Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
File: PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft (raw, json)
Hash identifier: 971upFo3cYiBhWjei7FuaXPyc3PksPwqTU3VpDmLy2g=
Subject key identifier: 38:E1:03:0C:66:9E:74:AB:9F:A4:45:FA:95:F8:0E:C9:A2:33:A1:D4
Authority key identifier: 3C:8A:04:98:EC:3B:4E:B4:4F:4D:F2:54:1A:E3:91:80:AB:B6:5F:44
Certificate issuer: /CN=3c8a0498ec3b4eb44f4df2541ae39180abb65f44
Certificate serial: 019A533F236108F01B9642527843510C4A8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
Manifest number: 49
Signing time: Wed 05 Nov 2025 09:00:37 +0000
Manifest this update: Wed 05 Nov 2025 09:00:37 +0000
Manifest next update: Thu 06 Nov 2025 09:00:37 +0000
Files and hashes: 1: 7alJhVEJ8xj6IpTwu6Ih8OhjFkA.roa (hash: 7jCnG6JINMEyq9hp7eyBgT5bk5thbVgVLLuXRq467tI=)
2: PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl (hash: DAYbwzg7xw488acKs/+wUR2LDNTzS51uU3ixZVdHIYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:23:61:08:f0:1b:96:42:52:78:43:51:0c:4a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8a0498ec3b4eb44f4df2541ae39180abb65f44
Validity
Not Before: Nov 5 09:00:37 2025 GMT
Not After : Nov 6 09:00:37 2025 GMT
Subject: CN=38e1030c669e74ab9fa445fa95f80ec9a233a1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:be:37:93:0e:9c:dc:67:8f:46:c6:37:d4:36:
29:b7:6d:92:50:0b:2f:41:b6:44:18:51:19:ee:c3:
b3:41:30:37:44:6d:44:50:55:8f:9c:18:f4:f7:c3:
cc:0d:e0:1d:c4:dd:76:c4:46:68:a4:99:cc:95:3d:
a5:d2:f8:fd:ef:7f:42:0d:1a:c4:2f:f0:5e:0f:aa:
d5:85:8d:86:09:11:cd:ec:b6:35:b7:5c:ab:eb:03:
8a:aa:e6:b9:10:6e:2c:5e:b4:10:ff:0f:90:27:aa:
2a:2e:8f:88:cd:39:88:42:30:92:72:13:46:01:60:
bc:b5:11:5f:4e:25:a3:b3:82:02:fb:de:18:b2:a1:
2f:62:ac:97:a8:b5:af:ec:45:29:f7:75:a0:57:13:
1f:4a:93:89:28:2c:f6:85:28:18:c5:de:93:97:8b:
08:11:6e:0c:d6:b7:85:06:9b:96:a4:d9:f2:ee:7f:
2b:f9:24:dd:8a:d0:7b:0c:f4:80:9e:c8:58:cc:56:
43:fe:7c:d6:47:32:d9:9f:12:2f:29:9b:88:67:4b:
a2:69:24:1a:8c:3a:30:3e:8f:4f:73:77:e2:d0:ee:
e2:73:18:ab:a2:89:72:a8:29:44:7e:df:47:96:45:
4d:5c:b6:3a:7a:a7:92:b8:ce:15:de:13:97:d3:6d:
d9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E1:03:0C:66:9E:74:AB:9F:A4:45:FA:95:F8:0E:C9:A2:33:A1:D4
X509v3 Authority Key Identifier:
keyid:3C:8A:04:98:EC:3B:4E:B4:4F:4D:F2:54:1A:E3:91:80:AB:B6:5F:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:74:a4:6b:21:37:63:a5:92:ac:aa:04:21:b7:12:13:17:e3:
19:7e:4c:d0:89:e9:21:c9:81:d7:c7:1b:20:77:0e:24:e6:6c:
46:22:40:1d:e3:8a:66:b9:f4:d6:d9:b9:51:79:5c:73:87:b5:
0d:de:61:b0:b5:50:97:57:ba:d1:65:29:6f:58:5f:91:0a:b4:
c4:0a:02:98:25:d6:6a:08:a5:11:07:d3:6f:dd:6f:40:6d:d1:
97:8c:29:23:7c:cc:61:86:bb:48:19:00:34:da:ae:c1:29:a7:
e5:59:ff:db:b8:b8:3a:c8:41:ee:7c:6f:8c:82:03:85:d3:f2:
ee:d9:45:0a:8c:e7:35:4d:6e:78:0f:6a:cc:61:cc:84:8b:6e:
75:66:83:b8:a1:b9:56:00:60:db:9f:b6:53:43:48:ad:28:ed:
90:01:c2:07:f3:c8:e5:a1:81:78:97:b7:76:96:4c:22:cc:65:
07:48:a1:9b:00:ca:ec:f8:b3:5b:84:75:c9:7d:8b:44:cf:4b:
3f:38:9f:fb:b7:c7:5c:5f:54:17:9b:af:3f:a4:28:e5:e2:9f:
0a:12:74:60:49:f3:fb:eb:45:2a:56:5b:66:f0:fb:25:37:4a:
dd:b7:64:f7:a0:f7:0b:ee:2c:89:3e:a1:00:ef:95:8c:15:ed:
c1:6f:0b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:11:53 2025 by rpki-client