Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
File: pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft (raw, json)
Hash identifier: xv4f/jQvkh55xbz74YyoB1MEt10IqjYIAfZNadkt+qs=
Subject key identifier: F8:8A:E5:DA:71:AD:29:63:F1:46:E1:CA:D2:B2:11:79:88:81:90:25
Authority key identifier: A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A
Certificate issuer: /CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a
Certificate serial: 019A4EF58E565EFDAA5F0088B8A169287A35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:01:46 +0000
Manifest this update: Tue 04 Nov 2025 13:01:46 +0000
Manifest next update: Wed 05 Nov 2025 13:01:46 +0000
Files and hashes: 1: pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl (hash: PRbOtSyfSE83hEFPcASmKiB924aFozdtPFjK0ppNqCs=)
2: t403LtXkOSW8w7w_vK-2ppXvWVA.roa (hash: kUS7ckaNEkh4qS4uYt0WI3yhqZiJYbt1KK2dO98adJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:8e:56:5e:fd:aa:5f:00:88:b8:a1:69:28:7a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a
Validity
Not Before: Nov 4 13:01:46 2025 GMT
Not After : Nov 5 13:01:46 2025 GMT
Subject: CN=f88ae5da71ad2963f146e1cad2b2117988819025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0c:b5:66:62:b5:ae:58:f2:af:1c:6f:79:4b:
58:e5:ce:6c:9e:e2:dc:79:3a:91:37:7f:f0:52:ae:
42:23:06:1b:dc:59:44:90:8c:39:ad:2a:28:c4:32:
99:64:a6:21:5d:cc:01:19:3e:a0:3a:81:e3:ca:64:
e9:7a:01:b2:0f:7b:7d:3a:fd:80:36:42:19:f6:22:
8c:fe:d1:3c:e1:9b:16:55:64:d5:63:26:5e:48:d2:
6e:a8:1c:13:93:b9:df:49:c0:0f:06:a0:91:7d:13:
27:62:29:6a:13:59:bc:33:71:61:98:79:1a:4d:8d:
f6:22:db:9c:a1:93:f3:9e:ff:57:be:8b:c5:24:ec:
6b:59:a3:a1:a8:46:a5:38:50:47:3e:c6:c9:7e:65:
33:90:02:9b:61:dc:eb:30:7f:5c:ae:c2:4c:50:de:
05:15:da:0a:af:9a:58:bc:aa:32:98:d8:61:33:46:
fd:6f:a9:75:c3:cc:e4:30:bc:10:07:fe:77:6f:b9:
df:cd:44:cc:a3:24:ac:a4:c0:c1:cd:2c:39:a1:e9:
9d:d8:f0:07:11:46:44:86:e8:ed:c1:0a:07:28:f8:
b6:f3:9d:67:cf:5f:11:52:42:db:8d:42:29:31:b3:
4d:20:6e:0b:b7:4c:23:60:6a:17:9d:2a:3f:3d:e0:
dd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8A:E5:DA:71:AD:29:63:F1:46:E1:CA:D2:B2:11:79:88:81:90:25
X509v3 Authority Key Identifier:
keyid:A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:c0:33:1c:36:f7:c1:6a:ba:b8:76:f7:05:84:df:04:44:03:
ff:63:ed:1a:94:23:92:7a:fe:02:a1:fe:05:07:ee:04:c6:23:
6f:82:29:c8:a3:f9:4d:b9:c4:19:23:0f:5c:42:62:f2:f8:9b:
da:48:85:ec:26:9e:7f:14:40:ad:10:2b:da:93:f8:36:85:26:
4c:a9:32:bd:c1:76:f2:e7:f6:49:a5:33:dd:5f:92:f7:24:50:
2e:b6:34:26:c2:2f:db:e0:94:c0:00:96:31:ac:0c:cc:fc:e7:
bc:d9:2d:1f:e8:1a:d8:db:b4:4d:a0:9d:c5:d7:36:e2:36:ec:
05:cc:2a:6a:0e:d0:84:b8:6e:82:61:69:b6:52:55:29:2c:db:
30:04:dc:21:31:24:47:89:6c:6a:d0:45:da:87:a6:c3:75:9d:
e7:6f:49:32:0b:e6:b8:df:2a:c1:85:b7:b2:3a:0b:1d:68:d7:
f9:c7:52:79:b4:94:a4:43:fd:aa:57:36:65:34:df:ee:02:be:
3d:ad:38:2c:8a:ba:da:be:31:c9:fd:f9:38:d3:4d:a2:4a:5e:
ba:5b:50:08:f7:fe:7f:d3:13:2b:70:64:97:93:6d:ff:81:10:
0c:cd:9d:e0:b9:cc:f7:4f:d6:54:ad:2f:30:5b:87:e2:c3:da:
41:82:a0:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9Y5WXv2qXwCIuKFpKHo1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MzA3NWNiYjdlYjE2OTNlZTcxYmM5MGU1ZjczZGFkYzIy
NWQ5MWEwHhcNMjUxMTA0MTMwMTQ2WhcNMjUxMTA1MTMwMTQ2WjAzMTEwLwYDVQQD
EyhmODhhZTVkYTcxYWQyOTYzZjE0NmUxY2FkMmIyMTE3OTg4ODE5MDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwy1ZmK1rljyrxxveUtY5c5snuLc
eTqRN3/wUq5CIwYb3FlEkIw5rSooxDKZZKYhXcwBGT6gOoHjymTpegGyD3t9Ov2A
NkIZ9iKM/tE84ZsWVWTVYyZeSNJuqBwTk7nfScAPBqCRfRMnYilqE1m8M3FhmHka
TY32ItucoZPznv9XvovFJOxrWaOhqEalOFBHPsbJfmUzkAKbYdzrMH9crsJMUN4F
FdoKr5pYvKoymNhhM0b9b6l1w8zkMLwQB/53b7nfzUTMoySspMDBzSw5oemd2PAH
EUZEhujtwQoHKPi2851nz18RUkLbjUIpMbNNIG4Lt0wjYGoXnSo/PeDd8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPiK5dpxrSlj8UbhytKyEXmIgZAlMB8GA1UdIwQY
MBaAFKYwdcu36xaT7nG8kOX3Pa3CJdkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGpCMXk3ZnJGcFB1Y2J5UTVmYzlyY0lsMlJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iYmU5ZmYtMjM2NS00OWM4LTk4ZDYt
ZTcxYzMxN2EzZmE4LzEvcGpCMXk3ZnJGcFB1Y2J5UTVmYzlyY0lsMlJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9iYmU5ZmYtMjM2NS00OWM4LTk4ZDYtZTcxYzMxN2EzZmE4
LzEvcGpCMXk3ZnJGcFB1Y2J5UTVmYzlyY0lsMlJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjMAzHDb3
wWq6uHb3BYTfBEQD/2PtGpQjknr+AqH+BQfuBMYjb4IpyKP5TbnEGSMPXEJi8vib
2kiF7CaefxRArRAr2pP4NoUmTKkyvcF28uf2SaUz3V+S9yRQLrY0JsIv2+CUwACW
MawMzPznvNktH+ga2Nu0TaCdxdc24jbsBcwqag7QhLhugmFptlJVKSzbMATcITEk
R4lsatBF2oemw3Wd529JMgvmuN8qwYW3sjoLHWjX+cdSebSUpEP9qlc2ZTTf7gK+
Pa04LIq62r4xyf35ONNNokpeultQCPf+f9MTK3Bkl5Nt/4EQDM2d4LnM90/WVK0v
MFuH4sPaQYKgrw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:38 2025 by rpki-client