Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
File: PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft (raw, json)
Hash identifier: zCJGT9IrIb5FPQ0s1Or5gSwevHZp4NwhS2BQDMHmqmI=
Subject key identifier: E1:44:FF:C8:58:BF:D2:03:BD:D3:9F:79:E4:54:3A:A9:23:A6:53:7A
Authority key identifier: 3C:02:09:4C:22:10:D8:B2:17:15:F9:8D:F8:59:8B:35:32:08:D1:0C
Certificate issuer: /CN=3c02094c2210d8b21715f98df8598b353208d10c
Certificate serial: 019A4DE1EB808369B5557BEAE70FC882EB3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
Manifest number: 11A8
Signing time: Tue 04 Nov 2025 08:00:42 +0000
Manifest this update: Tue 04 Nov 2025 08:00:42 +0000
Manifest next update: Wed 05 Nov 2025 08:00:42 +0000
Files and hashes: 1: CufUT2fMUqvz9LGxO18OZgdQp_g.roa (hash: G2fcMqhZShi/pIW7MbvdKjfohzkmwJAvDqVZX+1pdMQ=)
2: PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl (hash: NB+AqB+RuyK5s0z9HB6P++01g7lPJFjvnR9dNYOY36g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:eb:80:83:69:b5:55:7b:ea:e7:0f:c8:82:eb:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c02094c2210d8b21715f98df8598b353208d10c
Validity
Not Before: Nov 4 08:00:42 2025 GMT
Not After : Nov 5 08:00:42 2025 GMT
Subject: CN=e144ffc858bfd203bdd39f79e4543aa923a6537a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5d:cd:e2:36:b0:63:4d:cd:9b:9f:b2:71:f9:
77:30:ad:0f:9d:07:e6:db:bf:e5:8a:d7:99:13:4d:
00:ca:07:b7:57:a9:fc:1c:2d:8c:b3:16:a6:9c:e5:
da:07:80:de:80:c0:1d:7b:26:95:67:a8:30:4b:5f:
91:d9:33:03:dd:fd:b7:ae:66:0e:79:3a:30:89:90:
68:07:81:36:8f:be:ec:0f:10:4c:fd:54:22:be:6e:
57:fd:12:f9:28:ee:58:26:9c:91:26:d3:b8:99:90:
74:d0:27:15:b9:e9:88:0b:71:25:37:7b:04:b3:14:
af:ad:ca:e9:d8:bd:97:b5:d6:35:16:53:ca:c2:d1:
0f:05:7b:89:30:68:5c:67:8b:03:47:65:97:07:ac:
41:80:2d:a3:e3:32:38:18:11:8b:5a:08:2f:6b:b9:
a1:61:a8:82:dc:21:59:ef:1b:18:27:a6:1b:1b:fb:
b6:f0:0d:76:4f:9b:06:bc:35:71:61:ac:be:a0:15:
57:f9:ba:20:d3:e1:91:a1:df:4d:14:34:4d:19:d7:
11:ce:45:57:be:85:c6:ea:60:a5:c2:1f:4d:cb:3f:
42:a3:1d:6a:e2:3c:25:a9:53:a1:bc:90:b4:a8:a0:
85:85:c7:a7:f7:0d:f9:43:b4:5b:32:b8:22:1e:30:
eb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:44:FF:C8:58:BF:D2:03:BD:D3:9F:79:E4:54:3A:A9:23:A6:53:7A
X509v3 Authority Key Identifier:
keyid:3C:02:09:4C:22:10:D8:B2:17:15:F9:8D:F8:59:8B:35:32:08:D1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:99:2e:1c:4c:31:e6:25:8b:8b:b5:5a:a7:17:6b:af:cb:bf:
4b:d0:dc:f1:4c:0a:8b:60:f2:c2:7b:0a:d1:6e:97:e2:4c:74:
33:79:50:8b:d3:81:af:be:f6:49:64:ad:b0:a4:ef:33:d3:f6:
e7:b3:a4:e1:f8:09:cf:c2:39:a9:33:fb:a7:a3:6b:9c:d1:f6:
a5:70:2c:92:53:b8:6c:ce:e9:8d:5e:00:ef:f7:b9:7e:1c:01:
28:c5:10:02:1e:2a:f1:14:74:da:95:07:21:24:50:dc:39:2c:
a2:75:4b:76:98:4e:74:34:99:03:65:7b:64:7d:60:61:d3:d7:
ad:16:04:97:65:74:a0:f3:00:9f:4e:66:a7:cd:c2:a4:4c:3e:
5a:a2:fa:1c:6d:0b:ad:3e:33:81:ff:77:65:a3:d4:1d:ac:77:
64:7e:57:dc:34:a7:7d:4a:6f:76:74:c4:55:5a:79:c8:64:9f:
16:10:1e:ea:55:1b:ee:ca:f7:6f:fa:bc:3e:dd:d1:17:af:17:
a8:12:65:57:57:41:3f:de:e0:fd:ad:e0:26:8e:8b:eb:52:de:
d9:eb:f2:82:e9:4f:6f:bd:cd:33:16:dc:a6:de:bf:3b:77:d8:
46:b2:dc:3d:1e:d2:03:a9:3e:1e:23:64:92:1c:06:64:38:c2:
f1:b6:2c:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4euAg2m1VXvq5w/Igus+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMDIwOTRjMjIxMGQ4YjIxNzE1Zjk4ZGY4NTk4YjM1MzIw
OGQxMGMwHhcNMjUxMTA0MDgwMDQyWhcNMjUxMTA1MDgwMDQyWjAzMTEwLwYDVQQD
EyhlMTQ0ZmZjODU4YmZkMjAzYmRkMzlmNzllNDU0M2FhOTIzYTY1MzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhV3N4jawY03Nm5+ycfl3MK0PnQfm
27/liteZE00Ayge3V6n8HC2MsxamnOXaB4DegMAdeyaVZ6gwS1+R2TMD3f23rmYO
eTowiZBoB4E2j77sDxBM/VQivm5X/RL5KO5YJpyRJtO4mZB00CcVuemIC3ElN3sE
sxSvrcrp2L2XtdY1FlPKwtEPBXuJMGhcZ4sDR2WXB6xBgC2j4zI4GBGLWggva7mh
YaiC3CFZ7xsYJ6YbG/u28A12T5sGvDVxYay+oBVX+bog0+GRod9NFDRNGdcRzkVX
voXG6mClwh9Nyz9Cox1q4jwlqVOhvJC0qKCFhcen9w35Q7RbMrgiHjDr/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOFE/8hYv9IDvdOfeeRUOqkjplN6MB8GA1UdIwQY
MBaAFDwCCUwiENiyFxX5jfhZizUyCNEMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEFJSlRDSVEyTElYRmZtTi1GbUxOVElJMFF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS85ODNjMmMtZGRhYi00MjJiLWJjZDIt
MTczNzRiZmZiNzFhLzEvUEFJSlRDSVEyTElYRmZtTi1GbUxOVElJMFF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS85ODNjMmMtZGRhYi00MjJiLWJjZDItMTczNzRiZmZiNzFh
LzEvUEFJSlRDSVEyTElYRmZtTi1GbUxOVElJMFF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZkuHEwx
5iWLi7Vapxdrr8u/S9Dc8UwKi2DywnsK0W6X4kx0M3lQi9OBr772SWStsKTvM9P2
57Ok4fgJz8I5qTP7p6NrnNH2pXAsklO4bM7pjV4A7/e5fhwBKMUQAh4q8RR02pUH
ISRQ3DksonVLdphOdDSZA2V7ZH1gYdPXrRYEl2V0oPMAn05mp83CpEw+WqL6HG0L
rT4zgf93ZaPUHax3ZH5X3DSnfUpvdnTEVVp5yGSfFhAe6lUb7sr3b/q8Pt3RF68X
qBJlV1dBP97g/a3gJo6L61Le2evygulPb73NMxbcpt6/O3fYRrLcPR7SA6k+HiNk
khwGZDjC8bYsIA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:31 2025 by rpki-client