Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
File: 0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft (raw, json)
Hash identifier: VkK8brdyvGxfvtgcd5i4wUPMeh/NUjlwDrj5DkLQ7eY=
Subject key identifier: C1:48:6F:1F:CC:00:3F:C0:C7:44:84:29:31:F8:BD:45:03:1A:14:B4
Authority key identifier: D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7
Certificate issuer: /CN=d0f6b8436f6634cd31d7097ce242a549935b18d7
Certificate serial: 01984A41754A93B28FEAB1842DD6804CC297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
Manifest number: 15D6
Signing time: Sun 27 Jul 2025 05:01:00 +0000
Manifest this update: Sun 27 Jul 2025 05:01:00 +0000
Manifest next update: Mon 28 Jul 2025 05:01:00 +0000
Files and hashes: 1: 0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl (hash: EXfJcqjV5Xw8QGPbH7HR8fuqJtAD/BoOhhx0SjKLmoc=)
2: PRL7sgUPxAooAgpR2OCFKktRv4I.roa (hash: 7EnjkpMFrtIGkSxH/V71N/Yi8O1F+vC6f4Et13UAYFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:75:4a:93:b2:8f:ea:b1:84:2d:d6:80:4c:c2:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f6b8436f6634cd31d7097ce242a549935b18d7
Validity
Not Before: Jul 27 05:01:00 2025 GMT
Not After : Jul 28 05:01:00 2025 GMT
Subject: CN=c1486f1fcc003fc0c744842931f8bd45031a14b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:43:b0:61:17:ba:92:ff:48:73:b4:e7:e5:d8:
90:b6:4e:14:bb:31:28:2f:fd:a5:a3:08:e4:1d:90:
71:b9:8a:52:30:12:88:88:fa:01:a9:b4:51:2a:21:
1c:a2:06:ce:d0:23:d0:27:78:d2:ce:08:8f:04:e7:
2a:87:0c:60:20:6b:53:b1:59:44:ee:0a:e2:6e:10:
40:36:ee:56:8d:c7:25:83:5c:cc:ce:52:a3:36:25:
e2:a1:52:01:0c:77:a3:f1:c8:a3:0b:ac:21:fb:d9:
e2:62:98:14:9e:ec:bb:76:b0:80:c9:fb:07:f2:0d:
37:e8:e8:ed:42:f5:ab:a9:61:7f:a0:dc:ab:f0:c5:
13:d8:fd:1c:92:e3:9d:5b:fa:08:90:cf:e1:d2:02:
49:59:75:3b:1a:a8:81:a8:48:5b:a1:a1:fc:ec:2b:
b3:a4:fc:9b:c9:51:d5:2c:74:0a:28:2d:37:e8:9b:
b9:78:fe:7e:c6:4f:78:06:b1:e0:de:94:fa:1a:b9:
1c:df:6b:c9:4a:dd:e3:4e:16:5f:16:30:93:3f:67:
42:f2:4d:29:ab:e7:de:bf:6c:c5:5b:a7:aa:5c:f4:
24:be:22:ba:4a:64:51:d3:eb:ec:ef:6b:d1:30:77:
03:2c:c9:75:85:c7:58:f7:76:fd:76:00:59:54:20:
89:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:48:6F:1F:CC:00:3F:C0:C7:44:84:29:31:F8:BD:45:03:1A:14:B4
X509v3 Authority Key Identifier:
keyid:D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:40:07:40:e1:e4:02:ca:42:e5:45:dc:8a:5f:16:a6:1b:b0:
05:e8:15:5e:1a:bf:9a:56:32:2a:23:24:a4:65:31:0d:13:ca:
d0:6b:48:79:22:36:da:bb:e5:31:d5:b5:16:54:4c:a9:0c:56:
5d:af:43:08:85:28:4b:87:36:5a:a0:d0:d5:58:f9:d1:e7:30:
35:ea:5f:bc:16:96:c9:58:64:7d:12:42:29:d2:1e:cf:59:81:
bf:3f:9e:4f:6b:90:e6:8a:d4:94:57:c3:f5:44:ad:d8:f5:55:
19:2d:45:76:31:cc:ce:0f:95:26:77:68:97:bf:73:fb:04:9a:
32:5e:3c:60:e7:f0:04:22:ac:15:af:a0:d4:e2:0f:ce:a6:49:
59:67:ad:89:9f:45:f8:55:70:f8:99:24:9a:99:9c:f2:a6:7a:
d6:e3:b0:ed:24:ff:12:3f:54:bf:9e:7a:7b:56:fd:b4:e3:32:
0f:10:4f:72:79:f7:e2:00:54:fb:b4:52:fd:ea:85:70:d9:86:
69:81:c4:5d:a3:0b:7f:49:53:64:fc:30:ff:6c:88:2b:4f:74:
5e:d3:ce:23:31:cf:50:af:06:d8:36:5a:6d:8e:80:a9:47:34:
5b:25:bf:0d:f1:42:24:0d:33:a4:98:75:66:ac:3a:d8:5b:b5:
83:5f:80:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQXVKk7KP6rGELdaATMKXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZjZiODQzNmY2NjM0Y2QzMWQ3MDk3Y2UyNDJhNTQ5OTM1
YjE4ZDcwHhcNMjUwNzI3MDUwMTAwWhcNMjUwNzI4MDUwMTAwWjAzMTEwLwYDVQQD
EyhjMTQ4NmYxZmNjMDAzZmMwYzc0NDg0MjkzMWY4YmQ0NTAzMWExNGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UOwYRe6kv9Ic7Tn5diQtk4UuzEo
L/2lowjkHZBxuYpSMBKIiPoBqbRRKiEcogbO0CPQJ3jSzgiPBOcqhwxgIGtTsVlE
7gribhBANu5Wjcclg1zMzlKjNiXioVIBDHej8cijC6wh+9niYpgUnuy7drCAyfsH
8g036OjtQvWrqWF/oNyr8MUT2P0ckuOdW/oIkM/h0gJJWXU7GqiBqEhboaH87Cuz
pPybyVHVLHQKKC036Ju5eP5+xk94BrHg3pT6Grkc32vJSt3jThZfFjCTP2dC8k0p
q+fev2zFW6eqXPQkviK6SmRR0+vs72vRMHcDLMl1hcdY93b9dgBZVCCJTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFIbx/MAD/Ax0SEKTH4vUUDGhS0MB8GA1UdIwQY
MBaAFND2uENvZjTNMdcJfOJCpUmTWxjXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFBhNFEyOW1OTTB4MXdsODRrS2xTWk5iR05jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC81MTRhNDItMGJlOC00NWU4LWE3ZjAt
NTVkYThlYzM2MDE0LzEvMFBhNFEyOW1OTTB4MXdsODRrS2xTWk5iR05jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC81MTRhNDItMGJlOC00NWU4LWE3ZjAtNTVkYThlYzM2MDE0
LzEvMFBhNFEyOW1OTTB4MXdsODRrS2xTWk5iR05jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfUAHQOHk
AspC5UXcil8WphuwBegVXhq/mlYyKiMkpGUxDRPK0GtIeSI22rvlMdW1FlRMqQxW
Xa9DCIUoS4c2WqDQ1Vj50ecwNepfvBaWyVhkfRJCKdIez1mBvz+eT2uQ5orUlFfD
9USt2PVVGS1FdjHMzg+VJndol79z+wSaMl48YOfwBCKsFa+g1OIPzqZJWWetiZ9F
+FVw+Jkkmpmc8qZ61uOw7ST/Ej9Uv556e1b9tOMyDxBPcnn34gBU+7RS/eqFcNmG
aYHEXaMLf0lTZPww/2yIK090XtPOIzHPUK8G2DZabY6AqUc0WyW/DfFCJA0zpJh1
Zqw62Fu1g1+AOw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:10:40 2025 by rpki-client