Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
File: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft (raw, json)
Hash identifier: W1JHmRjuetE2z7Ltll9DOnWAo5yGHlzYgB7PXUrjBIk=
Subject key identifier: 47:AD:E3:C0:B3:0B:85:8F:7E:5D:47:F1:2B:CC:77:F9:31:56:80:0F
Authority key identifier: A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
Certificate issuer: /CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Certificate serial: 01983616271D97C3F82408472D07983B3814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
Manifest number: 15A4
Signing time: Wed 23 Jul 2025 07:01:18 +0000
Manifest this update: Wed 23 Jul 2025 07:01:18 +0000
Manifest next update: Thu 24 Jul 2025 07:01:18 +0000
Files and hashes: 1: DuTLHmPWVWziogaT97oFAa9mDRE.roa (hash: PMtNyjUzQWlQv3rVcKbrWnO8Vocq0JKKdYATvPbNA78=)
2: X3CBuLjI2iLdZV3cmRV8Xr8zH-8.roa (hash: nRhR1UBTZd6YJqMwitmIM+7shNJ21X2SOgFJgRIoWfs=)
3: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl (hash: /MLmnY9JeGVZJykfMs6L/wjw+JUjUsK7FLJ152cVSjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:16:27:1d:97:c3:f8:24:08:47:2d:07:98:3b:38:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Validity
Not Before: Jul 23 07:01:18 2025 GMT
Not After : Jul 24 07:01:18 2025 GMT
Subject: CN=47ade3c0b30b858f7e5d47f12bcc77f93156800f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:94:5a:fb:e7:5b:f2:c5:b8:73:3d:cd:d3:be:
8b:a3:78:f0:fb:25:75:ea:39:28:3a:71:08:f0:20:
c8:ad:25:0f:29:1f:da:fd:94:e2:30:08:9a:7a:40:
f7:75:df:f8:bf:87:52:88:ab:26:c5:c0:86:78:91:
07:11:75:ed:78:27:0b:3e:37:75:ec:2e:40:1c:94:
9b:0b:9e:58:2e:df:18:11:49:28:2f:7d:49:13:fa:
96:b8:6e:0b:a0:46:5a:df:1c:d0:5e:41:4d:85:9c:
b0:31:ff:12:5a:89:25:c0:49:18:4b:15:0e:a6:d5:
9a:12:f4:46:38:cf:2f:db:10:fc:6e:7f:c7:3e:21:
50:a3:16:67:ae:62:9e:84:2e:47:2b:88:49:86:a7:
37:57:c4:92:c8:d0:03:65:48:ed:90:93:30:85:a6:
37:b7:ca:ed:1b:0b:ad:55:57:ea:f6:dd:c3:fb:61:
05:f6:25:06:e9:aa:84:17:5c:7b:b4:bc:fa:3c:41:
43:cd:ef:16:0c:da:3f:3c:b8:08:47:5a:c3:b6:23:
36:73:df:50:4c:74:52:81:53:77:b4:0d:72:64:54:
d8:14:f6:51:a5:4e:b5:11:a9:35:b3:c1:c3:c6:fb:
99:57:84:43:35:56:9c:ab:d5:55:64:fb:e5:92:d6:
c0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AD:E3:C0:B3:0B:85:8F:7E:5D:47:F1:2B:CC:77:F9:31:56:80:0F
X509v3 Authority Key Identifier:
keyid:A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:96:9a:c4:af:78:16:f2:5c:41:5a:20:a4:63:7c:12:e1:46:
fe:27:9b:1b:28:25:cd:30:a9:24:9c:d2:68:8e:cf:e8:19:7d:
1a:7d:ce:04:78:88:e8:32:b1:a6:a8:4b:63:f6:c3:e6:14:04:
28:48:4f:50:34:f4:88:51:de:80:0b:19:fb:10:df:7f:3f:8d:
dd:00:96:83:97:f9:60:58:ff:55:13:34:ed:bc:c1:14:88:29:
3c:c4:2a:b9:7b:d8:ba:36:9d:a9:42:39:49:ce:da:6b:7b:3c:
bc:2a:d7:70:e1:e0:2d:9e:0f:b9:bf:d6:88:97:7a:1b:9a:20:
d7:2c:14:92:48:59:62:85:70:5d:39:3c:e7:02:54:18:dd:7a:
4d:1c:61:7c:6b:bd:d2:2a:bc:45:46:52:35:e7:04:10:75:3a:
c6:d4:45:22:fd:81:76:06:4d:1a:e5:18:2d:57:c7:b5:5e:76:
84:e8:09:86:4f:8b:3a:65:7c:1f:89:ef:41:0f:7d:79:46:69:
51:f5:6d:c0:23:bc:d3:47:af:ba:77:f0:b5:04:b1:29:0f:37:
ba:23:e9:6f:05:67:3a:a7:6f:74:87:c7:cc:5a:5c:e7:3d:7b:
a9:ed:28:27:5c:fe:86:85:6b:85:e7:b3:fe:f5:2b:4b:72:fc:
29:b0:e3:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg2Ficdl8P4JAhHLQeYOzgUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YjBjMDU3MzFlZmE0YmJlNWMyYTMwYWU1MTg5Zjc3ODVk
MmQ0OTkwHhcNMjUwNzIzMDcwMTE4WhcNMjUwNzI0MDcwMTE4WjAzMTEwLwYDVQQD
Eyg0N2FkZTNjMGIzMGI4NThmN2U1ZDQ3ZjEyYmNjNzdmOTMxNTY4MDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5Ra++db8sW4cz3N076Lo3jw+yV1
6jkoOnEI8CDIrSUPKR/a/ZTiMAiaekD3dd/4v4dSiKsmxcCGeJEHEXXteCcLPjd1
7C5AHJSbC55YLt8YEUkoL31JE/qWuG4LoEZa3xzQXkFNhZywMf8SWoklwEkYSxUO
ptWaEvRGOM8v2xD8bn/HPiFQoxZnrmKehC5HK4hJhqc3V8SSyNADZUjtkJMwhaY3
t8rtGwutVVfq9t3D+2EF9iUG6aqEF1x7tLz6PEFDze8WDNo/PLgIR1rDtiM2c99Q
THRSgVN3tA1yZFTYFPZRpU61Eak1s8HDxvuZV4RDNVacq9VVZPvlktbAhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEet48CzC4WPfl1H8SvMd/kxVoAPMB8GA1UdIwQY
MBaAFKWwwFcx76S75cKjCuUYn3eF0tSZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGJEQVZ6SHZwTHZsd3FNSzVSaWZkNFhTMUprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yNTE0OWMtMDkzMi00NjgzLThhYjgt
ZDE1ZmViZGY1ZWNmLzEvcGJEQVZ6SHZwTHZsd3FNSzVSaWZkNFhTMUprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yNTE0OWMtMDkzMi00NjgzLThhYjgtZDE1ZmViZGY1ZWNm
LzEvcGJEQVZ6SHZwTHZsd3FNSzVSaWZkNFhTMUprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm5aaxK94
FvJcQVogpGN8EuFG/iebGyglzTCpJJzSaI7P6Bl9Gn3OBHiI6DKxpqhLY/bD5hQE
KEhPUDT0iFHegAsZ+xDffz+N3QCWg5f5YFj/VRM07bzBFIgpPMQquXvYujadqUI5
Sc7aa3s8vCrXcOHgLZ4Pub/WiJd6G5og1ywUkkhZYoVwXTk85wJUGN16TRxhfGu9
0iq8RUZSNecEEHU6xtRFIv2BdgZNGuUYLVfHtV52hOgJhk+LOmV8H4nvQQ99eUZp
UfVtwCO800evunfwtQSxKQ83uiPpbwVnOqdvdIfHzFpc5z17qe0oJ1z+hoVrheez
/vUrS3L8KbDj6g==
-----END CERTIFICATE-----
Generated at Wed Jul 23 16:44:11 2025 by rpki-client