Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
File: PB4_3feITXhacI_U5mS2LekQ6-g.mft (raw, json)
Hash identifier: yi6rZN8XtoqnDKOvb6hfajkH/7oC1plFEub2B4Cw4zo=
Subject key identifier: 72:90:A1:0E:5A:00:57:88:DF:1E:8F:B6:4D:50:52:64:AE:FC:78:37
Authority key identifier: 3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8
Certificate issuer: /CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8
Certificate serial: 01988E470FAD879181A4DC0EC09C8B2BD455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
Manifest number: 1627
Signing time: Sat 09 Aug 2025 10:01:18 +0000
Manifest this update: Sat 09 Aug 2025 10:01:18 +0000
Manifest next update: Sun 10 Aug 2025 10:01:18 +0000
Files and hashes: 1: PB4_3feITXhacI_U5mS2LekQ6-g.crl (hash: eNxieczH3O7YWWeimxOaGgtBY3Yrxcr4ePG6k/Gnfo0=)
2: rVIEtQUeZ960hMeEwx6AF679dhM.roa (hash: s8qUIneeKVi7X6yParz6sZwUc96D/kko1q8RujoMkJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:47:0f:ad:87:91:81:a4:dc:0e:c0:9c:8b:2b:d4:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8
Validity
Not Before: Aug 9 10:01:18 2025 GMT
Not After : Aug 10 10:01:18 2025 GMT
Subject: CN=7290a10e5a005788df1e8fb64d505264aefc7837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b3:8d:e5:97:7f:04:30:05:15:f1:bf:73:0b:
1e:8c:57:b9:5f:f3:03:53:b9:06:59:95:6d:bd:a0:
af:2c:46:99:a2:b2:cf:83:7a:5f:1f:f7:64:b4:bf:
c8:41:5a:59:3f:0a:8d:bd:ad:14:1a:e1:42:38:47:
59:04:a7:a7:70:e9:27:3f:a0:cd:e5:b8:4c:a1:36:
b3:0d:cc:22:bc:d5:3e:72:56:96:c7:b7:ee:b6:f1:
46:ab:ef:5e:9d:ab:23:3b:c2:2c:6b:47:07:dc:7c:
ce:67:e2:8d:ca:a8:1e:46:86:7e:24:d3:fb:4c:b4:
45:43:65:7a:23:df:ab:8d:0d:95:79:70:38:17:64:
3e:79:e0:a7:8e:01:03:cc:61:e3:c3:07:52:e7:a8:
c0:de:61:78:c3:53:4f:0a:67:57:ae:9f:98:05:5e:
8b:4d:c9:09:a5:a8:61:2b:8b:6c:de:fc:ed:71:8b:
65:2c:e5:ed:7d:10:07:58:d3:99:c7:05:b2:bc:dd:
0e:7c:74:ad:10:b1:33:8f:bb:4b:27:a5:40:e5:64:
d8:7c:6e:26:0d:46:2d:40:42:e8:f8:77:0d:a9:8a:
71:0a:b1:aa:9b:6f:91:4f:c4:f4:63:06:3e:a0:57:
3b:a9:91:d4:ce:f0:66:09:c7:1e:9f:b5:b5:61:3b:
b5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:90:A1:0E:5A:00:57:88:DF:1E:8F:B6:4D:50:52:64:AE:FC:78:37
X509v3 Authority Key Identifier:
keyid:3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:cc:1b:ed:05:87:c6:ba:b5:50:e8:c8:0e:8a:9a:f9:07:3d:
db:c7:4e:4d:a7:5f:00:11:f8:65:66:f1:7a:72:24:d7:ea:d4:
