Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
File: pavEOvztcvuSd4covuVxxnj1OFM.mft (raw, json)
Hash identifier: w3zw6DBS0Bg8mBEa99I7SjBXQI4Nvbv9WYIZBjRjSU4=
Subject key identifier: C3:03:25:3A:3D:4D:9A:E7:50:27:A0:35:70:28:15:CD:17:78:61:92
Authority key identifier: A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53
Certificate issuer: /CN=a5abc43afced72fb92778728bee571c678f53853
Certificate serial: 019A4E8633B6FC11FECC983D69F8DC6D0019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 11:00:09 +0000
Manifest this update: Tue 04 Nov 2025 11:00:09 +0000
Manifest next update: Wed 05 Nov 2025 11:00:09 +0000
Files and hashes: 1: XTYDavgtknOlnwhLwE8YM7gzGNo.roa (hash: PldFwC0OKAPE16YsYJiSJ7/6hQNZV4y5TLuWK0kyNJ0=)
2: pavEOvztcvuSd4covuVxxnj1OFM.crl (hash: NOjJG0fPjEifQnXsYlesy+E67XW7PG5cdTP3Fi096K4=)
3: sSPz7KsWNIMKyyRHlSkiZwosgKw.roa (hash: wjM7pq8MRvpOQBEJDje34R/IkWbdszEvqnHRsuBbId4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:33:b6:fc:11:fe:cc:98:3d:69:f8:dc:6d:00:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5abc43afced72fb92778728bee571c678f53853
Validity
Not Before: Nov 4 11:00:09 2025 GMT
Not After : Nov 5 11:00:09 2025 GMT
Subject: CN=c303253a3d4d9ae75027a035702815cd17786192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e4:44:a1:0b:83:08:ff:f9:0c:a4:a1:12:75:
d3:dc:75:76:c3:8a:ea:6b:5f:f3:7c:50:ed:e4:a1:
2a:79:ec:8a:55:a3:35:f5:de:c7:8f:b9:c2:c1:0b:
e0:1e:30:f5:e4:11:b4:14:bd:c8:81:43:8d:7a:6b:
5f:f6:28:97:17:27:c1:25:b0:af:6a:0e:54:b2:32:
1b:ce:42:ee:10:22:1b:e8:fb:14:7a:61:1d:e5:43:
a2:ef:a9:b0:7e:af:29:3a:bd:d4:8d:b6:b0:1f:f0:
12:59:64:8e:65:69:76:a0:dd:70:77:9f:d8:94:f0:
b9:6b:61:06:9c:a0:bf:53:22:4d:28:38:f9:ef:99:
28:ac:9b:ca:31:a6:bf:ae:df:b7:87:77:21:0f:8b:
fe:33:08:b3:12:26:ad:75:5b:52:93:41:04:0c:ad:
53:28:f3:fc:0a:65:1d:89:ca:43:16:d8:de:a8:b0:
8b:99:72:74:10:b3:af:83:d6:8b:51:2f:4e:8c:85:
3b:aa:11:d9:54:6d:70:95:87:b6:15:62:25:8f:e4:
1e:cb:e3:f0:e8:2c:3f:65:f2:01:4c:95:a2:2b:d8:
8a:a7:6b:f4:0b:dd:4e:4c:6f:46:6b:72:6f:f6:21:
c6:7e:6a:83:de:8f:76:cb:d4:9b:2a:a3:5b:65:ed:
71:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:03:25:3A:3D:4D:9A:E7:50:27:A0:35:70:28:15:CD:17:78:61:92
X509v3 Authority Key Identifier:
keyid:A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c3:c0:85:36:a3:9f:40:86:1e:fc:52:a4:78:9a:20:69:fc:
ae:9a:30:8b:b0:78:e0:d1:fd:ab:8f:30:24:e5:ed:31:d7:a4:
b1:eb:9c:07:0b:5c:2c:cc:9d:72:99:00:c0:f6:a6:19:0c:4b:
2e:26:43:9d:0b:a6:9c:65:c1:48:b8:a1:bf:79:1f:88:11:4b:
a0:7f:d4:b9:59:b2:0d:4f:68:31:82:64:bd:e1:b1:47:ba:36:
08:72:70:85:d7:0b:8e:24:04:8b:ec:d6:0b:8c:b5:52:5f:c6:
56:92:5f:28:74:4d:79:44:be:77:3a:ff:14:94:cb:a8:6d:80:
fb:20:bd:ab:2b:62:a4:0e:37:24:54:7a:73:88:c4:ef:9b:b2:
3f:54:82:f9:69:6e:13:c1:10:b4:c0:87:fe:49:a8:ec:0a:14:
90:b1:99:c2:5c:06:a9:43:7e:02:64:a5:5b:03:ea:fe:7a:85:
e6:1e:a9:eb:f4:59:b6:bb:42:d4:72:83:d6:94:80:94:bf:9b:
b8:b3:28:70:11:6a:3d:bc:dd:99:00:6a:be:ae:9e:80:81:87:
8a:f2:c6:dc:1a:1d:9e:0d:6a:dc:5d:1f:87:ad:6d:d2:1c:4a:
3e:05:95:76:0e:03:02:4b:cc:37:cc:58:1a:b8:cc:f2:45:02:
c7:e6:3a:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhjO2/BH+zJg9afjcbQAZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YWJjNDNhZmNlZDcyZmI5Mjc3ODcyOGJlZTU3MWM2Nzhm
NTM4NTMwHhcNMjUxMTA0MTEwMDA5WhcNMjUxMTA1MTEwMDA5WjAzMTEwLwYDVQQD
EyhjMzAzMjUzYTNkNGQ5YWU3NTAyN2EwMzU3MDI4MTVjZDE3Nzg2MTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuREoQuDCP/5DKShEnXT3HV2w4rq
a1/zfFDt5KEqeeyKVaM19d7Hj7nCwQvgHjD15BG0FL3IgUONemtf9iiXFyfBJbCv
ag5UsjIbzkLuECIb6PsUemEd5UOi76mwfq8pOr3UjbawH/ASWWSOZWl2oN1wd5/Y
lPC5a2EGnKC/UyJNKDj575korJvKMaa/rt+3h3chD4v+MwizEiatdVtSk0EEDK1T
KPP8CmUdicpDFtjeqLCLmXJ0ELOvg9aLUS9OjIU7qhHZVG1wlYe2FWIlj+Qey+Pw
6Cw/ZfIBTJWiK9iKp2v0C91OTG9Ga3Jv9iHGfmqD3o92y9SbKqNbZe1xbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMMDJTo9TZrnUCegNXAoFc0XeGGSMB8GA1UdIwQY
MBaAFKWrxDr87XL7kneHKL7lccZ49ThTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGF2RU92enRjdnVTZDRjb3Z1Vnh4bmoxT0ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9lOWI3NmEtMTBiMy00N2MwLWE1MTct
YjVlOTFmYzY1MDUxLzEvcGF2RU92enRjdnVTZDRjb3Z1Vnh4bmoxT0ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9lOWI3NmEtMTBiMy00N2MwLWE1MTctYjVlOTFmYzY1MDUx
LzEvcGF2RU92enRjdnVTZDRjb3Z1Vnh4bmoxT0ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcMPAhTaj
n0CGHvxSpHiaIGn8rpowi7B44NH9q48wJOXtMdekseucBwtcLMydcpkAwPamGQxL
LiZDnQumnGXBSLihv3kfiBFLoH/UuVmyDU9oMYJkveGxR7o2CHJwhdcLjiQEi+zW
C4y1Ul/GVpJfKHRNeUS+dzr/FJTLqG2A+yC9qytipA43JFR6c4jE75uyP1SC+Wlu
E8EQtMCH/kmo7AoUkLGZwlwGqUN+AmSlWwPq/nqF5h6p6/RZtrtC1HKD1pSAlL+b
uLMocBFqPbzdmQBqvq6egIGHivLG3Bodng1q3F0fh61t0hxKPgWVdg4DAkvMN8xY
GrjM8kUCx+Y6Mg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:54 2025 by rpki-client