Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.mft
File: pVz4nuVieX53WqTR0ffkX0Zqc8M.mft (raw, json)
Hash identifier: 85gj+3o20/BojSPcf5SYY8O+q/bdnFoEb43kmmDRBY4=
Subject key identifier: 12:17:FD:0E:3A:BB:E0:D9:65:97:E4:C5:89:4A:46:66:91:41:B5:10
Authority key identifier: A5:5C:F8:9E:E5:62:79:7E:77:5A:A4:D1:D1:F7:E4:5F:46:6A:73:C3
Certificate issuer: /CN=a55cf89ee562797e775aa4d1d1f7e45f466a73c3
Certificate serial: 019A299E7AD02DC85D2261343A63B52D84F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pVz4nuVieX53WqTR0ffkX0Zqc8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.mft
Manifest number: 0B3E
Signing time: Tue 28 Oct 2025 07:00:43 +0000
Manifest this update: Tue 28 Oct 2025 07:00:43 +0000
Manifest next update: Wed 29 Oct 2025 07:00:43 +0000
Files and hashes: 1: Jdv9KmbiFweBH7ZEt96_Rv7CyPg.roa (hash: ebLELH5oRyZKdj3cm3xGsR3F/jIoIGMnEcP8nrCpL+8=)
2: XgJMBh2hNxFsZKvQI54PTTXI760.roa (hash: UdEfAkLTD+qMIgaGI74a4ajbejj1YgoNe9s0PRF/Uus=)
3: cLGpimzWzwHzqIbopne7t52wISg.roa (hash: 9i9sbe7IcV9dEAByxfhmrcjdOqaaf18dgDnNY+xafnk=)
4: pVz4nuVieX53WqTR0ffkX0Zqc8M.crl (hash: CsAvJxLV0WISbHBItFi9UjG3vq6cFprBB1Ar0YnGiUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/pVz4nuVieX53WqTR0ffkX0Zqc8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:9e:7a:d0:2d:c8:5d:22:61:34:3a:63:b5:2d:84:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a55cf89ee562797e775aa4d1d1f7e45f466a73c3
Validity
Not Before: Oct 28 07:00:43 2025 GMT
Not After : Oct 29 07:00:43 2025 GMT
Subject: CN=1217fd0e3abbe0d96597e4c5894a46669141b510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1b:f1:b9:03:58:6a:86:60:88:ea:4b:7d:6a:
6a:08:73:e7:b5:41:4d:36:56:19:35:cd:49:77:4e:
de:05:6b:af:65:06:e6:78:a6:ec:e9:b4:c7:83:a7:
36:96:3a:a6:42:a7:29:52:7e:a5:01:9d:30:9b:b3:
20:be:93:a2:0d:28:53:c7:86:c9:3a:14:bd:b4:c5:
6d:9a:b9:e9:16:89:1b:fb:f3:ae:31:5e:c2:86:64:
06:ea:47:ed:72:95:f6:6e:f7:73:b4:a4:d8:0b:4a:
5d:01:6a:c8:13:43:dd:12:03:1b:46:32:a3:3f:b4:
50:d7:8b:5b:f7:b5:f2:67:62:68:f7:87:3f:31:e6:
32:f8:c3:38:85:77:b7:f4:57:19:95:c8:d0:25:dc:
f3:17:d6:c1:3c:2c:31:9b:6a:a0:c8:10:da:c2:36:
a0:70:48:cb:97:95:e0:b1:72:e4:7e:19:2c:80:40:
e7:e5:de:0f:81:90:cf:e6:82:bd:6b:61:bb:36:15:
23:22:46:7f:ea:19:26:72:0b:7e:30:7a:a3:06:78:
68:15:55:09:c6:cb:7a:85:b8:76:4e:73:09:84:76:
4b:c2:74:ab:75:6c:6d:77:e8:21:4d:09:12:57:19:
79:79:f2:9e:13:6c:c5:b2:69:8c:08:4b:fc:23:77:
88:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:17:FD:0E:3A:BB:E0:D9:65:97:E4:C5:89:4A:46:66:91:41:B5:10
X509v3 Authority Key Identifier:
keyid:A5:5C:F8:9E:E5:62:79:7E:77:5A:A4:D1:D1:F7:E4:5F:46:6A:73:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVz4nuVieX53WqTR0ffkX0Zqc8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:75:b0:1e:10:40:43:0c:8e:66:b0:f3:2e:99:87:b1:2d:dd:
f2:7e:bd:f8:d0:06:b4:81:ec:28:0e:74:9d:c5:89:a1:25:a8:
f5:c8:ab:bd:70:6a:72:60:33:4a:19:c8:50:1f:f6:c7:08:a0:
b5:b2:45:ed:5d:2b:93:ea:9b:22:26:3b:25:a3:10:67:55:c3:
18:85:64:bb:85:2f:08:50:80:a7:9e:ae:b9:22:74:a7:01:d0:
31:d0:0e:66:5e:e2:5d:0e:1b:1a:8f:f4:05:6e:04:22:56:09:
53:b4:bc:6c:45:0c:69:63:89:28:26:e7:95:6f:ec:32:59:03:
89:0a:d0:5b:1c:9f:9e:35:37:8d:e5:b1:23:3d:73:ee:e0:01:
af:6a:c7:45:6c:90:08:38:00:21:d4:56:6f:a4:e9:0a:a8:a9:
58:78:4d:c0:4a:51:11:70:a5:41:1f:fa:97:e1:45:c6:25:14:
ba:ea:ec:f3:64:98:02:7f:7b:fd:cb:cc:55:8a:cf:90:96:4a:
15:4c:eb:eb:b2:02:ca:b4:54:a7:1a:79:3e:48:d7:96:1d:7f:
cf:2b:21:4e:7d:cf:26:f9:e7:b4:d2:88:f2:75:99:1d:32:e6:
a3:88:dd:8f:3e:5d:b4:3d:58:42:2c:04:e8:e5:b9:c8:0a:4f:
8c:2e:5a:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZopnnrQLchdImE0OmO1LYTxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NWNmODllZTU2Mjc5N2U3NzVhYTRkMWQxZjdlNDVmNDY2
YTczYzMwHhcNMjUxMDI4MDcwMDQzWhcNMjUxMDI5MDcwMDQzWjAzMTEwLwYDVQQD
EygxMjE3ZmQwZTNhYmJlMGQ5NjU5N2U0YzU4OTRhNDY2NjkxNDFiNTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhvxuQNYaoZgiOpLfWpqCHPntUFN
NlYZNc1Jd07eBWuvZQbmeKbs6bTHg6c2ljqmQqcpUn6lAZ0wm7MgvpOiDShTx4bJ
OhS9tMVtmrnpFokb+/OuMV7ChmQG6kftcpX2bvdztKTYC0pdAWrIE0PdEgMbRjKj
P7RQ14tb97XyZ2Jo94c/MeYy+MM4hXe39FcZlcjQJdzzF9bBPCwxm2qgyBDawjag
cEjLl5XgsXLkfhksgEDn5d4PgZDP5oK9a2G7NhUjIkZ/6hkmcgt+MHqjBnhoFVUJ
xst6hbh2TnMJhHZLwnSrdWxtd+ghTQkSVxl5efKeE2zFsmmMCEv8I3eIcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBIX/Q46u+DZZZfkxYlKRmaRQbUQMB8GA1UdIwQY
MBaAFKVc+J7lYnl+d1qk0dH35F9GanPDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFZ6NG51VmllWDUzV3FUUjBmZmtYMFpxYzhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iNzJjYjAtMGU1Ny00NjhjLTg5ZjAt
YWJjYjFlNzU4MmIzLzEvcFZ6NG51VmllWDUzV3FUUjBmZmtYMFpxYzhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9iNzJjYjAtMGU1Ny00NjhjLTg5ZjAtYWJjYjFlNzU4MmIz
LzEvcFZ6NG51VmllWDUzV3FUUjBmZmtYMFpxYzhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd3WwHhBA
QwyOZrDzLpmHsS3d8n69+NAGtIHsKA50ncWJoSWo9cirvXBqcmAzShnIUB/2xwig
tbJF7V0rk+qbIiY7JaMQZ1XDGIVku4UvCFCAp56uuSJ0pwHQMdAOZl7iXQ4bGo/0
BW4EIlYJU7S8bEUMaWOJKCbnlW/sMlkDiQrQWxyfnjU3jeWxIz1z7uABr2rHRWyQ
CDgAIdRWb6TpCqipWHhNwEpREXClQR/6l+FFxiUUuurs82SYAn97/cvMVYrPkJZK
FUzr67ICyrRUpxp5PkjXlh1/zyshTn3PJvnntNKI8nWZHTLmo4jdjz5dtD1YQiwE
6OW5yApPjC5atw==
-----END CERTIFICATE-----
Generated at Tue Oct 28 15:05:23 2025 by rpki-client