
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
File: pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft (raw, json)
Hash identifier: mTuYOF9GtudAzk/5/ES21gzLwLUXlzBprOv1PW9Au2k=
Subject key identifier: 6D:D2:86:D5:D5:B2:8A:5F:B8:D4:F6:45:5F:7E:0C:77:65:9A:07:98
Authority key identifier: A4:40:B8:5F:0F:7B:A6:38:5C:D4:FE:E8:A0:EC:04:E8:18:41:54:2C
Certificate issuer: /CN=a440b85f0f7ba6385cd4fee8a0ec04e81841542c
Certificate serial: 01987486F7455F181E5BAA609ACEE70A1305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
Manifest number: 15AB
Signing time: Mon 04 Aug 2025 10:00:58 +0000
Manifest this update: Mon 04 Aug 2025 10:00:58 +0000
Manifest next update: Tue 05 Aug 2025 10:00:58 +0000
Files and hashes: 1: LnuT6eEdb88-TghvQ_FZnRefVyk.roa (hash: XQk1e8dAGrgYT1azOGp5hpmR57maWf6UhLO79IbQj1k=)
2: pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl (hash: M76XDqURp8d3tEg/GkY06SK0saIHEc/hrjVjoODeqZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:f7:45:5f:18:1e:5b:aa:60:9a:ce:e7:0a:13:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a440b85f0f7ba6385cd4fee8a0ec04e81841542c
Validity
Not Before: Aug 4 10:00:58 2025 GMT
Not After : Aug 5 10:00:58 2025 GMT
Subject: CN=6dd286d5d5b28a5fb8d4f6455f7e0c77659a0798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a3:a1:84:6a:71:1a:ec:f9:20:27:39:cf:7b:
5c:e0:42:4c:59:4d:51:de:7e:a3:e8:1c:fb:c9:61:
8c:47:ae:de:bb:fd:de:be:56:26:df:cc:b9:46:0c:
64:c2:2a:ed:44:3e:aa:e3:00:29:a4:ad:c7:31:c1:
94:45:a2:52:7b:71:ce:6a:47:44:f7:43:42:95:52:
56:81:d4:b0:c4:14:5f:1d:75:ac:d5:c1:cd:52:94:
23:c6:e0:65:7c:c8:f7:24:c9:f0:fa:69:38:14:5f:
5a:cb:7e:4a:e7:e0:de:ef:b7:ff:81:60:d3:27:9e:
f3:8d:dc:b2:9f:d9:12:07:e7:c4:57:74:61:91:cd:
7f:22:8d:e5:eb:78:b8:b9:21:90:ac:cd:ba:47:22:
d8:73:83:ec:cc:f7:b1:dd:45:a3:af:a4:9f:47:1a:
c8:78:62:34:95:ae:22:cc:59:17:8f:03:f8:10:29:
9c:84:be:17:1d:c1:4e:61:16:e5:6b:56:b9:08:04:
45:d7:69:ea:cd:9e:c9:5d:0b:02:50:b0:e4:b8:10:
7a:6f:63:d6:e1:5d:7b:dc:97:bc:d5:2f:7d:b9:df:
b6:44:59:13:a6:72:27:28:30:9b:73:3c:5a:24:30:
3d:2c:6e:28:5c:24:8b:17:1d:29:63:14:13:45:db:
be:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D2:86:D5:D5:B2:8A:5F:B8:D4:F6:45:5F:7E:0C:77:65:9A:07:98
X509v3 Authority Key Identifier:
keyid:A4:40:B8:5F:0F:7B:A6:38:5C:D4:FE:E8:A0:EC:04:E8:18:41:54:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:a0:9a:3c:29:ec:45:47:41:f9:6d:d7:41:bc:91:7c:38:e1:
3c:36:8f:3d:6b:b1:35:31:52:32:d1:d0:b6:4e:86:bf:b0:cd:
16:54:a5:88:4a:55:35:4e:84:e8:28:91:81:eb:66:af:10:cf:
27:4c:93:8b:dd:a9:ca:fc:b0:95:f9:99:8f:33:7e:74:86:c6:
a3:c9:74:5d:f8:25:aa:1e:c5:8e:8e:6e:e3:66:d8:30:31:40:
78:f3:fb:66:29:f8:f7:de:27:09:50:c3:0b:b0:12:0d:18:ad:
e9:9a:7a:9e:b1:03:d7:b0:c2:c6:90:7a:6f:c5:e7:ee:43:c1:
cd:47:ac:b0:bf:f9:8c:88:25:98:0b:7c:be:02:9e:73:be:90:
ee:e0:6e:a2:3d:87:6d:07:1c:14:37:08:00:9d:80:58:0a:f5:
6e:74:23:57:c1:c5:6c:a1:a3:d7:8f:03:cf:95:e8:ab:4f:ff:
b9:b2:b9:8b:0c:02:66:6a:85:0f:0c:ed:17:d2:90:62:d4:6b:
5c:22:d6:89:d3:41:4a:2c:56:f4:4b:b2:c6:a2:02:c8:d8:5e:
2a:14:c7:9f:77:1c:2b:df:06:50:98:3a:c0:6d:93:c7:4e:8d:
35:90:25:8c:26:e9:ae:7c:8d:8a:98:2e:a3:5e:36:01:ed:60:
f6:46:6d:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0hvdFXxgeW6pgms7nChMFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NDBiODVmMGY3YmE2Mzg1Y2Q0ZmVlOGEwZWMwNGU4MTg0
MTU0MmMwHhcNMjUwODA0MTAwMDU4WhcNMjUwODA1MTAwMDU4WjAzMTEwLwYDVQQD
Eyg2ZGQyODZkNWQ1YjI4YTVmYjhkNGY2NDU1ZjdlMGM3NzY1OWEwNzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaOhhGpxGuz5ICc5z3tc4EJMWU1R
3n6j6Bz7yWGMR67eu/3evlYm38y5RgxkwirtRD6q4wAppK3HMcGURaJSe3HOakdE
90NClVJWgdSwxBRfHXWs1cHNUpQjxuBlfMj3JMnw+mk4FF9ay35K5+De77f/gWDT
J57zjdyyn9kSB+fEV3Rhkc1/Io3l63i4uSGQrM26RyLYc4PszPex3UWjr6SfRxrI
eGI0la4izFkXjwP4ECmchL4XHcFOYRbla1a5CARF12nqzZ7JXQsCULDkuBB6b2PW
4V173Je81S99ud+2RFkTpnInKDCbczxaJDA9LG4oXCSLFx0pYxQTRdu+MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3ShtXVsopfuNT2RV9+DHdlmgeYMB8GA1UdIwQY
MBaAFKRAuF8Pe6Y4XNT+6KDsBOgYQVQsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEVDNFh3OTdwamhjMVA3b29Pd0U2QmhCVkN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8yMWVjMGYtYTFlYy00YWQ0LWE3NDkt
ZGRjZmUzNmY0MzNiLzEvcEVDNFh3OTdwamhjMVA3b29Pd0U2QmhCVkN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8yMWVjMGYtYTFlYy00YWQ0LWE3NDktZGRjZmUzNmY0MzNi
LzEvcEVDNFh3OTdwamhjMVA3b29Pd0U2QmhCVkN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYaCaPCns
RUdB+W3XQbyRfDjhPDaPPWuxNTFSMtHQtk6Gv7DNFlSliEpVNU6E6CiRgetmrxDP
J0yTi92pyvywlfmZjzN+dIbGo8l0Xfglqh7Fjo5u42bYMDFAePP7Zin4994nCVDD
C7ASDRit6Zp6nrED17DCxpB6b8Xn7kPBzUessL/5jIglmAt8vgKec76Q7uBuoj2H
bQccFDcIAJ2AWAr1bnQjV8HFbKGj148Dz5Xoq0//ubK5iwwCZmqFDwztF9KQYtRr
XCLWidNBSixW9EuyxqICyNheKhTHn3ccK98GUJg6wG2Tx06NNZAljCbprnyNipgu
o142Ae1g9kZtbA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:18:51 2025 by rpki-client