Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
File: pCzz6j9GGa3XsfheXbx2jNPRdC0.mft (raw, json)
Hash identifier: DrwTsCZwrXah6IUbC44BikT0lxrMYTvUsuE6oENFWic=
Subject key identifier: 75:B8:20:65:CF:08:88:DD:8D:DD:BB:51:2E:09:0D:E8:62:B5:E1:F2
Authority key identifier: A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
Certificate issuer: /CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Certificate serial: 019A522C055E191944FD87A17C0B46C88922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 04:00:07 +0000
Manifest this update: Wed 05 Nov 2025 04:00:07 +0000
Manifest next update: Thu 06 Nov 2025 04:00:07 +0000
Files and hashes: 1: SNV_1VpgwAmnXneSKWb5jRq8ToE.roa (hash: WATnXIVshclXFF3TBwoPfH1QR7+uJEv7hk540ZBWOkc=)
2: lVzggsEuwHNUmwDhZ4XQcolHpDk.roa (hash: eA/BupKOc3qojEoZ8E13TwJIMViSsM3/KaYEEgTR1Jc=)
3: pCzz6j9GGa3XsfheXbx2jNPRdC0.crl (hash: dfevSXCwy4YQNBwqddmJp3KwF39Bj4WZSHlCOxC8sIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:05:5e:19:19:44:fd:87:a1:7c:0b:46:c8:89:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Validity
Not Before: Nov 5 04:00:07 2025 GMT
Not After : Nov 6 04:00:07 2025 GMT
Subject: CN=75b82065cf0888dd8dddbb512e090de862b5e1f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b7:32:d5:30:53:7e:52:aa:13:f9:7a:23:c5:
24:2f:03:b1:3e:05:71:e5:12:c2:ee:ab:f0:b0:83:
32:15:25:da:b0:95:f1:da:42:5f:29:db:54:81:b6:
05:b5:5e:02:d3:da:57:d5:a7:5e:6b:18:50:07:21:
58:a7:d4:37:cd:96:40:87:27:90:15:bf:1a:93:1c:
c9:a4:7e:3d:9a:fd:48:e0:35:a2:5c:6d:70:82:00:
c5:b2:b1:82:13:83:b7:67:ca:09:2d:6f:f8:35:ad:
01:71:73:5e:64:53:07:87:f0:82:ac:1e:54:9a:7e:
dc:64:1b:9d:15:db:75:de:2b:20:cb:f2:22:a0:43:
2e:91:24:62:a7:6f:c8:ca:49:23:a2:51:35:8b:a6:
50:84:25:e5:8e:ef:bd:05:d3:3c:aa:2b:f3:13:f8:
1a:13:f9:aa:0c:99:48:2a:17:94:1e:a1:5c:50:cb:
d3:b4:c4:1b:49:64:1d:33:0c:75:39:b3:0d:0e:8e:
f7:eb:17:ed:48:1b:62:83:0c:e1:37:13:12:a4:f4:
09:d3:b2:8e:b3:64:b1:0a:c3:19:5e:af:54:a5:b0:
7d:10:86:ac:e9:c4:57:64:37:51:f3:a7:80:88:11:
8c:3c:bd:64:3d:39:e3:e6:9c:c3:3b:a3:55:36:d1:
b9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B8:20:65:CF:08:88:DD:8D:DD:BB:51:2E:09:0D:E8:62:B5:E1:F2
X509v3 Authority Key Identifier:
keyid:A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:69:c7:bf:89:e8:c7:08:d1:0a:3b:8d:86:30:ab:f5:83:9d:
10:67:a2:87:c9:33:46:7f:6f:29:be:6b:4e:40:90:1f:77:3e:
a2:28:36:a8:c7:d1:97:7d:66:fb:84:ec:dc:34:65:c8:78:e7:
87:4b:3c:db:cc:d6:32:cc:03:71:76:b3:3d:25:1d:09:d9:23:
6f:3d:2f:fa:11:fe:5c:ab:8c:b7:fe:c5:35:ce:6f:1b:ec:c4:
d6:32:13:1f:48:e5:ea:f9:db:ae:11:f7:69:7a:14:b2:ad:04:
80:f0:2e:a2:b9:87:12:ea:8d:f9:58:57:32:f6:77:cc:b1:08:
83:51:b0:01:5c:48:7d:20:1a:13:2b:36:17:6f:c2:50:90:3a:
32:fe:34:b7:12:4b:74:cf:0f:dc:e6:9e:88:0a:a9:c1:71:fc:
ed:65:d6:2e:60:d1:f7:42:7f:cd:cf:27:16:c6:9c:d9:c9:b7:
a1:f4:aa:f2:f6:a7:85:aa:ad:73:a7:38:ae:56:04:5a:fe:0e:
31:44:71:d2:9d:56:fa:c7:50:40:d5:34:96:ce:fd:fa:52:75:
e4:ce:49:31:b9:ca:41:c8:e1:14:b7:82:17:5e:fd:f9:0a:4f:
1f:25:84:34:ff:be:75:59:77:48:eb:2d:89:a9:f0:f5:65:cd:
f6:8e:38:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSLAVeGRlE/YehfAtGyIkiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MmNmM2VhM2Y0NjE5YWRkN2IxZjg1ZTVkYmM3NjhjZDNk
MTc0MmQwHhcNMjUxMTA1MDQwMDA3WhcNMjUxMTA2MDQwMDA3WjAzMTEwLwYDVQQD
Eyg3NWI4MjA2NWNmMDg4OGRkOGRkZGJiNTEyZTA5MGRlODYyYjVlMWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbcy1TBTflKqE/l6I8UkLwOxPgVx
5RLC7qvwsIMyFSXasJXx2kJfKdtUgbYFtV4C09pX1adeaxhQByFYp9Q3zZZAhyeQ
Fb8akxzJpH49mv1I4DWiXG1wggDFsrGCE4O3Z8oJLW/4Na0BcXNeZFMHh/CCrB5U
mn7cZBudFdt13isgy/IioEMukSRip2/IykkjolE1i6ZQhCXlju+9BdM8qivzE/ga
E/mqDJlIKheUHqFcUMvTtMQbSWQdMwx1ObMNDo736xftSBtigwzhNxMSpPQJ07KO
s2SxCsMZXq9UpbB9EIas6cRXZDdR86eAiBGMPL1kPTnj5pzDO6NVNtG58QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHW4IGXPCIjdjd27US4JDehiteHyMB8GA1UdIwQY
MBaAFKQs8+o/Rhmt17H4Xl28dozT0XQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEN6ejZqOUdHYTNYc2ZoZVhieDJqTlBSZEMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81NzI2OWItMGY3MC00NmNmLWJjZTIt
Yzc3NzUxNTlmYzgyLzEvcEN6ejZqOUdHYTNYc2ZoZVhieDJqTlBSZEMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC81NzI2OWItMGY3MC00NmNmLWJjZTItYzc3NzUxNTlmYzgy
LzEvcEN6ejZqOUdHYTNYc2ZoZVhieDJqTlBSZEMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAWnHv4no
xwjRCjuNhjCr9YOdEGeih8kzRn9vKb5rTkCQH3c+oig2qMfRl31m+4Ts3DRlyHjn
h0s828zWMswDcXazPSUdCdkjbz0v+hH+XKuMt/7FNc5vG+zE1jITH0jl6vnbrhH3
aXoUsq0EgPAuormHEuqN+VhXMvZ3zLEIg1GwAVxIfSAaEys2F2/CUJA6Mv40txJL
dM8P3OaeiAqpwXH87WXWLmDR90J/zc8nFsac2cm3ofSq8vanhaqtc6c4rlYEWv4O
MURx0p1W+sdQQNU0ls79+lJ15M5JMbnKQcjhFLeCF179+QpPHyWENP++dVl3SOst
ianw9WXN9o44qg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:52:03 2025 by rpki-client