Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
File: PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft (raw, json)
Hash identifier: M76+uQgprKuMnjOAXZ87sZmHv8bwQz6QgNfMoE0CNvM=
Subject key identifier: 57:37:42:61:CF:BE:21:B2:21:66:EC:AD:32:59:89:36:5A:AA:80:D6
Authority key identifier: 3C:8D:FE:10:9D:E8:31:D3:2F:D7:8A:58:CC:5C:1D:14:9A:45:53:D2
Certificate issuer: /CN=3c8dfe109de831d32fd78a58cc5c1d149a4553d2
Certificate serial: 019A50E25BED5BDBB422289B6D4CD0701E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
Manifest number: 108B
Signing time: Tue 04 Nov 2025 22:00:03 +0000
Manifest this update: Tue 04 Nov 2025 22:00:03 +0000
Manifest next update: Wed 05 Nov 2025 22:00:03 +0000
Files and hashes: 1: PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl (hash: RtXtuwE0o96LRyBdVAwozchtXQRQ3noRKrYXmyaaE+g=)
2: lFB-3tPNMg7_ita4wpHXyFs1Wtg.roa (hash: 2vQA+DCbD+mwH0gGh6uSgSbBtdD3lkqqjcblNuRAAAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:5b:ed:5b:db:b4:22:28:9b:6d:4c:d0:70:1e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8dfe109de831d32fd78a58cc5c1d149a4553d2
Validity
Not Before: Nov 4 22:00:03 2025 GMT
Not After : Nov 5 22:00:03 2025 GMT
Subject: CN=57374261cfbe21b22166ecad325989365aaa80d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:aa:ae:ed:49:a6:8f:cc:51:c8:69:ca:fd:08:
7b:68:41:98:16:52:29:96:9f:4a:15:24:30:2a:e8:
cc:93:9d:e9:04:9b:e8:1c:db:7c:7f:70:32:0c:af:
2a:f6:ed:24:5c:5f:eb:26:43:0f:b4:e6:51:c1:56:
3e:1c:96:61:39:8a:15:6c:c6:b9:b1:70:0d:f2:0a:
32:42:f5:85:58:10:f2:15:a5:c3:f1:a2:83:94:5d:
48:03:0b:a6:0b:83:30:fa:fe:ca:c5:dc:d5:b0:99:
56:ce:4f:b7:47:06:46:0b:00:9b:c4:85:03:52:74:
45:80:26:79:fc:b6:62:eb:23:58:95:a0:b1:5d:5e:
50:27:51:ba:c0:1f:b5:a0:21:fa:ed:93:6e:42:80:
b4:8b:a8:52:a6:04:a2:83:d5:c8:73:56:a0:e7:d3:
ba:c1:7e:18:48:4b:80:5b:9e:4f:6e:ec:9c:19:62:
27:f0:58:3f:f7:89:8b:37:6d:60:3a:30:13:aa:60:
03:35:a2:a6:57:29:54:f5:a6:61:2a:99:9a:86:db:
b3:24:05:e4:12:e0:05:c2:c8:89:a2:ee:ae:b7:7a:
6e:0e:5b:68:3f:60:fd:6f:a9:34:22:74:61:34:54:
ca:78:79:2e:91:78:51:de:77:0c:19:54:79:b4:54:
0c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:37:42:61:CF:BE:21:B2:21:66:EC:AD:32:59:89:36:5A:AA:80:D6
X509v3 Authority Key Identifier:
keyid:3C:8D:FE:10:9D:E8:31:D3:2F:D7:8A:58:CC:5C:1D:14:9A:45:53:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:69:ec:0e:11:a2:84:7f:ce:18:c5:db:7a:38:80:1f:67:0e:
