Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
File: PFaMWdeoMZnDp56g6DdblG7YhOI.mft (raw, json)
Hash identifier: JfeoRQOMz/dlj2V8uP/4aqT5RthDzT/sUGxVuyvo6Bw=
Subject key identifier: 93:8B:22:5E:43:5A:31:43:1E:C5:15:07:D2:FD:3E:77:66:B1:D7:BD
Authority key identifier: 3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
Certificate issuer: /CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Certificate serial: 019A4D745567718C334539D486461570F6AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 06:01:00 +0000
Manifest this update: Tue 04 Nov 2025 06:01:00 +0000
Manifest next update: Wed 05 Nov 2025 06:01:00 +0000
Files and hashes: 1: 7WOP-_-MOSfX89KKSoy6v0ZdGmI.roa (hash: K5alUaOgD5qLhUU0KdZTL8p6umuUwQibq8QwoQYmgD8=)
2: HCoi5HM2CS9n54Michmh4KOI3ek.roa (hash: jtTZBvxkebDPFdaXtrlo0EAEQkLMF8pkeRtYqCQ7D0I=)
3: PFaMWdeoMZnDp56g6DdblG7YhOI.crl (hash: 5PJsVfn7XRMNi8r3XSBgPCCTU0p9MVK1KADQ1M3PRZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:55:67:71:8c:33:45:39:d4:86:46:15:70:f6:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Validity
Not Before: Nov 4 06:01:00 2025 GMT
Not After : Nov 5 06:01:00 2025 GMT
Subject: CN=938b225e435a31431ec51507d2fd3e7766b1d7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1a:86:1b:df:7e:fc:67:4b:5c:39:e2:5d:1c:
06:2b:34:73:b1:14:79:83:3f:91:aa:81:0a:15:e1:
ee:32:5f:76:14:fd:c8:a1:e4:72:5e:3f:20:12:39:
42:fa:39:ef:7b:f4:76:11:5f:4b:d2:af:c3:e8:64:
00:52:a2:74:e9:32:16:69:cb:30:dd:5a:b0:2c:9c:
b4:5c:23:7b:ab:9c:25:73:89:01:1d:b2:e6:56:19:
12:11:3a:4d:bb:8f:51:97:4f:1f:91:a3:49:94:33:
14:a6:ab:6f:87:7b:45:c5:d5:68:a0:7f:fe:c1:5c:
0a:01:54:df:5c:e7:0c:7b:6c:2c:4a:46:7b:fa:0f:
74:87:f9:91:b4:be:85:be:99:4b:6c:2f:94:90:d4:
98:b4:32:7d:5f:9b:8c:b6:52:7e:3a:8d:04:3d:33:
0e:0e:17:1e:ce:95:e6:86:b4:0b:f6:13:03:3e:32:
a8:45:84:8e:19:4e:29:86:8f:3f:b6:f7:63:92:52:
ce:c4:ea:9b:aa:cb:61:8c:e2:5c:65:b0:fd:f9:c4:
3b:89:f2:62:42:26:a4:03:88:0e:b6:a1:20:6f:83:
ad:b3:7c:9a:68:02:2c:c4:d9:67:37:10:56:34:e6:
9d:08:e8:f7:cc:8b:ee:57:53:65:87:2f:c9:ff:48:
d0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8B:22:5E:43:5A:31:43:1E:C5:15:07:D2:FD:3E:77:66:B1:D7:BD
X509v3 Authority Key Identifier:
keyid:3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b3:8e:fd:2a:64:62:6e:d8:6c:ef:fb:c5:ab:86:17:22:0c:
7c:a1:74:84:e4:64:d9:0e:dd:87:81:c3:e4:29:7d:04:a7:f9:
