6:8A:E2:3F:53:1E:E8:22:40:F2:03
Certificate issuer: /CN=3d98a3b62d5abb1dcaf68ae23f531ee82240f203
Certificate serial: 019A71B7B2F33E76AED8B8AD2CAA3E68DF71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
Manifest number: 100E
Signing time: Tue 11 Nov 2025 07:00:55 +0000
Manifest this update: Tue 11 Nov 2025 07:00:55 +0000
Manifest next update: Wed 12 Nov 2025 07:00:55 +0000
Files and hashes: 1: K5-cWJf7kTmzFiV3mE-MumP7Txo.roa (hash: d5nxq53iT7Tr8Pdp2k4UnWi9qs3VVT6d+if6Hmi6IVQ=)
2: PZijti1aux3K9oriP1Me6CJA8gM.crl (hash: mdV1RyZrK8fv9bfBEA3TTIzNj5DNPSBCfigtn6AIt0Q=)
3: _TX8C92dziQpbg1kfvVVdJSGVvw.roa (hash: M6n2mPn45LSDUrpQyadpeXypeAt/8VqRu1J7jMmEfG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:b2:f3:3e:76:ae:d8:b8:ad:2c:aa:3e:68:df:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d98a3b62d5abb1dcaf68ae23f531ee82240f203
Validity
Not Before: Nov 11 07:00:55 2025 GMT
Not After : Nov 12 07:00:55 2025 GMT
Subject: CN=21a37124d98b28a6c009505ffc95377802d8198f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e1:73:2a:55:1c:54:6f:05:cb:f4:70:dc:dd:
35:e8:80:fa:eb:b8:d4:0f:10:08:db:19:be:a6:5c:
e4:d1:64:76:c4:8d:7a:3e:e5:13:3a:1a:cb:ad:6a:
d4:b4:9e:24:0d:50:79:73:2d:ea:15:6b:7b:6a:f0:
7e:9d:88:80:3c:09:43:84:69:10:8b:63:a2:d2:f0:
9c:df:da:3c:24:9b:17:61:d7:54:9e:bf:e7:0a:b0:
9a:e0:21:1b:d2:e9:8b:9b:3b:fe:aa:e2:2a:fb:17:
ca:c6:42:39:18:44:0a:2e:9c:1a:56:c5:fe:56:8c:
b8:e4:72:9d:dc:be:b7:22:e1:d6:1c:8d:e5:a0:94:
c2:f1:34:1c:c8:ab:7c:9f:35:2e:7e:dd:e7:6f:3d:
90:7b:a0:58:93:c1:ca:ca:27:03:05:35:89:25:9f:
f9:91:c3:ab:b0:62:27:1d:d8:b3:d9:3d:19:21:4b:
7e:c9:d5:1f:70:c1:0f:ea:4c:19:3c:66:91:0d:71:
6d:a5:fc:9b:f7:17:7c:49:33:ba:4c:6e:86:ce:d2:
26:3a:6e:75:37:1c:46:4d:cc:86:85:88:10:95:57:
c3:4e:1f:cb:65:d4:3a:93:15:d0:66:ea:ad:05:0e:
e3:e7:65:65:66:2c:73:e2:29:c0:44:09:f2:7a:ca:
6c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A3:71:24:D9:8B:28:A6:C0:09:50:5F:FC:95:37:78:02:D8:19:8F
X509v3 Authority Key Identifier:
keyid:3D:98:A3:B6:2D:5A:BB:1D:CA:F6:8A:E2:3F:53:1E:E8:22:40:F2:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:87:6e:03:63:c2:ee:18:8d:b2:93:0f:c9:6b:57:73:90:3a:
aa:01:de:e2:fc:87:e4:94:ec:b4:ad:dd:a3:ab:bd:f5:96:93:
3c:a4:ec:00:fc:82:4b:10:78:46:37:4f:64:a3:d5:25:03:ec:
