Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
File: PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft (raw, json)
Hash identifier: o1Dp1fSwcJc35sAekxDZldZki9GP6tHKu4leuE4Jhsg=
Subject key identifier: 78:D2:8A:0A:E4:AF:FE:B5:A0:64:F2:B9:57:C3:A3:7A:61:9A:F5:8D
Authority key identifier: 3C:02:09:4C:22:10:D8:B2:17:15:F9:8D:F8:59:8B:35:32:08:D1:0C
Certificate issuer: /CN=3c02094c2210d8b21715f98df8598b353208d10c
Certificate serial: 0199228D11C19E55E417CAC3EA3A1293F8C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
Manifest number: 110D
Signing time: Sun 07 Sep 2025 05:01:34 +0000
Manifest this update: Sun 07 Sep 2025 05:01:34 +0000
Manifest next update: Mon 08 Sep 2025 05:01:34 +0000
Files and hashes: 1: CufUT2fMUqvz9LGxO18OZgdQp_g.roa (hash: G2fcMqhZShi/pIW7MbvdKjfohzkmwJAvDqVZX+1pdMQ=)
2: PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl (hash: WyVCwDSZxVfAzDdXReuJLp9LFoeMJfvoumzgPlEJMi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:11:c1:9e:55:e4:17:ca:c3:ea:3a:12:93:f8:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c02094c2210d8b21715f98df8598b353208d10c
Validity
Not Before: Sep 7 05:01:34 2025 GMT
Not After : Sep 8 05:01:34 2025 GMT
Subject: CN=78d28a0ae4affeb5a064f2b957c3a37a619af58d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:42:e4:ff:7e:f5:ac:3e:37:c4:18:39:45:fe:
31:d0:d8:89:62:f7:2b:90:37:6d:36:ac:b3:82:eb:
ae:5f:b2:f3:fd:be:3c:d5:6f:eb:54:81:9d:03:2e:
29:f0:6d:5e:ee:a0:11:d0:a7:32:bf:47:e1:30:9c:
06:65:24:f1:4e:73:70:67:50:8c:db:58:ea:e5:a9:
28:cb:4a:02:3d:6e:d8:72:e0:12:fa:fb:ad:d2:1e:
eb:8d:f4:ca:7b:8c:5e:14:83:5b:a9:f5:aa:50:23:
b6:96:b4:36:12:a3:26:20:33:55:ca:71:b9:68:7f:
ec:59:ca:b9:99:fd:c3:2f:92:21:d6:28:23:db:17:
7d:5a:69:5a:6a:86:be:6e:9c:3f:80:25:0f:f5:b1:
e8:05:12:87:9b:08:9e:51:ca:1e:12:8f:dc:fe:af:
36:6e:67:6a:84:22:ed:15:1e:df:1c:35:42:d4:78:
cc:fc:05:1a:19:55:ae:73:04:10:3e:7e:cb:cf:18:
db:aa:ff:80:a8:86:5a:2d:e5:a8:0d:1a:5e:26:ab:
50:0b:74:4a:db:7a:a1:94:f4:04:79:d9:9e:52:26:
40:51:0f:32:9c:f1:1a:05:c2:54:69:30:f6:00:3d:
4c:41:84:58:25:78:ce:2e:33:e8:15:f6:fe:72:9e:
1b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D2:8A:0A:E4:AF:FE:B5:A0:64:F2:B9:57:C3:A3:7A:61:9A:F5:8D
X509v3 Authority Key Identifier:
keyid:3C:02:09:4C:22:10:D8:B2:17:15:F9:8D:F8:59:8B:35:32:08:D1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:3a:e2:15:8a:5f:38:26:6e:fc:7b:cf:b6:0b:05:ad:0d:ef:
