Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
File: pJMvpJVkpXamFD5F-BVmjyANdjc.mft (raw, json)
Hash identifier: m2uAUx26fe8DC0Mt/e5vtECzHk6ggvWWMQDrWulJyd8=
Subject key identifier: 0E:56:89:F1:B5:BE:F9:14:71:3A:06:7F:C3:01:AA:6E:A9:C6:56:48
Authority key identifier: A4:93:2F:A4:95:64:A5:76:A6:14:3E:45:F8:15:66:8F:20:0D:76:37
Certificate issuer: /CN=a4932fa49564a576a6143e45f815668f200d7637
Certificate serial: 019A4EBD40361DF0C60E41BB99056DCB0605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
Manifest number: 07B9
Signing time: Tue 04 Nov 2025 12:00:16 +0000
Manifest this update: Tue 04 Nov 2025 12:00:16 +0000
Manifest next update: Wed 05 Nov 2025 12:00:16 +0000
Files and hashes: 1: iSvukQiHuclGtd8pfRMbiEnBLFw.roa (hash: vbZa2xzxuysE29r0DoXtqTPn6Mvw10H9Gc8C3jS/Yw8=)
2: pJMvpJVkpXamFD5F-BVmjyANdjc.crl (hash: 8pHxzOsa75ctMXKT36TRjwqOuLVITGl++I1tpR1dlTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 12:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:40:36:1d:f0:c6:0e:41:bb:99:05:6d:cb:06:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4932fa49564a576a6143e45f815668f200d7637
Validity
Not Before: Nov 4 12:00:16 2025 GMT
Not After : Nov 5 12:00:16 2025 GMT
Subject: CN=0e5689f1b5bef914713a067fc301aa6ea9c65648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d0:6a:b5:74:ec:94:64:75:6c:02:c0:de:f1:
36:aa:ae:bd:b1:8b:33:cc:ce:48:8c:dc:c8:b7:36:
6d:da:a6:25:03:1a:1d:cc:0c:85:4a:f9:42:bb:b4:
0e:74:f2:27:33:20:56:5b:bf:8e:77:f2:a3:81:98:
af:94:6c:d0:bb:4d:33:00:f4:04:27:f6:49:6a:98:
ad:26:22:3c:2d:23:0a:81:7c:2f:e4:23:28:95:65:
96:e2:e1:bd:e8:1d:be:50:d7:6d:af:e4:1f:f5:fd:
51:3e:0a:47:eb:2b:1e:16:77:00:10:8b:47:4b:55:
a0:f6:71:68:6f:be:7b:e1:a4:4e:11:16:bf:3d:cd:
5c:36:67:16:a1:3a:b5:84:73:40:3c:07:2f:c4:32:
8a:01:e7:36:51:ca:61:67:59:d5:a4:80:60:75:70:
4d:9f:97:46:74:23:bf:67:d5:50:39:3b:81:1c:7e:
1c:1d:36:1e:4f:db:52:d9:7b:9f:c2:ab:f3:b1:7f:
33:8c:8d:ed:76:73:ab:20:8d:eb:c1:f1:a9:6f:30:
37:e6:a2:ca:3b:a0:17:6d:5e:4b:39:d3:16:f3:96:
9b:af:f2:82:5c:c9:9c:79:d4:a2:1d:e2:b3:a7:19:
99:47:71:20:57:e2:46:07:a7:d5:78:f4:34:c0:14:
97:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:56:89:F1:B5:BE:F9:14:71:3A:06:7F:C3:01:AA:6E:A9:C6:56:48
X509v3 Authority Key Identifier:
keyid:A4:93:2F:A4:95:64:A5:76:A6:14:3E:45:F8:15:66:8F:20:0D:76:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:6b:1c:3d:f7:71:af:a3:66:e1:d3:68:64:28:c9:48:0d:c6:
