Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
File: PaIT8CpnCwU3DFXszOkP4a1wxJs.mft (raw, json)
Hash identifier: 84x9/d1EduxFrixTgS7wS7GY9hSpwz2pz6841aDIEbk=
Subject key identifier: CE:DC:E7:FB:1B:79:65:33:92:E5:08:36:B8:97:E6:CA:75:4E:EC:17
Authority key identifier: 3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
Certificate issuer: /CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Certificate serial: 019A02236E42AFEDD7D5039EA17B332D69CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 15:01:07 +0000
Manifest this update: Mon 20 Oct 2025 15:01:07 +0000
Manifest next update: Tue 21 Oct 2025 15:01:07 +0000
Files and hashes: 1: PaIT8CpnCwU3DFXszOkP4a1wxJs.crl (hash: G9/ktaLFZgb8p07bLPmc43rW/6r6kK38MRO46jz+kD4=)
2: YwjVQrwYeFZPTMiqnnut8eO8rkw.roa (hash: o942C1AhbUgPtgCYdOmXc46V0WMZFJ062pG0YGycwpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:23:6e:42:af:ed:d7:d5:03:9e:a1:7b:33:2d:69:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Validity
Not Before: Oct 20 15:01:07 2025 GMT
Not After : Oct 21 15:01:07 2025 GMT
Subject: CN=cedce7fb1b79653392e50836b897e6ca754eec17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4f:8f:db:fd:54:39:a7:48:f2:df:48:dc:b8:
2a:5b:9f:05:af:63:21:d8:2b:8e:4b:d2:a7:18:0c:
34:56:d5:5b:26:c4:dd:40:93:76:06:cf:e1:4f:b6:
5e:73:de:ef:bc:8f:25:88:4d:a3:86:ca:09:9f:6e:
d8:82:10:5c:9c:92:37:d2:f1:31:35:d2:75:58:07:
3a:8f:ed:1f:63:ba:25:8a:c1:cd:6e:7f:d2:11:e2:
98:29:89:4e:47:b0:b5:87:c1:a0:5b:46:eb:41:e2:
ba:f5:88:4a:71:91:6d:6c:8c:dd:8a:dd:ec:24:07:
75:19:43:86:40:53:cd:b7:e0:29:ac:42:f0:41:7f:
fa:31:ea:b6:cb:8f:40:5f:b5:07:40:c4:1c:1f:b4:
a4:26:03:11:22:f2:0a:f0:f8:fe:00:0a:03:9b:0f:
b6:d9:2c:41:2c:58:ef:9e:9b:99:6e:57:13:6c:b2:
fc:93:da:c0:4d:7d:1c:1f:6b:50:5a:6d:c4:b5:fa:
0c:01:b0:93:d8:06:b1:4c:60:71:46:63:2d:b6:fc:
03:3a:8e:91:3c:ad:7b:3f:5e:32:5d:e2:21:25:b6:
09:d4:a8:d2:54:91:34:97:57:dd:ee:a4:d0:54:88:
70:fc:8d:c3:17:1c:25:d1:2c:41:3e:47:6e:bb:4f:
e0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:DC:E7:FB:1B:79:65:33:92:E5:08:36:B8:97:E6:CA:75:4E:EC:17
X509v3 Authority Key Identifier:
keyid:3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:53:ab:b5:68:ee:d5:0b:3f:91:16:69:68:55:4b:70:b0:c3:
11:b5:69:b8:62:6c:db:fa:cf:ff:37:14:cd:d0:7e:4d:80:05:
92:b0:e6:01:a8:ed:8b:dd:86:39:c0:76:ca:2e:76:10:c6:ed:
b5:95:7d:95:9f:5f:05:aa:8d:ea:f9:59:39:c9:ab:31:c3:bd:
b9:81:b1:89:98:62:be:a5:f1:31:5a:9f:bf:46:43:33:b3:d6:
d1:81:99:91:3c:59:49:b5:38:ec:50:fa:40:54:92:54:a9:30:
14:7c:79:ae:bf:f5:f0:8d:31:dd:5f:0d:c4:f7:42:bd:5f:f1:
c5:e1:54:b0:01:00:62:01:c0:14:e2:c6:35:00:b8:b4:06:39:
bd:f8:a9:4b:59:23:37:2b:bb:36:bc:70:30:e1:3f:d4:3d:81:
5f:f4:c6:ec:8f:3e:1e:76:e7:9b:33:f5:0d:0f:80:96:ce:16:
1a:60:a3:4b:66:aa:93:05:0f:46:7d:7f:44:6b:c9:b3:77:8c:
e3:ac:fe:00:e2:74:11:d1:a9:b0:c9:f2:b9:07:1f:b7:f8:41:
f0:d8:01:55:72:e0:64:90:eb:ea:b3:54:73:ce:0a:f9:07:5e:
fb:85:e2:35:62:87:73:79:1e:f3:87:23:99:4e:02:20:21:09:
53:06:ba:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoCI25Cr+3X1QOeoXszLWnKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYTIxM2YwMmE2NzBiMDUzNzBjNTVlY2NjZTkwZmUxYWQ3
MGM0OWIwHhcNMjUxMDIwMTUwMTA3WhcNMjUxMDIxMTUwMTA3WjAzMTEwLwYDVQQD
EyhjZWRjZTdmYjFiNzk2NTMzOTJlNTA4MzZiODk3ZTZjYTc1NGVlYzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvE+P2/1UOadI8t9I3LgqW58Fr2Mh
2CuOS9KnGAw0VtVbJsTdQJN2Bs/hT7Zec97vvI8liE2jhsoJn27YghBcnJI30vEx
NdJ1WAc6j+0fY7olisHNbn/SEeKYKYlOR7C1h8GgW0brQeK69YhKcZFtbIzdit3s
JAd1GUOGQFPNt+AprELwQX/6Meq2y49AX7UHQMQcH7SkJgMRIvIK8Pj+AAoDmw+2
2SxBLFjvnpuZblcTbLL8k9rATX0cH2tQWm3EtfoMAbCT2AaxTGBxRmMttvwDOo6R
PK17P14yXeIhJbYJ1KjSVJE0l1fd7qTQVIhw/I3DFxwl0SxBPkduu0/gkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7c5/sbeWUzkuUINriX5sp1TuwXMB8GA1UdIwQY
MBaAFD2iE/AqZwsFNwxV7MzpD+GtcMSbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGFJVDhDcG5Dd1UzREZYc3pPa1A0YTF3eEpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9lN2Y2YWEtNmVlNC00YjRjLTg2ODEt
N2RiOGViYTc5ZWYxLzEvUGFJVDhDcG5Dd1UzREZYc3pPa1A0YTF3eEpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9lN2Y2YWEtNmVlNC00YjRjLTg2ODEtN2RiOGViYTc5ZWYx
LzEvUGFJVDhDcG5Dd1UzREZYc3pPa1A0YTF3eEpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd1OrtWju
1Qs/kRZpaFVLcLDDEbVpuGJs2/rP/zcUzdB+TYAFkrDmAajti92GOcB2yi52EMbt
tZV9lZ9fBaqN6vlZOcmrMcO9uYGxiZhivqXxMVqfv0ZDM7PW0YGZkTxZSbU47FD6
QFSSVKkwFHx5rr/18I0x3V8NxPdCvV/xxeFUsAEAYgHAFOLGNQC4tAY5vfipS1kj
Nyu7NrxwMOE/1D2BX/TG7I8+HnbnmzP1DQ+Als4WGmCjS2aqkwUPRn1/RGvJs3eM
46z+AOJ0EdGpsMnyuQcft/hB8NgBVXLgZJDr6rNUc84K+Qde+4XiNWKHc3ke84cj
mU4CICEJUwa6zg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:00:29 2025 by rpki-client