Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
File: pK0j9tzk2Wg8KklDvTfBczXHYYo.mft (raw, json)
Hash identifier: ce9UUdJh72kFGUdBK7ZNskqvHtGUzwbqzqQcBoIwYDs=
Subject key identifier: 23:B5:6E:42:B7:B5:25:7E:DC:FF:90:0B:64:51:D2:BF:88:F0:15:09
Authority key identifier: A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A
Certificate issuer: /CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
Certificate serial: 01985A59ABD93A0230DB3AA5CD91BEBCC025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
Manifest number: 160A
Signing time: Wed 30 Jul 2025 08:01:22 +0000
Manifest this update: Wed 30 Jul 2025 08:01:22 +0000
Manifest next update: Thu 31 Jul 2025 08:01:22 +0000
Files and hashes: 1: RC2JkOQZBHdrMWWJ6dmI74cPa_s.roa (hash: qL9vMEtT48m8aWpCwA/eKJ1AT6hZ+DcyDfjgFWcllKo=)
2: pK0j9tzk2Wg8KklDvTfBczXHYYo.crl (hash: bPbG5cCKUVId5qE0bVnWfzZiv0Ihi7f+y+UpfIdM7ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 08:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:59:ab:d9:3a:02:30:db:3a:a5:cd:91:be:bc:c0:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
Validity
Not Before: Jul 30 08:01:22 2025 GMT
Not After : Jul 31 08:01:22 2025 GMT
Subject: CN=23b56e42b7b5257edcff900b6451d2bf88f01509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:18:da:8d:40:f3:d5:26:5e:99:d9:ee:25:5e:
7f:7d:16:86:11:7b:76:a5:e3:7b:df:28:3d:25:24:
03:e6:f9:04:78:6d:da:fb:20:05:26:71:c0:23:09:
45:49:69:94:8f:c4:74:de:07:fd:92:f4:92:59:0b:
3d:c0:4e:8c:02:4e:d2:44:1d:d9:3c:d4:dd:cd:45:
f2:e0:8d:fe:2d:e4:92:35:45:19:29:a5:66:93:ab:
5c:e9:3a:aa:65:e1:f2:55:1a:84:62:c4:e5:61:44:
5b:ce:c5:59:3a:a1:dc:f6:88:3c:c8:a6:99:f3:ae:
b4:60:fb:34:ae:65:40:e5:67:03:41:11:c3:40:0e:
73:86:66:2b:23:2b:8f:52:ee:28:91:a0:3b:aa:bb:
55:24:89:85:e5:8f:29:d4:d4:be:be:e9:6d:e6:92:
0c:a0:ab:58:b0:96:bd:97:2d:e2:26:17:d6:b0:30:
e9:40:44:fb:6d:72:43:c1:ea:76:a3:5b:3f:54:ce:
b9:94:a6:d6:f0:7e:5d:7d:b7:64:06:00:fa:eb:be:
71:aa:5c:4b:0a:19:9a:6d:7f:25:b5:e8:e0:e7:a6:
42:60:b7:30:35:11:37:df:ea:64:f2:80:6f:84:4d:
46:76:0e:94:a1:8c:2c:08:8f:97:2c:99:8e:23:76:
df:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B5:6E:42:B7:B5:25:7E:DC:FF:90:0B:64:51:D2:BF:88:F0:15:09
X509v3 Authority Key Identifier:
keyid:A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:87:58:c8:72:c8:18:09:17:fc:cb:4d:92:9a:31:f6:91:2d:
86:74:99:d4:6f:48:ee:75:38:2e:32:7d:5a:eb:0d:9d:bb:f3:
96:a3:59:a7:cc:b2:7f:b4:95:e6:a5:95:18:ac:f0:c6:fb:fb:
ab:72:e8:07:68:32:ae:a8:41:dd:71:7d:a4:ba:a0:d1:a6:52:
80:e1:d4:fc:99:2e:20:52:05:3c:c8:e3:bc:ff:75:3a:c0:cd:
36:26:34:60:84:dd:31:9c:07:0d:17:46:90:3f:68:c5:92:c8:
5b:79:9d:1f:3f:45:4f:a2:2d:a5:3f:05:9f:92:d2:40:58:cb:
80:3e:bf:4a:5a:ce:ef:27:31:9b:ae:2d:79:8d:54:99:86:fc:
67:d4:3d:7e:0d:cd:8f:f6:95:4f:c9:7d:90:2d:ca:35:f6:3d:
77:f5:20:90:bc:0e:41:2e:75:80:03:09:4e:99:92:cf:91:45:
e4:a2:6b:dd:e3:e0:e2:6e:7d:93:a7:f5:64:76:06:47:8c:e6:
b4:b5:23:e0:6e:20:a6:56:40:17:84:b3:ed:e3:1b:79:5c:91:
a5:bd:ea:22:a2:6a:2a:17:0c:55:00:75:72:c7:2c:11:33:39:
1c:a9:e1:77:7b:4d:36:4f:3e:58:07:58:4e:03:ed:a2:c6:fd:
d6:b0:56:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhaWavZOgIw2zqlzZG+vMAlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YWQyM2Y2ZGNlNGQ5NjgzYzJhNDk0M2JkMzdjMTczMzVj
NzYxOGEwHhcNMjUwNzMwMDgwMTIyWhcNMjUwNzMxMDgwMTIyWjAzMTEwLwYDVQQD
EygyM2I1NmU0MmI3YjUyNTdlZGNmZjkwMGI2NDUxZDJiZjg4ZjAxNTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBjajUDz1SZemdnuJV5/fRaGEXt2
peN73yg9JSQD5vkEeG3a+yAFJnHAIwlFSWmUj8R03gf9kvSSWQs9wE6MAk7SRB3Z
PNTdzUXy4I3+LeSSNUUZKaVmk6tc6TqqZeHyVRqEYsTlYURbzsVZOqHc9og8yKaZ
8660YPs0rmVA5WcDQRHDQA5zhmYrIyuPUu4okaA7qrtVJImF5Y8p1NS+vult5pIM
oKtYsJa9ly3iJhfWsDDpQET7bXJDwep2o1s/VM65lKbW8H5dfbdkBgD6675xqlxL
ChmabX8ltejg56ZCYLcwNRE33+pk8oBvhE1Gdg6UoYwsCI+XLJmOI3bf2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCO1bkK3tSV+3P+QC2RR0r+I8BUJMB8GA1UdIwQY
MBaAFKStI/bc5NloPCpJQ703wXM1x2GKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEswajl0emsyV2c4S2tsRHZUZkJjelhIWVlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9kMTgzN2EtNjA2ZS00MTgwLWE3ZjAt
NzI4ZTBkZmI4NDBkLzEvcEswajl0emsyV2c4S2tsRHZUZkJjelhIWVlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9kMTgzN2EtNjA2ZS00MTgwLWE3ZjAtNzI4ZTBkZmI4NDBk
LzEvcEswajl0emsyV2c4S2tsRHZUZkJjelhIWVlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjYdYyHLI
GAkX/MtNkpox9pEthnSZ1G9I7nU4LjJ9WusNnbvzlqNZp8yyf7SV5qWVGKzwxvv7
q3LoB2gyrqhB3XF9pLqg0aZSgOHU/JkuIFIFPMjjvP91OsDNNiY0YITdMZwHDRdG
kD9oxZLIW3mdHz9FT6ItpT8Fn5LSQFjLgD6/SlrO7ycxm64teY1UmYb8Z9Q9fg3N
j/aVT8l9kC3KNfY9d/UgkLwOQS51gAMJTpmSz5FF5KJr3ePg4m59k6f1ZHYGR4zm
tLUj4G4gplZAF4Sz7eMbeVyRpb3qIqJqKhcMVQB1cscsETM5HKnhd3tNNk8+WAdY
TgPtosb91rBWuQ==
-----END CERTIFICATE-----
Generated at Wed Jul 30 18:11:48 2025 by rpki-client