d8:22:99:9d:fc:dd:f2:7f:fc:70:9c:9b:23:b7:25:6f:6e:04:
3f:38:04:33:6f:25:24:3e:ce:e0:cf:1b:7b:c3:dd:dd:c1:71:
5b:af:05:c9:ea:75:b4:8c:81:79:76:e2:2c:51:22:49:3e:55:
42:ce:f0:3d:1c:42:e2:ca:58:2c:4b:10:2f:ce:42:d9:ab:14:
b9:9b:d6:0a:72:8e:d0:82:e1:58:8c:88:f0:04:4d:f7:68:e3:
30:72:32:89:f4:74:89:7f:9b:57:eb:20:52:ec:af:85:64:43:
71:e2:c2:74:70:e4:ad:c7:f4:f2:bd:89:23:5a:1a:f6:1c:3c:
df:6d:f9:ad:7f:6e:f2:49:5a:c0:d1:da:35:d9:ba:a0:bd:19:
41:8b:e2:dc:46:86:45:6f:1b:37:af:ab:49:8c:4f:82:be:eb:
d3:c1:d3:a7:07:4e:ac:9a:41:35:84:e3:f7:51:c9:4d:5d:60:
75:a3:46:d0:47:86:d9:3f:e8:10:9a:0e:a0:54:77:db:9f:33:
9f:70:1b:0b:90:51:78:8c:32:75:55:a1:2d:b7:76:02:d8:a0:
5b:c1:0c:eb:c9:dd:91:e9:28:8c:74:12:8d:1d:cb:d4:da:a1:
9f:05:1d:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOvUA2HfDGDkG7mQVtywYFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OTMyZmE0OTU2NGE1NzZhNjE0M2U0NWY4MTU2NjhmMjAw
ZDc2MzcwHhcNMjUxMTA0MTIwMDE2WhcNMjUxMTA1MTIwMDE2WjAzMTEwLwYDVQQD
EygwZTU2ODlmMWI1YmVmOTE0NzEzYTA2N2ZjMzAxYWE2ZWE5YzY1NjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtBqtXTslGR1bALA3vE2qq69sYsz
zM5IjNzItzZt2qYlAxodzAyFSvlCu7QOdPInMyBWW7+Od/KjgZivlGzQu00zAPQE
J/ZJapitJiI8LSMKgXwv5CMolWWW4uG96B2+UNdtr+Qf9f1RPgpH6yseFncAEItH
S1Wg9nFob7574aROERa/Pc1cNmcWoTq1hHNAPAcvxDKKAec2UcphZ1nVpIBgdXBN
n5dGdCO/Z9VQOTuBHH4cHTYeT9tS2XufwqvzsX8zjI3tdnOrII3rwfGpbzA35qLK
O6AXbV5LOdMW85abr/KCXMmcedSiHeKzpxmZR3EgV+JGB6fVePQ0wBSXAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5WifG1vvkUcToGf8MBqm6pxlZIMB8GA1UdIwQY
MBaAFKSTL6SVZKV2phQ+RfgVZo8gDXY3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEpNdnBKVmtwWGFtRkQ1Ri1CVm1qeUFOZGpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8wNGFiNDYtODNmMy00MTViLTg4M2Et
YzdjMzI2ZDdhMzY0LzEvcEpNdnBKVmtwWGFtRkQ1Ri1CVm1qeUFOZGpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8wNGFiNDYtODNmMy00MTViLTg4M2EtYzdjMzI2ZDdhMzY0
LzEvcEpNdnBKVmtwWGFtRkQ1Ri1CVm1qeUFOZGpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArWscPfdx
r6Nm4dNoZCjJSA3G2CKZnfzd8n/8cJybI7clb24EPzgEM28lJD7O4M8be8Pd3cFx
W68Fyep1tIyBeXbiLFEiST5VQs7wPRxC4spYLEsQL85C2asUuZvWCnKO0ILhWIyI
8ARN92jjMHIyifR0iX+bV+sgUuyvhWRDceLCdHDkrcf08r2JI1oa9hw83235rX9u
8klawNHaNdm6oL0ZQYvi3EaGRW8bN6+rSYxPgr7r08HTpwdOrJpBNYTj91HJTV1g
daNG0EeG2T/oEJoOoFR3258zn3AbC5BReIwydVWhLbd2AtigW8EM68ndkekojHQS
jR3L1NqhnwUdvw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:01:03 2025 by rpki-client