Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
File: p_lKuTUFS4bctdatutLf21ZLUkg.mft (raw, json)
Hash identifier: jrvYROISXUuXQg25r345+gYr+JQYg4nr8kRJbYipxBs=
Subject key identifier: F2:F8:58:CB:47:B4:19:86:20:AC:D6:5B:83:93:E3:42:5C:C9:90:03
Authority key identifier: A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48
Certificate issuer: /CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248
Certificate serial: 01984A41904FD14D919E130D439BE311DCF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 05:01:07 +0000
Manifest this update: Sun 27 Jul 2025 05:01:07 +0000
Manifest next update: Mon 28 Jul 2025 05:01:07 +0000
Files and hashes: 1: 64bxF7wA4GbyNp68j4QvJJrXvcY.roa (hash: /BZbUI4tcOvcN8G1/WOb5wicEcPAOnUGplNlfdXvoLw=)
2: 6i00LPl42nHb8qbMKvKVhPUPT4A.roa (hash: 2YZA57Jg0ln+zFDDEt7ePeu3FeU4ieQ7XTEhkxEpCwM=)
3: O0E_dnFN5zi96CvgLLN6eJoyMkM.roa (hash: Ns1LJilR3FhqXle0WRn94Ds/xQRz0HxzYlILaBi7ZCU=)
4: p_lKuTUFS4bctdatutLf21ZLUkg.crl (hash: jWkvPDmMkGdoCbWOxuwVS9mHOiZtvYX5D0kJHoSdUFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:90:4f:d1:4d:91:9e:13:0d:43:9b:e3:11:dc:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248
Validity
Not Before: Jul 27 05:01:07 2025 GMT
Not After : Jul 28 05:01:07 2025 GMT
Subject: CN=f2f858cb47b4198620acd65b8393e3425cc99003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:40:20:08:a1:bf:11:47:c7:cb:9b:76:8b:b2:
41:2d:eb:58:c9:cc:56:b4:44:c1:11:c7:2e:2e:d1:
da:86:65:79:ed:07:90:f6:f8:b8:ae:46:e3:5d:3f:
31:07:f2:8a:77:63:7d:f5:cb:97:38:4e:fc:55:52:
a0:b3:f8:92:d0:38:1c:e1:8d:cc:fb:ee:fb:ab:c0:
30:3b:1a:c8:94:6a:74:47:3f:a0:90:de:7a:82:75:
1c:c8:d9:b8:5a:f7:b6:bc:d2:ca:8f:8e:e0:d1:b0:
54:10:f4:bd:a0:15:20:14:b0:34:56:82:44:ba:11:
2d:8a:0a:7b:7b:f3:28:30:0a:3f:ac:25:db:d2:64:
1c:43:36:5b:af:8e:59:09:e8:0d:0d:f2:34:49:3a:
d0:ea:28:98:76:5c:06:eb:c1:16:d7:2e:f3:1b:ac:
7e:37:43:ba:91:11:55:13:e9:17:0b:fc:54:2f:44:
44:54:f6:5a:9b:ee:0b:72:a2:e0:15:af:18:4d:09:
c0:2e:6f:a3:0e:b1:1f:9e:38:b6:35:7a:d6:85:a5:
cb:15:ce:b6:fa:3c:1e:db:2a:22:f1:fa:7c:9f:bc:
21:96:ed:79:3b:5e:26:de:eb:3f:b1:f2:64:ed:43:
b7:b0:c1:91:e2:99:15:27:2c:34:83:dd:03:ef:04:
f4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F8:58:CB:47:B4:19:86:20:AC:D6:5B:83:93:E3:42:5C:C9:90:03
X509v3 Authority Key Identifier:
keyid:A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:5a:c4:76:48:16:ae:b0:c9:73:d0:fe:00:90:7a:c8:ba:fc:
35:8b:6e:c1:fd:52:43:12:05:f2:2c:20:4d:fb:71:02:8f:38:
ba:f7:ea:d8:d1:63:ac:e7:9f:47:52:1e:c9:a4:3c:d7:61:0d:
f7:ca:a6:4c:88:63:0f:de:73:e7:a7:9d:8d:8b:33:18:ee:b8:
87:20:0d:78:1e:7a:a3:10:48:fd:8e:13:96:8a:02:ef:05:30:
d8:6b:41:20:48:e8:6c:f7:23:7d:78:7c:8d:78:8c:58:3b:cf:
91:90:ae:e7:fb:4a:87:3f:4b:fe:9a:f3:57:ff:0f:26:36:71:
17:85:cd:60:0e:56:07:85:ce:08:e9:1c:c1:04:35:29:41:92:
1e:3a:62:82:1e:1a:78:5a:18:67:64:85:b9:e1:e0:ea:f7:29:
02:35:61:ea:00:fb:51:f5:98:51:df:ca:e6:6d:b8:ef:01:14:
b4:b1:b4:05:db:9a:a2:d5:bd:a1:d9:b8:c5:9f:ce:e8:57:d7:
2e:c3:2f:91:61:9d:68:5a:71:f5:79:3f:f4:24:d1:22:5e:ba:
f5:0f:1f:4d:5e:af:df:a6:9a:ca:e6:e5:1d:a0:65:61:9f:23:
b0:96:7c:cf:13:49:3e:c2:1e:5e:ef:76:9d:9d:5f:f3:26:f2:
92:42:8f:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQZBP0U2RnhMNQ5vjEdzwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3Zjk0YWI5MzUwNTRiODZkY2I1ZDZhZGJhZDJkZmRiNTY0
YjUyNDgwHhcNMjUwNzI3MDUwMTA3WhcNMjUwNzI4MDUwMTA3WjAzMTEwLwYDVQQD
EyhmMmY4NThjYjQ3YjQxOTg2MjBhY2Q2NWI4MzkzZTM0MjVjYzk5MDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkAgCKG/EUfHy5t2i7JBLetYycxW
tETBEccuLtHahmV57QeQ9vi4rkbjXT8xB/KKd2N99cuXOE78VVKgs/iS0Dgc4Y3M
++77q8AwOxrIlGp0Rz+gkN56gnUcyNm4Wve2vNLKj47g0bBUEPS9oBUgFLA0VoJE
uhEtigp7e/MoMAo/rCXb0mQcQzZbr45ZCegNDfI0STrQ6iiYdlwG68EW1y7zG6x+
N0O6kRFVE+kXC/xUL0REVPZam+4LcqLgFa8YTQnALm+jDrEfnji2NXrWhaXLFc62
+jwe2yoi8fp8n7whlu15O14m3us/sfJk7UO3sMGR4pkVJyw0g90D7wT0wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPL4WMtHtBmGIKzWW4OT40JcyZADMB8GA1UdIwQY
MBaAFKf5Srk1BUuG3LXWrbrS39tWS1JIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcF9sS3VUVUZTNGJjdGRhdHV0TGYyMVpMVWtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy83ZTM4YjItYmVjMS00NDY0LWEwY2Et
N2QyNThiNjIwMTY5LzEvcF9sS3VUVUZTNGJjdGRhdHV0TGYyMVpMVWtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy83ZTM4YjItYmVjMS00NDY0LWEwY2EtN2QyNThiNjIwMTY5
LzEvcF9sS3VUVUZTNGJjdGRhdHV0TGYyMVpMVWtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj1rEdkgW
rrDJc9D+AJB6yLr8NYtuwf1SQxIF8iwgTftxAo84uvfq2NFjrOefR1IeyaQ812EN
98qmTIhjD95z56edjYszGO64hyANeB56oxBI/Y4TlooC7wUw2GtBIEjobPcjfXh8
jXiMWDvPkZCu5/tKhz9L/przV/8PJjZxF4XNYA5WB4XOCOkcwQQ1KUGSHjpigh4a
eFoYZ2SFueHg6vcpAjVh6gD7UfWYUd/K5m247wEUtLG0BduaotW9odm4xZ/O6FfX
LsMvkWGdaFpx9Xk/9CTRIl669Q8fTV6v36aayublHaBlYZ8jsJZ8zxNJPsIeXu92
nZ1f8ybykkKPVQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:39:12 2025 by rpki-client