33:18:ed:a7:c0:49:a4:6c:a9:f1:8c:9c:6d:a4:48:00:1a:f2:
67:4c:e2:86:0a:8f:fc:1a:6d:1e:01:5c:69:b9:7f:75:18:2e:
7e:90:9a:e3:30:f6:87:13:8b:80:34:ea:78:2c:6e:3e:2c:8e:
ff:1c:1e:9c:0d:fd:be:64:a1:03:2c:96:ef:16:59:7d:02:6f:
c3:cc:ba:bc:81:65:e5:87:f1:fa:b6:8d:f7:f5:a7:ea:84:53:
f8:0f:39:39:85:3a:61:92:c1:ac:1e:fe:90:16:43:50:df:1e:
55:e5:eb:fb:a9:fc:42:2e:9a:03:e1:02:96:1b:4a:72:47:d4:
e2:6e:b6:51:f0:61:96:40:f6:ad:2b:05:b9:85:c9:cb:cf:8b:
8a:2b:78:ee:18:ba:dd:69:6c:ba:fa:93:7b:cc:b0:38:0a:37:
ec:9b:7d:4a:5f:de:69:2a:d6:2c:8f:64:18:67:2c:0d:79:62:
8a:4f:7f:48:8c:41:ad:68:2e:03:e6:1e:19:04:3a:4a:be:13:
0d:f3:d2:f8:d0:4e:5c:e3:e3:2c:66:63:d7:3d:6d:e3:8f:ef:
de:2a:f2:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiORw+th5GBpNwOwJyLK9RVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMWUzZmRkZjc4ODRkNzg1YTcwOGZkNGU2NjRiNjJkZTkx
MGViZTgwHhcNMjUwODA5MTAwMTE4WhcNMjUwODEwMTAwMTE4WjAzMTEwLwYDVQQD
Eyg3MjkwYTEwZTVhMDA1Nzg4ZGYxZThmYjY0ZDUwNTI2NGFlZmM3ODM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLON5Zd/BDAFFfG/cwsejFe5X/MD
U7kGWZVtvaCvLEaZorLPg3pfH/dktL/IQVpZPwqNva0UGuFCOEdZBKencOknP6DN
5bhMoTazDcwivNU+claWx7futvFGq+9enasjO8Isa0cH3HzOZ+KNyqgeRoZ+JNP7
TLRFQ2V6I9+rjQ2VeXA4F2Q+eeCnjgEDzGHjwwdS56jA3mF4w1NPCmdXrp+YBV6L
TckJpahhK4ts3vztcYtlLOXtfRAHWNOZxwWyvN0OfHStELEzj7tLJ6VA5WTYfG4m
DUYtQELo+HcNqYpxCrGqm2+RT8T0YwY+oFc7qZHUzvBmCccen7W1YTu1HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKQoQ5aAFeI3x6Ptk1QUmSu/Hg3MB8GA1UdIwQY
MBaAFDweP933iE14WnCP1OZkti3pEOvoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEI0XzNmZUlUWGhhY0lfVTVtUzJMZWtRNi1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80ZThlNzQtNzdlNi00MWViLTkwNDct
NTljMThhZGEzNTJmLzEvUEI0XzNmZUlUWGhhY0lfVTVtUzJMZWtRNi1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS80ZThlNzQtNzdlNi00MWViLTkwNDctNTljMThhZGEzNTJm
LzEvUEI0XzNmZUlUWGhhY0lfVTVtUzJMZWtRNi1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhMwb7QWH
xrq1UOjIDoqa+Qc928dOTadfABH4ZWbxenIk1+rUMxjtp8BJpGyp8YycbaRIABry
Z0zihgqP/BptHgFcabl/dRgufpCa4zD2hxOLgDTqeCxuPiyO/xwenA39vmShAyyW
7xZZfQJvw8y6vIFl5Yfx+raN9/Wn6oRT+A85OYU6YZLBrB7+kBZDUN8eVeXr+6n8
Qi6aA+EClhtKckfU4m62UfBhlkD2rSsFuYXJy8+Liit47hi63WlsuvqTe8ywOAo3
7Jt9Sl/eaSrWLI9kGGcsDXliik9/SIxBrWguA+YeGQQ6Sr4TDfPS+NBOXOPjLGZj
1z1t44/v3iry4w==
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:22:41 2025 by rpki-client