70:02:5d:9f:4e:5b:a0:8d:14:3d:e7:0b:6c:35:e6:69:9a:ca:
eb:d6:ec:bd:d1:52:26:4b:5c:89:32:4b:bf:59:8c:a3:dd:b3:
02:9b:6b:eb:83:58:3c:0c:a2:42:aa:0f:64:4a:b2:cc:1f:63:
a1:cb:bf:68:cb:4b:ef:79:e9:1e:cd:22:0f:49:18:3c:cb:4e:
ba:24:ca:16:ab:08:12:9a:98:b4:93:b4:b0:de:4c:94:73:18:
e7:b6:3c:1e:4e:d1:cd:ea:cc:e0:3f:15:20:b8:f8:6e:41:72:
03:b3:36:d6:2f:7d:a9:24:19:4f:44:62:5b:b8:cd:bb:2e:4e:
97:b5:6a:96:2a:bf:08:d9:86:db:99:83:0b:a1:a2:d8:33:f2:
ae:b8:4b:8a:f3:ec:65:d7:5a:40:61:6a:9e:e3:f7:86:f1:09:
31:fd:b8:e7:f6:91:6f:56:6d:dc:2a:d8:f6:0e:f5:87:a6:74:
17:8c:19:8e:17:36:68:67:08:8f:05:7b:fb:ca:95:87:22:d6:
bf:ad:a3:9f:f7:61:1a:c4:79:8f:76:c7:bf:1e:18:35:34:fa:
ce:8a:72:fa:1b:84:7c:08:c6:91:9d:8b:5c:b7:bc:16:58:ee:
56:ef:f4:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4lvtW9u0IiibbUzQcB6YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjOGRmZTEwOWRlODMxZDMyZmQ3OGE1OGNjNWMxZDE0OWE0
NTUzZDIwHhcNMjUxMTA0MjIwMDAzWhcNMjUxMTA1MjIwMDAzWjAzMTEwLwYDVQQD
Eyg1NzM3NDI2MWNmYmUyMWIyMjE2NmVjYWQzMjU5ODkzNjVhYWE4MGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaqu7Ummj8xRyGnK/Qh7aEGYFlIp
lp9KFSQwKujMk53pBJvoHNt8f3AyDK8q9u0kXF/rJkMPtOZRwVY+HJZhOYoVbMa5
sXAN8goyQvWFWBDyFaXD8aKDlF1IAwumC4Mw+v7KxdzVsJlWzk+3RwZGCwCbxIUD
UnRFgCZ5/LZi6yNYlaCxXV5QJ1G6wB+1oCH67ZNuQoC0i6hSpgSig9XIc1ag59O6
wX4YSEuAW55PbuycGWIn8Fg/94mLN21gOjATqmADNaKmVylU9aZhKpmahtuzJAXk
EuAFwsiJou6ut3puDltoP2D9b6k0InRhNFTKeHkukXhR3ncMGVR5tFQM/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFc3QmHPviGyIWbsrTJZiTZaqoDWMB8GA1UdIwQY
MBaAFDyN/hCd6DHTL9eKWMxcHRSaRVPSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEkzLUVKM29NZE12MTRwWXpGd2RGSnBGVTlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kNTc5NjktZWE1Zi00NTE4LTkyZTEt
NTNhMDY4MGY5NzEwLzEvUEkzLUVKM29NZE12MTRwWXpGd2RGSnBGVTlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9kNTc5NjktZWE1Zi00NTE4LTkyZTEtNTNhMDY4MGY5NzEw
LzEvUEkzLUVKM29NZE12MTRwWXpGd2RGSnBGVTlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkWnsDhGi
hH/OGMXbejiAH2cOcAJdn05boI0UPecLbDXmaZrK69bsvdFSJktciTJLv1mMo92z
Aptr64NYPAyiQqoPZEqyzB9jocu/aMtL73npHs0iD0kYPMtOuiTKFqsIEpqYtJO0
sN5MlHMY57Y8Hk7RzerM4D8VILj4bkFyA7M21i99qSQZT0RiW7jNuy5Ol7Vqliq/
CNmG25mDC6Gi2DPyrrhLivPsZddaQGFqnuP3hvEJMf245/aRb1Zt3CrY9g71h6Z0
F4wZjhc2aGcIjwV7+8qVhyLWv62jn/dhGsR5j3bHvx4YNTT6zopy+huEfAjGkZ2L
XLe8FljuVu/0rA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:44:15 2025 by rpki-client