Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft
File: pFIjl-wNFJkgGvD6nqKgS31c-mo.mft (raw, json)
Hash identifier: OHs6RHxx3GQEqLFhxK+IevtSSIUBwtv82M9tEMVP0L8=
Subject key identifier: 9B:D7:F4:53:F7:48:D3:02:A0:3D:90:83:D4:FE:DF:88:40:19:60:7A
Authority key identifier: A4:52:23:97:EC:0D:14:99:20:1A:F0:FA:9E:A2:A0:4B:7D:5C:FA:6A
Certificate issuer: /CN=a4522397ec0d1499201af0fa9ea2a04b7d5cfa6a
Certificate serial: 019A714A37F1E34B80FA2B842637EA92188E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFIjl-wNFJkgGvD6nqKgS31c-mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft
Manifest number: 0407
Signing time: Tue 11 Nov 2025 05:01:20 +0000
Manifest this update: Tue 11 Nov 2025 05:01:20 +0000
Manifest next update: Wed 12 Nov 2025 05:01:20 +0000
Files and hashes: 1: T73zcHs6Ep_CKwJnLjzUI2Lqk64.roa (hash: Q3Y+VkwX2oMhKJhHjrJ53ij+knYpPf4svYxgdosIZGQ=)
2: pFIjl-wNFJkgGvD6nqKgS31c-mo.crl (hash: IRqougG0gyxvRGVLPevqShldrGA8RLDJOjq59SGklfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFIjl-wNFJkgGvD6nqKgS31c-mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:37:f1:e3:4b:80:fa:2b:84:26:37:ea:92:18:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4522397ec0d1499201af0fa9ea2a04b7d5cfa6a
Validity
Not Before: Nov 11 05:01:20 2025 GMT
Not After : Nov 12 05:01:20 2025 GMT
Subject: CN=9bd7f453f748d302a03d9083d4fedf884019607a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2b:89:f2:2a:2c:07:a3:e8:b5:2a:9f:3a:67:
7f:d9:6f:5a:a4:c9:93:96:74:44:a3:d1:75:58:79:
90:39:44:07:84:e3:90:42:52:f3:c6:4e:cc:dd:89:
36:da:6f:0a:9d:da:8b:f8:72:b4:ac:31:86:a3:b5:
31:4d:c9:0c:37:d7:30:96:0f:e2:22:6a:31:ad:e3:
da:f4:fc:b1:e0:9e:e6:75:82:d6:6b:18:14:dc:d0:
4d:4c:52:21:40:11:f3:1c:db:02:31:f3:ef:1c:a8:
f1:8d:07:85:b8:0b:45:22:c4:f2:db:97:b6:a5:11:
d9:dc:ec:51:a4:a1:96:cf:c5:69:9e:f2:6a:77:45:
23:1d:44:e4:91:60:fd:6a:19:0f:a3:93:06:b7:e9:
15:d2:d6:4a:f7:2f:d2:5a:45:b7:8c:cf:58:d5:1b:
ef:06:78:29:9c:52:e3:ed:6d:2b:3a:d8:f7:9d:aa:
f6:d7:7d:30:fe:ca:79:e4:0a:20:47:0d:61:d5:55:
e6:60:00:20:53:b1:0e:07:0a:ef:59:c7:18:ed:73:
bd:13:16:eb:b0:24:80:1e:ed:94:87:ee:e5:50:f9:
91:93:cf:d9:e0:fd:74:27:99:a4:cf:b5:13:58:a6:
7c:83:92:f6:b1:1e:1e:f8:e6:93:77:5d:43:19:27:
d6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D7:F4:53:F7:48:D3:02:A0:3D:90:83:D4:FE:DF:88:40:19:60:7A
X509v3 Authority Key Identifier:
keyid:A4:52:23:97:EC:0D:14:99:20:1A:F0:FA:9E:A2:A0:4B:7D:5C:FA:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFIjl-wNFJkgGvD6nqKgS31c-mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:07:17:d6:85:25:2a:95:fe:b8:0a:ec:d2:f4:2e:84:f1:3a:
