Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
File: pAoIH7qPsz77RiWe-T9oeNcBUOs.mft (raw, json)
Hash identifier: gc8ThCUfV6H2MwB1HniLoaOq5vT4u0K2UEmPR0vQaR4=
Subject key identifier: CE:8E:3B:8F:71:8D:42:EB:0E:C0:0E:68:AC:DF:71:7D:AA:2F:92:5D
Authority key identifier: A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
Certificate issuer: /CN=a40a081fba8fb33efb46259ef93f6878d70150eb
Certificate serial: 019A5074919557BE982523D894D382CDD07D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
Manifest number: 0C6A
Signing time: Tue 04 Nov 2025 20:00:07 +0000
Manifest this update: Tue 04 Nov 2025 20:00:07 +0000
Manifest next update: Wed 05 Nov 2025 20:00:07 +0000
Files and hashes: 1: YA2knZBu4eCfckA4blXB6sNuHgY.roa (hash: shDh2slGwfDF1H72vnxsQTQ+XE9meHhIbU3+zi7hhrg=)
2: da6BAAfAoBTasYkztEyeFbO3dYM.roa (hash: svpwmdWuctN25b8D5PcCmhJa0TO40FFmvswQDucJFfQ=)
3: pAoIH7qPsz77RiWe-T9oeNcBUOs.crl (hash: skXEPdirg+8+yaWgzyiD3wUiN5onPUMoLBcjNlBrrIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:91:95:57:be:98:25:23:d8:94:d3:82:cd:d0:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a40a081fba8fb33efb46259ef93f6878d70150eb
Validity
Not Before: Nov 4 20:00:07 2025 GMT
Not After : Nov 5 20:00:07 2025 GMT
Subject: CN=ce8e3b8f718d42eb0ec00e68acdf717daa2f925d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ed:38:c1:4c:88:ee:73:34:07:34:34:18:b7:
65:6a:76:98:c3:81:12:b2:bb:89:e6:ae:fb:93:d3:
70:2f:62:e1:44:ee:cc:41:a3:97:e7:34:93:8c:6c:
4e:f6:8b:69:31:fc:7c:c5:e6:d5:dd:86:7c:77:3d:
e1:92:98:5a:38:17:a2:fc:80:45:da:66:51:ad:15:
66:2b:da:23:2c:5b:92:10:47:d7:2f:ff:8e:6d:de:
46:75:ba:8a:25:09:b9:03:0c:fa:81:77:f4:1d:cd:
4b:f5:b2:77:f3:5f:c3:33:38:41:18:9e:48:63:1c:
e2:d0:de:9f:ba:4a:11:70:0e:1b:60:ad:c4:49:3f:
de:1c:64:e0:77:e4:87:2d:e4:ee:89:f3:de:4f:cd:
f8:1b:48:5a:68:5b:4c:60:10:1f:6b:79:58:a8:d5:
b5:d6:e0:3d:c7:b3:30:39:8c:34:cd:19:64:da:cc:
a5:4e:52:b3:dc:bc:4d:cb:cd:22:70:c7:4c:4d:98:
10:fd:0b:62:f9:97:ba:42:68:02:79:cb:e4:6a:99:
25:6b:24:3f:e9:c0:01:bd:f9:34:d7:ac:7d:f4:88:
1a:b9:a4:a6:24:40:df:de:4e:64:a7:05:0a:74:d3:
24:dd:76:3d:df:1f:27:d0:38:bc:23:d1:0e:6a:95:
57:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8E:3B:8F:71:8D:42:EB:0E:C0:0E:68:AC:DF:71:7D:AA:2F:92:5D
X509v3 Authority Key Identifier:
keyid:A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:cd:9a:f5:49:95:34:d6:f4:3e:5e:18:75:a4:7b:b5:c4:89:
