Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.mft
File: pNyKTpFqo_eO94BHrCDQ0PipUPk.mft (raw, json)
Hash identifier: Hq8FgPUH/aKYqTM2j8fx5/Ktdf6QUVJWHNARa7WdNr8=
Subject key identifier: E3:9A:7C:52:3E:E1:BA:52:7D:0F:C9:71:10:AF:4C:74:F6:E4:BE:34
Authority key identifier: A4:DC:8A:4E:91:6A:A3:F7:8E:F7:80:47:AC:20:D0:D0:F8:A9:50:F9
Certificate issuer: /CN=a4dc8a4e916aa3f78ef78047ac20d0d0f8a950f9
Certificate serial: 0197488CE9C3BE86BEC33B3A937D300F3BBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNyKTpFqo_eO94BHrCDQ0PipUPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.mft
Manifest number: 0BF7
Signing time: Sat 07 Jun 2025 04:01:23 +0000
Manifest this update: Sat 07 Jun 2025 04:01:23 +0000
Manifest next update: Sun 08 Jun 2025 04:01:23 +0000
Files and hashes: 1: UTvK6gSJU03H7EOW3gSzFazwB7M.roa (hash: fFNxwITyp66ny+cQJs93d3VRTa/z6HUTvmCKvoybY9I=)
2: pNyKTpFqo_eO94BHrCDQ0PipUPk.crl (hash: C+mh2LNOCYB9HmZKIloIO8bfaGYSjgW/b9UvlMS80ZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNyKTpFqo_eO94BHrCDQ0PipUPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:e9:c3:be:86:be:c3:3b:3a:93:7d:30:0f:3b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4dc8a4e916aa3f78ef78047ac20d0d0f8a950f9
Validity
Not Before: Jun 7 04:01:23 2025 GMT
Not After : Jun 8 04:01:23 2025 GMT
Subject: CN=e39a7c523ee1ba527d0fc97110af4c74f6e4be34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:69:b1:d4:5d:e5:d6:7e:8f:1e:86:07:59:6a:
21:4c:23:85:32:f8:48:fd:4e:92:6a:ac:73:f6:27:
b1:e4:38:a5:cd:91:a6:11:2f:e0:a1:fc:71:d7:df:
12:71:84:38:e1:e3:a6:42:eb:05:f5:c1:0c:15:52:
9f:34:a4:e0:c9:ad:04:80:1c:59:2a:01:a2:b3:37:
2f:0b:16:2a:0b:07:dd:21:87:3b:78:d9:cd:a5:12:
a3:e5:94:1b:6b:1b:66:de:b8:46:8e:76:71:c6:97:
e3:14:5f:2f:f4:21:1d:52:ef:48:3c:26:a0:2d:55:
33:2f:e8:6f:02:3a:41:f3:57:f4:0f:04:a1:d3:4a:
cc:be:35:2c:5d:63:29:d7:c7:c5:d9:32:c4:67:54:
36:0e:db:cc:ba:0b:f8:46:c1:4a:d8:10:19:d9:00:
87:85:31:e4:e8:7d:e4:3d:c7:15:50:73:9f:5a:b9:
f4:37:b3:96:1b:cc:90:7c:be:fb:27:f5:3f:fc:e2:
6e:21:70:47:e7:ba:a3:d7:46:49:b2:99:b4:03:79:
64:1c:47:84:47:d0:3e:13:f0:a3:c4:03:43:2c:f1:
26:01:eb:59:06:34:51:9b:50:6c:9d:b6:a1:04:bd:
cd:b5:ca:9f:d5:a8:4b:e0:6b:c2:dc:e7:aa:0a:4c:
f0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9A:7C:52:3E:E1:BA:52:7D:0F:C9:71:10:AF:4C:74:F6:E4:BE:34
X509v3 Authority Key Identifier:
keyid:A4:DC:8A:4E:91:6A:A3:F7:8E:F7:80:47:AC:20:D0:D0:F8:A9:50:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNyKTpFqo_eO94BHrCDQ0PipUPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:00:f2:2a:53:23:83:09:16:d2:23:1d:c8:41:5e:e7:52:a9:
