Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
File: pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft (raw, json)
Hash identifier: EKKPWPfAJCpjOd167A37YTvglwDs69jzff/gszEUTpA=
Subject key identifier: 3B:9A:B9:F3:C5:7F:1D:BC:1A:63:E5:6D:EA:9B:34:3B:BB:2F:8C:48
Authority key identifier: A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF
Certificate issuer: /CN=a633725cd5dd91cf190ab3a99526e898357856ef
Certificate serial: 019A52D1A2413F4C9894B802036377CA4B1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 07:01:01 +0000
Manifest this update: Wed 05 Nov 2025 07:01:01 +0000
Manifest next update: Thu 06 Nov 2025 07:01:01 +0000
Files and hashes: 1: SMwI-Rnmis2eePW_F_GRyzsQVwc.roa (hash: tdRLxodAQZWX8dKW9xJOxhOQI+ocU2apdjVD9eeaSWc=)
2: jHM5InJQV_3L354P4EcDRlzLqQg.roa (hash: YagEFBVsay86X4xOyFCoWFnHQNGB7P3cKZT9Ojcer8U=)
3: p60T_9BRDnROvd9U0mIYWu3JYG4.roa (hash: CASmZCb6AimtCFSZaoN9/6dcpSXZ9rOo6eQFeAX0PBw=)
4: pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl (hash: kVM6erMqEXN8atqAigEJFnC4UQHik0TLk/BriO/hwRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:a2:41:3f:4c:98:94:b8:02:03:63:77:ca:4b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a633725cd5dd91cf190ab3a99526e898357856ef
Validity
Not Before: Nov 5 07:01:01 2025 GMT
Not After : Nov 6 07:01:01 2025 GMT
Subject: CN=3b9ab9f3c57f1dbc1a63e56dea9b343bbb2f8c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:19:d9:00:64:4c:6b:f2:23:dd:f3:e1:89:63:
a9:27:29:81:68:62:a8:77:94:22:8a:e0:32:4b:84:
05:7f:32:36:67:e6:7f:50:ad:f8:d9:bc:16:92:9d:
98:47:bd:22:d8:e0:03:3d:a2:15:67:7a:44:cc:ea:
bb:7d:79:1c:ca:1a:2d:85:24:08:bd:2c:f9:a0:64:
b8:3b:ac:fb:ab:22:51:9c:35:51:67:5e:a4:c0:3e:
41:68:60:dd:99:a1:3f:5b:c0:5e:e9:50:57:84:ec:
4d:39:3b:53:d1:ce:72:e0:ef:7e:69:48:1e:6a:f7:
51:47:60:35:9a:0b:b7:d1:10:e7:22:19:74:b1:6e:
8a:37:8e:cd:50:a6:09:d0:c0:96:51:f1:c0:a5:59:
7a:e5:0b:52:1f:04:65:2c:51:e5:22:9e:2c:6b:91:
6f:7d:0b:4c:e7:d5:2a:18:3e:28:11:f4:f6:e0:ff:
86:9e:f7:bd:b3:33:87:d1:a1:ed:83:ad:73:72:94:
4d:28:81:70:90:b3:bb:40:ac:e7:2e:6c:6b:9e:59:
5e:8b:f5:2e:54:44:79:ba:d6:80:7b:46:cb:d6:69:
c4:02:6c:32:f5:88:46:b4:99:50:a2:ff:98:80:94:
19:fc:44:0c:b5:a3:f7:ef:ea:5d:b1:af:cb:05:85:
e0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9A:B9:F3:C5:7F:1D:BC:1A:63:E5:6D:EA:9B:34:3B:BB:2F:8C:48
X509v3 Authority Key Identifier:
keyid:A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:14:1b:58:a0:a9:30:67:6c:68:af:c3:b7:f4:d7:27:3a:ba:
10:f8:f4:b5:1a:cb:56:02:8b:69:f1:c4:8c:f9:66:a7:72:88:
90:a4:5d:cf:b9:5b:6a:d5:aa:3d:a4:07:df:96:ca:8e:96:94:
5c:c1:83:66:60:64:81:ab:8a:ff:58:a1:17:e1:dc:93:05:3f:
7f:d0:03:84:d4:92:ce:5b:67:60:43:f9:97:ec:17:29:16:a8:
8e:f7:15:81:32:f6:24:ca:1a:50:8e:cf:64:67:b6:79:33:ca:
f2:f8:53:fa:6d:a6:d2:b4:a6:ce:ae:90:1d:0f:07:09:68:68:
d6:31:fa:47:cd:29:9a:90:74:13:c5:0c:b6:03:25:89:36:3c:
76:3f:4e:63:92:16:71:74:93:0f:30:22:a6:4d:ae:5e:e3:10:
33:52:66:f8:89:29:c2:d3:1a:87:b2:d8:9d:68:3e:08:7a:47:
c9:12:c4:ac:49:82:26:72:a0:07:8f:ad:6a:78:ac:de:49:e6:
5a:2b:62:a3:65:2d:02:94:37:55:1f:5f:a4:ec:d8:96:ce:0a:
be:eb:96:c9:fe:4e:9d:c2:48:53:71:57:78:bf:0b:1f:3d:63:
a9:04:6b:87:56:49:e5:c9:72:80:d7:f8:df:81:de:eb:b6:1b:
5c:0e:18:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0aJBP0yYlLgCA2N3yksbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MzM3MjVjZDVkZDkxY2YxOTBhYjNhOTk1MjZlODk4MzU3
ODU2ZWYwHhcNMjUxMTA1MDcwMTAxWhcNMjUxMTA2MDcwMTAxWjAzMTEwLwYDVQQD
EygzYjlhYjlmM2M1N2YxZGJjMWE2M2U1NmRlYTliMzQzYmJiMmY4YzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBnZAGRMa/Ij3fPhiWOpJymBaGKo
d5QiiuAyS4QFfzI2Z+Z/UK342bwWkp2YR70i2OADPaIVZ3pEzOq7fXkcyhothSQI
vSz5oGS4O6z7qyJRnDVRZ16kwD5BaGDdmaE/W8Be6VBXhOxNOTtT0c5y4O9+aUge
avdRR2A1mgu30RDnIhl0sW6KN47NUKYJ0MCWUfHApVl65QtSHwRlLFHlIp4sa5Fv
fQtM59UqGD4oEfT24P+Gnve9szOH0aHtg61zcpRNKIFwkLO7QKznLmxrnllei/Uu
VER5utaAe0bL1mnEAmwy9YhGtJlQov+YgJQZ/EQMtaP37+pdsa/LBYXgEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDuaufPFfx28GmPlbeqbNDu7L4xIMB8GA1UdIwQY
MBaAFKYzclzV3ZHPGQqzqZUm6Jg1eFbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGpOeVhOWGRrYzhaQ3JPcGxTYm9tRFY0VnU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC81Yjg1NmEtYTkwZC00NzkxLTljMTAt
YzBiODEzYjRlYzdlLzEvcGpOeVhOWGRrYzhaQ3JPcGxTYm9tRFY0VnU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC81Yjg1NmEtYTkwZC00NzkxLTljMTAtYzBiODEzYjRlYzdl
LzEvcGpOeVhOWGRrYzhaQ3JPcGxTYm9tRFY0VnU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqRQbWKCp
MGdsaK/Dt/TXJzq6EPj0tRrLVgKLafHEjPlmp3KIkKRdz7lbatWqPaQH35bKjpaU
XMGDZmBkgauK/1ihF+HckwU/f9ADhNSSzltnYEP5l+wXKRaojvcVgTL2JMoaUI7P
ZGe2eTPK8vhT+m2m0rSmzq6QHQ8HCWho1jH6R80pmpB0E8UMtgMliTY8dj9OY5IW
cXSTDzAipk2uXuMQM1Jm+IkpwtMah7LYnWg+CHpHyRLErEmCJnKgB4+tanis3knm
Witio2UtApQ3VR9fpOzYls4KvuuWyf5OncJIU3FXeL8LHz1jqQRrh1ZJ5clygNf4
34He67YbXA4YWQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:40:33 2025 by rpki-client