Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
File: PIbsMh5y_UbJjcwM18cLytVX1Zw.mft (raw, json)
Hash identifier: 9mYHa0DMEK0CEhamokB/VyfMxx9xDYyyWXN4IhODOb8=
Subject key identifier: 7E:DE:27:CF:31:04:A6:68:37:77:AE:58:05:62:ED:77:6E:8A:B1:97
Authority key identifier: 3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C
Certificate issuer: /CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c
Certificate serial: 019748C33106ED2A28E31ACB8F6EB0C261E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 05:00:41 +0000
Manifest this update: Sat 07 Jun 2025 05:00:41 +0000
Manifest next update: Sun 08 Jun 2025 05:00:41 +0000
Files and hashes: 1: PIbsMh5y_UbJjcwM18cLytVX1Zw.crl (hash: 0QAyzxpHXOoZQKm28uwuGya0mEdkkU6gadjgPztxkaY=)
2: XgpSQjhhfxwk9vZfnDmQ4hugM38.roa (hash: 0VqbQTYbejzGPg6sOJbQNqmXP31XYN5qUoi8IUVN5jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:31:06:ed:2a:28:e3:1a:cb:8f:6e:b0:c2:61:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c
Validity
Not Before: Jun 7 05:00:41 2025 GMT
Not After : Jun 8 05:00:41 2025 GMT
Subject: CN=7ede27cf3104a6683777ae580562ed776e8ab197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b9:5e:3e:98:84:11:80:31:b6:01:1d:7e:0b:
e1:11:3a:4b:87:2a:97:5f:1a:66:cd:7f:7a:a7:37:
48:a3:77:f5:a4:3a:de:7c:3d:80:a2:66:47:26:df:
25:75:e2:46:0a:bc:6e:d7:33:4d:6b:fe:d6:c0:b0:
8e:4d:0a:00:c6:28:20:05:04:59:bb:7c:9c:5c:8f:
69:fb:a2:56:6b:46:9e:e4:f1:e8:64:52:e5:87:d2:
c6:9d:01:31:56:bc:05:3b:03:44:ef:bd:f4:04:01:
e2:54:dc:4f:96:f1:4f:a5:54:a1:63:05:2b:30:27:
5d:29:b7:8e:11:a4:0a:ed:e6:59:3d:8b:fe:ba:6d:
7d:5a:99:81:1d:9f:5e:df:0f:43:ef:06:fe:5f:86:
c2:18:0b:be:1a:2d:26:02:79:80:5b:c3:90:9d:86:
e5:cd:f4:0c:65:55:fd:f5:85:cb:4a:29:71:09:8a:
e7:96:78:90:29:2d:56:42:40:39:78:36:ba:7e:12:
46:85:70:23:6d:ed:08:ed:93:06:7f:57:e0:26:6f:
db:f5:95:f5:b2:31:62:8d:aa:4a:91:de:b5:c7:b7:
d5:36:6b:e8:08:6a:45:ee:21:b2:bb:b6:1a:1e:47:
cf:57:9f:c8:78:f4:37:7d:a8:b0:8c:f9:51:6d:3c:
1e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:DE:27:CF:31:04:A6:68:37:77:AE:58:05:62:ED:77:6E:8A:B1:97
X509v3 Authority Key Identifier:
keyid:3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:0f:bb:da:ab:55:f4:e2:93:47:b5:dc:52:de:c2:ec:68:47:
12:e7:3b:d3:58:46:63:17:85:da:96:25:5d:69:64:19:28:60:
4c:60:18:1d:ba:dd:ed:38:66:20:e7:20:6c:f7:9a:1b:0f:12:
23:05:76:f8:f6:f4:48:b2:c0:58:e1:8b:75:6d:f5:1c:12:3b:
10:2a:48:dd:45:e7:18:df:62:bd:d3:be:e9:d6:2d:c5:4f:f6:
1c:ed:bf:99:0c:a9:f0:c5:65:04:1a:e1:f3:8e:de:b2:b9:bf:
af:d6:f7:ec:e2:a1:c1:48:16:7b:b0:52:1f:0b:0e:85:23:54:
33:c8:19:d1:6f:5f:96:95:8d:70:ce:4c:8a:42:f4:40:46:63:
56:1b:28:b4:55:67:c6:6d:a4:a3:03:5c:1d:74:d6:49:b9:9f:
31:6a:45:27:19:3b:bf:97:a7:1b:78:44:f3:55:90:44:3c:6a:
85:fe:c4:1d:ed:6b:cf:46:85:e2:18:af:38:95:4c:8b:61:94:
d2:17:cc:99:a5:f1:3a:96:cd:01:87:04:fe:7a:14:eb:bd:74:
d1:5b:92:10:29:06:25:b9:91:4c:52:86:4e:75:ef:5f:d4:16:
79:81:fe:c2:0b:0b:28:17:62:7a:1c:ea:99:c7:d4:32:c8:13:
eb:ea:d7:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIwzEG7Soo4xrLj26wwmHjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjODZlYzMyMWU3MmZkNDZjOThkY2MwY2Q3YzcwYmNhZDU1
N2Q1OWMwHhcNMjUwNjA3MDUwMDQxWhcNMjUwNjA4MDUwMDQxWjAzMTEwLwYDVQQD
Eyg3ZWRlMjdjZjMxMDRhNjY4Mzc3N2FlNTgwNTYyZWQ3NzZlOGFiMTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LlePpiEEYAxtgEdfgvhETpLhyqX
XxpmzX96pzdIo3f1pDrefD2AomZHJt8ldeJGCrxu1zNNa/7WwLCOTQoAxiggBQRZ
u3ycXI9p+6JWa0ae5PHoZFLlh9LGnQExVrwFOwNE7730BAHiVNxPlvFPpVShYwUr
MCddKbeOEaQK7eZZPYv+um19WpmBHZ9e3w9D7wb+X4bCGAu+Gi0mAnmAW8OQnYbl
zfQMZVX99YXLSilxCYrnlniQKS1WQkA5eDa6fhJGhXAjbe0I7ZMGf1fgJm/b9ZX1
sjFijapKkd61x7fVNmvoCGpF7iGyu7YaHkfPV5/IePQ3faiwjPlRbTwe6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7eJ88xBKZoN3euWAVi7XduirGXMB8GA1UdIwQY
MBaAFDyG7DIecv1GyY3MDNfHC8rVV9WcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUElic01oNXlfVWJKamN3TTE4Y0x5dFZYMVp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi81YzBmZDItNjc0My00NjgyLTk2N2It
NWYxNWJlYWZhOWIxLzEvUElic01oNXlfVWJKamN3TTE4Y0x5dFZYMVp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi81YzBmZDItNjc0My00NjgyLTk2N2ItNWYxNWJlYWZhOWIx
LzEvUElic01oNXlfVWJKamN3TTE4Y0x5dFZYMVp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnA+72qtV
9OKTR7XcUt7C7GhHEuc701hGYxeF2pYlXWlkGShgTGAYHbrd7ThmIOcgbPeaGw8S
IwV2+Pb0SLLAWOGLdW31HBI7ECpI3UXnGN9ivdO+6dYtxU/2HO2/mQyp8MVlBBrh
847esrm/r9b37OKhwUgWe7BSHwsOhSNUM8gZ0W9flpWNcM5MikL0QEZjVhsotFVn
xm2kowNcHXTWSbmfMWpFJxk7v5enG3hE81WQRDxqhf7EHe1rz0aF4hivOJVMi2GU
0hfMmaXxOpbNAYcE/noU67100VuSECkGJbmRTFKGTnXvX9QWeYH+wgsLKBdiehzq
mcfUMsgT6+rXmQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:27:42 2025 by rpki-client