Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f10f41-5a15-484d-b95f-df6bda389905/1/PbbHfudmfXoeivbnKly0P5_DSA4.mft
File: PbbHfudmfXoeivbnKly0P5_DSA4.mft (raw, json)
Hash identifier: QVGxd2SyfnzuDVae8Ya3gSBCeU5Bpm5pbrPWpdTmyB0=
Subject key identifier: 81:B7:C5:35:0D:2D:56:7B:2F:33:68:92:5F:FA:BF:7C:42:65:93:A6
Authority key identifier: 3D:B6:C7:7E:E7:66:7D:7A:1E:8A:F6:E7:2A:5C:B4:3F:9F:C3:48:0E
Certificate issuer: /CN=3db6c77ee7667d7a1e8af6e72a5cb43f9fc3480e
Certificate serial: 019882E799BE89D9511C8A8218A66E62114E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbbHfudmfXoeivbnKly0P5_DSA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f10f41-5a15-484d-b95f-df6bda389905/1/PbbHfudmfXoeivbnKly0P5_DSA4.mft
Manifest number: 89
Signing time: Thu 07 Aug 2025 05:01:12 +0000
Manifest this update: Thu 07 Aug 2025 05:01:12 +0000
Manifest next update: Fri 08 Aug 2025 05:01:12 +0000
Files and hashes: 1: PbbHfudmfXoeivbnKly0P5_DSA4.crl (hash: 9IOVJb3O1n2MwIuLnPjhAR4oFRh2pMfA9z+blYTRl64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f10f41-5a15-484d-b95f-df6bda389905/1/PbbHfudmfXoeivbnKly0P5_DSA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f10f41-5a15-484d-b95f-df6bda389905/1/PbbHfudmfXoeivbnKly0P5_DSA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbbHfudmfXoeivbnKly0P5_DSA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:e7:99:be:89:d9:51:1c:8a:82:18:a6:6e:62:11:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db6c77ee7667d7a1e8af6e72a5cb43f9fc3480e
Validity
Not Before: Aug 7 05:01:12 2025 GMT
Not After : Aug 8 05:01:12 2025 GMT
Subject: CN=81b7c5350d2d567b2f3368925ffabf7c426593a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6f:c2:b3:0b:0b:0e:23:64:75:f5:d2:ab:74:
58:dc:dd:ac:98:89:98:b3:bc:c5:ca:e1:3d:16:70:
f1:60:75:ee:e1:a3:bf:3f:86:d1:31:29:79:fd:c3:
04:c0:1e:cc:d3:8a:2e:6c:1e:47:1d:2e:bb:ac:32:
f7:fb:8b:e7:e5:b5:4b:e9:17:3a:5b:a7:4e:59:55:
98:b9:b4:a1:ab:45:c7:ac:38:12:7d:16:f6:9e:f0:
e2:c2:34:7d:43:54:e0:43:7b:2a:0a:bf:e1:b3:b3:
12:c4:0d:71:0a:42:8b:0d:d7:86:48:44:e3:38:d9:
3f:09:7a:75:83:84:27:e8:ff:b9:2d:51:00:9e:08:
f0:d2:2f:97:65:2f:c5:75:c2:14:84:00:3a:e7:76:
ec:99:13:98:66:43:ac:cf:4c:d3:a7:2d:ab:4a:d5:
5f:6b:6a:00:8a:d8:48:8f:6c:b0:b9:6f:28:24:9f:
8b:db:79:01:ea:b5:7b:92:f5:24:80:87:c9:a0:c0:
f7:86:50:5a:96:cd:b6:de:f5:b9:97:d1:ba:e1:f4:
b7:e2:5a:b9:19:14:b6:82:0f:e3:5d:6d:cc:ed:e0:
28:97:81:44:8c:f8:76:73:07:0e:48:1d:cd:3f:ef:
a5:34:7f:c3:4b:32:ac:3d:e8:29:d8:2a:f8:03:b1:
96:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B7:C5:35:0D:2D:56:7B:2F:33:68:92:5F:FA:BF:7C:42:65:93:A6
X509v3 Authority Key Identifier:
keyid:3D:B6:C7:7E:E7:66:7D:7A:1E:8A:F6:E7:2A:5C:B4:3F:9F:C3:48:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbbHfudmfXoeivbnKly0P5_DSA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f10f41-5a15-484d-b95f-df6bda389905/1/PbbHfudmfXoeivbnKly0P5_DSA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f10f41-5a15-484d-b95f-df6bda389905/1/PbbHfudmfXoeivbnKly0P5_DSA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:9a:18:a7:c6:df:cb:75:1a:1a:af:c0:e6:73:04:a8:a7:fb:
a2:20:b1:36:c1:08:00:e3:c6:bf:ee:0e:84:6a:05:2d:7b:b2:
17:83:bf:d5:a9:4c:3c:a5:b2:18:14:4d:6f:13:2b:9c:63:f3:
88:ee:d5:35:49:d1:fc:fc:7c:64:e4:78:8a:b0:73:fc:e6:49:
dd:d4:15:40:24:80:1f:df:cf:4e:a3:ae:45:ff:d4:6c:cb:aa:
44:2a:42:7e:02:b5:7b:38:be:ce:01:36:d0:89:f3:ae:5c:14:
de:0f:aa:15:9f:11:80:81:0c:17:ac:ea:b9:1e:04:29:cf:3c:
60:8b:0e:ca:a6:e3:fb:09:1e:f3:13:01:d2:d8:34:a2:46:9f:
7e:2d:1f:c3:b2:27:00:36:3c:7d:46:33:16:0b:f8:a0:4f:be:
29:23:d8:59:43:5d:ed:e4:46:84:ae:7e:91:de:93:21:d4:fe:
96:d8:7b:6d:d3:07:90:99:84:0d:0b:d7:9a:1b:49:40:59:55:
47:60:30:03:49:ca:5a:57:9a:d0:e3:cc:9f:92:70:cf:8f:ae:
e9:24:05:92:bd:51:6f:2f:5b:6b:c1:1f:28:75:60:8f:31:fd:
ee:59:5a:7b:75:34:fd:b8:28:8b:b3:b4:d9:08:07:70:45:ec:
d0:e8:be:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiC55m+idlRHIqCGKZuYhFOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYjZjNzdlZTc2NjdkN2ExZThhZjZlNzJhNWNiNDNmOWZj
MzQ4MGUwHhcNMjUwODA3MDUwMTEyWhcNMjUwODA4MDUwMTEyWjAzMTEwLwYDVQQD
Eyg4MWI3YzUzNTBkMmQ1NjdiMmYzMzY4OTI1ZmZhYmY3YzQyNjU5M2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnW/CswsLDiNkdfXSq3RY3N2smImY
s7zFyuE9FnDxYHXu4aO/P4bRMSl5/cMEwB7M04oubB5HHS67rDL3+4vn5bVL6Rc6
W6dOWVWYubShq0XHrDgSfRb2nvDiwjR9Q1TgQ3sqCr/hs7MSxA1xCkKLDdeGSETj
ONk/CXp1g4Qn6P+5LVEAngjw0i+XZS/FdcIUhAA653bsmROYZkOsz0zTpy2rStVf
a2oAithIj2ywuW8oJJ+L23kB6rV7kvUkgIfJoMD3hlBals223vW5l9G64fS34lq5
GRS2gg/jXW3M7eAol4FEjPh2cwcOSB3NP++lNH/DSzKsPegp2Cr4A7GWzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIG3xTUNLVZ7LzNokl/6v3xCZZOmMB8GA1UdIwQY
MBaAFD22x37nZn16Hor25ypctD+fw0gOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGJiSGZ1ZG1mWG9laXZibktseTBQNV9EU0E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMTBmNDEtNWExNS00ODRkLWI5NWYt
ZGY2YmRhMzg5OTA1LzEvUGJiSGZ1ZG1mWG9laXZibktseTBQNV9EU0E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9mMTBmNDEtNWExNS00ODRkLWI5NWYtZGY2YmRhMzg5OTA1
LzEvUGJiSGZ1ZG1mWG9laXZibktseTBQNV9EU0E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANJoYp8bf
y3UaGq/A5nMEqKf7oiCxNsEIAOPGv+4OhGoFLXuyF4O/1alMPKWyGBRNbxMrnGPz
iO7VNUnR/Px8ZOR4irBz/OZJ3dQVQCSAH9/PTqOuRf/UbMuqRCpCfgK1ezi+zgE2
0InzrlwU3g+qFZ8RgIEMF6zquR4EKc88YIsOyqbj+wke8xMB0tg0okaffi0fw7In
ADY8fUYzFgv4oE++KSPYWUNd7eRGhK5+kd6TIdT+lth7bdMHkJmEDQvXmhtJQFlV
R2AwA0nKWlea0OPMn5Jwz4+u6SQFkr1Rby9ba8EfKHVgjzH97llae3U0/bgoi7O0
2QgHcEXs0Oi+Vg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 07:17:12 2025 by rpki-client