39:45:97:a4:2d:88:c9:4c:8a:a3:00:75:fd:a0:be:08:82:f9:
2b:2a:df:ef:03:dd:a6:e4:e3:5b:9b:41:7e:04:de:28:fd:a9:
af:2b:5e:f0:3c:4f:32:b0:55:7e:1b:1c:fd:d9:54:24:55:f3:
84:cb:04:6f:29:0c:2f:c2:ec:c8:9c:6e:73:f4:a5:e3:bb:36:
3c:ab:a4:36:2c:23:a1:eb:7c:b3:90:51:4e:b7:01:dc:ec:2d:
27:f0:e3:19:d2:35:ea:42:d6:1b:86:d6:f6:d9:f5:b1:56:ad:
1c:75:d1:85:dc:a1:8d:98:b1:66:26:18:57:fd:5f:2b:05:c8:
61:73:21:2c:b5:df:23:28:86:23:a0:d6:7e:a0:17:fa:b3:83:
6d:10:53:ca:91:64:cc:ed:09:3d:b4:9d:40:18:54:b6:a3:12:
53:34:dd:78:19:b8:6e:0e:eb:5f:20:ef:ca:55:d5:f5:c3:97:
4b:ba:ad:3b:3c:a7:9d:af:02:5e:ce:91:d9:88:2e:0f:d6:9e:
a8:36:69:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt7LzPnau2LitLKo+aN9xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkOThhM2I2MmQ1YWJiMWRjYWY2OGFlMjNmNTMxZWU4MjI0
MGYyMDMwHhcNMjUxMTExMDcwMDU1WhcNMjUxMTEyMDcwMDU1WjAzMTEwLwYDVQQD
EygyMWEzNzEyNGQ5OGIyOGE2YzAwOTUwNWZmYzk1Mzc3ODAyZDgxOThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOFzKlUcVG8Fy/Rw3N016ID667jU
DxAI2xm+plzk0WR2xI16PuUTOhrLrWrUtJ4kDVB5cy3qFWt7avB+nYiAPAlDhGkQ
i2Oi0vCc39o8JJsXYddUnr/nCrCa4CEb0umLmzv+quIq+xfKxkI5GEQKLpwaVsX+
Voy45HKd3L63IuHWHI3loJTC8TQcyKt8nzUuft3nbz2Qe6BYk8HKyicDBTWJJZ/5
kcOrsGInHdiz2T0ZIUt+ydUfcMEP6kwZPGaRDXFtpfyb9xd8STO6TG6GztImOm51
NxxGTcyGhYgQlVfDTh/LZdQ6kxXQZuqtBQ7j52VlZixz4inARAnyespsVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCGjcSTZiyimwAlQX/yVN3gC2BmPMB8GA1UdIwQY
MBaAFD2Yo7YtWrsdyvaK4j9THugiQPIDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFppanRpMWF1eDNLOW9yaVAxTWU2Q0pBOGdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9hYzVmZGYtNWI2Ni00ODUwLTk2M2Et
ZjliNzNiM2UzZWVlLzEvUFppanRpMWF1eDNLOW9yaVAxTWU2Q0pBOGdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9hYzVmZGYtNWI2Ni00ODUwLTk2M2EtZjliNzNiM2UzZWVl
LzEvUFppanRpMWF1eDNLOW9yaVAxTWU2Q0pBOGdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgoduA2PC
7hiNspMPyWtXc5A6qgHe4vyH5JTstK3do6u99ZaTPKTsAPyCSxB4RjdPZKPVJQPs
OUWXpC2IyUyKowB1/aC+CIL5Kyrf7wPdpuTjW5tBfgTeKP2pryte8DxPMrBVfhsc
/dlUJFXzhMsEbykML8LsyJxuc/Sl47s2PKukNiwjoet8s5BRTrcB3OwtJ/DjGdI1
6kLWG4bW9tn1sVatHHXRhdyhjZixZiYYV/1fKwXIYXMhLLXfIyiGI6DWfqAX+rOD
bRBTypFkzO0JPbSdQBhUtqMSUzTdeBm4bg7rXyDvylXV9cOXS7qtOzynna8CXs6R
2YguD9aeqDZpBg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:23 2025 by rpki-client