26:3a:3f:fd:9c:9d:56:d7:45:a5:87:09:aa:6e:53:53:71:87:
a4:cd:b6:90:f8:43:43:69:e6:a1:5f:86:85:5d:eb:98:41:25:
cb:80:54:d0:f8:c7:8e:89:ee:4c:0e:0c:5b:a5:37:88:88:db:
41:0e:e8:c9:16:80:33:71:74:7a:63:03:7e:e1:b2:03:33:49:
3a:e4:55:5e:c7:36:f7:58:aa:2c:fb:6f:52:ec:41:10:fb:23:
d3:35:06:07:fb:93:ae:2f:c5:e5:a8:2c:1c:b0:87:78:a8:e0:
f1:55:96:e4:71:9f:ec:d9:f3:80:1c:2e:c3:e1:d7:30:f5:3e:
12:79:e5:d0:d8:c5:0c:18:18:28:8a:ec:20:e8:ae:ab:6e:e9:
3a:8a:64:8d:90:66:fe:8a:f7:19:a7:a7:92:cd:21:d7:4c:e3:
2b:2a:d8:ce:a8:14:9f:fa:b6:4b:a8:99:5f:a9:37:7d:ed:59:
2c:15:8c:12:49:70:8e:7b:6a:5f:e6:f6:b3:b0:96:5c:03:5f:
8f:c5:5f:0b:6c:11:10:dd:6f:25:32:83:7d:9c:7a:b1:69:62:
45:96:06:ab:4c:5f:42:1d:49:0b:6a:6c:2a:d4:6c:eb:29:ab:
27:3d:e6:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijRHBnlXkF8rD6joSk/jFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMDIwOTRjMjIxMGQ4YjIxNzE1Zjk4ZGY4NTk4YjM1MzIw
OGQxMGMwHhcNMjUwOTA3MDUwMTM0WhcNMjUwOTA4MDUwMTM0WjAzMTEwLwYDVQQD
Eyg3OGQyOGEwYWU0YWZmZWI1YTA2NGYyYjk1N2MzYTM3YTYxOWFmNThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkLk/371rD43xBg5Rf4x0NiJYvcr
kDdtNqyzguuuX7Lz/b481W/rVIGdAy4p8G1e7qAR0Kcyv0fhMJwGZSTxTnNwZ1CM
21jq5akoy0oCPW7YcuAS+vut0h7rjfTKe4xeFINbqfWqUCO2lrQ2EqMmIDNVynG5
aH/sWcq5mf3DL5Ih1igj2xd9Wmlaaoa+bpw/gCUP9bHoBRKHmwieUcoeEo/c/q82
bmdqhCLtFR7fHDVC1HjM/AUaGVWucwQQPn7Lzxjbqv+AqIZaLeWoDRpeJqtQC3RK
23qhlPQEedmeUiZAUQ8ynPEaBcJUaTD2AD1MQYRYJXjOLjPoFfb+cp4b4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHjSigrkr/61oGTyuVfDo3phmvWNMB8GA1UdIwQY
MBaAFDwCCUwiENiyFxX5jfhZizUyCNEMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEFJSlRDSVEyTElYRmZtTi1GbUxOVElJMFF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS85ODNjMmMtZGRhYi00MjJiLWJjZDIt
MTczNzRiZmZiNzFhLzEvUEFJSlRDSVEyTElYRmZtTi1GbUxOVElJMFF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS85ODNjMmMtZGRhYi00MjJiLWJjZDItMTczNzRiZmZiNzFh
LzEvUEFJSlRDSVEyTElYRmZtTi1GbUxOVElJMFF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPDriFYpf
OCZu/HvPtgsFrQ3vJjo//ZydVtdFpYcJqm5TU3GHpM22kPhDQ2nmoV+GhV3rmEEl
y4BU0PjHjonuTA4MW6U3iIjbQQ7oyRaAM3F0emMDfuGyAzNJOuRVXsc291iqLPtv
UuxBEPsj0zUGB/uTri/F5agsHLCHeKjg8VWW5HGf7NnzgBwuw+HXMPU+Ennl0NjF
DBgYKIrsIOiuq27pOopkjZBm/or3Gaenks0h10zjKyrYzqgUn/q2S6iZX6k3fe1Z
LBWMEklwjntqX+b2s7CWXANfj8VfC2wREN1vJTKDfZx6sWliRZYGq0xfQh1JC2ps
KtRs6ymrJz3mAQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 09:53:03 2025 by rpki-client