Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft
File: pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft (raw, json)
Hash identifier: EohySSsibN9plJGph3ExzSvsq9JHuP3p3d6UVbF4wjg=
Subject key identifier: A8:C3:F2:FE:2C:83:3A:FD:32:90:72:06:62:E1:B6:26:76:3E:E6:4C
Authority key identifier: A5:03:B1:DD:41:00:70:AD:62:E4:A2:FC:66:A1:3B:4E:B6:13:68:F4
Certificate issuer: /CN=a503b1dd410070ad62e4a2fc66a13b4eb61368f4
Certificate serial: 019A552DA67D1D5E17037F7F1E051A446426
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft
Manifest number: 0BC3
Signing time: Wed 05 Nov 2025 18:00:46 +0000
Manifest this update: Wed 05 Nov 2025 18:00:46 +0000
Manifest next update: Thu 06 Nov 2025 18:00:46 +0000
Files and hashes: 1: 6jOAX6ZKooyhgzG3-RXUavHtejc.roa (hash: zAiUnOceYAANogRzQmsXCXZI4dk5OulIUSwMR15rFvs=)
2: pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.crl (hash: 2bmR9gmR7aKFohSIp0ulRso3nnxUbdozFyOfXaVWaBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:2d:a6:7d:1d:5e:17:03:7f:7f:1e:05:1a:44:64:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a503b1dd410070ad62e4a2fc66a13b4eb61368f4
Validity
Not Before: Nov 5 18:00:46 2025 GMT
Not After : Nov 6 18:00:46 2025 GMT
Subject: CN=a8c3f2fe2c833afd3290720662e1b626763ee64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cd:d5:d9:03:f7:22:4e:e5:25:0a:87:7e:35:
2a:53:18:e6:4f:ad:1f:c5:bd:9c:a5:80:8a:f0:b6:
6d:0f:27:75:01:40:ce:c8:b0:e2:56:8f:20:54:c4:
34:3d:cd:bd:49:bd:cb:4b:ab:92:22:65:e3:ae:89:
fd:c3:b1:be:b6:d6:af:37:12:fc:42:72:a0:b6:5c:
f3:31:7f:93:9f:7f:22:f3:fe:98:28:5c:cf:0b:11:
11:19:30:5b:ef:aa:45:c1:6b:a1:dd:b4:a9:dd:79:
08:c9:54:48:92:7e:ff:ea:5e:b0:fb:fd:bc:84:72:
79:b3:a6:8c:0b:8e:42:94:8d:f8:ac:2d:df:f3:b9:
94:d5:4c:e2:c0:6d:9a:35:a3:78:f9:a9:a9:6c:b0:
2e:2c:6f:93:3d:69:ea:a4:e4:bd:ed:93:39:2c:7f:
ad:1e:52:a6:35:28:55:6d:a4:ee:f2:13:9a:f0:a5:
d2:7a:cc:ea:59:ab:e7:63:52:b1:ca:90:e8:20:2c:
e1:78:e1:55:77:74:7a:56:32:18:9f:57:0c:d4:c5:
31:67:61:37:97:f6:0c:5e:ac:5a:6b:a2:76:0a:a9:
50:f3:7c:03:7c:82:58:65:29:3f:49:56:0c:c3:d5:
ac:f8:52:be:68:a2:b7:30:5e:9c:5a:34:2c:a5:dc:
2a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C3:F2:FE:2C:83:3A:FD:32:90:72:06:62:E1:B6:26:76:3E:E6:4C
X509v3 Authority Key Identifier:
keyid:A5:03:B1:DD:41:00:70:AD:62:E4:A2:FC:66:A1:3B:4E:B6:13:68:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:48:69:15:f8:18:a3:76:b0:b6:9f:3e:c9:36:22:18:66:e5:
dd:db:87:d1:c1:28:dc:cb:e4:1b:65:1a:31:ef:51:c0:e9:f8:
b9:a8:4d:a2:eb:ae:46:c1:57:45:d4:59:ae:aa:0b:9d:b3:03:
bc:30:7c:73:5e:ab:28:1b:9e:70:bd:58:77:4e:7e:73:43:6b:
2b:29:40:12:e7:e4:48:80:6a:73:d4:de:6d:c9:37:81:48:92:
ea:57:f0:1f:2d:14:5d:5e:5d:45:cc:91:4f:06:07:23:ba:5a:
3b:60:d4:8f:08:ff:13:b7:33:48:cb:f3:f9:c3:6e:de:8a:d2:
10:01:ff:e7:59:6c:4d:0e:14:8d:e8:84:60:f2:81:e9:10:c7:
59:2c:44:a6:c9:e8:bc:12:24:ed:07:5f:c5:28:d0:30:e1:fb:
d6:45:91:60:eb:f1:db:cc:df:2e:c6:62:70:fb:36:0d:c6:4c:
83:b4:34:11:08:50:c7:83:1c:f6:59:96:ae:66:4a:46:ba:86:
c2:76:5c:cc:90:b4:6f:67:e2:c2:84:73:09:14:3f:45:3d:be:
ed:44:64:98:a0:35:8a:86:ae:64:3f:ea:b9:26:47:e0:02:a4:
0f:09:1d:47:d0:8e:d1:8b:91:ae:0c:fd:1e:88:66:27:98:c8:
c2:58:7e:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpVLaZ9HV4XA39/HgUaRGQmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MDNiMWRkNDEwMDcwYWQ2MmU0YTJmYzY2YTEzYjRlYjYx
MzY4ZjQwHhcNMjUxMTA1MTgwMDQ2WhcNMjUxMTA2MTgwMDQ2WjAzMTEwLwYDVQQD
EyhhOGMzZjJmZTJjODMzYWZkMzI5MDcyMDY2MmUxYjYyNjc2M2VlNjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns3V2QP3Ik7lJQqHfjUqUxjmT60f
xb2cpYCK8LZtDyd1AUDOyLDiVo8gVMQ0Pc29Sb3LS6uSImXjron9w7G+ttavNxL8
QnKgtlzzMX+Tn38i8/6YKFzPCxERGTBb76pFwWuh3bSp3XkIyVRIkn7/6l6w+/28
hHJ5s6aMC45ClI34rC3f87mU1UziwG2aNaN4+ampbLAuLG+TPWnqpOS97ZM5LH+t
HlKmNShVbaTu8hOa8KXSeszqWavnY1KxypDoICzheOFVd3R6VjIYn1cM1MUxZ2E3
l/YMXqxaa6J2CqlQ83wDfIJYZSk/SVYMw9Ws+FK+aKK3MF6cWjQspdwqOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKjD8v4sgzr9MpByBmLhtiZ2PuZMMB8GA1UdIwQY
MBaAFKUDsd1BAHCtYuSi/GahO062E2j0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFFPeDNVRUFjSzFpNUtMOFpxRTdUcllUYVBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mZmVmOTYtYmFjNS00MTI2LWIyYjct
MDEzNWQ5MTI4ZTg2LzEvcFFPeDNVRUFjSzFpNUtMOFpxRTdUcllUYVBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mZmVmOTYtYmFjNS00MTI2LWIyYjctMDEzNWQ5MTI4ZTg2
LzEvcFFPeDNVRUFjSzFpNUtMOFpxRTdUcllUYVBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb0hpFfgY
o3awtp8+yTYiGGbl3duH0cEo3MvkG2UaMe9RwOn4uahNouuuRsFXRdRZrqoLnbMD
vDB8c16rKBuecL1Yd05+c0NrKylAEufkSIBqc9Tebck3gUiS6lfwHy0UXV5dRcyR
TwYHI7paO2DUjwj/E7czSMvz+cNu3orSEAH/51lsTQ4UjeiEYPKB6RDHWSxEpsno
vBIk7QdfxSjQMOH71kWRYOvx28zfLsZicPs2DcZMg7Q0EQhQx4Mc9lmWrmZKRrqG
wnZczJC0b2fiwoRzCRQ/RT2+7URkmKA1ioauZD/quSZH4AKkDwkdR9CO0YuRrgz9
HohmJ5jIwlh+Iw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 22:14:25 2025 by rpki-client