Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
File: PnXUne0gVmynRcKPgM_ZqS9LfUc.mft (raw, json)
Hash identifier: QlmD2vilyZcPu29+OJeEVLzLkXAZ246Kaf3TyjXAjBc=
Subject key identifier: 07:F0:BB:1C:FD:7A:51:51:99:84:DB:A7:27:58:03:91:CC:7F:EE:53
Authority key identifier: 3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
Certificate issuer: /CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Certificate serial: 019852681C2FF5BB17A87CC7DE1C39D44BA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
Manifest number: 1605
Signing time: Mon 28 Jul 2025 19:00:11 +0000
Manifest this update: Mon 28 Jul 2025 19:00:11 +0000
Manifest next update: Tue 29 Jul 2025 19:00:11 +0000
Files and hashes: 1: PnXUne0gVmynRcKPgM_ZqS9LfUc.crl (hash: HvvA6sCBsWaG987A7i9QMVLHdURjrDSSQ+yXrmmOaHE=)
2: pXJDsaj0ZUCw_GiSDcUZAr3Eqys.roa (hash: jxE0YH1Sz5qp4TF2g6NLi4CtXpHMgBECSGalZs0qi4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:68:1c:2f:f5:bb:17:a8:7c:c7:de:1c:39:d4:4b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Validity
Not Before: Jul 28 19:00:11 2025 GMT
Not After : Jul 29 19:00:11 2025 GMT
Subject: CN=07f0bb1cfd7a51519984dba727580391cc7fee53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:14:79:ea:38:75:ae:23:c2:bf:43:96:8b:32:
1c:89:cb:80:77:01:27:dc:20:98:31:92:91:5e:0c:
60:66:20:de:1b:4e:f6:72:46:d3:31:05:c6:ce:03:
d0:8d:ca:6f:b7:bf:14:ae:af:f5:34:bd:70:62:d1:
1b:da:46:58:49:df:c7:45:9d:20:21:bf:12:5e:61:
0e:5c:1a:4c:5d:dc:32:2f:e0:da:a3:7a:cb:69:17:
e0:32:a5:25:5d:38:df:16:08:f1:f6:e9:73:69:b5:
d3:6c:9b:c7:7b:1b:95:82:e6:bc:be:6b:95:ed:fb:
e1:5a:f9:ca:cd:72:ab:8b:69:07:95:8e:01:20:52:
36:9e:e9:6e:62:30:c4:6b:fe:7b:ac:fd:d4:f6:e4:
69:aa:78:1a:40:22:70:9e:67:3d:2d:83:c6:b9:b4:
62:c3:12:30:0d:7e:16:ff:48:3f:f3:1c:38:73:9c:
2d:cd:09:40:c8:64:c3:4f:80:52:0f:69:49:5a:21:
96:dd:b7:1e:92:1a:13:74:1c:a0:06:b7:ce:8b:cc:
3b:5e:ac:7f:2c:87:6e:f8:2d:c5:51:ca:65:41:3e:
76:80:00:92:2d:f7:7a:68:08:53:2a:e3:e6:a6:2b:
8a:a7:0b:c5:3e:c0:d6:a5:dc:d8:02:d6:36:fb:73:
d6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F0:BB:1C:FD:7A:51:51:99:84:DB:A7:27:58:03:91:CC:7F:EE:53
X509v3 Authority Key Identifier:
keyid:3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:b9:50:7a:eb:b8:85:80:2a:69:0a:6a:86:f9:03:db:f7:f8:
d8:5d:65:cf:a0:3d:f6:05:9d:1a:e9:70:51:b9:eb:fe:d9:11:
fb:48:94:a9:61:9d:1c:12:5c:bb:59:ad:b7:5d:a4:b1:b6:88:
4b:67:a7:61:06:e4:0e:40:1f:4c:57:41:b9:3a:63:34:7a:ba:
67:31:af:a0:13:76:3f:32:9e:00:47:84:3d:5a:26:7e:87:c7:
ab:b8:b8:f7:41:16:f6:b5:bd:ea:36:02:dd:e6:3d:39:05:c5:
f3:6a:90:7f:df:a8:c9:7d:e3:eb:d5:d7:f4:29:32:4f:c2:23:
a2:cc:43:aa:5b:c1:07:b6:51:20:01:33:f3:ec:20:4c:da:23:
e8:46:9c:90:d1:cb:37:95:7a:ae:73:b0:b7:0b:b9:39:34:83:
f4:a7:23:f2:a6:9f:6f:d3:f0:cc:76:33:9e:3c:62:1e:67:18:
e8:8d:e0:81:f3:e5:5b:9f:ca:53:55:83:00:40:e5:9c:62:90:
10:a8:62:6e:32:ca:15:24:fc:6d:44:47:56:d0:71:8c:16:15:
ae:27:2e:f0:75:13:8f:0c:03:79:00:2e:ea:8b:5b:fa:94:47:
41:ba:96:21:85:02:15:38:8a:f5:c2:74:96:e4:4a:74:aa:74:
6e:fe:44:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhSaBwv9bsXqHzH3hw51EukMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNzVkNDlkZWQyMDU2NmNhNzQ1YzI4ZjgwY2ZkOWE5MmY0
YjdkNDcwHhcNMjUwNzI4MTkwMDExWhcNMjUwNzI5MTkwMDExWjAzMTEwLwYDVQQD
EygwN2YwYmIxY2ZkN2E1MTUxOTk4NGRiYTcyNzU4MDM5MWNjN2ZlZTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hR56jh1riPCv0OWizIcicuAdwEn
3CCYMZKRXgxgZiDeG072ckbTMQXGzgPQjcpvt78Urq/1NL1wYtEb2kZYSd/HRZ0g
Ib8SXmEOXBpMXdwyL+Dao3rLaRfgMqUlXTjfFgjx9ulzabXTbJvHexuVgua8vmuV
7fvhWvnKzXKri2kHlY4BIFI2nuluYjDEa/57rP3U9uRpqngaQCJwnmc9LYPGubRi
wxIwDX4W/0g/8xw4c5wtzQlAyGTDT4BSD2lJWiGW3bcekhoTdBygBrfOi8w7Xqx/
LIdu+C3FUcplQT52gACSLfd6aAhTKuPmpiuKpwvFPsDWpdzYAtY2+3PWSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfwuxz9elFRmYTbpydYA5HMf+5TMB8GA1UdIwQY
MBaAFD511J3tIFZsp0XCj4DP2akvS31HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG5YVW5lMGdWbXluUmNLUGdNX1pxUzlMZlVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xYzE1YTItZDBlYy00YzNhLTg2Y2Qt
ODM2Mzg0NzVkOGFiLzEvUG5YVW5lMGdWbXluUmNLUGdNX1pxUzlMZlVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8xYzE1YTItZDBlYy00YzNhLTg2Y2QtODM2Mzg0NzVkOGFi
LzEvUG5YVW5lMGdWbXluUmNLUGdNX1pxUzlMZlVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0rlQeuu4
hYAqaQpqhvkD2/f42F1lz6A99gWdGulwUbnr/tkR+0iUqWGdHBJcu1mtt12ksbaI
S2enYQbkDkAfTFdBuTpjNHq6ZzGvoBN2PzKeAEeEPVomfofHq7i490EW9rW96jYC
3eY9OQXF82qQf9+oyX3j69XX9CkyT8IjosxDqlvBB7ZRIAEz8+wgTNoj6EackNHL
N5V6rnOwtwu5OTSD9Kcj8qafb9PwzHYznjxiHmcY6I3ggfPlW5/KU1WDAEDlnGKQ
EKhibjLKFST8bURHVtBxjBYVricu8HUTjwwDeQAu6otb+pRHQbqWIYUCFTiK9cJ0
luRKdKp0bv5EiA==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:16:24 2025 by rpki-client