Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
File: pCAAxPTsSgPNTTZX4BtwA07CO5c.mft (raw, json)
Hash identifier: hGEp4TAoTo96t227gcqiTUOhpklZGAVNlQZMEYLyAKc=
Subject key identifier: 83:42:00:32:93:4B:69:32:E0:6E:4A:75:4D:5F:3C:DD:80:B8:7F:AE
Authority key identifier: A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
Certificate issuer: /CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Certificate serial: 019A503E24536BD1DDD22B74747EB4C7142B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 19:00:41 +0000
Manifest this update: Tue 04 Nov 2025 19:00:41 +0000
Manifest next update: Wed 05 Nov 2025 19:00:41 +0000
Files and hashes: 1: 41_o2BIwv76TF64VP1DAdfjTxPo.roa (hash: ZsvXvwGlxNqhMT0bqp079C/5ezKY6fiYSiOoxT1NO2o=)
2: 4mRSyOWbS8hQScfHLulGf4Y6ZgQ.roa (hash: o3JSSVtXNFoFrqvnt6XhA+Y0uItKhtMcyPKqriXcd08=)
3: Qw_MgL0jZxAEcUaQV1xqF4PVe2w.roa (hash: K6DZu82eoM3254ECuNlV9U+0ldDohrzL2NCBM61LLzM=)
4: Zl3HHM0URwuJSk9LlxkNHY3QJSA.roa (hash: Ael3rTKnV/t1wOUc5dyvS7YOaqG/u0QZHukcBegGERg=)
5: pCAAxPTsSgPNTTZX4BtwA07CO5c.crl (hash: Bw2iQP4JkoWN5xiBrvSYf1ry3nyWet79bgqn1M5EJGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:24:53:6b:d1:dd:d2:2b:74:74:7e:b4:c7:14:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Validity
Not Before: Nov 4 19:00:41 2025 GMT
Not After : Nov 5 19:00:41 2025 GMT
Subject: CN=83420032934b6932e06e4a754d5f3cdd80b87fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3b:dc:09:c4:11:79:13:0e:cd:c9:34:e6:5d:
00:6d:21:72:c2:97:ba:f9:45:6a:10:9a:b0:79:e9:
68:ae:63:f6:48:87:6c:f2:f9:eb:d3:60:09:3c:96:
64:ef:0c:d5:f6:d9:09:9f:1f:f5:18:fb:ae:fe:ff:
05:c9:15:f5:2d:77:7e:42:25:84:6c:d5:54:18:c7:
1e:97:dc:57:0d:51:f1:30:1a:d2:bc:f1:59:dc:cb:
87:2c:5e:07:56:da:c5:0d:af:5a:2f:a4:4b:9f:e7:
e4:d8:97:44:5c:8b:c0:c2:43:5f:6a:32:d8:12:26:
35:03:9c:f3:40:8e:4c:12:88:46:0f:c7:ce:49:29:
cd:2d:65:26:99:b8:51:e7:59:3a:30:ad:4c:e6:f6:
77:c4:8e:d8:50:83:11:22:02:36:62:e3:c7:7c:8b:
1d:42:cd:ca:a8:6d:d3:3a:96:f4:e7:dd:14:43:8d:
83:2b:5b:ff:dd:4f:ca:f0:09:27:f1:c5:a5:01:25:
30:6b:46:df:e3:02:18:67:b8:4e:8c:a1:e7:5b:a1:
5a:49:8d:06:ca:19:6e:fc:ea:f6:97:ca:b1:53:9b:
45:af:9d:40:05:df:dd:55:0d:17:6d:e0:43:61:34:
be:1e:f0:bf:5d:12:c3:81:ed:9a:72:11:1c:11:44:
d9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:42:00:32:93:4B:69:32:E0:6E:4A:75:4D:5F:3C:DD:80:B8:7F:AE
X509v3 Authority Key Identifier:
keyid:A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:2c:bf:34:4e:0a:16:c5:d2:ae:fd:92:59:21:84:c1:ae:fa:
db:49:f6:f3:f4:ab:3e:d3:30:8c:76:ab:82:ca:c8:cd:46:3b:
25:31:7c:8f:a1:d8:4d:bd:fd:46:16:84:f9:6c:e6:0a:e1:fe:
e4:30:d7:48:ee:e9:91:f4:bd:b6:05:9d:5c:5c:78:c2:94:6f:
ee:ba:8f:8b:a2:39:22:e0:6e:73:d0:0d:e4:23:dc:20:37:87:
70:98:e9:16:fd:94:d6:4b:40:d1:38:20:10:d1:6a:8d:9e:a3:
84:de:1e:bd:5a:cc:4b:a1:07:5b:d0:54:50:38:45:20:ea:c5:
c8:ca:8c:69:e1:b3:2d:1c:bf:f6:28:b2:88:14:62:c6:7c:e4:
53:71:e2:aa:d0:fe:db:90:66:58:79:f1:83:ff:d5:9f:39:0c:
01:62:50:14:fe:97:f3:4c:da:c7:10:41:9c:dc:ca:ce:69:92:
7d:ae:f8:87:11:7d:1d:5e:a5:af:2d:c8:4f:4c:4a:92:01:39:
0d:a5:9b:44:7e:d5:90:e0:f4:c6:0d:af:b5:4c:bb:01:2e:cc:
8b:17:ae:b1:5d:54:85:b3:d4:41:7d:86:c6:c4:2f:9c:87:cc:
2b:f9:95:f9:f7:2d:a6:b7:25:d2:2c:9c:3c:f4:c1:76:7c:e9:
bd:92:10:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQPiRTa9Hd0it0dH60xxQrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MjAwMGM0ZjRlYzRhMDNjZDRkMzY1N2UwMWI3MDAzNGVj
MjNiOTcwHhcNMjUxMTA0MTkwMDQxWhcNMjUxMTA1MTkwMDQxWjAzMTEwLwYDVQQD
Eyg4MzQyMDAzMjkzNGI2OTMyZTA2ZTRhNzU0ZDVmM2NkZDgwYjg3ZmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjvcCcQReRMOzck05l0AbSFywpe6
+UVqEJqweelormP2SIds8vnr02AJPJZk7wzV9tkJnx/1GPuu/v8FyRX1LXd+QiWE
bNVUGMcel9xXDVHxMBrSvPFZ3MuHLF4HVtrFDa9aL6RLn+fk2JdEXIvAwkNfajLY
EiY1A5zzQI5MEohGD8fOSSnNLWUmmbhR51k6MK1M5vZ3xI7YUIMRIgI2YuPHfIsd
Qs3KqG3TOpb0590UQ42DK1v/3U/K8Akn8cWlASUwa0bf4wIYZ7hOjKHnW6FaSY0G
yhlu/Or2l8qxU5tFr51ABd/dVQ0XbeBDYTS+HvC/XRLDge2achEcEUTZcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINCADKTS2ky4G5KdU1fPN2AuH+uMB8GA1UdIwQY
MBaAFKQgAMT07EoDzU02V+AbcANOwjuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcENBQXhQVHNTZ1BOVFRaWDRCdHdBMDdDTzVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xNjNkNzctNGZlYS00MTMxLWJlY2It
MGYyMmQ4OTY4OWEwLzEvcENBQXhQVHNTZ1BOVFRaWDRCdHdBMDdDTzVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xNjNkNzctNGZlYS00MTMxLWJlY2ItMGYyMmQ4OTY4OWEw
LzEvcENBQXhQVHNTZ1BOVFRaWDRCdHdBMDdDTzVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMyy/NE4K
FsXSrv2SWSGEwa7620n28/SrPtMwjHargsrIzUY7JTF8j6HYTb39RhaE+WzmCuH+
5DDXSO7pkfS9tgWdXFx4wpRv7rqPi6I5IuBuc9AN5CPcIDeHcJjpFv2U1ktA0Tgg
ENFqjZ6jhN4evVrMS6EHW9BUUDhFIOrFyMqMaeGzLRy/9iiyiBRixnzkU3HiqtD+
25BmWHnxg//VnzkMAWJQFP6X80zaxxBBnNzKzmmSfa74hxF9HV6lry3IT0xKkgE5
DaWbRH7VkOD0xg2vtUy7AS7MixeusV1UhbPUQX2GxsQvnIfMK/mV+fctprcl0iyc
PPTBdnzpvZIQtg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:17:03 2025 by rpki-client