Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft
File: pPAKrld-dFH4jqYEv2ozc0zQMAk.mft (raw, json)
Hash identifier: mbJ78+w2g4QvNbeRfRGdNB2iz7pWUdP3wH2pbi8aBgU=
Subject key identifier: 5C:8B:8D:8B:EF:F1:84:D9:C3:66:C0:9C:09:5A:CB:57:1D:F8:06:88
Authority key identifier: A4:F0:0A:AE:57:7E:74:51:F8:8E:A6:04:BF:6A:33:73:4C:D0:30:09
Certificate issuer: /CN=a4f00aae577e7451f88ea604bf6a33734cd03009
Certificate serial: 01984E1E0B2BF8AADA4D8299EBAE7E4A50C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPAKrld-dFH4jqYEv2ozc0zQMAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft
Manifest number: 0E62
Signing time: Sun 27 Jul 2025 23:00:48 +0000
Manifest this update: Sun 27 Jul 2025 23:00:48 +0000
Manifest next update: Mon 28 Jul 2025 23:00:48 +0000
Files and hashes: 1: XRYyvh6J7DkVdKbz1yypWyD6-m0.roa (hash: 6+dNcwPteiKzyDYvKh6xy6mmMEyhqVqNL5Sm9+oU6rA=)
2: pPAKrld-dFH4jqYEv2ozc0zQMAk.crl (hash: xSiRUyln+0smxcJ1tmIVIXvAlQi7tO43R7LzC0IUtjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPAKrld-dFH4jqYEv2ozc0zQMAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:1e:0b:2b:f8:aa:da:4d:82:99:eb:ae:7e:4a:50:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f00aae577e7451f88ea604bf6a33734cd03009
Validity
Not Before: Jul 27 23:00:48 2025 GMT
Not After : Jul 28 23:00:48 2025 GMT
Subject: CN=5c8b8d8beff184d9c366c09c095acb571df80688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9b:47:65:a9:16:2a:82:9d:e1:68:0a:e0:e8:
b4:bc:46:df:5e:88:7e:93:55:db:36:79:8e:4e:e0:
36:00:62:87:35:78:9c:fe:4e:18:f7:cc:93:c6:23:
bc:d1:bc:5c:6f:a7:c8:fe:57:21:c5:93:a0:f4:d6:
79:76:1c:53:cb:4a:1f:31:d0:b3:92:e5:23:e1:86:
8b:75:d5:f8:d3:d5:12:f2:2e:fa:61:da:65:ff:f8:
da:46:bf:00:c7:d9:6d:ce:cc:0f:08:04:3f:bb:1e:
bd:a7:d1:ea:16:ab:76:e4:ac:8a:a6:73:84:92:82:
04:3b:bd:62:a5:e0:84:96:3e:cc:76:f8:64:97:93:
8a:2d:ce:77:04:67:c6:76:1e:50:1b:46:48:a6:8c:
d7:a4:2f:68:eb:d9:21:60:73:7c:7c:7c:dd:e9:b0:
9b:e7:11:6c:0a:19:f2:1d:15:3f:e8:23:f5:13:f9:
2a:98:aa:2d:b0:64:b8:c3:2e:17:a8:53:da:0e:c6:
c9:c6:3e:b8:80:13:48:fd:da:3f:38:da:29:ee:a8:
52:05:af:16:1c:f2:2c:62:34:49:b6:96:a4:6c:86:
45:4e:a6:3d:67:b9:31:c0:bf:90:9a:38:96:33:d3:
47:93:ea:68:1a:ab:22:bf:7e:9e:46:ee:2e:20:f5:
57:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8B:8D:8B:EF:F1:84:D9:C3:66:C0:9C:09:5A:CB:57:1D:F8:06:88
X509v3 Authority Key Identifier:
keyid:A4:F0:0A:AE:57:7E:74:51:F8:8E:A6:04:BF:6A:33:73:4C:D0:30:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPAKrld-dFH4jqYEv2ozc0zQMAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d5:eb:6e:a1:1a:38:a6:3a:64:c2:c6:64:62:c8:33:ab:d5:
49:7f:f2:44:e3:59:bf:63:b0:cc:7a:df:15:b9:57:4e:50:77:
c4:62:9f:3f:6f:57:c2:b2:03:26:02:b2:d5:bd:96:9f:b0:ca:
a9:8f:a4:af:41:01:8a:60:4f:59:40:c7:8c:e3:53:c6:60:f7:
cb:9c:92:7b:2d:b9:95:09:fc:0d:1d:91:5e:7f:ba:df:08:e4:
22:0f:f9:d9:bf:3d:2a:88:0a:ea:c0:b3:6f:d2:6a:21:d7:5e:
6b:e4:a7:0e:29:9b:e8:22:79:44:12:9e:bb:42:29:33:0f:1f:
c5:fc:e1:a8:78:57:78:43:3b:6e:dc:81:1a:16:96:f1:c6:c3:
9d:88:6b:ad:60:0c:8b:bf:28:fe:d7:f0:7c:de:e8:a9:d2:b9:
3b:60:a8:2f:88:36:dc:24:ef:02:bf:07:26:c6:6b:ed:9f:53:
f3:29:3d:31:b5:c4:db:b9:c9:da:80:55:ae:89:21:73:6b:10:
bd:3d:59:83:49:e4:c3:9f:b6:69:8f:bc:33:83:7d:af:f8:3e:
62:a9:e5:49:3d:7f:e0:49:45:89:42:fa:73:13:d8:d0:b2:fb:
3a:8b:8d:e1:de:9c:79:27:ca:c4:b6:b7:7f:5f:b3:2d:f1:a9:
f9:e5:9a:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhOHgsr+KraTYKZ665+SlDGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZjAwYWFlNTc3ZTc0NTFmODhlYTYwNGJmNmEzMzczNGNk
MDMwMDkwHhcNMjUwNzI3MjMwMDQ4WhcNMjUwNzI4MjMwMDQ4WjAzMTEwLwYDVQQD
Eyg1YzhiOGQ4YmVmZjE4NGQ5YzM2NmMwOWMwOTVhY2I1NzFkZjgwNjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55tHZakWKoKd4WgK4Oi0vEbfXoh+
k1XbNnmOTuA2AGKHNXic/k4Y98yTxiO80bxcb6fI/lchxZOg9NZ5dhxTy0ofMdCz
kuUj4YaLddX409US8i76Ydpl//jaRr8Ax9ltzswPCAQ/ux69p9HqFqt25KyKpnOE
koIEO71ipeCElj7Mdvhkl5OKLc53BGfGdh5QG0ZIpozXpC9o69khYHN8fHzd6bCb
5xFsChnyHRU/6CP1E/kqmKotsGS4wy4XqFPaDsbJxj64gBNI/do/ONop7qhSBa8W
HPIsYjRJtpakbIZFTqY9Z7kxwL+QmjiWM9NHk+poGqsiv36eRu4uIPVXAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyLjYvv8YTZw2bAnAlay1cd+AaIMB8GA1UdIwQY
MBaAFKTwCq5XfnRR+I6mBL9qM3NM0DAJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFBBS3JsZC1kRkg0anFZRXYyb3pjMHpRTUFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi81OGE5NGEtOWUyOC00N2E1LTlmZDYt
OWM5MWIxYzUxNThhLzEvcFBBS3JsZC1kRkg0anFZRXYyb3pjMHpRTUFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi81OGE5NGEtOWUyOC00N2E1LTlmZDYtOWM5MWIxYzUxNThh
LzEvcFBBS3JsZC1kRkg0anFZRXYyb3pjMHpRTUFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAtXrbqEa
OKY6ZMLGZGLIM6vVSX/yRONZv2OwzHrfFblXTlB3xGKfP29XwrIDJgKy1b2Wn7DK
qY+kr0EBimBPWUDHjONTxmD3y5ySey25lQn8DR2RXn+63wjkIg/52b89KogK6sCz
b9JqIddea+SnDimb6CJ5RBKeu0IpMw8fxfzhqHhXeEM7btyBGhaW8cbDnYhrrWAM
i78o/tfwfN7oqdK5O2CoL4g23CTvAr8HJsZr7Z9T8yk9MbXE27nJ2oBVrokhc2sQ
vT1Zg0nkw5+2aY+8M4N9r/g+YqnlST1/4ElFiUL6cxPY0LL7OouN4d6ceSfKxLa3
f1+zLfGp+eWa9Q==
-----END CERTIFICATE-----
Generated at Mon Jul 28 01:55:18 2025 by rpki-client