Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
File: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft (raw, json)
Hash identifier: MP1ZJYyC4mIVtFjRePfG5peaO1bgpbxYkKCQuYsOEWs=
Subject key identifier: 3A:04:0F:28:2C:7E:77:39:F8:85:48:86:ED:A4:AE:45:29:9F:85:63
Authority key identifier: A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
Certificate issuer: /CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Certificate serial: 019873E36E1EBCF1F6DBCC44B8CC59EB4F8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
Manifest number: 0A0A
Signing time: Mon 04 Aug 2025 07:02:21 +0000
Manifest this update: Mon 04 Aug 2025 07:02:21 +0000
Manifest next update: Tue 05 Aug 2025 07:02:21 +0000
Files and hashes: 1: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl (hash: 9spK+q2svfFV9pM3IJ/OS65dw9aNCAeKnEcI4atuR4M=)
2: po_LVWpbKXE3R88IVy-uZ3WJPNw.roa (hash: K+p2Dato5TDcm+bOMSRlFPytRWT6WZtTR14LVyHGo2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:6e:1e:bc:f1:f6:db:cc:44:b8:cc:59:eb:4f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Validity
Not Before: Aug 4 07:02:21 2025 GMT
Not After : Aug 5 07:02:21 2025 GMT
Subject: CN=3a040f282c7e7739f8854886eda4ae45299f8563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:51:79:31:ee:85:4c:51:6a:45:fe:d9:39:11:
3b:89:d7:df:c3:30:a5:f7:5c:45:5b:40:44:1c:af:
22:4f:4b:50:6e:49:f8:5c:30:9f:09:81:7c:8f:48:
e7:ff:9f:d4:6f:bd:ee:3c:a2:52:4d:78:f4:52:68:
7d:91:49:99:9d:60:14:d7:58:7b:91:42:9e:c3:15:
6c:4d:c5:6f:71:fc:ad:0b:f5:c6:58:c5:74:b6:f9:
3f:a3:20:dd:73:3d:82:d5:e6:f6:4a:39:63:65:2c:
83:bf:bb:71:aa:f7:1d:ba:b0:61:2c:97:c6:c0:25:
77:7d:4f:40:00:96:ae:52:43:7c:ee:24:1a:fd:17:
68:f8:07:17:73:1c:d4:4b:3e:8b:5b:2d:2b:a5:99:
57:2c:dc:7a:74:d9:34:fe:95:da:1a:2f:01:95:7c:
37:f0:69:48:44:c2:51:9e:b5:b9:0d:ff:f2:e2:78:
d1:4d:83:62:66:4f:25:b2:9b:10:59:3e:7a:58:aa:
fa:2f:18:ab:e4:8a:f5:4d:01:3e:a5:71:80:b7:80:
a3:b7:0e:3a:71:3b:79:3d:81:50:0e:be:7f:aa:bd:
67:86:bc:5e:35:c4:7d:9c:c2:cc:03:de:31:47:a3:
3d:89:f1:e1:ce:db:b2:f2:33:8b:c1:b1:18:87:b3:
8a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:04:0F:28:2C:7E:77:39:F8:85:48:86:ED:A4:AE:45:29:9F:85:63
X509v3 Authority Key Identifier:
keyid:A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:81:81:f6:4e:56:b1:77:06:3e:4f:26:4e:6f:15:48:57:0c:
c5:be:44:49:0b:cc:20:92:5a:f0:71:f7:74:72:02:fb:a0:06:
52:4b:3c:0d:e4:11:e6:32:8e:f4:ed:07:a0:20:a6:0b:75:8e:
9c:6b:4e:db:44:cc:18:1e:06:36:66:ca:c3:32:51:af:67:3e:
ca:51:ed:aa:85:b1:7a:a3:92:f7:44:d3:ed:92:07:10:35:45:
58:e2:48:6c:ee:12:de:aa:67:33:9f:ca:b5:bf:0e:f8:65:97:
e3:fd:9f:99:df:88:1a:5f:be:d1:d0:9d:1b:9d:7e:a1:84:cf:
ec:a7:ae:5e:c3:22:46:77:19:0d:d5:1f:11:e1:88:2f:39:b5:
59:54:07:70:37:e6:ce:35:de:de:ef:0c:c7:aa:9b:45:aa:b6:
c0:d0:cf:62:94:c1:59:1e:38:b4:04:80:09:26:10:65:c5:32:
4f:05:2f:81:6c:fd:0f:3d:b1:6e:6a:ba:9d:e6:4f:e4:e6:1d:
42:01:21:b4:93:49:1d:50:0b:dc:34:75:d9:e2:e8:52:cf:e3:
2c:fe:86:27:ae:33:86:32:25:02:c5:15:bd:56:b9:11:80:1f:
87:97:4a:8d:b7:ba:91:c3:6b:fc:28:eb:f3:86:a3:5c:c1:95:
06:e7:e9:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz424evPH228xEuMxZ60+KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NDc4OTNmYjViMzQ4ZTY4YTY2ZDU1YTI4ZjI3OGNiZjM5
MzFkZjQwHhcNMjUwODA0MDcwMjIxWhcNMjUwODA1MDcwMjIxWjAzMTEwLwYDVQQD
EygzYTA0MGYyODJjN2U3NzM5Zjg4NTQ4ODZlZGE0YWU0NTI5OWY4NTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFF5Me6FTFFqRf7ZORE7idffwzCl
91xFW0BEHK8iT0tQbkn4XDCfCYF8j0jn/5/Ub73uPKJSTXj0Umh9kUmZnWAU11h7
kUKewxVsTcVvcfytC/XGWMV0tvk/oyDdcz2C1eb2SjljZSyDv7txqvcdurBhLJfG
wCV3fU9AAJauUkN87iQa/Rdo+AcXcxzUSz6LWy0rpZlXLNx6dNk0/pXaGi8BlXw3
8GlIRMJRnrW5Df/y4njRTYNiZk8lspsQWT56WKr6Lxir5Ir1TQE+pXGAt4Cjtw46
cTt5PYFQDr5/qr1nhrxeNcR9nMLMA94xR6M9ifHhztuy8jOLwbEYh7OKpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDoEDygsfnc5+IVIhu2krkUpn4VjMB8GA1UdIwQY
MBaAFKZHiT+1s0jmimbVWijyeMvzkx30MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGtlSlA3V3pTT2FLWnRWYUtQSjR5X09USGZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kYThjYjEtMWJmYy00M2ZkLWEwZDIt
ZDYyNDQ5NmRkY2M4LzEvcGtlSlA3V3pTT2FLWnRWYUtQSjR5X09USGZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9kYThjYjEtMWJmYy00M2ZkLWEwZDItZDYyNDQ5NmRkY2M4
LzEvcGtlSlA3V3pTT2FLWnRWYUtQSjR5X09USGZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjYGB9k5W
sXcGPk8mTm8VSFcMxb5ESQvMIJJa8HH3dHIC+6AGUks8DeQR5jKO9O0HoCCmC3WO
nGtO20TMGB4GNmbKwzJRr2c+ylHtqoWxeqOS90TT7ZIHEDVFWOJIbO4S3qpnM5/K
tb8O+GWX4/2fmd+IGl++0dCdG51+oYTP7KeuXsMiRncZDdUfEeGILzm1WVQHcDfm
zjXe3u8Mx6qbRaq2wNDPYpTBWR44tASACSYQZcUyTwUvgWz9Dz2xbmq6neZP5OYd
QgEhtJNJHVAL3DR12eLoUs/jLP6GJ64zhjIlAsUVvVa5EYAfh5dKjbe6kcNr/Cjr
84ajXMGVBufp3g==
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:40:23 2025 by rpki-client