Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
File: Pt7grog0cFCIgFBEvnXHQDsdx-I.mft (raw, json)
Hash identifier: u05EPFiivPt3oHHnWPO8f5EG9O5+dpEkCPm9MvPvCY8=
Subject key identifier: 9C:AA:A1:4B:B8:93:D7:F9:0B:43:3B:7E:96:53:09:EF:5C:00:42:2B
Authority key identifier: 3E:DE:E0:AE:88:34:70:50:88:80:50:44:BE:75:C7:40:3B:1D:C7:E2
Certificate issuer: /CN=3edee0ae8834705088805044be75c7403b1dc7e2
Certificate serial: 01988543875930C4BD46AD1429082862C3DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
Manifest number: 12B5
Signing time: Thu 07 Aug 2025 16:00:51 +0000
Manifest this update: Thu 07 Aug 2025 16:00:51 +0000
Manifest next update: Fri 08 Aug 2025 16:00:51 +0000
Files and hashes: 1: Pt7grog0cFCIgFBEvnXHQDsdx-I.crl (hash: BfdJSzjkECrhuGERJO1oxbLsJlja0ja4kz+NTy73vSs=)
2: f4uXUqTz6EMLfxnYPkQ3ht2dRz0.roa (hash: WwKae4E8mCPYphGvXV9B/QCbohcENp4wZ1ekmYvPPps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:43:87:59:30:c4:bd:46:ad:14:29:08:28:62:c3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3edee0ae8834705088805044be75c7403b1dc7e2
Validity
Not Before: Aug 7 16:00:51 2025 GMT
Not After : Aug 8 16:00:51 2025 GMT
Subject: CN=9caaa14bb893d7f90b433b7e965309ef5c00422b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c5:5e:5a:9e:48:e9:fd:99:77:e3:8f:85:81:
7d:59:3a:66:f7:87:d0:16:30:f8:23:c8:b4:0b:84:
60:c3:15:ef:d4:c4:01:59:99:ea:85:39:86:23:ba:
cd:f0:32:42:5f:44:50:8f:a4:7c:1f:9d:d3:d1:96:
cd:e0:dc:4b:31:ed:27:5f:b0:89:02:51:8f:1d:9f:
b7:a6:85:0b:c0:d0:fe:e8:79:85:4c:80:7b:dc:f6:
41:17:61:dd:11:dc:3d:53:0d:52:38:69:bd:4f:78:
35:4a:bc:3f:44:80:29:90:c7:91:8e:f3:1b:17:9a:
8f:18:82:2e:be:22:70:ea:e1:71:51:ba:57:0d:22:
0e:b0:c9:c4:73:88:b5:a2:e3:4b:d4:6e:48:85:64:
ad:97:26:55:c8:9b:54:7f:d1:96:66:96:47:ef:8b:
9e:4a:a2:4b:df:07:76:36:19:15:4b:19:09:43:a1:
ce:50:ae:15:6f:d1:c4:a0:b0:ee:d6:9a:4d:19:f4:
58:1d:aa:f6:dd:d4:7a:be:04:a4:a3:24:99:c7:28:
2d:e3:f2:86:ce:46:81:2a:ea:fc:7e:97:6e:a6:3e:
36:1a:03:25:2f:ab:40:7d:94:f4:e0:0f:e5:30:0c:
db:56:17:39:79:14:5b:de:3c:89:9d:f3:d2:4d:2e:
d3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AA:A1:4B:B8:93:D7:F9:0B:43:3B:7E:96:53:09:EF:5C:00:42:2B
X509v3 Authority Key Identifier:
keyid:3E:DE:E0:AE:88:34:70:50:88:80:50:44:BE:75:C7:40:3B:1D:C7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:02:eb:f7:d7:a3:87:28:dc:79:9f:39:3c:32:05:93:4c:1e:
6f:6b:80:f7:ab:76:22:e5:02:2f:3b:84:04:56:c1:fd:7f:a2:
c5:ea:8d:d7:2a:b7:b4:ae:e2:08:fc:42:4e:09:c8:a1:2a:f0:
25:1a:fc:b5:c0:54:cd:3e:e4:01:e0:9b:02:e0:b2:f9:b1:8f:
85:00:8a:bb:03:e4:d1:61:67:b5:00:66:8f:60:dc:94:03:74:
45:28:50:3e:75:23:2b:2c:04:9d:15:dc:2d:83:d2:fb:94:63:
24:6d:e7:31:da:a6:14:a6:cb:ed:af:c3:fb:54:bc:3a:60:30:
6d:df:ce:60:3d:09:3c:c5:78:fd:b6:df:db:e1:d5:29:d3:d5:
82:bc:bc:88:b9:3e:ae:0d:04:4b:d3:96:b6:79:7d:5e:fd:9d:
36:8d:5a:3c:b3:03:86:fd:c9:25:07:bb:5a:03:75:f9:d6:34:
c1:f7:a8:57:d3:c0:fd:7b:66:ee:4f:5c:6c:ad:60:43:6e:63:
29:5c:28:0c:69:d2:43:6a:95:e3:a1:bd:86:a7:6e:6e:51:82:
d3:2d:50:cc:51:94:5a:49:78:22:e6:76:4c:82:1c:f1:56:16:
df:0b:1f:a3:4f:9f:cd:89:19:7e:1a:00:b9:d1:1a:bc:9c:52:
82:91:d7:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiFQ4dZMMS9Rq0UKQgoYsPcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZGVlMGFlODgzNDcwNTA4ODgwNTA0NGJlNzVjNzQwM2Ix
ZGM3ZTIwHhcNMjUwODA3MTYwMDUxWhcNMjUwODA4MTYwMDUxWjAzMTEwLwYDVQQD
Eyg5Y2FhYTE0YmI4OTNkN2Y5MGI0MzNiN2U5NjUzMDllZjVjMDA0MjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMVeWp5I6f2Zd+OPhYF9WTpm94fQ
FjD4I8i0C4RgwxXv1MQBWZnqhTmGI7rN8DJCX0RQj6R8H53T0ZbN4NxLMe0nX7CJ
AlGPHZ+3poULwND+6HmFTIB73PZBF2HdEdw9Uw1SOGm9T3g1Srw/RIApkMeRjvMb
F5qPGIIuviJw6uFxUbpXDSIOsMnEc4i1ouNL1G5IhWStlyZVyJtUf9GWZpZH74ue
SqJL3wd2NhkVSxkJQ6HOUK4Vb9HEoLDu1ppNGfRYHar23dR6vgSkoySZxygt4/KG
zkaBKur8fpdupj42GgMlL6tAfZT04A/lMAzbVhc5eRRb3jyJnfPSTS7TtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyqoUu4k9f5C0M7fpZTCe9cAEIrMB8GA1UdIwQY
MBaAFD7e4K6INHBQiIBQRL51x0A7HcfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHQ3Z3JvZzBjRkNJZ0ZCRXZuWEhRRHNkeC1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny81MTRjZjQtMTI2Yi00Y2M1LWI0ZDUt
NzlhYjQ4ZDgzYmFiLzEvUHQ3Z3JvZzBjRkNJZ0ZCRXZuWEhRRHNkeC1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny81MTRjZjQtMTI2Yi00Y2M1LWI0ZDUtNzlhYjQ4ZDgzYmFi
LzEvUHQ3Z3JvZzBjRkNJZ0ZCRXZuWEhRRHNkeC1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATALr99ej
hyjceZ85PDIFk0web2uA96t2IuUCLzuEBFbB/X+ixeqN1yq3tK7iCPxCTgnIoSrw
JRr8tcBUzT7kAeCbAuCy+bGPhQCKuwPk0WFntQBmj2DclAN0RShQPnUjKywEnRXc
LYPS+5RjJG3nMdqmFKbL7a/D+1S8OmAwbd/OYD0JPMV4/bbf2+HVKdPVgry8iLk+
rg0ES9OWtnl9Xv2dNo1aPLMDhv3JJQe7WgN1+dY0wfeoV9PA/Xtm7k9cbK1gQ25j
KVwoDGnSQ2qV46G9hqdublGC0y1QzFGUWkl4IuZ2TIIc8VYW3wsfo0+fzYkZfhoA
udEavJxSgpHXvw==
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:13:21 2025 by rpki-client