Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
File: PN4kcMhWOUlIej54dDxUTJnsimQ.mft (raw, json)
Hash identifier: G9EX5Gc4wgbJ/RgvkQv/GFbVK1SV36lirmlPwuwAq4Q=
Subject key identifier: E8:6A:FD:04:CC:58:88:B4:47:47:05:06:61:DD:22:C1:40:AA:33:A0
Authority key identifier: 3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
Certificate issuer: /CN=3cde2470c8563949487a3e78743c544c99ec8a64
Certificate serial: 01977609A280B0E2A9DEF83876C04DB3BA88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
Manifest number: 0816
Signing time: Mon 16 Jun 2025 00:00:32 +0000
Manifest this update: Mon 16 Jun 2025 00:00:32 +0000
Manifest next update: Tue 17 Jun 2025 00:00:32 +0000
Files and hashes: 1: MR6yCa9ahiYB6kt7eFUEnhRZgj0.roa (hash: Q5fLGdiN5URjuSRi8W7fkSayIUiVGY1nf+0ovyfMZAw=)
2: PN4kcMhWOUlIej54dDxUTJnsimQ.crl (hash: d+0b4Xw3mm/p32tOndNHRzJ9BAHBZ+D/0/9jwF84VKg=)
3: sFFOUDvWTzfSymlwSYpDyp4rZVo.roa (hash: hd1EPhU6XZRPUxka9ECqkCcKF9k2GizgSrw0eDBr9g4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 00:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:09:a2:80:b0:e2:a9:de:f8:38:76:c0:4d:b3:ba:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cde2470c8563949487a3e78743c544c99ec8a64
Validity
Not Before: Jun 16 00:00:32 2025 GMT
Not After : Jun 17 00:00:32 2025 GMT
Subject: CN=e86afd04cc5888b44747050661dd22c140aa33a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a4:e6:ed:3c:b3:51:b3:87:0c:60:d0:bc:3f:
16:3c:2e:6a:7e:31:fa:83:b0:e5:2e:e9:31:22:ab:
f8:48:c9:2d:12:26:22:80:23:e3:bc:77:43:6d:61:
20:6a:1f:4b:b7:c2:62:3b:d3:4f:18:51:de:bc:56:
5e:d3:dc:0b:76:af:35:81:7e:1b:5c:b1:c4:dd:eb:
1a:b6:0c:fe:71:29:64:a3:66:3f:31:30:ed:e1:dc:
a2:06:c4:4d:34:6b:cf:2c:fa:dd:cc:57:f1:34:6b:
f6:96:62:32:52:ca:61:a6:93:2e:20:7b:4c:c8:15:
79:af:d8:8f:0a:8c:62:c9:62:25:24:77:b7:4f:d7:
72:fd:0e:f3:6b:88:5e:f0:86:19:1b:d4:04:d1:d5:
6f:6c:55:04:43:1d:16:02:a0:43:37:29:d8:c7:da:
39:b3:bd:62:30:a5:a6:c1:1e:69:81:f2:cb:a8:24:
fd:9b:4c:4e:a6:1d:82:17:22:fb:ac:95:42:6f:72:
cf:9b:e3:59:fe:fd:a1:5b:ce:c8:31:7a:02:b7:9a:
d2:2a:fc:cf:5e:0e:1a:b0:13:93:11:68:bb:69:f0:
b2:9e:72:43:aa:07:ce:24:a7:a9:57:e7:4d:6c:48:
4c:6e:42:7d:8a:00:7a:25:88:9c:6a:01:1a:e9:bc:
02:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6A:FD:04:CC:58:88:B4:47:47:05:06:61:DD:22:C1:40:AA:33:A0
X509v3 Authority Key Identifier:
keyid:3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:96:ed:fa:5d:71:68:52:c8:42:d3:8b:be:77:14:f4:75:25:
fe:c4:cf:d8:9a:32:9d:a6:e2:22:2c:05:48:d2:3f:56:c2:27:
22:54:f6:1e:4b:62:45:7f:6c:93:ad:d6:81:f3:64:8d:53:8a:
35:b3:8a:02:fa:5a:cc:ac:db:9d:ee:64:fb:17:df:16:b3:bc:
7a:64:19:1a:8d:18:27:3e:ee:76:42:2d:28:fc:f0:ac:5b:f0:
bd:fe:96:94:1c:3e:49:ae:c5:86:a5:7a:a7:73:ce:01:65:1a:
9d:83:30:cc:f7:d7:7c:cc:ab:ec:a9:29:f2:8a:ac:08:01:55:
51:f5:e7:f4:92:f8:3b:c7:2c:76:1b:c8:f3:26:30:47:8f:3f:
30:db:34:94:d8:d7:42:cc:ca:a9:96:79:4d:5a:2f:68:8a:14:
1f:52:46:19:1e:42:12:9c:1e:80:88:da:bc:d1:ba:8a:54:df:
95:1b:fa:ec:3e:1f:13:18:f4:ed:aa:f5:89:88:3c:6a:84:d2:
99:e4:96:d1:ec:03:37:9f:3b:32:84:fd:05:58:49:ea:d3:c9:
16:1e:f7:d5:87:a2:f0:72:26:1d:0d:04:28:ab:78:79:00:90:
3e:11:2e:80:a9:2f:c3:7c:df:6f:64:9b:26:43:6d:84:cb:a6:
db:a2:f9:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd2CaKAsOKp3vg4dsBNs7qIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZGUyNDcwYzg1NjM5NDk0ODdhM2U3ODc0M2M1NDRjOTll
YzhhNjQwHhcNMjUwNjE2MDAwMDMyWhcNMjUwNjE3MDAwMDMyWjAzMTEwLwYDVQQD
EyhlODZhZmQwNGNjNTg4OGI0NDc0NzA1MDY2MWRkMjJjMTQwYWEzM2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaTm7TyzUbOHDGDQvD8WPC5qfjH6
g7DlLukxIqv4SMktEiYigCPjvHdDbWEgah9Lt8JiO9NPGFHevFZe09wLdq81gX4b
XLHE3esatgz+cSlko2Y/MTDt4dyiBsRNNGvPLPrdzFfxNGv2lmIyUsphppMuIHtM
yBV5r9iPCoxiyWIlJHe3T9dy/Q7za4he8IYZG9QE0dVvbFUEQx0WAqBDNynYx9o5
s71iMKWmwR5pgfLLqCT9m0xOph2CFyL7rJVCb3LPm+NZ/v2hW87IMXoCt5rSKvzP
Xg4asBOTEWi7afCynnJDqgfOJKepV+dNbEhMbkJ9igB6JYicagEa6bwCcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOhq/QTMWIi0R0cFBmHdIsFAqjOgMB8GA1UdIwQY
MBaAFDzeJHDIVjlJSHo+eHQ8VEyZ7IpkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE40a2NNaFdPVWxJZWo1NGREeFVUSm5zaW1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9mYTc5Y2YtOGM0Yy00MDk0LWExZjUt
NDQxNzFiMmY1OTllLzEvUE40a2NNaFdPVWxJZWo1NGREeFVUSm5zaW1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9mYTc5Y2YtOGM0Yy00MDk0LWExZjUtNDQxNzFiMmY1OTll
LzEvUE40a2NNaFdPVWxJZWo1NGREeFVUSm5zaW1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUJbt+l1x
aFLIQtOLvncU9HUl/sTP2JoynabiIiwFSNI/VsInIlT2HktiRX9sk63WgfNkjVOK
NbOKAvpazKzbne5k+xffFrO8emQZGo0YJz7udkItKPzwrFvwvf6WlBw+Sa7FhqV6
p3POAWUanYMwzPfXfMyr7Kkp8oqsCAFVUfXn9JL4O8csdhvI8yYwR48/MNs0lNjX
QszKqZZ5TVovaIoUH1JGGR5CEpwegIjavNG6ilTflRv67D4fExj07ar1iYg8aoTS
meSW0ewDN587MoT9BVhJ6tPJFh731Yei8HImHQ0EKKt4eQCQPhEugKkvw3zfb2Sb
JkNthMum26L52w==
-----END CERTIFICATE-----
Generated at Mon Jun 16 09:15:03 2025 by rpki-client