af:81:e6:3d:af:5a:c4:0b:3c:ed:6b:9a:24:0e:f2:1a:b3:b6:
aa:46:93:f8:be:cb:3d:5e:82:b5:04:a5:15:c2:ec:5a:55:56:
d3:ec:b3:01:48:86:f4:a6:f3:03:1e:cb:4a:2f:a4:22:65:a2:
09:4c:0a:19:c2:88:bc:0a:eb:03:78:e9:b1:d5:e0:f4:32:70:
e0:d8:30:1e:5a:b9:80:08:f2:74:7b:4b:dd:e0:7d:7c:4c:6a:
51:44:5b:ca:5a:5f:12:4d:15:59:49:24:89:07:80:db:16:f5:
9b:d8:df:25:d7:42:4b:24:fc:65:0b:48:07:10:26:62:3c:6d:
17:04:84:eb:b9:8a:3e:65:13:b1:2e:2a:a0:2c:79:23:7e:fb:
16:ea:ca:c7:23:8c:8b:eb:b5:dc:62:c9:80:a3:70:59:32:70:
38:39:1d:84:e2:23:e6:d2:6d:aa:e2:f4:26:1c:01:67:89:03:
ff:56:d6:4a:6e:5b:b6:d8:f6:f0:cb:39:c4:f1:c6:1f:18:1e:
27:97:00:01:b6:b8:9b:d9:7f:eb:53:01:74:9b:8d:df:1b:83:
cd:35:07:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdFVncYwzRTnUhkYVcPauMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNTY4YzU5ZDdhODMxOTljM2E3OWVhMGU4Mzc1Yjk0NmVk
ODg0ZTIwHhcNMjUxMTA0MDYwMTAwWhcNMjUxMTA1MDYwMTAwWjAzMTEwLwYDVQQD
Eyg5MzhiMjI1ZTQzNWEzMTQzMWVjNTE1MDdkMmZkM2U3NzY2YjFkN2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRqGG99+/GdLXDniXRwGKzRzsRR5
gz+RqoEKFeHuMl92FP3IoeRyXj8gEjlC+jnve/R2EV9L0q/D6GQAUqJ06TIWacsw
3VqwLJy0XCN7q5wlc4kBHbLmVhkSETpNu49Rl08fkaNJlDMUpqtvh3tFxdVooH/+
wVwKAVTfXOcMe2wsSkZ7+g90h/mRtL6FvplLbC+UkNSYtDJ9X5uMtlJ+Oo0EPTMO
DhcezpXmhrQL9hMDPjKoRYSOGU4pho8/tvdjklLOxOqbqsthjOJcZbD9+cQ7ifJi
QiakA4gOtqEgb4Ots3yaaAIsxNlnNxBWNOadCOj3zIvuV1Nlhy/J/0jQdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOLIl5DWjFDHsUVB9L9Pndmsde9MB8GA1UdIwQY
MBaAFDxWjFnXqDGZw6eeoOg3W5Ru2ITiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEZhTVdkZW9NWm5EcDU2ZzZEZGJsRzdZaE9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82ZjM2YzItZDA1Yy00NDI1LWE5ZTQt
NWUzN2U3ZjNmMTVkLzEvUEZhTVdkZW9NWm5EcDU2ZzZEZGJsRzdZaE9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi82ZjM2YzItZDA1Yy00NDI1LWE5ZTQtNWUzN2U3ZjNmMTVk
LzEvUEZhTVdkZW9NWm5EcDU2ZzZEZGJsRzdZaE9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe7OO/Spk
Ym7YbO/7xauGFyIMfKF0hORk2Q7dh4HD5Cl9BKf5r4HmPa9axAs87WuaJA7yGrO2
qkaT+L7LPV6CtQSlFcLsWlVW0+yzAUiG9KbzAx7LSi+kImWiCUwKGcKIvArrA3jp
sdXg9DJw4NgwHlq5gAjydHtL3eB9fExqUURbylpfEk0VWUkkiQeA2xb1m9jfJddC
SyT8ZQtIBxAmYjxtFwSE67mKPmUTsS4qoCx5I377FurKxyOMi+u13GLJgKNwWTJw
ODkdhOIj5tJtquL0JhwBZ4kD/1bWSm5bttj28Ms5xPHGHxgeJ5cAAba4m9l/61MB
dJuN3xuDzTUH5g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 09:41:48 2025 by rpki-client