d6:53:1e:38:c4:0a:19:5b:1a:7c:d1:3d:d1:86:fe:cb:ca:a1:
ac:25:34:2a:79:27:43:72:19:a1:88:2a:3f:da:67:ff:d3:e3:
fe:cf:7b:e8:8c:5b:cb:a1:3a:e6:df:f9:ee:4b:2d:bb:ee:d4:
17:07:6b:37:0e:82:f4:0b:99:47:3c:7b:a4:5d:9a:45:6d:d9:
5f:5a:bb:10:3e:2a:2b:a2:b8:1f:63:3c:2a:ad:92:d7:be:2a:
cf:31:e7:6c:2f:9a:ba:bc:92:22:d8:29:68:46:56:71:ed:21:
11:92:cb:b1:cc:e6:e8:06:31:05:f0:81:aa:4d:e9:27:e7:9b:
11:3d:1e:96:a0:35:71:b0:1e:a2:2c:d2:36:fe:9d:be:e8:16:
9d:7c:28:1d:b3:9a:c1:5e:87:fb:05:37:19:75:5a:da:50:57:
a1:7b:18:c0:81:3e:41:d1:48:b4:92:d2:4a:60:dd:49:eb:eb:
cd:5f:c1:4a:6d:68:34:7d:85:e2:10:5c:33:41:aa:26:cf:1c:
d5:3b:f2:e3:23:d2:91:16:18:7b:75:e3:b5:ea:40:44:a0:e4:
c3:da:ee:20:43:b0:7d:a5:a4:13:4b:7c:c9:e7:2c:f7:4e:4b:
ab:83:fe:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQdJGVV76YJSPYlNOCzdB9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MGEwODFmYmE4ZmIzM2VmYjQ2MjU5ZWY5M2Y2ODc4ZDcw
MTUwZWIwHhcNMjUxMTA0MjAwMDA3WhcNMjUxMTA1MjAwMDA3WjAzMTEwLwYDVQQD
EyhjZThlM2I4ZjcxOGQ0MmViMGVjMDBlNjhhY2RmNzE3ZGFhMmY5MjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAie04wUyI7nM0BzQ0GLdlanaYw4ES
sruJ5q77k9NwL2LhRO7MQaOX5zSTjGxO9otpMfx8xebV3YZ8dz3hkphaOBei/IBF
2mZRrRVmK9ojLFuSEEfXL/+Obd5GdbqKJQm5Awz6gXf0Hc1L9bJ381/DMzhBGJ5I
Yxzi0N6fukoRcA4bYK3EST/eHGTgd+SHLeTuifPeT834G0haaFtMYBAfa3lYqNW1
1uA9x7MwOYw0zRlk2sylTlKz3LxNy80icMdMTZgQ/Qti+Ze6QmgCecvkapklayQ/
6cABvfk016x99IgauaSmJEDf3k5kpwUKdNMk3XY93x8n0Di8I9EOapVXKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6OO49xjULrDsAOaKzfcX2qL5JdMB8GA1UdIwQY
MBaAFKQKCB+6j7M++0Ylnvk/aHjXAVDrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEFvSUg3cVBzejc3UmlXZS1UOW9lTmNCVU9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jYjI3YTAtOTRkMi00OWFhLTg1ZWEt
YWU5MWU0NjYyZDkzLzEvcEFvSUg3cVBzejc3UmlXZS1UOW9lTmNCVU9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9jYjI3YTAtOTRkMi00OWFhLTg1ZWEtYWU5MWU0NjYyZDkz
LzEvcEFvSUg3cVBzejc3UmlXZS1UOW9lTmNCVU9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADM2a9UmV
NNb0Pl4YdaR7tcSJ1lMeOMQKGVsafNE90Yb+y8qhrCU0KnknQ3IZoYgqP9pn/9Pj
/s976Ixby6E65t/57kstu+7UFwdrNw6C9AuZRzx7pF2aRW3ZX1q7ED4qK6K4H2M8
Kq2S174qzzHnbC+aurySItgpaEZWce0hEZLLsczm6AYxBfCBqk3pJ+ebET0elqA1
cbAeoizSNv6dvugWnXwoHbOawV6H+wU3GXVa2lBXoXsYwIE+QdFItJLSSmDdSevr
zV/BSm1oNH2F4hBcM0GqJs8c1Tvy4yPSkRYYe3XjtepARKDkw9ruIEOwfaWkE0t8
yecs905Lq4P+yA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:05:08 2025 by rpki-client