Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
File: PxckOVmdfaUleXiZvyE7jmNVSRQ.mft (raw, json)
Hash identifier: z+pL3Q9uPCSuyXvIDMTfW/5i9MtDy6UN5Oap0lIlZiU=
Subject key identifier: D8:37:96:0A:F5:6A:47:CB:A5:82:54:1F:4B:B3:46:5B:FF:57:88:FF
Authority key identifier: 3F:17:24:39:59:9D:7D:A5:25:79:78:99:BF:21:3B:8E:63:55:49:14
Certificate issuer: /CN=3f172439599d7da525797899bf213b8e63554914
Certificate serial: 019848F7A6E210EEC99F312BEC31511D528D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
Manifest number: 1592
Signing time: Sat 26 Jul 2025 23:00:46 +0000
Manifest this update: Sat 26 Jul 2025 23:00:46 +0000
Manifest next update: Sun 27 Jul 2025 23:00:46 +0000
Files and hashes: 1: ET0yOb6N2KPn9sEOeciwveLzfFQ.roa (hash: 5UaUVXzPjnKQ9N0meCwxNszuKgkyrbDITbh3/+eJ6rg=)
2: PxckOVmdfaUleXiZvyE7jmNVSRQ.crl (hash: YeahUbokOgiUs/GyLx1V+AGK8I+eAxBKzULnGQfyj40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:a6:e2:10:ee:c9:9f:31:2b:ec:31:51:1d:52:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f172439599d7da525797899bf213b8e63554914
Validity
Not Before: Jul 26 23:00:46 2025 GMT
Not After : Jul 27 23:00:46 2025 GMT
Subject: CN=d837960af56a47cba582541f4bb3465bff5788ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4a:23:fa:6d:b2:41:d1:39:a2:bf:a5:c1:7d:
47:60:c6:a6:09:cc:32:4a:27:c3:17:a8:42:f8:8f:
ba:a1:1e:cc:b3:c4:44:7d:45:e5:36:23:76:75:01:
90:bf:bd:31:f5:3f:ea:e6:9f:17:07:b3:ec:29:cc:
06:72:54:8c:31:15:44:5d:38:b9:d6:b1:fb:1e:85:
91:a9:74:6d:ba:37:c5:e2:f1:e5:8b:60:6e:5e:b2:
b3:51:d0:47:72:19:51:c4:3b:75:f3:f7:60:98:6b:
3a:e1:bc:5b:4f:ce:08:57:aa:52:46:3c:b7:47:89:
d7:c6:79:f3:95:75:97:ce:99:73:bc:62:0d:6b:eb:
04:95:d4:d8:bb:7d:98:8b:5c:8c:fc:0d:d4:d8:49:
ba:1d:07:60:66:96:90:af:fa:2e:a6:bd:52:e9:58:
c5:2b:3a:eb:3b:20:71:b3:36:d2:de:f0:b7:5e:bc:
92:2d:a8:2e:d3:f3:df:1d:9a:d8:b9:cd:7b:55:d0:
84:fd:39:c6:a9:8d:69:4d:71:48:ff:af:a7:a1:37:
24:c5:5d:68:fd:73:0a:48:f7:83:54:f6:ae:00:97:
8e:bc:29:87:77:09:51:9e:e6:12:f3:7d:41:85:76:
b2:1f:1e:77:98:36:6b:36:8e:ec:11:a2:7f:9e:0c:
60:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:37:96:0A:F5:6A:47:CB:A5:82:54:1F:4B:B3:46:5B:FF:57:88:FF
X509v3 Authority Key Identifier:
keyid:3F:17:24:39:59:9D:7D:A5:25:79:78:99:BF:21:3B:8E:63:55:49:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:2e:33:2f:87:f6:96:07:30:9e:dd:e6:29:e8:3d:5e:ee:67:
6a:de:95:3b:49:3d:9a:0d:5f:81:c6:2d:f5:21:81:22:79:f3:
30:78:c0:ca:86:08:59:01:b6:07:e3:f2:ca:f3:ef:06:3f:0e:
51:9d:51:e7:fb:24:b1:30:3d:77:bc:c0:87:f0:ed:7f:56:1a:
0c:d2:10:82:10:a0:fb:0a:9f:63:76:85:96:f7:76:66:d4:54:
a7:13:65:c8:1d:87:58:6c:ae:f6:bd:01:89:61:40:4c:4c:ef:
e5:bf:97:ba:be:8c:eb:fa:f8:a2:92:0c:b5:ac:d5:cf:77:a4:
c1:0e:34:7b:b1:f3:b1:12:66:61:9b:00:12:b2:eb:20:1f:7b:
05:21:d5:0f:f2:ab:94:36:be:6d:2b:b5:83:96:52:49:e3:69:
87:ed:1e:f2:dc:0b:95:f0:43:12:95:9d:2f:c0:71:57:60:1f:
fc:9d:4a:9f:5c:1c:f4:e2:77:2e:cf:7e:b4:21:fd:b1:a1:92:
42:a6:e9:7b:9b:04:d5:93:58:ed:00:76:ca:bf:13:d5:05:39:
9b:f5:eb:04:1a:4a:e7:bd:8d:69:c3:58:c1:05:4c:f4:a0:1e:
a2:97:d4:64:42:e4:63:3f:36:e5:af:3d:b7:76:28:cf:21:38:
c9:4b:54:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhI96biEO7JnzEr7DFRHVKNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMTcyNDM5NTk5ZDdkYTUyNTc5Nzg5OWJmMjEzYjhlNjM1
NTQ5MTQwHhcNMjUwNzI2MjMwMDQ2WhcNMjUwNzI3MjMwMDQ2WjAzMTEwLwYDVQQD
EyhkODM3OTYwYWY1NmE0N2NiYTU4MjU0MWY0YmIzNDY1YmZmNTc4OGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUoj+m2yQdE5or+lwX1HYMamCcwy
SifDF6hC+I+6oR7Ms8REfUXlNiN2dQGQv70x9T/q5p8XB7PsKcwGclSMMRVEXTi5
1rH7HoWRqXRtujfF4vHli2BuXrKzUdBHchlRxDt18/dgmGs64bxbT84IV6pSRjy3
R4nXxnnzlXWXzplzvGINa+sEldTYu32Yi1yM/A3U2Em6HQdgZpaQr/oupr1S6VjF
KzrrOyBxszbS3vC3XrySLagu0/PfHZrYuc17VdCE/TnGqY1pTXFI/6+noTckxV1o
/XMKSPeDVPauAJeOvCmHdwlRnuYS831BhXayHx53mDZrNo7sEaJ/ngxgkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNg3lgr1akfLpYJUH0uzRlv/V4j/MB8GA1UdIwQY
MBaAFD8XJDlZnX2lJXl4mb8hO45jVUkUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHhja09WbWRmYVVsZVhpWnZ5RTdqbU5WU1JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi85ZjlhYTktMDljMC00OGNjLWIwYTEt
ODg3MzMxZWZiNzE1LzEvUHhja09WbWRmYVVsZVhpWnZ5RTdqbU5WU1JRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi85ZjlhYTktMDljMC00OGNjLWIwYTEtODg3MzMxZWZiNzE1
LzEvUHhja09WbWRmYVVsZVhpWnZ5RTdqbU5WU1JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApi4zL4f2
lgcwnt3mKeg9Xu5nat6VO0k9mg1fgcYt9SGBInnzMHjAyoYIWQG2B+PyyvPvBj8O
UZ1R5/sksTA9d7zAh/Dtf1YaDNIQghCg+wqfY3aFlvd2ZtRUpxNlyB2HWGyu9r0B
iWFATEzv5b+Xur6M6/r4opIMtazVz3ekwQ40e7HzsRJmYZsAErLrIB97BSHVD/Kr
lDa+bSu1g5ZSSeNph+0e8twLlfBDEpWdL8BxV2Af/J1Kn1wc9OJ3Ls9+tCH9saGS
Qqbpe5sE1ZNY7QB2yr8T1QU5m/XrBBpK572NacNYwQVM9KAeopfUZELkYz825a89
t3YozyE4yUtUtA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:22:30 2025 by rpki-client