Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
File: pcY3PqsZz0PdL0MRE5g4PuK60DA.mft (raw, json)
Hash identifier: hgEtZpJkyFyBBp4g9MjzgeQT488KT+78/FOSweHUFns=
Subject key identifier: E8:9E:44:57:B9:6D:1C:B3:AA:5E:A9:DB:6E:16:82:46:4B:45:26:0D
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial: 019A50E3B79672E2B691BEE1AAC40CC07DBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
Manifest number: 11CA
Signing time: Tue 04 Nov 2025 22:01:32 +0000
Manifest this update: Tue 04 Nov 2025 22:01:32 +0000
Manifest next update: Wed 05 Nov 2025 22:01:32 +0000
Files and hashes: 1: CLeDWh39NdLvyQS_i3NwJ9CDF5A.roa (hash: AodjA/u0IZIHWzW0wUzupROWai2JCPHe4BHHea78Ms0=)
2: IVs_hi0L8DU-XvjpZ3j52FBoeuA.roa (hash: gjbii66qiZGzea5anGixtq9DuuHhboIpMcO6QPFsj6s=)
3: VrU7ZjcTG9RIkuIvhPHDcadoKZM.roa (hash: g8P7wwNKLRxTvKsPwE4zpfRuDPifBy4qLKB2zlBcTlw=)
4: h5Sxz-4g29FV3kYMoX_wX3iFTqQ.roa (hash: MiZeUc7o+bnHAdooPcAB7y8KMpj0xgLMlX8Uuhc2f7E=)
5: m5QjthCyb83zFe-XzGZ1VPtryIE.roa (hash: idq0+QCfBZJuG2uqoWlXprOQsupzpFPhxR03Ji+VJ/A=)
6: pcY3PqsZz0PdL0MRE5g4PuK60DA.crl (hash: 2dp8OFA1kDL8OnWUykj1lFpUuXjYDH+qyMNcZMqkUCs=)
7: rwgU2mlTS06e7YPqA2lYPO26aP0.roa (hash: w9oJA8hR7uQfiHK53Tj7B18Tkd/AVTn4HnDtFZKJyRA=)
8: zduwkC5PQDOGNkAdIMyn-hz63Ys.roa (hash: dngQzoKRwxwQY6jw/yt5nYtfsqDVjR83fQraMN2FWXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:b7:96:72:e2:b6:91:be:e1:aa:c4:0c:c0:7d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Validity
Not Before: Nov 4 22:01:32 2025 GMT
Not After : Nov 5 22:01:32 2025 GMT
Subject: CN=e89e4457b96d1cb3aa5ea9db6e1682464b45260d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b9:63:8d:21:37:fe:6b:ee:d0:2f:08:e6:b6:
84:cf:07:df:c0:98:20:74:86:5e:1f:db:e8:ee:f2:
e1:f2:73:31:84:62:d2:28:4a:32:1d:f8:ec:35:7a:
3e:a8:72:61:4f:72:35:bd:d8:c2:e5:52:8d:0e:fc:
57:e2:52:75:7a:0e:89:50:ba:20:f7:a7:13:85:3f:
48:02:e9:b5:7c:24:3b:26:29:2d:1a:fe:df:03:b3:
02:d9:18:f1:f6:5d:81:f2:94:8b:79:fb:a6:82:66:
8d:7b:3d:c6:09:da:cd:9e:ee:10:87:3f:ac:27:ba:
67:be:f9:9d:34:5c:be:dc:b0:7d:20:86:92:9e:45:
0d:0a:4c:ac:bb:fe:e9:47:b4:6c:15:73:73:96:b9:
ad:08:58:37:d4:52:c2:c9:ec:dd:f3:13:46:71:83:
4c:45:f0:de:5a:11:d4:c8:16:39:12:e5:a4:95:fb:
b3:b2:ad:7a:4a:e5:0a:59:3f:93:04:e5:21:e9:73:
0e:25:53:79:ba:5f:62:d0:9e:08:67:fc:69:63:cc:
51:57:36:27:80:89:9e:7b:28:7f:d4:d4:85:83:4a:
42:50:be:97:a8:d9:7a:de:da:59:ec:7b:26:3c:f1:
bc:e9:e8:b0:35:49:ac:1c:77:68:6d:cc:49:c2:0c:
9b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9E:44:57:B9:6D:1C:B3:AA:5E:A9:DB:6E:16:82:46:4B:45:26:0D
X509v3 Authority Key Identifier:
keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:4c:21:bd:2d:a9:8c:17:80:bd:da:96:0f:19:3e:db:d2:8d:
89:5d:fe:9b:e9:f6:b7:38:a3:f5:a7:cc:07:c3:e7:46:89:d3:
97:03:a0:81:23:0e:40:bb:31:2f:d9:24:80:6f:00:37:f3:e6:
39:c3:c9:4a:38:58:ef:7d:c8:0c:2b:66:64:59:e1:c8:84:8c:
4d:5f:da:09:5d:83:02:73:3b:0d:51:04:3c:a8:34:57:2e:07:
9c:ea:52:92:eb:01:b1:7c:3e:b5:ca:da:63:c8:47:9f:1d:d8:
9b:bd:48:b9:4a:92:63:09:6e:f8:3d:d5:cf:14:00:16:db:d9:
b6:f5:fd:77:2f:98:92:88:0f:9a:7b:77:18:db:4a:e0:c1:53:
c5:93:79:bc:0d:03:49:e6:b5:cf:b0:0a:d4:5e:4a:75:d1:85:
2f:1b:7d:ab:b4:23:47:60:da:9a:45:45:18:1b:d3:4d:53:fc:
51:f7:7c:4a:c5:e6:61:ce:3d:d8:34:85:73:f4:6e:fd:c0:21:
56:13:00:91:5a:f0:f3:bd:b0:b0:df:47:1b:7a:80:31:41:d9:
e2:ec:fa:73:4d:1d:f9:73:0e:9b:cd:8f:ad:72:3c:7c:5d:86:
ce:43:e9:9a:cf:99:d1:95:a1:b1:f4:fa:5b:02:ec:fe:41:4a:
7c:1d:65:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ47eWcuK2kb7hqsQMwH28MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YzYzNzNlYWIxOWNmNDNkZDJmNDMxMTEzOTgzODNlZTJi
YWQwMzAwHhcNMjUxMTA0MjIwMTMyWhcNMjUxMTA1MjIwMTMyWjAzMTEwLwYDVQQD
EyhlODllNDQ1N2I5NmQxY2IzYWE1ZWE5ZGI2ZTE2ODI0NjRiNDUyNjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrljjSE3/mvu0C8I5raEzwffwJgg
dIZeH9vo7vLh8nMxhGLSKEoyHfjsNXo+qHJhT3I1vdjC5VKNDvxX4lJ1eg6JULog
96cThT9IAum1fCQ7JiktGv7fA7MC2Rjx9l2B8pSLefumgmaNez3GCdrNnu4Qhz+s
J7pnvvmdNFy+3LB9IIaSnkUNCkysu/7pR7RsFXNzlrmtCFg31FLCyezd8xNGcYNM
RfDeWhHUyBY5EuWklfuzsq16SuUKWT+TBOUh6XMOJVN5ul9i0J4IZ/xpY8xRVzYn
gImeeyh/1NSFg0pCUL6XqNl63tpZ7HsmPPG86eiwNUmsHHdobcxJwgybYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOieRFe5bRyzql6p224WgkZLRSYNMB8GA1UdIwQY
MBaAFKXGNz6rGc9D3S9DEROYOD7iutAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEt
YTRlYTBhNjNmNzY2LzEvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEtYTRlYTBhNjNmNzY2
LzEvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIEwhvS2p
jBeAvdqWDxk+29KNiV3+m+n2tzij9afMB8PnRonTlwOggSMOQLsxL9kkgG8AN/Pm
OcPJSjhY733IDCtmZFnhyISMTV/aCV2DAnM7DVEEPKg0Vy4HnOpSkusBsXw+tcra
Y8hHnx3Ym71IuUqSYwlu+D3VzxQAFtvZtvX9dy+YkogPmnt3GNtK4MFTxZN5vA0D
Sea1z7AK1F5KddGFLxt9q7QjR2DamkVFGBvTTVP8Ufd8SsXmYc492DSFc/Ru/cAh
VhMAkVrw872wsN9HG3qAMUHZ4uz6c00d+XMOm82PrXI8fF2GzkPpms+Z0ZWhsfT6
WwLs/kFKfB1lzQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:48:25 2025 by rpki-client