Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
File: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft (raw, json)
Hash identifier: 2PNWqLFwMx0b5S7rtNJbWhWDyihaxUvjC4fJIyD2290=
Subject key identifier: 01:36:1E:18:37:D9:1A:54:22:BD:2A:2B:E5:D1:BE:19:FE:F4:B5:17
Authority key identifier: A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
Certificate issuer: /CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Certificate serial: 019873E25BC9B865479C664C7BE350F4F78A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
Manifest number: 15C4
Signing time: Mon 04 Aug 2025 07:01:11 +0000
Manifest this update: Mon 04 Aug 2025 07:01:11 +0000
Manifest next update: Tue 05 Aug 2025 07:01:11 +0000
Files and hashes: 1: DuTLHmPWVWziogaT97oFAa9mDRE.roa (hash: PMtNyjUzQWlQv3rVcKbrWnO8Vocq0JKKdYATvPbNA78=)
2: X3CBuLjI2iLdZV3cmRV8Xr8zH-8.roa (hash: nRhR1UBTZd6YJqMwitmIM+7shNJ21X2SOgFJgRIoWfs=)
3: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl (hash: XFfOPiMhoQ+teta2tRLsd773fjYhR235pUC97iAFJSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:5b:c9:b8:65:47:9c:66:4c:7b:e3:50:f4:f7:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Validity
Not Before: Aug 4 07:01:11 2025 GMT
Not After : Aug 5 07:01:11 2025 GMT
Subject: CN=01361e1837d91a5422bd2a2be5d1be19fef4b517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:64:26:d1:cf:f3:ca:4a:b2:54:d7:f4:b6:06:
72:f9:74:d7:53:e7:57:f5:06:cc:39:38:b9:f1:cc:
e1:af:94:1e:f7:87:c9:e5:34:cb:f7:67:24:b4:84:
ca:fc:3c:1b:95:6a:ae:55:59:b9:fd:71:58:a9:af:
f0:b1:90:0a:aa:6d:44:11:da:73:e7:f0:ed:bc:2c:
a1:90:79:30:06:2b:6d:55:dc:e0:93:7b:b4:9d:52:
b6:b9:46:bd:5e:c9:28:27:4a:85:8e:92:cc:d9:95:
9d:3c:7b:9e:98:2c:39:9d:2b:64:7c:b6:c9:42:4a:
25:d9:64:d0:5b:de:8c:d2:cf:8a:69:56:6b:1c:ab:
6b:c9:31:97:25:13:59:62:9d:1f:e6:96:2b:74:27:
51:96:5b:8c:e5:06:80:88:1c:f3:6e:68:96:55:ef:
3f:55:64:2e:7b:d7:7e:ea:d6:e1:88:03:b6:0e:ce:
ce:c0:0e:1d:6b:c3:cb:0a:09:90:a3:f0:72:cd:a5:
56:a3:0a:a7:51:29:d6:b6:4f:60:03:07:f7:dc:2b:
4c:c3:4a:ee:31:53:8a:e0:8e:38:e5:80:67:a2:e6:
cf:a6:6c:8a:0c:6a:b5:6f:85:fc:f4:58:8c:63:e2:
b9:b8:9b:16:c6:61:1f:cc:25:5e:ee:44:d3:d1:d0:
fd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:36:1E:18:37:D9:1A:54:22:BD:2A:2B:E5:D1:BE:19:FE:F4:B5:17
X509v3 Authority Key Identifier:
keyid:A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c3:5f:5e:5c:56:d5:3a:6c:30:b5:a1:65:15:c1:12:dc:9f:
4f:96:e3:23:19:09:c0:41:77:a9:80:56:4d:f2:e9:95:0b:1a:
67:a9:65:de:5b:04:cc:54:f3:80:17:9f:28:25:1d:3f:8f:fd:
ac:e2:19:61:9d:6e:c3:54:02:61:1f:76:33:b5:72:db:71:fb:
12:0b:84:40:8d:6b:ee:b2:e3:6b:62:17:d5:37:cf:74:c2:ec:
74:4c:dc:73:62:22:81:4c:27:21:8b:4d:d0:f4:27:ca:e2:36:
19:cf:b0:3b:65:64:db:e5:cd:56:50:90:00:f7:8e:7d:62:d8:
0d:b6:74:cc:d8:e4:ba:a9:61:7c:fa:4f:2c:61:1a:65:6a:11:
6f:9c:d5:e5:65:5d:a4:e2:29:c1:44:f6:bf:bc:25:6b:94:8e:
ab:20:ba:f0:c0:39:00:85:d6:b0:79:db:7a:0b:23:fe:a0:f3:
91:67:ed:c3:9e:b2:0d:39:57:4d:c5:21:c6:40:42:92:c0:ca:
02:d7:ba:97:c2:55:52:b2:c1:8e:0e:b4:e5:61:72:12:e0:24:
05:6c:fc:9f:f5:0a:35:b4:d0:f9:64:6f:8f:50:d7:34:4c:40:
b2:6d:bd:35:f0:b7:22:1f:f1:34:ef:d7:e9:c5:09:50:5c:ee:
c9:e0:3e:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4lvJuGVHnGZMe+NQ9PeKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YjBjMDU3MzFlZmE0YmJlNWMyYTMwYWU1MTg5Zjc3ODVk
MmQ0OTkwHhcNMjUwODA0MDcwMTExWhcNMjUwODA1MDcwMTExWjAzMTEwLwYDVQQD
EygwMTM2MWUxODM3ZDkxYTU0MjJiZDJhMmJlNWQxYmUxOWZlZjRiNTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWQm0c/zykqyVNf0tgZy+XTXU+dX
9QbMOTi58czhr5Qe94fJ5TTL92cktITK/DwblWquVVm5/XFYqa/wsZAKqm1EEdpz
5/DtvCyhkHkwBittVdzgk3u0nVK2uUa9XskoJ0qFjpLM2ZWdPHuemCw5nStkfLbJ
Qkol2WTQW96M0s+KaVZrHKtryTGXJRNZYp0f5pYrdCdRlluM5QaAiBzzbmiWVe8/
VWQue9d+6tbhiAO2Ds7OwA4da8PLCgmQo/ByzaVWowqnUSnWtk9gAwf33CtMw0ru
MVOK4I445YBnoubPpmyKDGq1b4X89FiMY+K5uJsWxmEfzCVe7kTT0dD9ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAE2Hhg32RpUIr0qK+XRvhn+9LUXMB8GA1UdIwQY
MBaAFKWwwFcx76S75cKjCuUYn3eF0tSZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGJEQVZ6SHZwTHZsd3FNSzVSaWZkNFhTMUprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yNTE0OWMtMDkzMi00NjgzLThhYjgt
ZDE1ZmViZGY1ZWNmLzEvcGJEQVZ6SHZwTHZsd3FNSzVSaWZkNFhTMUprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yNTE0OWMtMDkzMi00NjgzLThhYjgtZDE1ZmViZGY1ZWNm
LzEvcGJEQVZ6SHZwTHZsd3FNSzVSaWZkNFhTMUprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaMNfXlxW
1TpsMLWhZRXBEtyfT5bjIxkJwEF3qYBWTfLplQsaZ6ll3lsEzFTzgBefKCUdP4/9
rOIZYZ1uw1QCYR92M7Vy23H7EguEQI1r7rLja2IX1TfPdMLsdEzcc2IigUwnIYtN
0PQnyuI2Gc+wO2Vk2+XNVlCQAPeOfWLYDbZ0zNjkuqlhfPpPLGEaZWoRb5zV5WVd
pOIpwUT2v7wla5SOqyC68MA5AIXWsHnbegsj/qDzkWftw56yDTlXTcUhxkBCksDK
Ate6l8JVUrLBjg605WFyEuAkBWz8n/UKNbTQ+WRvj1DXNExAsm29NfC3Ih/xNO/X
6cUJUFzuyeA+Tw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:00:27 2025 by rpki-client