Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
File: PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft (raw, json)
Hash identifier: 60Rxgr0svUTdCOOUeU+LhytYsryQLTPDN8ExjLJapDU=
Subject key identifier: FC:50:C3:77:22:8D:21:0C:40:6B:36:2D:36:C5:D4:F6:52:A6:1A:FE
Authority key identifier: 3C:02:09:4C:22:10:D8:B2:17:15:F9:8D:F8:59:8B:35:32:08:D1:0C
Certificate issuer: /CN=3c02094c2210d8b21715f98df8598b353208d10c
Certificate serial: 0199FCC61B7E03D527303409A5739C568FDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
Manifest number: 117E
Signing time: Sun 19 Oct 2025 14:01:05 +0000
Manifest this update: Sun 19 Oct 2025 14:01:05 +0000
Manifest next update: Mon 20 Oct 2025 14:01:05 +0000
Files and hashes: 1: CufUT2fMUqvz9LGxO18OZgdQp_g.roa (hash: G2fcMqhZShi/pIW7MbvdKjfohzkmwJAvDqVZX+1pdMQ=)
2: PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl (hash: 7om6TpsGf+HhmWLJaMCPVyhqjimZvo2NMLnmtsUnBxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:1b:7e:03:d5:27:30:34:09:a5:73:9c:56:8f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c02094c2210d8b21715f98df8598b353208d10c
Validity
Not Before: Oct 19 14:01:05 2025 GMT
Not After : Oct 20 14:01:05 2025 GMT
Subject: CN=fc50c377228d210c406b362d36c5d4f652a61afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:12:b7:dc:bd:30:a9:26:43:c8:1e:6b:4e:2f:
87:93:61:fc:3d:46:c4:6e:d0:b4:8e:7f:3c:2e:9b:
56:f5:92:65:33:66:73:0e:1f:d6:d9:ab:a7:04:90:
ee:c2:63:d1:06:b7:0b:d7:41:42:d9:21:4b:1d:7e:
68:c0:1e:6c:df:d7:01:1a:f6:e6:e2:bb:08:87:1e:
ed:ea:9d:a3:fb:88:cf:95:4a:95:b8:ee:9b:6d:f2:
92:1c:53:cc:f4:c7:13:0d:3a:37:88:c7:a1:84:3b:
93:9f:cb:0f:81:e2:bc:33:91:6b:54:2b:a4:c9:f4:
7f:84:87:4c:1e:cf:34:98:b6:97:97:92:64:0b:a8:
78:63:a4:0c:a8:df:81:c9:57:d5:a4:48:82:b4:0f:
26:e9:59:40:a4:89:1c:2f:77:02:d8:1e:b5:35:7c:
67:79:6c:aa:10:02:01:2e:55:3a:71:2d:2f:34:52:
77:91:0e:ca:26:46:7a:11:37:be:64:6f:9e:14:08:
a0:96:d9:6f:6f:5a:7d:d4:3a:c0:30:7b:2f:0e:8f:
6b:90:21:fb:45:50:d0:40:cb:22:54:ce:c3:9d:f5:
12:9b:df:96:ba:28:6b:a9:45:28:34:37:01:91:64:
db:b8:2c:44:52:e7:41:53:e8:7f:d4:a0:76:8b:c9:
71:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:50:C3:77:22:8D:21:0C:40:6B:36:2D:36:C5:D4:F6:52:A6:1A:FE
X509v3 Authority Key Identifier:
keyid:3C:02:09:4C:22:10:D8:B2:17:15:F9:8D:F8:59:8B:35:32:08:D1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:91:b8:e8:e1:e2:78:41:9e:60:63:ad:b0:85:d3:10:a1:41:
3e:4a:cd:1e:3e:86:19:81:f1:2c:11:f3:ab:55:f5:17:2b:35:
44:93:e3:ec:fe:ca:8a:e9:b3:e4:79:60:4a:2b:fc:2f:e8:56:
25:da:b5:6c:45:29:a4:10:fc:65:bf:a2:02:3a:c0:46:ad:e5:
cb:5d:58:92:b2:3d:9c:12:12:25:4c:68:28:83:10:f3:69:53:
5b:b0:8b:7f:b8:0e:66:8e:ae:bf:bf:85:dc:6b:a6:24:77:11:
2e:76:5a:13:2f:b0:b3:f8:1c:5a:11:52:6f:f9:c1:ec:33:54:
37:f8:5b:cc:b5:54:dc:4b:9c:c6:3b:27:8f:b3:0c:d8:8b:a9:
73:47:bd:76:87:2a:97:35:d0:0a:87:a6:5e:80:a6:42:90:cd:
4d:f7:62:9d:1e:cc:58:29:d4:a7:4f:b3:93:55:78:6c:f4:08:
9e:84:6d:6e:cc:e1:d5:36:f6:f4:b5:75:35:d0:be:70:2f:b4:
ca:bd:27:2e:f4:16:ad:58:eb:ae:8b:57:90:42:f1:33:cb:39:
48:42:69:ae:88:02:ee:3a:77:8f:ef:f1:73:7b:dd:6d:b3:07:
c0:84:24:6d:ed:83:d8:50:35:c8:4a:7f:5a:15:d8:b6:8d:e9:
ee:41:c9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:07 2025 by rpki-client