Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
File: pAoIH7qPsz77RiWe-T9oeNcBUOs.mft (raw, json)
Hash identifier: Uf8auOzDLPsc+8OBkeH2lgCCSQq2vfc8dN9LlrI4upw=
Subject key identifier: 0D:D2:B6:4E:84:AB:8E:82:4C:DB:2D:59:7B:6F:2D:A5:DF:7A:8C:76
Authority key identifier: A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
Certificate issuer: /CN=a40a081fba8fb33efb46259ef93f6878d70150eb
Certificate serial: 0198451A946820F4EFA61FA8E64B0AA4CCCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
Manifest number: 0B5B
Signing time: Sat 26 Jul 2025 05:00:26 +0000
Manifest this update: Sat 26 Jul 2025 05:00:26 +0000
Manifest next update: Sun 27 Jul 2025 05:00:26 +0000
Files and hashes: 1: YA2knZBu4eCfckA4blXB6sNuHgY.roa (hash: shDh2slGwfDF1H72vnxsQTQ+XE9meHhIbU3+zi7hhrg=)
2: da6BAAfAoBTasYkztEyeFbO3dYM.roa (hash: svpwmdWuctN25b8D5PcCmhJa0TO40FFmvswQDucJFfQ=)
3: pAoIH7qPsz77RiWe-T9oeNcBUOs.crl (hash: QGdjKTPcVDSWke/Hs3khD+3DwgnubkF7K5srL1vLmcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:1a:94:68:20:f4:ef:a6:1f:a8:e6:4b:0a:a4:cc:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a40a081fba8fb33efb46259ef93f6878d70150eb
Validity
Not Before: Jul 26 05:00:26 2025 GMT
Not After : Jul 27 05:00:26 2025 GMT
Subject: CN=0dd2b64e84ab8e824cdb2d597b6f2da5df7a8c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4a:05:30:f0:8e:a0:52:8b:d5:e0:51:2c:34:
a5:39:d1:78:55:0b:65:fa:3b:29:77:65:47:5b:1b:
9d:71:60:3a:f8:47:9c:f5:d8:68:7a:ac:0f:15:81:
c2:ed:3d:c2:4f:85:11:8c:5d:fc:18:58:64:9e:66:
0d:f7:0b:ec:44:3c:8c:4a:92:5e:90:4b:88:59:50:
18:25:ee:cb:74:43:86:bf:0c:6c:73:ca:33:6a:3e:
2c:55:98:6b:00:e1:5e:2e:06:05:32:48:7d:53:5e:
0e:18:43:41:c8:43:83:55:11:69:eb:01:5a:d0:c6:
b9:e7:ea:f2:3d:b9:5d:d4:05:67:e3:96:7a:bd:d7:
a3:00:46:89:3b:e4:64:8c:6b:83:5f:2e:29:80:bd:
d0:8b:d2:c1:cf:79:71:33:07:4c:e9:3c:07:9f:9d:
71:d9:4a:0e:6d:ba:62:c0:ae:86:6f:f9:07:41:65:
1e:c0:b0:39:0f:cb:24:7a:80:09:c6:69:06:86:e3:
f1:30:9c:43:c5:7a:54:fc:d5:fe:b8:db:40:bd:1c:
aa:01:6e:8b:be:d9:e3:a7:65:6d:ed:16:f9:d6:97:
38:4d:80:69:e3:2c:9f:45:6b:1b:c4:48:8f:87:f8:
05:e1:c7:1d:b9:c5:5e:d7:b2:79:69:c0:69:3b:cc:
df:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D2:B6:4E:84:AB:8E:82:4C:DB:2D:59:7B:6F:2D:A5:DF:7A:8C:76
X509v3 Authority Key Identifier:
keyid:A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b3:23:3d:83:6b:aa:f4:ea:50:74:e2:a9:9c:78:86:48:88:
1d:0a:34:fb:82:da:7c:9d:9f:3d:2a:9a:15:13:76:e5:3d:f0:
46:06:4a:8f:f3:f2:c5:43:38:8c:43:49:79:a6:51:e5:12:45:
ea:46:de:cf:27:ca:da:ca:a6:e7:a9:d8:30:4a:87:f7:07:2b:
40:ef:f7:12:22:09:fe:15:58:14:90:60:19:9b:ca:f3:33:ab:
ef:9e:05:7a:98:32:7a:30:c1:5b:04:d5:95:c8:39:4a:4d:b4:
2e:a9:ff:f7:a0:f1:cc:17:74:64:f4:fe:c5:6a:bb:c6:ea:fa:
0f:f8:45:9b:16:b3:35:f4:a0:55:a1:9a:8e:32:07:0c:7c:52:
e2:d4:8b:57:15:e7:37:3c:fd:a2:e5:39:eb:62:d6:39:34:ca:
e9:43:cb:d6:f0:51:aa:0e:b3:a1:87:46:ab:0a:a1:8e:ac:be:
bc:62:b5:0d:20:fc:78:f4:c4:62:2c:a2:75:42:22:eb:ae:19:
93:46:3d:f5:cd:0a:dd:28:5f:e2:60:ba:89:56:9e:de:9b:47:
e6:4c:94:95:f7:5a:c2:8b:e8:dc:4e:99:2e:4f:46:06:07:07:
e8:2f:3b:95:f2:81:8b:83:2c:ce:12:fa:42:16:97:83:f9:d2:
13:a5:16:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFGpRoIPTvph+o5ksKpMzPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MGEwODFmYmE4ZmIzM2VmYjQ2MjU5ZWY5M2Y2ODc4ZDcw
MTUwZWIwHhcNMjUwNzI2MDUwMDI2WhcNMjUwNzI3MDUwMDI2WjAzMTEwLwYDVQQD
EygwZGQyYjY0ZTg0YWI4ZTgyNGNkYjJkNTk3YjZmMmRhNWRmN2E4Yzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkoFMPCOoFKL1eBRLDSlOdF4VQtl
+jspd2VHWxudcWA6+Eec9dhoeqwPFYHC7T3CT4URjF38GFhknmYN9wvsRDyMSpJe
kEuIWVAYJe7LdEOGvwxsc8ozaj4sVZhrAOFeLgYFMkh9U14OGENByEODVRFp6wFa
0Ma55+ryPbld1AVn45Z6vdejAEaJO+RkjGuDXy4pgL3Qi9LBz3lxMwdM6TwHn51x
2UoObbpiwK6Gb/kHQWUewLA5D8skeoAJxmkGhuPxMJxDxXpU/NX+uNtAvRyqAW6L
vtnjp2Vt7Rb51pc4TYBp4yyfRWsbxEiPh/gF4ccducVe17J5acBpO8zfRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3Stk6Eq46CTNstWXtvLaXfeox2MB8GA1UdIwQY
MBaAFKQKCB+6j7M++0Ylnvk/aHjXAVDrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEFvSUg3cVBzejc3UmlXZS1UOW9lTmNCVU9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jYjI3YTAtOTRkMi00OWFhLTg1ZWEt
YWU5MWU0NjYyZDkzLzEvcEFvSUg3cVBzejc3UmlXZS1UOW9lTmNCVU9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9jYjI3YTAtOTRkMi00OWFhLTg1ZWEtYWU5MWU0NjYyZDkz
LzEvcEFvSUg3cVBzejc3UmlXZS1UOW9lTmNCVU9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhrMjPYNr
qvTqUHTiqZx4hkiIHQo0+4LafJ2fPSqaFRN25T3wRgZKj/PyxUM4jENJeaZR5RJF
6kbezyfK2sqm56nYMEqH9wcrQO/3EiIJ/hVYFJBgGZvK8zOr754FepgyejDBWwTV
lcg5Sk20Lqn/96DxzBd0ZPT+xWq7xur6D/hFmxazNfSgVaGajjIHDHxS4tSLVxXn
Nzz9ouU562LWOTTK6UPL1vBRqg6zoYdGqwqhjqy+vGK1DSD8ePTEYiyidUIi664Z
k0Y99c0K3Shf4mC6iVae3ptH5kyUlfdawovo3E6ZLk9GBgcH6C87lfKBi4MszhL6
QhaXg/nSE6UWVg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:31:38 2025 by rpki-client