Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
File: PcOGJxwOCo0B-xkNaNhf92TRatQ.mft (raw, json)
Hash identifier: kLTSryHW4GiIC7hgMkF0DPNiqFRTJ7lZjhHpBiJospc=
Subject key identifier: 99:10:E3:8B:00:0D:BC:C7:43:06:5C:CD:11:E7:18:57:C8:F9:BA:DE
Authority key identifier: 3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4
Certificate issuer: /CN=3dc386271c0e0a8d01fb190d68d85ff764d16ad4
Certificate serial: 01984A77FE9B3C00A6BEE3539971EB3F016D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
Manifest number: 03DE
Signing time: Sun 27 Jul 2025 06:00:34 +0000
Manifest this update: Sun 27 Jul 2025 06:00:34 +0000
Manifest next update: Mon 28 Jul 2025 06:00:34 +0000
Files and hashes: 1: PcOGJxwOCo0B-xkNaNhf92TRatQ.crl (hash: QySN1qbx7E8pGfRqUZoZN+PiNh15PcctL5qgVCLa6uc=)
2: dA9mnK7u8SrMJvStuVXROxjQcrs.roa (hash: JKT3V8fX4yHMnqh46H6Ra4xfMdM8EBf4akbaDFvA95s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:fe:9b:3c:00:a6:be:e3:53:99:71:eb:3f:01:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc386271c0e0a8d01fb190d68d85ff764d16ad4
Validity
Not Before: Jul 27 06:00:34 2025 GMT
Not After : Jul 28 06:00:34 2025 GMT
Subject: CN=9910e38b000dbcc743065ccd11e71857c8f9bade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a1:e0:fc:8c:5a:01:14:81:dd:c2:44:57:10:
94:7b:6f:80:5f:8e:bb:9c:42:f0:22:4c:a4:92:97:
3a:b6:7b:88:8d:6f:48:e8:43:4e:77:1d:d4:0c:d0:
5a:2c:8a:f4:95:3d:ac:15:4e:10:6f:30:3d:8d:65:
aa:73:21:89:94:48:18:7f:45:3c:65:cb:60:44:2d:
7b:9f:5a:a0:16:d9:1c:50:48:6b:d6:7a:c7:a6:50:
04:f8:e0:ad:7a:55:a6:99:88:12:ae:d1:34:bb:89:
c7:45:61:29:67:06:7d:bd:d3:88:03:cb:f8:64:a4:
cb:1b:3f:5f:c9:89:6b:95:49:f6:ac:15:a5:4c:0c:
d7:72:fa:cd:71:c8:bc:e3:4f:f3:1a:03:7f:08:70:
ed:10:ae:01:08:73:cc:91:fd:65:6d:c3:cd:76:bd:
38:27:b7:f8:73:63:33:37:e4:2f:5d:35:a5:39:a8:
7a:e4:4d:71:5b:38:10:ae:d8:58:b1:74:2f:7a:9a:
01:1b:fa:7e:79:02:fd:1a:06:5d:43:eb:5b:36:62:
e3:d1:55:52:5b:76:d2:05:dc:86:d0:fd:42:21:93:
d2:d8:96:5d:01:e1:c6:86:e9:2a:e6:ed:23:6a:a3:
1e:6e:d8:57:88:c2:fa:8a:43:b3:0a:e4:02:f4:f2:
99:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:10:E3:8B:00:0D:BC:C7:43:06:5C:CD:11:E7:18:57:C8:F9:BA:DE
X509v3 Authority Key Identifier:
keyid:3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:76:cc:86:49:08:57:e6:22:d4:50:6b:e1:58:9a:f3:74:e6:
34:b2:b1:27:92:01:1d:7f:55:c0:7f:83:b3:b4:a7:a9:a5:38:
50:6b:59:d2:ea:6d:89:82:d6:b4:95:5d:70:cc:9b:62:c9:d3:
af:1e:59:bf:6c:59:0e:28:4b:ce:15:32:d5:6c:ae:be:78:58:
96:86:00:e3:83:f2:44:a5:14:08:f3:d4:7d:dc:ee:fd:ce:9b:
f3:3b:01:43:2b:11:fc:b3:04:f1:77:fa:17:87:c6:80:b7:d9:
8a:b2:c1:97:1d:3b:06:3e:36:71:c2:6b:8d:03:95:f1:b3:64:
7f:3d:46:f6:18:ab:b0:54:7a:85:b6:2b:4d:16:84:e4:4b:4f:
52:ce:1d:ad:3f:4f:d7:47:67:cf:f6:d6:76:8b:5d:03:3a:ca:
87:ca:b7:6f:5e:60:c0:34:aa:19:ea:15:50:d1:d0:74:6a:72:
62:ff:57:e5:84:11:fd:24:47:e8:62:bf:b5:4a:62:e3:48:73:
bc:be:28:75:18:dd:0f:b9:9a:a9:3d:6f:6e:88:ac:58:8c:7f:
5f:d1:31:81:8a:f8:c2:3d:a4:c9:92:cd:a6:12:b3:21:e4:18:
36:24:36:b9:2c:3b:cd:a3:bf:59:0e:6e:6c:2b:39:7b:6a:0a:
8a:68:ae:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKd/6bPACmvuNTmXHrPwFtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYzM4NjI3MWMwZTBhOGQwMWZiMTkwZDY4ZDg1ZmY3NjRk
MTZhZDQwHhcNMjUwNzI3MDYwMDM0WhcNMjUwNzI4MDYwMDM0WjAzMTEwLwYDVQQD
Eyg5OTEwZTM4YjAwMGRiY2M3NDMwNjVjY2QxMWU3MTg1N2M4ZjliYWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6Hg/IxaARSB3cJEVxCUe2+AX467
nELwIkykkpc6tnuIjW9I6ENOdx3UDNBaLIr0lT2sFU4QbzA9jWWqcyGJlEgYf0U8
ZctgRC17n1qgFtkcUEhr1nrHplAE+OCtelWmmYgSrtE0u4nHRWEpZwZ9vdOIA8v4
ZKTLGz9fyYlrlUn2rBWlTAzXcvrNcci840/zGgN/CHDtEK4BCHPMkf1lbcPNdr04
J7f4c2MzN+QvXTWlOah65E1xWzgQrthYsXQvepoBG/p+eQL9GgZdQ+tbNmLj0VVS
W3bSBdyG0P1CIZPS2JZdAeHGhukq5u0jaqMebthXiML6ikOzCuQC9PKZUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkQ44sADbzHQwZczRHnGFfI+breMB8GA1UdIwQY
MBaAFD3DhiccDgqNAfsZDWjYX/dk0WrUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGNPR0p4d09DbzBCLXhrTmFOaGY5MlRSYXRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9mMjY0YmItZWZkZC00NDk3LWJjMTAt
ZGRmZWYzYzZhZDllLzEvUGNPR0p4d09DbzBCLXhrTmFOaGY5MlRSYXRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9mMjY0YmItZWZkZC00NDk3LWJjMTAtZGRmZWYzYzZhZDll
LzEvUGNPR0p4d09DbzBCLXhrTmFOaGY5MlRSYXRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFXbMhkkI
V+Yi1FBr4Via83TmNLKxJ5IBHX9VwH+Ds7SnqaU4UGtZ0uptiYLWtJVdcMybYsnT
rx5Zv2xZDihLzhUy1WyuvnhYloYA44PyRKUUCPPUfdzu/c6b8zsBQysR/LME8Xf6
F4fGgLfZirLBlx07Bj42ccJrjQOV8bNkfz1G9hirsFR6hbYrTRaE5EtPUs4drT9P
10dnz/bWdotdAzrKh8q3b15gwDSqGeoVUNHQdGpyYv9X5YQR/SRH6GK/tUpi40hz
vL4odRjdD7maqT1vboisWIx/X9ExgYr4wj2kyZLNphKzIeQYNiQ2uSw7zaO/WQ5u
bCs5e2oKimiu/A==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:18:42 2025 by rpki-client