Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
File: PaIT8CpnCwU3DFXszOkP4a1wxJs.mft (raw, json)
Hash identifier: Q4te/aMEPKLHKdzWA2/Nayq/P9Idj+Ms8KaPiR5ryqE=
Subject key identifier: E6:BA:B5:25:95:6D:CD:B1:C4:61:AA:16:83:C4:6F:D2:1F:7B:46:31
Authority key identifier: 3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
Certificate issuer: /CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Certificate serial: 019A4F62DD3FB732D7BBE56D90C260484554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 15:01:10 +0000
Manifest this update: Tue 04 Nov 2025 15:01:10 +0000
Manifest next update: Wed 05 Nov 2025 15:01:10 +0000
Files and hashes: 1: PaIT8CpnCwU3DFXszOkP4a1wxJs.crl (hash: efja8y86bj2/gul5lq7QZY+PRtgTjKbxS7KJawjShos=)
2: YwjVQrwYeFZPTMiqnnut8eO8rkw.roa (hash: o942C1AhbUgPtgCYdOmXc46V0WMZFJ062pG0YGycwpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:dd:3f:b7:32:d7:bb:e5:6d:90:c2:60:48:45:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Validity
Not Before: Nov 4 15:01:10 2025 GMT
Not After : Nov 5 15:01:10 2025 GMT
Subject: CN=e6bab525956dcdb1c461aa1683c46fd21f7b4631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dc:5a:93:f2:2a:14:47:a6:ee:fb:64:eb:91:
ab:24:0a:8a:e1:c9:5d:74:40:3c:d7:91:85:65:b2:
49:d1:f1:b5:83:54:ae:e0:92:d6:75:5d:a2:af:5a:
3c:80:2d:6b:00:d5:97:17:96:b7:c8:e9:68:33:26:
74:76:7f:77:c3:39:2e:e7:da:ec:b3:5c:64:24:e4:
ee:1e:df:44:c5:4c:d1:0a:bf:da:36:60:32:35:3d:
4e:47:8f:2d:96:f2:06:3d:75:6c:4a:50:c5:a9:88:
b0:80:00:d6:2e:9b:3a:55:c6:0d:c7:00:98:26:82:
03:d3:91:d5:45:65:d4:b4:ce:50:17:c6:94:c5:01:
e8:d1:8b:34:fc:bb:32:92:d1:e1:65:b7:23:6a:62:
72:17:09:ec:24:c1:b5:c5:cc:7f:cc:47:2b:10:a6:
18:64:f6:07:d3:58:7b:32:62:69:69:a5:7e:b9:db:
a1:19:d3:4c:07:29:c4:5c:f3:c4:b6:cd:b3:b6:b4:
ed:11:84:46:d4:cf:17:bf:6d:6f:5f:c5:db:6c:8f:
70:19:f6:09:00:47:e0:44:a0:8d:c8:ad:9f:65:05:
8b:60:f6:e4:28:9f:d4:e6:2c:c2:66:6d:b3:4f:0d:
b5:42:fb:d8:19:a1:44:7a:8a:62:59:fc:1d:d7:cf:
25:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:BA:B5:25:95:6D:CD:B1:C4:61:AA:16:83:C4:6F:D2:1F:7B:46:31
X509v3 Authority Key Identifier:
keyid:3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c8:29:49:2d:be:e9:9c:e7:28:42:07:b5:02:f4:51:c1:1f:
33:60:fd:58:eb:da:7a:1d:fe:b8:08:86:75:5d:ec:ac:85:a7:
85:7c:47:4c:28:1c:10:3c:3b:4e:14:39:ed:6b:75:4d:0b:a3:
8f:65:3d:61:b9:e9:98:31:49:36:0f:d7:55:39:7a:12:e5:0a:
71:88:c8:25:3d:bf:f4:8f:9b:be:6c:4b:44:61:68:d7:01:12:
bf:5f:13:15:3b:44:ff:84:72:89:78:c4:0a:8e:6a:54:16:60:
7c:60:70:ac:29:28:10:6a:96:0e:e6:bf:54:06:9b:e5:0f:ca:
8f:ed:a0:6d:52:f0:92:d7:76:ad:c9:1e:ed:7f:7b:06:ae:7f:
f5:a2:c3:a6:c8:78:64:4f:bf:e8:18:a7:ef:3a:6a:c5:49:34:
16:28:9d:5a:48:36:3d:10:92:f7:46:ca:2b:f9:a1:a0:bc:57:
d2:46:80:95:3c:69:cc:ea:63:a9:c9:f8:4f:d6:b7:1b:1a:71:
07:c0:25:ad:95:0e:9e:ed:b7:e7:8e:46:ad:4b:76:69:a4:eb:
d0:5c:cf:19:f8:00:98:88:bc:50:90:d2:3e:ba:b7:ca:e7:df:
9e:aa:6a:7e:78:f1:f9:82:2f:b3:ef:c0:16:da:c5:43:62:90:
f0:51:ab:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:32:52 2025 by rpki-client