Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
File: PZijti1aux3K9oriP1Me6CJA8gM.mft (raw, json)
Hash identifier: re3TAHhix9PeKkC/nBXV68Dlr4FBafrsYDpofo+ZKvU=
Subject key identifier: 5C:4F:FD:50:AF:B5:84:DB:30:8C:B8:E0:AE:4C:81:EF:C3:FC:79:7B
Authority key identifier: 3D:98:A3:B6:2D:5A:BB:1D:CA:F6:8A:E2:3F:53:1E:E8:22:40:F2:03
Certificate issuer: /CN=3d98a3b62d5abb1dcaf68ae23f531ee82240f203
Certificate serial: 019A4EF4CF3900A4BF9E1B9487A8FD7FA85E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
Manifest number: 0FFC
Signing time: Tue 04 Nov 2025 13:00:57 +0000
Manifest this update: Tue 04 Nov 2025 13:00:57 +0000
Manifest next update: Wed 05 Nov 2025 13:00:57 +0000
Files and hashes: 1: K5-cWJf7kTmzFiV3mE-MumP7Txo.roa (hash: d5nxq53iT7Tr8Pdp2k4UnWi9qs3VVT6d+if6Hmi6IVQ=)
2: PZijti1aux3K9oriP1Me6CJA8gM.crl (hash: fQl+qHpyIhXs5B/NJgUft+T/5imkDuLH2iUNqPnHujU=)
3: _TX8C92dziQpbg1kfvVVdJSGVvw.roa (hash: M6n2mPn45LSDUrpQyadpeXypeAt/8VqRu1J7jMmEfG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:cf:39:00:a4:bf:9e:1b:94:87:a8:fd:7f:a8:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d98a3b62d5abb1dcaf68ae23f531ee82240f203
Validity
Not Before: Nov 4 13:00:57 2025 GMT
Not After : Nov 5 13:00:57 2025 GMT
Subject: CN=5c4ffd50afb584db308cb8e0ae4c81efc3fc797b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d1:db:50:33:4f:aa:24:2d:d0:91:78:d6:4a:
1a:16:a5:67:1c:6a:ba:c2:2e:6d:13:a1:84:9e:e7:
e9:d4:b4:c2:06:71:05:57:e3:74:dd:13:f0:35:57:
83:49:43:c5:d4:7b:6d:a7:89:ec:72:87:d3:53:42:
5a:af:5a:19:df:39:15:fc:2a:bf:da:0a:cf:5e:b8:
d1:33:89:54:ae:dd:6f:b1:10:ad:67:77:b5:54:f9:
90:dd:49:68:25:31:d4:11:50:04:58:f4:41:c2:5e:
b0:25:03:d0:08:4d:43:51:98:1f:6e:00:fe:3e:f0:
92:c9:3c:9e:c7:34:b1:8f:5a:7f:78:ba:78:88:a6:
89:a6:c1:09:c8:37:a4:5d:e2:3f:0b:30:82:a7:fc:
f5:62:b4:53:b5:de:45:41:66:8d:ff:8b:f8:e7:ec:
fd:0c:f3:de:45:1b:62:74:73:4e:51:f3:b1:ae:8d:
e0:39:d1:9a:37:c3:75:7e:f5:08:38:16:48:c7:ee:
4f:bd:53:ba:b2:7d:85:bd:84:2f:5c:1d:f9:b4:c1:
67:91:a4:df:d6:86:93:65:24:b4:dd:7e:dd:a9:b7:
b8:33:61:82:9d:bf:17:27:ee:b5:47:cf:d2:c0:5e:
b4:ca:30:19:9c:89:32:1e:14:08:6f:6f:ad:ab:d0:
c5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4F:FD:50:AF:B5:84:DB:30:8C:B8:E0:AE:4C:81:EF:C3:FC:79:7B
X509v3 Authority Key Identifier:
keyid:3D:98:A3:B6:2D:5A:BB:1D:CA:F6:8A:E2:3F:53:1E:E8:22:40:F2:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:df:61:cb:59:7e:75:b7:c4:af:24:41:3c:e7:1e:48:c6:65:
8a:32:72:e4:55:27:e2:85:88:c8:03:92:37:08:90:1e:e9:e5:
77:2c:c1:f6:3d:0a:bf:71:56:97:49:2d:98:6a:d8:91:dc:d0:
d3:55:12:6e:cb:8b:28:87:38:68:ff:35:4d:47:30:3f:35:fa:
4b:ea:f8:52:9b:62:44:07:97:fd:7d:72:94:72:e9:89:ad:b8:
92:ed:70:9f:69:d6:a9:83:12:24:a6:b1:95:67:03:af:2b:ee:
95:ff:7e:d4:b2:8c:cb:44:80:35:a2:02:bb:16:5f:03:28:03:
9e:25:ec:fb:38:05:1a:00:a9:7a:e3:c0:4a:fa:bc:20:c3:07:
f3:41:ca:71:e6:a1:d2:a4:9d:08:9a:83:1c:7c:b2:e3:f5:fd:
18:34:4d:63:59:71:68:5b:8e:89:88:77:9c:cc:e0:2c:38:6e:
6a:93:ea:2c:b8:9e:bf:6e:93:a1:6e:c9:88:99:be:28:b6:29:
e4:d1:56:6f:e6:3d:5f:70:aa:22:41:19:89:c3:5d:55:a4:20:
6b:04:ec:82:8d:6a:ab:f1:fd:4f:05:ed:6e:58:ce:a8:c4:53:
33:d2:46:26:76:3c:ca:4d:c6:c2:d8:46:d2:9f:91:5a:a5:29:
83:c4:d0:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9M85AKS/nhuUh6j9f6heMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkOThhM2I2MmQ1YWJiMWRjYWY2OGFlMjNmNTMxZWU4MjI0
MGYyMDMwHhcNMjUxMTA0MTMwMDU3WhcNMjUxMTA1MTMwMDU3WjAzMTEwLwYDVQQD
Eyg1YzRmZmQ1MGFmYjU4NGRiMzA4Y2I4ZTBhZTRjODFlZmMzZmM3OTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9HbUDNPqiQt0JF41koaFqVnHGq6
wi5tE6GEnufp1LTCBnEFV+N03RPwNVeDSUPF1Http4nscofTU0Jar1oZ3zkV/Cq/
2grPXrjRM4lUrt1vsRCtZ3e1VPmQ3UloJTHUEVAEWPRBwl6wJQPQCE1DUZgfbgD+
PvCSyTyexzSxj1p/eLp4iKaJpsEJyDekXeI/CzCCp/z1YrRTtd5FQWaN/4v45+z9
DPPeRRtidHNOUfOxro3gOdGaN8N1fvUIOBZIx+5PvVO6sn2FvYQvXB35tMFnkaTf
1oaTZSS03X7dqbe4M2GCnb8XJ+61R8/SwF60yjAZnIkyHhQIb2+tq9DFTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxP/VCvtYTbMIy44K5Mge/D/Hl7MB8GA1UdIwQY
MBaAFD2Yo7YtWrsdyvaK4j9THugiQPIDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFppanRpMWF1eDNLOW9yaVAxTWU2Q0pBOGdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9hYzVmZGYtNWI2Ni00ODUwLTk2M2Et
ZjliNzNiM2UzZWVlLzEvUFppanRpMWF1eDNLOW9yaVAxTWU2Q0pBOGdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9hYzVmZGYtNWI2Ni00ODUwLTk2M2EtZjliNzNiM2UzZWVl
LzEvUFppanRpMWF1eDNLOW9yaVAxTWU2Q0pBOGdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcd9hy1l+
dbfEryRBPOceSMZlijJy5FUn4oWIyAOSNwiQHunldyzB9j0Kv3FWl0ktmGrYkdzQ
01USbsuLKIc4aP81TUcwPzX6S+r4UptiRAeX/X1ylHLpia24ku1wn2nWqYMSJKax
lWcDryvulf9+1LKMy0SANaICuxZfAygDniXs+zgFGgCpeuPASvq8IMMH80HKceah
0qSdCJqDHHyy4/X9GDRNY1lxaFuOiYh3nMzgLDhuapPqLLiev26ToW7JiJm+KLYp
5NFWb+Y9X3CqIkEZicNdVaQgawTsgo1qq/H9TwXtbljOqMRTM9JGJnY8yk3GwthG
0p+RWqUpg8TQng==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:23:21 2025 by rpki-client