
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
File: pByW6THu5BuJnWLH24NjNEajxCs.mft (raw, json)
Hash identifier: hl8GD/6WVcgTalzMntDJGzTfy/TYTmnmrrfLtZ4RLpU=
Subject key identifier: 8D:07:13:F3:97:DF:3F:19:93:7A:12:17:C9:75:F7:EB:7A:E6:DB:1A
Authority key identifier: A4:1C:96:E9:31:EE:E4:1B:89:9D:62:C7:DB:83:63:34:46:A3:C4:2B
Certificate issuer: /CN=a41c96e931eee41b899d62c7db83633446a3c42b
Certificate serial: 01984BC19E2BD0C94B1A8E48A195F41CC9A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 12:00:36 +0000
Manifest this update: Sun 27 Jul 2025 12:00:36 +0000
Manifest next update: Mon 28 Jul 2025 12:00:36 +0000
Files and hashes: 1: 9Y_dJTvHqJ6_O2HDQsdb4YPQOPM.roa (hash: C4dGnq5v0d5/X1v0Ow3x2iZJ1sOJLLWISEpoXWZpLas=)
2: pByW6THu5BuJnWLH24NjNEajxCs.crl (hash: 04NSIcJV7nDO3JKnKWzHfODzwqwHbcHdN1zDHxUYbBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:9e:2b:d0:c9:4b:1a:8e:48:a1:95:f4:1c:c9:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41c96e931eee41b899d62c7db83633446a3c42b
Validity
Not Before: Jul 27 12:00:36 2025 GMT
Not After : Jul 28 12:00:36 2025 GMT
Subject: CN=8d0713f397df3f19937a1217c975f7eb7ae6db1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:50:76:5b:8c:8b:07:7e:fe:26:45:9e:cf:89:
a5:e8:2d:43:17:cf:f4:f0:3d:78:2a:c4:f0:74:fd:
c7:56:78:fb:e8:4b:57:c0:13:6c:53:c7:48:9b:dd:
f1:75:0f:45:2b:b2:db:4c:d3:95:b5:5a:6a:df:95:
44:5c:96:3e:0c:2b:59:cd:31:b5:90:1f:3e:d9:0b:
c6:7d:19:3a:8d:68:7c:0e:cb:6f:1e:2d:54:95:70:
2d:93:6a:ec:74:11:e0:ca:5e:7d:2a:af:27:6e:27:
c7:b0:57:35:ff:90:03:dd:a5:24:86:c0:4b:3c:fe:
95:ca:b0:16:8a:c4:e8:29:d4:95:e5:cf:ed:db:0d:
cf:96:81:bf:f7:2e:8a:42:48:63:bc:a6:70:3b:6a:
2c:d3:76:b1:a9:af:0d:c6:4b:0c:60:98:9f:d0:7f:
db:8c:4a:1b:b8:06:56:28:9c:37:ca:17:08:b4:7e:
13:8a:c9:3b:96:9d:5a:f9:6f:a9:d4:35:03:ac:20:
1b:b5:5d:75:bb:69:8a:de:9f:f1:96:e0:77:9a:1b:
3d:14:06:bf:1b:31:b5:18:fe:11:8c:68:dd:3e:a7:
07:a4:25:3b:4c:f2:21:5f:82:48:6d:59:76:0c:1a:
d9:1f:53:df:c3:88:8b:8c:37:37:eb:7c:42:b2:a3:
45:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:07:13:F3:97:DF:3F:19:93:7A:12:17:C9:75:F7:EB:7A:E6:DB:1A
X509v3 Authority Key Identifier:
keyid:A4:1C:96:E9:31:EE:E4:1B:89:9D:62:C7:DB:83:63:34:46:A3:C4:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1b:e7:2b:39:04:a0:aa:4f:c9:f1:aa:e2:1b:e9:77:87:78:
5f:4e:3d:81:38:ff:b0:be:2a:9a:a2:64:10:47:d5:b4:75:5e:
45:5e:de:c9:19:ca:4f:b7:ac:a7:6d:b7:a7:ca:48:62:56:c8:
7f:46:38:ec:5e:67:4d:3d:b4:f3:a0:cd:0d:f9:b3:8d:b1:d8:
be:b7:84:53:2a:d8:19:0c:88:11:a4:81:7e:a7:9b:3a:29:6f:
4b:ed:e2:46:14:31:ee:05:4d:c9:ef:b7:7e:e9:93:40:2d:47:
ec:1c:a4:cc:c2:ed:b1:b3:a1:0e:7b:14:62:65:d3:68:87:ef:
4e:11:a9:9f:ee:96:2e:8e:fa:85:4a:ef:2c:a0:35:54:60:5c:
98:86:d3:c5:d6:cb:be:63:62:03:26:2b:5a:ce:b2:68:76:d0:
aa:a0:dd:89:a6:72:f9:74:c6:80:29:bd:b6:4d:5a:57:01:c8:
ba:32:5c:15:28:02:33:da:12:11:8a:c3:15:71:44:32:8d:dd:
53:73:d3:d2:3e:23:cf:33:08:68:8b:cd:58:6e:42:a2:ca:aa:
66:64:19:cd:58:0a:c5:01:c5:3d:aa:6a:76:ee:9d:b4:c7:03:
f7:d1:ee:f8:7b:4a:0b:63:90:41:60:1e:8c:45:45:20:9b:23:
fd:3b:88:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLwZ4r0MlLGo5IoZX0HMmjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MWM5NmU5MzFlZWU0MWI4OTlkNjJjN2RiODM2MzM0NDZh
M2M0MmIwHhcNMjUwNzI3MTIwMDM2WhcNMjUwNzI4MTIwMDM2WjAzMTEwLwYDVQQD
Eyg4ZDA3MTNmMzk3ZGYzZjE5OTM3YTEyMTdjOTc1ZjdlYjdhZTZkYjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVB2W4yLB37+JkWez4ml6C1DF8/0
8D14KsTwdP3HVnj76EtXwBNsU8dIm93xdQ9FK7LbTNOVtVpq35VEXJY+DCtZzTG1
kB8+2QvGfRk6jWh8DstvHi1UlXAtk2rsdBHgyl59Kq8nbifHsFc1/5AD3aUkhsBL
PP6VyrAWisToKdSV5c/t2w3PloG/9y6KQkhjvKZwO2os03axqa8NxksMYJif0H/b
jEobuAZWKJw3yhcItH4Tisk7lp1a+W+p1DUDrCAbtV11u2mK3p/xluB3mhs9FAa/
GzG1GP4RjGjdPqcHpCU7TPIhX4JIbVl2DBrZH1Pfw4iLjDc363xCsqNFzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0HE/OX3z8Zk3oSF8l19+t65tsaMB8GA1UdIwQY
MBaAFKQclukx7uQbiZ1ix9uDYzRGo8QrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEJ5VzZUSHU1QnVKbldMSDI0TmpORWFqeENzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy82YmRkNzQtOGNkMC00Y2M0LThiNjct
ZjgzZTNjNzFlZmNiLzEvcEJ5VzZUSHU1QnVKbldMSDI0TmpORWFqeENzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy82YmRkNzQtOGNkMC00Y2M0LThiNjctZjgzZTNjNzFlZmNi
LzEvcEJ5VzZUSHU1QnVKbldMSDI0TmpORWFqeENzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHBvnKzkE
oKpPyfGq4hvpd4d4X049gTj/sL4qmqJkEEfVtHVeRV7eyRnKT7esp223p8pIYlbI
f0Y47F5nTT2086DNDfmzjbHYvreEUyrYGQyIEaSBfqebOilvS+3iRhQx7gVNye+3
fumTQC1H7BykzMLtsbOhDnsUYmXTaIfvThGpn+6WLo76hUrvLKA1VGBcmIbTxdbL
vmNiAyYrWs6yaHbQqqDdiaZy+XTGgCm9tk1aVwHIujJcFSgCM9oSEYrDFXFEMo3d
U3PT0j4jzzMIaIvNWG5CosqqZmQZzVgKxQHFPapqdu6dtMcD99Hu+HtKC2OQQWAe
jEVFIJsj/TuICQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 15:51:29 2025 by rpki-client