4e:d8:8c:50:a4:2a:10:b2:39:97:0e:88:89:55:1d:98:5d:90:
11:33:d8:b7:3f:4e:15:7b:52:6e:3f:73:ff:9f:6f:4e:35:0f:
df:5e:e8:e4:e7:8d:3e:a3:02:39:6a:0f:83:26:f8:5a:c8:16:
ba:f1:93:a4:86:15:47:a3:8c:4b:ec:e0:66:5a:2e:bd:24:4e:
3a:d6:e2:fd:bf:92:6f:b5:f9:3c:db:48:5f:1a:df:fc:1b:bf:
d8:b4:a3:a6:89:30:31:fb:ff:9d:88:a8:b6:06:30:ba:b9:41:
db:91:79:b2:2d:42:fc:14:35:8e:df:bd:ec:d4:b1:07:90:5d:
ac:62:fc:dd:ea:76:69:7d:41:89:85:8a:43:2b:38:67:79:27:
96:44:e3:c7:18:e5:46:39:37:0f:c2:0b:17:12:8c:98:8f:2a:
8f:1d:51:0f:1d:33:00:82:13:71:e6:63:5c:a2:4d:15:1d:4e:
79:fc:08:d0:22:5c:84:20:29:0e:c6:54:66:b7:be:5d:df:5e:
2d:f9:e6:57:33:6b:79:89:68:56:60:2d:0d:35:9a:2b:36:16:
80:05:e1:2a:22:97:26:2b:47:33:1f:f4:d1:21:49:95:fc:1e:
cc:ea:52:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSjfx40uA+iuEJjfqkhiOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NTIyMzk3ZWMwZDE0OTkyMDFhZjBmYTllYTJhMDRiN2Q1
Y2ZhNmEwHhcNMjUxMTExMDUwMTIwWhcNMjUxMTEyMDUwMTIwWjAzMTEwLwYDVQQD
Eyg5YmQ3ZjQ1M2Y3NDhkMzAyYTAzZDkwODNkNGZlZGY4ODQwMTk2MDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCuJ8iosB6PotSqfOmd/2W9apMmT
lnREo9F1WHmQOUQHhOOQQlLzxk7M3Yk22m8KndqL+HK0rDGGo7UxTckMN9cwlg/i
ImoxrePa9Pyx4J7mdYLWaxgU3NBNTFIhQBHzHNsCMfPvHKjxjQeFuAtFIsTy25e2
pRHZ3OxRpKGWz8VpnvJqd0UjHUTkkWD9ahkPo5MGt+kV0tZK9y/SWkW3jM9Y1Rvv
BngpnFLj7W0rOtj3nar2130w/sp55AogRw1h1VXmYAAgU7EOBwrvWccY7XO9Exbr
sCSAHu2Uh+7lUPmRk8/Z4P10J5mkz7UTWKZ8g5L2sR4e+OaTd11DGSfWUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvX9FP3SNMCoD2Qg9T+34hAGWB6MB8GA1UdIwQY
MBaAFKRSI5fsDRSZIBrw+p6ioEt9XPpqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEZJamwtd05GSmtnR3ZENm5xS2dTMzFjLW1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9mNjkyZGYtZmY2Ny00NjU1LThkODgt
ZmVjMDRjNDk1NTAyLzEvcEZJamwtd05GSmtnR3ZENm5xS2dTMzFjLW1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9mNjkyZGYtZmY2Ny00NjU1LThkODgtZmVjMDRjNDk1NTAy
LzEvcEZJamwtd05GSmtnR3ZENm5xS2dTMzFjLW1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANgcX1oUl
KpX+uArs0vQuhPE6TtiMUKQqELI5lw6IiVUdmF2QETPYtz9OFXtSbj9z/59vTjUP
317o5OeNPqMCOWoPgyb4WsgWuvGTpIYVR6OMS+zgZlouvSROOtbi/b+Sb7X5PNtI
Xxrf/Bu/2LSjpokwMfv/nYiotgYwurlB25F5si1C/BQ1jt+97NSxB5BdrGL83ep2
aX1BiYWKQys4Z3knlkTjxxjlRjk3D8ILFxKMmI8qjx1RDx0zAIITceZjXKJNFR1O
efwI0CJchCApDsZUZre+Xd9eLfnmVzNreYloVmAtDTWaKzYWgAXhKiKXJitHMx/0
0SFJlfwezOpSkw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:47 2025 by rpki-client