Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
File: PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft (raw, json)
Hash identifier: WiX6dau3+zqKXK+PwQWfWvd5WQZzJ0sBQFcMtPTcn6A=
Subject key identifier: 9C:8E:5B:31:BE:59:30:4D:16:18:3F:39:A7:29:6E:A3:41:77:F1:30
Authority key identifier: 3C:02:09:4C:22:10:D8:B2:17:15:F9:8D:F8:59:8B:35:32:08:D1:0C
Certificate issuer: /CN=3c02094c2210d8b21715f98df8598b353208d10c
Certificate serial: 019A70A58B84F54CB25BF0515005CBAEBD03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
Manifest number: 11BA
Signing time: Tue 11 Nov 2025 02:01:28 +0000
Manifest this update: Tue 11 Nov 2025 02:01:28 +0000
Manifest next update: Wed 12 Nov 2025 02:01:28 +0000
Files and hashes: 1: CufUT2fMUqvz9LGxO18OZgdQp_g.roa (hash: G2fcMqhZShi/pIW7MbvdKjfohzkmwJAvDqVZX+1pdMQ=)
2: PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl (hash: 0pltOcJeN3yS2F8BH4wXfWQ0liOqv8jKA7P5aFJaYSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:8b:84:f5:4c:b2:5b:f0:51:50:05:cb:ae:bd:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c02094c2210d8b21715f98df8598b353208d10c
Validity
Not Before: Nov 11 02:01:28 2025 GMT
Not After : Nov 12 02:01:28 2025 GMT
Subject: CN=9c8e5b31be59304d16183f39a7296ea34177f130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:13:14:32:0f:58:62:ee:86:83:2a:d6:8b:52:
86:21:b3:1f:fb:47:5d:d5:ee:38:25:aa:b5:d7:e9:
d0:dd:a0:c8:a9:9b:ca:5c:5b:75:e4:25:07:9c:4f:
51:51:a7:3b:6f:78:1d:a5:c4:a6:81:ad:10:72:a2:
71:de:25:ea:96:5a:6b:c5:8a:f7:d9:67:51:58:29:
de:8a:78:10:b2:a5:9a:ce:6b:44:ca:0e:1c:b0:65:
34:5f:da:8c:18:1c:50:88:75:cf:01:2e:43:73:44:
a3:04:da:9e:7a:5f:3c:44:f5:59:9d:7c:0f:e1:d1:
92:42:7c:56:b9:8c:17:4a:43:00:f4:86:f5:0b:da:
33:8a:ff:0f:08:db:24:47:3e:4a:4c:97:b5:53:a2:
06:cf:dc:fe:ac:c4:de:af:a0:bf:55:b6:3f:34:48:
ae:98:46:c0:39:54:ee:2a:68:29:d4:49:44:4a:f4:
1e:c1:a3:a1:e1:3e:5d:5a:41:05:68:09:82:b1:21:
f5:23:b7:6c:3a:15:fd:07:15:1c:e3:00:97:4d:a3:
80:9c:bd:59:ee:e5:52:78:35:89:22:75:99:1e:7e:
dc:b7:77:ba:36:d1:4f:7a:0e:b2:eb:13:3a:af:38:
45:d0:13:50:73:29:a4:3d:71:28:41:06:4a:39:b5:
d0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8E:5B:31:BE:59:30:4D:16:18:3F:39:A7:29:6E:A3:41:77:F1:30
X509v3 Authority Key Identifier:
keyid:3C:02:09:4C:22:10:D8:B2:17:15:F9:8D:F8:59:8B:35:32:08:D1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ae:a5:08:72:12:b0:cf:9a:d5:2a:7c:61:5d:6f:3d:76:4f:
a6:99:75:ef:81:1a:98:bb:27:49:2d:fa:eb:69:38:d2:7d:a5:
1f:a1:8b:02:ee:ee:7f:81:c5:7e:a9:7e:f2:f0:05:b1:22:26:
be:95:86:44:3d:98:2e:91:73:83:c9:47:c4:2a:21:37:4f:22:
ab:e6:c6:3d:a1:ca:d5:90:44:79:30:ef:5b:61:20:57:84:34:
cc:b0:9d:58:9c:5f:27:15:bf:79:2c:36:d8:7a:53:26:79:31:
10:1c:d6:93:c0:09:41:17:dd:69:c2:0a:c3:3a:05:cd:83:e2:
8b:db:06:fc:6e:53:4e:bb:ac:c8:13:49:f2:65:6d:da:f0:94:
ab:f6:57:1e:04:8e:6b:a5:f9:ec:5e:17:11:c2:2b:f9:0a:02:
b4:7b:ea:f5:3b:bc:cd:b5:25:6c:46:94:c6:d1:98:db:f0:51:
e5:e8:92:6a:b7:cd:e2:2b:78:0e:2f:cc:60:d7:5e:86:c2:00:
bd:41:94:c1:38:f4:9f:44:f1:17:91:1a:4e:af:30:58:a3:88:
bc:28:6b:2e:06:65:9f:22:e7:a2:05:12:0e:b1:54:7a:1f:40:
02:11:de:83:e2:32:ee:d1:fe:f5:1d:59:ef:13:80:a0:32:20:
96:a0:d6:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpYuE9UyyW/BRUAXLrr0DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMDIwOTRjMjIxMGQ4YjIxNzE1Zjk4ZGY4NTk4YjM1MzIw
OGQxMGMwHhcNMjUxMTExMDIwMTI4WhcNMjUxMTEyMDIwMTI4WjAzMTEwLwYDVQQD
Eyg5YzhlNWIzMWJlNTkzMDRkMTYxODNmMzlhNzI5NmVhMzQxNzdmMTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhMUMg9YYu6GgyrWi1KGIbMf+0dd
1e44Jaq11+nQ3aDIqZvKXFt15CUHnE9RUac7b3gdpcSmga0QcqJx3iXqllprxYr3
2WdRWCneingQsqWazmtEyg4csGU0X9qMGBxQiHXPAS5Dc0SjBNqeel88RPVZnXwP
4dGSQnxWuYwXSkMA9Ib1C9oziv8PCNskRz5KTJe1U6IGz9z+rMTer6C/VbY/NEiu
mEbAOVTuKmgp1ElESvQewaOh4T5dWkEFaAmCsSH1I7dsOhX9BxUc4wCXTaOAnL1Z
7uVSeDWJInWZHn7ct3e6NtFPeg6y6xM6rzhF0BNQcymkPXEoQQZKObXQcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyOWzG+WTBNFhg/OacpbqNBd/EwMB8GA1UdIwQY
MBaAFDwCCUwiENiyFxX5jfhZizUyCNEMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEFJSlRDSVEyTElYRmZtTi1GbUxOVElJMFF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS85ODNjMmMtZGRhYi00MjJiLWJjZDIt
MTczNzRiZmZiNzFhLzEvUEFJSlRDSVEyTElYRmZtTi1GbUxOVElJMFF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS85ODNjMmMtZGRhYi00MjJiLWJjZDItMTczNzRiZmZiNzFh
LzEvUEFJSlRDSVEyTElYRmZtTi1GbUxOVElJMFF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl66lCHIS
sM+a1Sp8YV1vPXZPppl174EamLsnSS3662k40n2lH6GLAu7uf4HFfql+8vAFsSIm
vpWGRD2YLpFzg8lHxCohN08iq+bGPaHK1ZBEeTDvW2EgV4Q0zLCdWJxfJxW/eSw2
2HpTJnkxEBzWk8AJQRfdacIKwzoFzYPii9sG/G5TTrusyBNJ8mVt2vCUq/ZXHgSO
a6X57F4XEcIr+QoCtHvq9Tu8zbUlbEaUxtGY2/BR5eiSarfN4it4Di/MYNdehsIA
vUGUwTj0n0TxF5EaTq8wWKOIvChrLgZlnyLnogUSDrFUeh9AAhHeg+Iy7tH+9R1Z
7xOAoDIglqDWqw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:02 2025 by rpki-client