
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
File: pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft (raw, json)
Hash identifier: uAa4nXKv0Yz/pCHwvnATdZdtx6oMh7xnZEQXvJS3h1I=
Subject key identifier: 49:01:D8:78:D5:D8:08:74:95:6A:82:76:3B:75:5B:AE:28:94:CF:BE
Authority key identifier: A4:91:7D:88:5B:67:56:72:FC:8E:FB:89:D6:E1:4E:23:67:50:52:D9
Certificate issuer: /CN=a4917d885b675672fc8efb89d6e14e23675052d9
Certificate serial: 01984B53B02967E80C050DC0C4A20C2E748D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
Manifest number: 087F
Signing time: Sun 27 Jul 2025 10:00:32 +0000
Manifest this update: Sun 27 Jul 2025 10:00:32 +0000
Manifest next update: Mon 28 Jul 2025 10:00:32 +0000
Files and hashes: 1: pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl (hash: VLjb7wSX1EnX6rZ26x30oAPty8ljOabV0GjfxVmykd0=)
2: prQrRYa7iRxtGVoZ-fOmbS6yQ1I.roa (hash: tnsyAKD0R4WdSHhtE37JrhpYKkCqh9rly9GAA3vquY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:b0:29:67:e8:0c:05:0d:c0:c4:a2:0c:2e:74:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4917d885b675672fc8efb89d6e14e23675052d9
Validity
Not Before: Jul 27 10:00:32 2025 GMT
Not After : Jul 28 10:00:32 2025 GMT
Subject: CN=4901d878d5d80874956a82763b755bae2894cfbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:43:38:6e:cc:f9:a2:ea:0b:3d:6c:77:a7:3a:
a3:0f:91:3e:28:fe:33:26:ec:d9:0e:6d:17:9c:d8:
18:49:53:99:5b:7a:7d:96:ae:39:26:fb:2d:38:87:
14:e5:d1:16:a5:50:99:65:88:3d:50:45:17:26:58:
35:8c:18:41:f4:c9:a7:53:0f:b9:7d:84:0c:b9:82:
a1:8a:1c:9b:69:25:7e:5d:ef:57:55:07:0b:4e:35:
41:c3:cf:1c:2c:d8:2d:4d:da:24:10:d5:1f:13:97:
b8:3f:0b:af:18:5d:ff:26:76:44:a2:eb:02:5f:8a:
fb:a3:3d:48:d6:a0:4d:ee:71:9a:78:4d:bb:fd:60:
7e:10:80:38:c4:bc:7f:53:1f:fd:ed:09:7d:0f:2f:
e7:14:13:8d:85:db:a2:51:2f:e1:cb:50:74:8f:3d:
c2:d1:de:a9:85:e5:9d:37:9d:5c:e6:a6:a1:a9:c9:
a8:27:fc:25:28:13:0d:2f:96:e4:59:bf:0b:00:0f:
06:de:24:0d:53:70:48:8a:6f:56:ba:ec:a9:24:91:
cd:63:f9:b4:22:12:f0:ce:f7:d6:fe:43:ee:5b:9f:
af:3c:2f:18:cc:fc:de:60:18:5b:f4:45:ed:4f:d9:
ee:fb:36:1b:e3:20:d6:1d:d8:65:22:27:86:18:90:
8e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:01:D8:78:D5:D8:08:74:95:6A:82:76:3B:75:5B:AE:28:94:CF:BE
X509v3 Authority Key Identifier:
keyid:A4:91:7D:88:5B:67:56:72:FC:8E:FB:89:D6:E1:4E:23:67:50:52:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:15:f5:e2:ed:00:f5:78:46:55:ce:47:df:26:02:55:d8:dc:
dd:e2:5b:93:25:69:b6:e8:66:c8:64:95:0d:17:96:fd:74:15:
28:b9:31:88:11:88:64:27:49:c4:14:b1:af:06:00:6c:74:f2:
88:1d:a0:00:4d:5d:a1:32:9d:51:32:23:4f:a2:70:bf:fc:3c:
54:3b:8b:18:87:aa:70:f8:7c:b7:a9:29:24:4b:15:6d:d2:10:
d2:17:5d:63:0b:67:49:f4:17:1f:d2:1c:77:e0:8b:c9:f5:6e:
48:9c:d0:9b:81:55:e0:7d:42:99:39:d4:c2:55:56:3f:6d:3f:
9d:0f:0b:d6:0e:5c:20:44:b6:1c:8c:76:4a:dd:62:3c:30:48:
36:12:22:e0:a0:80:2c:b5:c0:95:db:fe:15:6b:f9:e3:92:55:
cc:9e:35:37:f7:23:7d:a9:2d:55:7b:b1:56:5d:07:bf:4c:07:
ff:ed:97:6e:01:ed:64:20:18:0a:04:39:26:ff:c9:71:ab:48:
27:a4:28:47:42:c5:9d:e1:06:b5:3a:46:da:70:b3:90:16:dd:
8b:90:25:b2:9a:0e:55:b3:b5:1e:42:dd:81:74:9b:6f:45:3c:
0f:af:da:2a:8d:e4:6f:c0:7e:52:99:69:5f:04:44:ed:b1:c1:
fa:12:d2:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLU7ApZ+gMBQ3AxKIMLnSNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OTE3ZDg4NWI2NzU2NzJmYzhlZmI4OWQ2ZTE0ZTIzNjc1
MDUyZDkwHhcNMjUwNzI3MTAwMDMyWhcNMjUwNzI4MTAwMDMyWjAzMTEwLwYDVQQD
Eyg0OTAxZDg3OGQ1ZDgwODc0OTU2YTgyNzYzYjc1NWJhZTI4OTRjZmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA90M4bsz5ouoLPWx3pzqjD5E+KP4z
JuzZDm0XnNgYSVOZW3p9lq45JvstOIcU5dEWpVCZZYg9UEUXJlg1jBhB9MmnUw+5
fYQMuYKhihybaSV+Xe9XVQcLTjVBw88cLNgtTdokENUfE5e4PwuvGF3/JnZEousC
X4r7oz1I1qBN7nGaeE27/WB+EIA4xLx/Ux/97Ql9Dy/nFBONhduiUS/hy1B0jz3C
0d6pheWdN51c5qahqcmoJ/wlKBMNL5bkWb8LAA8G3iQNU3BIim9WuuypJJHNY/m0
IhLwzvfW/kPuW5+vPC8YzPzeYBhb9EXtT9nu+zYb4yDWHdhlIieGGJCOoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEkB2HjV2Ah0lWqCdjt1W64olM++MB8GA1UdIwQY
MBaAFKSRfYhbZ1Zy/I77idbhTiNnUFLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEpGOWlGdG5Wbkw4anZ1SjF1Rk9JMmRRVXRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8xM2JjMjktNGVmMy00MjFiLWEzMGYt
MTM0NGQwMmNmZGE4LzEvcEpGOWlGdG5Wbkw4anZ1SjF1Rk9JMmRRVXRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8xM2JjMjktNGVmMy00MjFiLWEzMGYtMTM0NGQwMmNmZGE4
LzEvcEpGOWlGdG5Wbkw4anZ1SjF1Rk9JMmRRVXRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQRX14u0A
9XhGVc5H3yYCVdjc3eJbkyVptuhmyGSVDReW/XQVKLkxiBGIZCdJxBSxrwYAbHTy
iB2gAE1doTKdUTIjT6Jwv/w8VDuLGIeqcPh8t6kpJEsVbdIQ0hddYwtnSfQXH9Ic
d+CLyfVuSJzQm4FV4H1CmTnUwlVWP20/nQ8L1g5cIES2HIx2St1iPDBINhIi4KCA
LLXAldv+FWv545JVzJ41N/cjfaktVXuxVl0Hv0wH/+2XbgHtZCAYCgQ5Jv/JcatI
J6QoR0LFneEGtTpG2nCzkBbdi5AlspoOVbO1HkLdgXSbb0U8D6/aKo3kb8B+Uplp
XwRE7bHB+hLSvQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 11:57:54 2025 by rpki-client