Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.mft
File: PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.mft (raw, json)
Hash identifier: OoJYX6bdBdjFN3gAc8Jpd97QfGon1w/YHjx6namjt9c=
Subject key identifier: 50:52:45:2A:1D:81:11:FB:B3:8D:57:22:63:97:29:D7:56:6D:CD:9B
Authority key identifier: 3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C
Certificate issuer: /CN=3ec50ab4ccf72e3d60c09f964019d6c034c50a6c
Certificate serial: 01976929A37F59A1F5E16EDB8E5679E1B6EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.mft
Manifest number: 0BA6
Signing time: Fri 13 Jun 2025 12:00:25 +0000
Manifest this update: Fri 13 Jun 2025 12:00:25 +0000
Manifest next update: Sat 14 Jun 2025 12:00:25 +0000
Files and hashes: 1: 2lwI54QF_XqrgUwaQ0Ao7KhahI4.roa (hash: WVAqqT9n+azhlwqdMweU/K18Zjr86DqXuRzwgp6K0fI=)
2: 4FFFuK1vxnuv7Op8bzoPTU3k-1A.roa (hash: STFNZsV6pUOT+BxcjZe8jeTbdMkK2ach6CnLHR/a/DQ=)
3: BwhHBq8_nG_K7m_W3G4RHhTida0.roa (hash: NMnRXfbQ1lBRTE5ileh9Mp+IR5izyXDHjaaBnvkh6pY=)
4: N9fOGveXKnDBnMyZelua1okh-lk.roa (hash: /CS+ErzjXmiDIQCbsNiLlCoDuDUD+atwXZvVIWH1usE=)
5: PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.crl (hash: MDjn0TMOA5YZSFtgyikR0ZJxznWqaJSRFv9oJgT731I=)
6: RiiNoyZSO1JzA7m0_LayA08gFzY.roa (hash: zcGWo+UpPwSMxlv6jUFwi8ud5sRDKsEHFlMBysCY+IA=)
7: bhmEePiuNnHqxZ4JP2YCdaJdaWQ.roa (hash: IOKrM6wqs64CxWRz/e5SJHOEHzYs4P5681kMIabdRJo=)
8: hcHWImWG5MWGMCt-xjjcs2qk-VA.roa (hash: WBuEW90SNyMe0DLwdpncbMxEeqWECj4RjfAg2YgTeY0=)
9: sD1R-VoESGB_6LIl4dgntbQKRkE.roa (hash: p8K6PYzpldEXmvB0zwceGziQ94cCnLjIpOhxU2zOu8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:a3:7f:59:a1:f5:e1:6e:db:8e:56:79:e1:b6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec50ab4ccf72e3d60c09f964019d6c034c50a6c
Validity
Not Before: Jun 13 12:00:25 2025 GMT
Not After : Jun 14 12:00:25 2025 GMT
Subject: CN=5052452a1d8111fbb38d5722639729d7566dcd9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:93:34:e8:86:8f:71:7b:be:d5:5f:79:a6:f8:
77:f0:ca:27:37:a4:52:4b:11:17:c5:c8:a0:1b:1c:
55:6a:8a:7c:39:5d:3c:1c:91:e7:e7:a4:21:04:b4:
d8:df:2f:0c:8d:a5:3c:96:b0:18:cb:4a:7d:42:54:
18:a8:b3:df:f3:e7:ba:b1:76:89:ba:38:c3:7a:82:
36:10:06:81:df:4c:18:b8:3c:e4:65:bf:6c:c2:34:
e1:4f:fa:7b:3b:2c:b1:d0:d1:d5:61:8e:fe:a7:f0:
18:48:43:28:dc:ec:dc:6e:38:27:34:87:a9:1a:b0:
66:ed:cc:a6:ff:62:e2:55:0f:80:9f:a6:6d:a9:60:
43:5f:d1:0e:8b:88:52:11:6e:57:ce:fe:a5:c4:b2:
19:60:fd:f4:89:a8:1b:6a:84:d9:57:34:ea:3b:8b:
5c:57:0f:90:d0:2c:eb:64:f3:d0:7d:19:5f:e8:53:
d0:54:60:93:f6:ab:6a:ce:26:e3:36:43:87:a7:37:
e3:d4:94:33:d4:45:f3:23:21:d2:30:2a:a7:b1:7b:
77:d3:91:82:29:c6:ae:43:07:e6:96:f0:c3:6d:52:
10:19:8d:a2:04:06:f7:80:55:84:a9:42:4b:52:b9:
1d:41:1c:6d:9e:bb:25:10:96:37:25:33:6c:8f:d6:
e8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:52:45:2A:1D:81:11:FB:B3:8D:57:22:63:97:29:D7:56:6D:CD:9B
X509v3 Authority Key Identifier:
keyid:3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:39:0e:e8:a6:f6:a2:7d:77:bf:cf:14:9f:ea:6e:30:aa:fd:
3a:f9:ff:a6:37:be:20:7f:0c:82:ea:5e:ea:44:6c:4f:7e:8c:
99:ba:44:56:8a:b5:4e:56:e9:52:d7:31:23:db:eb:57:e8:7c:
8d:2d:1d:77:2d:29:b3:28:27:22:bf:be:00:dd:70:8a:4d:07:
a3:5f:89:4c:32:0e:97:6c:1c:2d:9f:08:26:b7:65:36:00:3d:
c9:34:21:5c:a4:b6:55:4e:9a:44:0b:07:44:88:2b:42:e1:48:
ad:8a:6d:72:3f:23:e4:ff:7e:72:c3:27:7b:9e:58:10:74:e3:
d8:3a:00:90:4c:b5:66:9f:b1:67:c6:34:26:9a:e0:7d:77:6b:
e0:61:9c:a7:3d:4f:9c:c3:0b:f1:6d:eb:a3:95:33:33:9d:1d:
5b:56:57:71:59:43:fe:b8:b8:57:6c:e5:05:39:3e:01:b0:de:
9f:e8:cd:9e:64:ee:04:12:13:73:38:d8:7a:40:88:ae:8f:30:
ac:17:7c:1c:d1:13:80:19:e7:cd:e0:16:03:b0:41:c9:bb:88:
f5:b4:ad:d5:a8:0a:e3:70:e0:4b:14:0c:b4:26:3c:bd:6a:63:
2a:ee:4e:9a:f3:3f:7e:98:28:a7:06:51:64:b2:af:52:9e:85:
be:5e:6f:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpKaN/WaH14W7bjlZ54bbqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYzUwYWI0Y2NmNzJlM2Q2MGMwOWY5NjQwMTlkNmMwMzRj
NTBhNmMwHhcNMjUwNjEzMTIwMDI1WhcNMjUwNjE0MTIwMDI1WjAzMTEwLwYDVQQD
Eyg1MDUyNDUyYTFkODExMWZiYjM4ZDU3MjI2Mzk3MjlkNzU2NmRjZDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZM06IaPcXu+1V95pvh38MonN6RS
SxEXxcigGxxVaop8OV08HJHn56QhBLTY3y8MjaU8lrAYy0p9QlQYqLPf8+e6sXaJ
ujjDeoI2EAaB30wYuDzkZb9swjThT/p7Oyyx0NHVYY7+p/AYSEMo3OzcbjgnNIep
GrBm7cym/2LiVQ+An6ZtqWBDX9EOi4hSEW5Xzv6lxLIZYP30iagbaoTZVzTqO4tc
Vw+Q0CzrZPPQfRlf6FPQVGCT9qtqzibjNkOHpzfj1JQz1EXzIyHSMCqnsXt305GC
KcauQwfmlvDDbVIQGY2iBAb3gFWEqUJLUrkdQRxtnrslEJY3JTNsj9bobwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFBSRSodgRH7s41XImOXKddWbc2bMB8GA1UdIwQY
MBaAFD7FCrTM9y49YMCflkAZ1sA0xQpsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHNVS3RNejNMajFnd0otV1FCbld3RFRGQ213LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83OWVmNGYtZTM4ZS00NGRhLWE2NTct
MjE1OTM3NmQzYTY0LzEvUHNVS3RNejNMajFnd0otV1FCbld3RFRGQ213Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC83OWVmNGYtZTM4ZS00NGRhLWE2NTctMjE1OTM3NmQzYTY0
LzEvUHNVS3RNejNMajFnd0otV1FCbld3RFRGQ213LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYDkO6Kb2
on13v88Un+puMKr9Ovn/pje+IH8Mgupe6kRsT36MmbpEVoq1TlbpUtcxI9vrV+h8
jS0ddy0psygnIr++AN1wik0Ho1+JTDIOl2wcLZ8IJrdlNgA9yTQhXKS2VU6aRAsH
RIgrQuFIrYptcj8j5P9+csMne55YEHTj2DoAkEy1Zp+xZ8Y0JprgfXdr4GGcpz1P
nMML8W3ro5UzM50dW1ZXcVlD/ri4V2zlBTk+AbDen+jNnmTuBBITczjYekCIro8w
rBd8HNETgBnnzeAWA7BBybuI9bSt1agK43DgSxQMtCY8vWpjKu5OmvM/fpgopwZR
ZLKvUp6Fvl5vXw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:32:52 2025 by rpki-client