Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
File: pZrIMj67a-IPronQmMokE4-MkAU.mft (raw, json)
Hash identifier: BqNtvaVbrPZoAUlbYxVDgn5kO/VmwYgcqSRN4dh2IMU=
Subject key identifier: 41:33:44:41:9F:0D:F6:D7:1D:A8:43:5C:43:C1:10:76:85:BC:86:E2
Authority key identifier: A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
Certificate issuer: /CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Certificate serial: 019A4E18FC3BAAA381B9253123741F6B841A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 09:00:51 +0000
Manifest this update: Tue 04 Nov 2025 09:00:51 +0000
Manifest next update: Wed 05 Nov 2025 09:00:51 +0000
Files and hashes: 1: W2MvJBZ0wxtLqJdYlYA_0d8K8JQ.roa (hash: FE4tThC8aEaRa276a1uqrtHjLbN4YSEI6M3SskM13qQ=)
2: haFD9cLDeKJLdXFJ_FlWsDWQa1Y.roa (hash: suCkhBPt7Sy5Urm3257mrhUG7HADlPxpmTzTdnyQTPQ=)
3: pZrIMj67a-IPronQmMokE4-MkAU.crl (hash: 2V2rvwh5xuFxeXMKwM22a7gWHa9iog/UuTl2aFGCgN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:fc:3b:aa:a3:81:b9:25:31:23:74:1f:6b:84:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Validity
Not Before: Nov 4 09:00:51 2025 GMT
Not After : Nov 5 09:00:51 2025 GMT
Subject: CN=413344419f0df6d71da8435c43c1107685bc86e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:33:96:14:2a:5d:f2:a3:73:88:ec:5c:4c:3f:
f8:0c:31:30:58:a8:38:33:f0:c3:0c:41:9d:eb:d8:
ff:e6:b9:20:8b:88:7d:ad:26:84:da:d1:a4:b4:56:
47:ad:55:62:27:46:96:20:19:c1:b1:61:c8:77:55:
c7:d5:cb:24:73:36:32:05:6b:45:9b:a9:67:0b:18:
f3:f6:16:5e:b3:41:62:e8:7e:d5:97:41:ed:1e:73:
95:f4:03:e6:2d:45:49:13:aa:d7:43:18:a8:50:59:
64:39:74:1b:c1:22:c9:bf:8d:5b:05:9b:07:32:8d:
a1:c1:45:76:28:37:a5:ba:3d:e9:1e:9f:f4:7a:a5:
0f:08:34:54:33:2b:c1:48:72:30:e3:53:fe:a1:9d:
6c:4e:0d:e3:4a:85:b4:ec:77:8b:f9:87:a0:6e:e9:
9f:6c:f4:63:93:6e:00:f8:d9:5e:b7:17:13:16:b4:
23:dd:f3:38:35:87:14:e8:24:99:cb:b6:a6:1c:ec:
f1:67:24:3e:a2:58:a8:fc:e6:03:5a:3d:ca:8e:12:
fd:3b:04:5a:1a:ad:e8:9b:8d:a6:f0:9e:5c:36:f5:
d6:9f:ee:c2:4c:72:ac:bd:8a:1c:34:f1:8c:e1:cf:
25:82:8f:c1:52:0e:8e:c0:45:fe:c8:cf:31:4d:6c:
07:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:33:44:41:9F:0D:F6:D7:1D:A8:43:5C:43:C1:10:76:85:BC:86:E2
X509v3 Authority Key Identifier:
keyid:A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:bf:92:fd:bc:46:53:c3:11:3f:c6:92:b9:4c:f4:9a:59:c9:
85:cc:ca:22:8c:27:56:18:a5:95:51:da:a6:30:11:1a:f6:0c:
c1:ec:f1:1f:a6:c6:f7:34:09:21:8e:2d:a2:c8:43:09:ae:40:
aa:b2:05:e9:e7:14:92:93:9e:8c:de:85:5c:5e:01:f4:5a:49:
b8:c3:e4:91:4a:32:86:fd:52:fc:7e:0c:0d:77:63:ea:82:38:
71:2c:47:e4:85:4b:7d:48:17:8e:2d:eb:93:c5:a8:52:bd:19:
b0:29:78:73:6b:05:06:33:01:26:92:e7:dc:63:d7:f7:0f:1a:
ab:31:ac:60:68:ad:ef:24:e0:5d:02:16:33:03:b7:fc:7d:67:
96:c3:a4:fb:c1:bf:d5:50:48:09:2e:4d:d1:e9:77:0a:d3:29:
19:81:78:36:bd:ed:e2:9a:4c:90:41:24:d4:78:2d:ea:e5:2e:
96:4a:47:56:9b:26:16:05:91:65:30:7d:f7:fb:6d:24:99:79:
b2:4f:64:db:12:80:09:ea:db:31:64:db:40:b0:f0:3a:99:25:
7b:7e:21:73:43:7c:ad:6c:7e:61:a3:0c:f6:4c:1c:0f:a3:d6:
1b:9f:a6:6d:47:42:9b:c9:f0:60:83:da:fc:fe:d6:c7:d9:93:
31:80:40:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGPw7qqOBuSUxI3Qfa4QaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1OWFjODMyM2ViYjZiZTIwZmFlODlkMDk4Y2EyNDEzOGY4
YzkwMDUwHhcNMjUxMTA0MDkwMDUxWhcNMjUxMTA1MDkwMDUxWjAzMTEwLwYDVQQD
Eyg0MTMzNDQ0MTlmMGRmNmQ3MWRhODQzNWM0M2MxMTA3Njg1YmM4NmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjOWFCpd8qNziOxcTD/4DDEwWKg4
M/DDDEGd69j/5rkgi4h9rSaE2tGktFZHrVViJ0aWIBnBsWHId1XH1cskczYyBWtF
m6lnCxjz9hZes0Fi6H7Vl0HtHnOV9APmLUVJE6rXQxioUFlkOXQbwSLJv41bBZsH
Mo2hwUV2KDeluj3pHp/0eqUPCDRUMyvBSHIw41P+oZ1sTg3jSoW07HeL+Yegbumf
bPRjk24A+NletxcTFrQj3fM4NYcU6CSZy7amHOzxZyQ+olio/OYDWj3KjhL9OwRa
Gq3om42m8J5cNvXWn+7CTHKsvYocNPGM4c8lgo/BUg6OwEX+yM8xTWwHFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEzREGfDfbXHahDXEPBEHaFvIbiMB8GA1UdIwQY
MBaAFKWayDI+u2viD66J0JjKJBOPjJAFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFpySU1qNjdhLUlQcm9uUW1Nb2tFNC1Na0FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9hMDFmODItOTE5My00MTk5LTk1YTgt
ODNhZTVkOWM4MzJmLzEvcFpySU1qNjdhLUlQcm9uUW1Nb2tFNC1Na0FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9hMDFmODItOTE5My00MTk5LTk1YTgtODNhZTVkOWM4MzJm
LzEvcFpySU1qNjdhLUlQcm9uUW1Nb2tFNC1Na0FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQL+S/bxG
U8MRP8aSuUz0mlnJhczKIownVhillVHapjARGvYMwezxH6bG9zQJIY4toshDCa5A
qrIF6ecUkpOejN6FXF4B9FpJuMPkkUoyhv1S/H4MDXdj6oI4cSxH5IVLfUgXji3r
k8WoUr0ZsCl4c2sFBjMBJpLn3GPX9w8aqzGsYGit7yTgXQIWMwO3/H1nlsOk+8G/
1VBICS5N0el3CtMpGYF4Nr3t4ppMkEEk1Hgt6uUulkpHVpsmFgWRZTB99/ttJJl5
sk9k2xKACerbMWTbQLDwOpkle34hc0N8rWx+YaMM9kwcD6PWG5+mbUdCm8nwYIPa
/P7Wx9mTMYBAnA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:57 2025 by rpki-client