63:7f:56:82:d8:50:df:b8:2c:b5:c4:3b:98:d6:80:40:65:00:
98:2e:a4:a7:7f:e5:3d:45:8a:ac:64:ef:9c:40:bc:b7:c3:ac:
3a:ad:3e:d1:f7:81:2d:c1:9d:89:d1:a4:30:9b:48:e7:7c:54:
86:88:be:1c:e6:af:7e:2a:88:28:7d:b7:a0:79:d5:bb:55:59:
4f:94:94:d9:d4:08:f7:c8:32:f9:32:e3:49:ad:61:7a:91:dd:
f2:45:da:9c:a9:23:d8:76:11:48:2c:8f:76:77:f9:90:14:15:
ea:ca:db:b1:69:a2:3e:23:37:f7:42:12:3b:c1:b9:17:26:88:
70:fc:f1:ad:45:e9:ae:5e:2a:81:90:7b:d2:c4:9f:52:dd:4c:
9e:ad:1d:aa:c9:fa:ca:20:51:96:a9:ba:ef:97:66:ad:04:36:
55:5f:f4:c3:4a:41:68:e0:7d:de:95:24:39:ef:76:67:23:8b:
c8:02:9e:3d:5c:8d:41:0e:3f:42:51:64:24:58:76:0e:32:00:
8a:3a:fd:10:fa:af:bf:e1:94:5d:01:31:55:ea:e2:0b:a5:9f:
b7:3f:5c:18:68:d6:07:06:fb:05:99:3c:c0:1b:ac:49:0c:38:
41:fb:e9:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjOnDvoa+wzs6k30wDzu/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZGM4YTRlOTE2YWEzZjc4ZWY3ODA0N2FjMjBkMGQwZjhh
OTUwZjkwHhcNMjUwNjA3MDQwMTIzWhcNMjUwNjA4MDQwMTIzWjAzMTEwLwYDVQQD
EyhlMzlhN2M1MjNlZTFiYTUyN2QwZmM5NzExMGFmNGM3NGY2ZTRiZTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWmx1F3l1n6PHoYHWWohTCOFMvhI
/U6Saqxz9iex5DilzZGmES/gofxx198ScYQ44eOmQusF9cEMFVKfNKTgya0EgBxZ
KgGiszcvCxYqCwfdIYc7eNnNpRKj5ZQbaxtm3rhGjnZxxpfjFF8v9CEdUu9IPCag
LVUzL+hvAjpB81f0DwSh00rMvjUsXWMp18fF2TLEZ1Q2DtvMugv4RsFK2BAZ2QCH
hTHk6H3kPccVUHOfWrn0N7OWG8yQfL77J/U//OJuIXBH57qj10ZJspm0A3lkHEeE
R9A+E/CjxANDLPEmAetZBjRRm1BsnbahBL3Ntcqf1ahL4GvC3OeqCkzwnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOafFI+4bpSfQ/JcRCvTHT25L40MB8GA1UdIwQY
MBaAFKTcik6RaqP3jveAR6wg0ND4qVD5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE55S1RwRnFvX2VPOTRCSHJDRFEwUGlwVVBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9hZTFiODktZmQ0OC00YjJkLWE4OGUt
OTY2YmU0ODMyODE1LzEvcE55S1RwRnFvX2VPOTRCSHJDRFEwUGlwVVBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9hZTFiODktZmQ0OC00YjJkLWE4OGUtOTY2YmU0ODMyODE1
LzEvcE55S1RwRnFvX2VPOTRCSHJDRFEwUGlwVVBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANQDyKlMj
gwkW0iMdyEFe51KpY39WgthQ37gstcQ7mNaAQGUAmC6kp3/lPUWKrGTvnEC8t8Os
Oq0+0feBLcGdidGkMJtI53xUhoi+HOavfiqIKH23oHnVu1VZT5SU2dQI98gy+TLj
Sa1hepHd8kXanKkj2HYRSCyPdnf5kBQV6srbsWmiPiM390ISO8G5FyaIcPzxrUXp
rl4qgZB70sSfUt1Mnq0dqsn6yiBRlqm675dmrQQ2VV/0w0pBaOB93pUkOe92ZyOL
yAKePVyNQQ4/QlFkJFh2DjIAijr9EPqvv+GUXQExVeriC6Wftz9cGGjWBwb7BZk8
wBusSQw4QfvpnQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:07:29 2025 by rpki-client