Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
File: pDOBaM2dWvBgQBP8QnQSb8WB88s.mft (raw, json)
Hash identifier: LNaNTXpcFjIZFW0Kch1McqUvgSh4+4cAym16qrIxhFk=
Subject key identifier: DB:D4:C4:64:87:25:96:02:70:BC:1D:06:F2:B6:46:E3:9A:35:81:A9
Authority key identifier: A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
Certificate issuer: /CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Certificate serial: 019873E1C8B90BAC6DC539F444F10B1A3F31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
Manifest number: 0CB2
Signing time: Mon 04 Aug 2025 07:00:33 +0000
Manifest this update: Mon 04 Aug 2025 07:00:33 +0000
Manifest next update: Tue 05 Aug 2025 07:00:33 +0000
Files and hashes: 1: DLstc3U0rg1XJMzpW3kLJk6bWww.roa (hash: aRJQLolF5fKnY48Uu+tEP6pfOTPeicajt7bpyIpZajQ=)
2: hw5zWhZ37cy3fl-F4c6L7KinXWA.roa (hash: JVVK2E4Q0U9kLmKrr7lDfe4ry5wJQg7f4zL2c9LIRlo=)
3: pDOBaM2dWvBgQBP8QnQSb8WB88s.crl (hash: f9OH3pnL37WDoKizGAfc/DAnVjk9I6IQO+ArPRz0wIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:c8:b9:0b:ac:6d:c5:39:f4:44:f1:0b:1a:3f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Validity
Not Before: Aug 4 07:00:33 2025 GMT
Not After : Aug 5 07:00:33 2025 GMT
Subject: CN=dbd4c4648725960270bc1d06f2b646e39a3581a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:65:0e:fd:8e:c9:50:1e:d7:1e:79:2a:5e:ff:
a9:2d:b9:c0:64:40:43:97:39:3b:cb:99:d9:74:f8:
fe:fa:a4:af:9e:b6:4d:8d:d5:0a:07:f9:c5:33:b6:
03:41:f8:fa:22:9f:11:ea:42:b6:ce:85:42:44:00:
70:9a:90:27:b6:a5:30:e1:59:45:e7:92:59:a3:3f:
97:ab:e9:09:c9:99:41:b4:88:ed:da:b8:08:fd:41:
68:f8:53:b7:b5:1a:73:ae:84:ce:68:d7:1d:c3:f4:
2c:b1:45:5c:3e:89:17:cf:71:5c:0d:96:b0:eb:4c:
e9:2a:97:4d:fe:ba:4a:2c:07:7d:9c:36:96:01:0f:
0b:fc:52:a8:3d:f9:f7:0e:19:6d:ee:ac:e9:b4:5a:
10:6e:6f:41:aa:f2:d0:c2:0c:97:b9:45:44:d8:70:
08:11:f5:10:46:0a:67:65:93:f0:2c:17:fe:34:47:
a8:ed:3d:5b:82:40:f2:ef:19:27:b2:88:84:9f:ab:
24:31:6c:89:ed:4c:ed:6e:18:ab:c7:fa:e1:8f:70:
b5:80:cb:c9:a6:6e:40:97:00:c6:f0:69:13:47:8e:
11:49:77:2e:cd:fb:82:db:2e:e2:9d:85:64:df:d8:
8c:0c:be:fb:2d:72:20:18:49:51:52:72:90:29:02:
3c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D4:C4:64:87:25:96:02:70:BC:1D:06:F2:B6:46:E3:9A:35:81:A9
X509v3 Authority Key Identifier:
keyid:A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:10:f3:76:c5:ff:9e:5e:c7:ae:59:c0:85:07:f5:0a:a9:ec:
f5:c8:9e:3a:b3:fb:2b:a1:68:36:28:27:e1:01:d3:03:d6:96:
65:9e:70:78:f9:bd:c5:80:33:09:b9:03:4f:02:fd:bb:88:1d:
9f:07:22:72:82:04:01:23:92:9f:89:ef:fe:8a:ce:04:b2:1b:
06:4e:74:60:1d:64:78:db:2a:4f:9f:2c:22:cd:5a:8c:f9:43:
71:2a:f0:f4:e1:41:29:ab:74:64:ad:c7:b7:f7:a7:e0:af:3a:
73:2e:f8:79:08:dd:2c:44:ab:77:e1:9c:81:da:ab:2a:1f:90:
da:58:61:4c:2f:0f:3b:9f:66:ce:89:d1:7a:91:2b:3b:0f:1d:
d4:20:c6:87:c1:d9:31:f7:11:ac:00:ad:d1:10:fb:53:df:c2:
92:56:49:d8:b5:b5:37:3a:db:7d:3f:20:15:fb:25:8a:18:34:
24:ef:8e:6e:06:26:85:ac:7e:90:11:dd:11:0d:80:a3:2d:10:
58:6f:3d:1f:51:68:56:fb:a1:7b:9a:ec:3d:29:7d:9e:bf:17:
73:9a:bd:af:c2:bc:06:c9:cb:e3:0c:72:7e:63:5b:53:18:a6:
82:fe:df:1d:2c:97:1c:54:40:f0:a0:8e:3f:29:1d:b7:bf:fb:
ea:49:ed:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4ci5C6xtxTn0RPELGj8xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MzM4MTY4Y2Q5ZDVhZjA2MDQwMTNmYzQyNzQxMjZmYzU4
MWYzY2IwHhcNMjUwODA0MDcwMDMzWhcNMjUwODA1MDcwMDMzWjAzMTEwLwYDVQQD
EyhkYmQ0YzQ2NDg3MjU5NjAyNzBiYzFkMDZmMmI2NDZlMzlhMzU4MWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWUO/Y7JUB7XHnkqXv+pLbnAZEBD
lzk7y5nZdPj++qSvnrZNjdUKB/nFM7YDQfj6Ip8R6kK2zoVCRABwmpAntqUw4VlF
55JZoz+Xq+kJyZlBtIjt2rgI/UFo+FO3tRpzroTOaNcdw/QssUVcPokXz3FcDZaw
60zpKpdN/rpKLAd9nDaWAQ8L/FKoPfn3Dhlt7qzptFoQbm9BqvLQwgyXuUVE2HAI
EfUQRgpnZZPwLBf+NEeo7T1bgkDy7xknsoiEn6skMWyJ7Uztbhirx/rhj3C1gMvJ
pm5AlwDG8GkTR44RSXcuzfuC2y7inYVk39iMDL77LXIgGElRUnKQKQI8AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvUxGSHJZYCcLwdBvK2RuOaNYGpMB8GA1UdIwQY
MBaAFKQzgWjNnVrwYEAT/EJ0Em/FgfPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcERPQmFNMmRXdkJnUUJQOFFuUVNiOFdCODhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xNzZmN2QtNmYwZi00NWU1LTk3ZjIt
YzlkYjk4MWEyYTJmLzEvcERPQmFNMmRXdkJnUUJQOFFuUVNiOFdCODhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xNzZmN2QtNmYwZi00NWU1LTk3ZjItYzlkYjk4MWEyYTJm
LzEvcERPQmFNMmRXdkJnUUJQOFFuUVNiOFdCODhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqBDzdsX/
nl7HrlnAhQf1Cqns9cieOrP7K6FoNign4QHTA9aWZZ5wePm9xYAzCbkDTwL9u4gd
nwcicoIEASOSn4nv/orOBLIbBk50YB1keNsqT58sIs1ajPlDcSrw9OFBKat0ZK3H
t/en4K86cy74eQjdLESrd+GcgdqrKh+Q2lhhTC8PO59mzonRepErOw8d1CDGh8HZ
MfcRrACt0RD7U9/CklZJ2LW1NzrbfT8gFfslihg0JO+ObgYmhax+kBHdEQ2Aoy0Q
WG89H1FoVvuhe5rsPSl9nr8Xc5q9r8K8BsnL4wxyfmNbUximgv7fHSyXHFRA8KCO
Pykdt7/76kntOA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:48 2025 by rpki-client