Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
File: PJMfJlqEcdMs6ESdnhhvDccRSno.mft (raw, json)
Hash identifier: avfKuiujsDsRVVH6LTNPFXpjpOvsm3zjk0kP/+fOJFg=
Subject key identifier: 36:6D:2F:AE:E5:18:42:49:7E:36:72:A7:19:61:E3:89:00:13:9C:20
Authority key identifier: 3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A
Certificate issuer: /CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a
Certificate serial: 01988F8FF9E4417058A16ECD257282F63263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
Manifest number: 1323
Signing time: Sat 09 Aug 2025 16:00:34 +0000
Manifest this update: Sat 09 Aug 2025 16:00:34 +0000
Manifest next update: Sun 10 Aug 2025 16:00:34 +0000
Files and hashes: 1: PJMfJlqEcdMs6ESdnhhvDccRSno.crl (hash: a7KQuqf3HCmpablFL2qxhxUI3vXG2gjKbLa+MHs7BRw=)
2: PkJhyt9pT1uGvNEkXULDRnIoKM8.roa (hash: GnXTwsBZIxIhJPycvbpoXf49+cV9ppIdazG5Z3GlNBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:8f:f9:e4:41:70:58:a1:6e:cd:25:72:82:f6:32:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a
Validity
Not Before: Aug 9 16:00:34 2025 GMT
Not After : Aug 10 16:00:34 2025 GMT
Subject: CN=366d2faee51842497e3672a71961e38900139c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a8:f6:76:29:0e:57:ed:be:4b:bb:08:14:1d:
bb:6e:a0:00:2d:00:a7:1a:11:07:ec:1e:62:9e:87:
81:a9:53:5b:40:03:85:94:b0:24:61:50:9a:78:19:
47:22:7a:9f:4c:22:99:6e:ab:98:d8:e2:be:2e:15:
70:b8:85:68:82:ed:bb:d4:93:d3:11:62:d9:d6:e8:
b4:2b:f1:93:9f:83:34:73:37:8c:00:50:b1:5f:c6:
a6:01:43:b2:b1:81:25:26:e9:82:65:17:52:e9:99:
d2:c0:af:f6:d5:3b:7d:88:87:13:45:d4:15:bd:6d:
7b:55:32:24:ab:ba:c6:d2:29:24:5d:45:84:be:09:
44:73:4e:f7:30:0a:90:3e:fb:78:22:19:32:7a:bb:
dc:79:de:e6:92:d9:ab:7c:8d:21:a1:2d:ab:3c:62:
c1:ac:3f:28:55:77:a9:a0:84:7a:7f:04:ac:39:7c:
dc:eb:1a:20:77:7e:92:cc:a0:de:88:70:66:4b:fe:
3a:55:87:81:f4:53:2d:27:d0:62:c2:8a:22:e6:c5:
1a:02:25:34:44:3e:96:63:24:08:93:7e:24:ac:48:
b6:27:81:cc:5b:e7:1c:82:68:77:03:42:30:85:45:
08:70:16:1d:cd:18:b4:7c:46:96:95:76:2b:50:4e:
ce:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6D:2F:AE:E5:18:42:49:7E:36:72:A7:19:61:E3:89:00:13:9C:20
X509v3 Authority Key Identifier:
keyid:3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:09:d7:34:02:71:7a:c2:89:65:d2:30:c6:3b:32:fc:e2:8f:
8b:50:7d:fa:ff:f4:9e:73:23:8e:96:85:5d:e4:63:ed:f7:dd:
4c:13:df:f2:2c:72:7c:13:c3:ac:d0:24:33:bd:ca:f5:69:79:
28:80:2d:86:1f:1d:47:00:ac:44:c8:22:67:40:be:53:4d:75:
ed:73:14:17:97:4c:ba:7e:21:a3:27:fb:e7:1a:e9:a4:90:9e:
80:fb:c3:9d:7e:de:9a:fe:91:d0:99:1c:d1:d1:0c:2d:87:79:
1d:33:8e:3f:3a:1d:e7:7e:71:69:61:30:6f:10:26:1f:f6:4e:
21:fd:8d:0a:64:08:0e:97:ba:ae:bb:b5:93:62:0c:44:a9:11:
b5:03:e2:47:8c:aa:46:9b:7d:ee:68:9e:f6:da:74:46:a6:cb:
9b:eb:39:a3:47:6c:95:7a:66:31:e9:05:d5:f6:ec:2a:f9:36:
dc:32:99:22:40:68:d8:e0:56:f2:81:0a:9f:2b:c8:26:c4:9e:
2f:03:e5:c1:be:e8:73:3c:8b:d9:4b:b3:e3:5c:4b:0e:04:cb:
43:22:20:8d:39:d9:30:ee:fe:c0:93:36:28:9b:05:82:e1:a0:
1a:de:b9:13:97:78:78:87:53:15:49:9d:f8:9e:39:92:cc:b4:
0d:03:c6:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiPj/nkQXBYoW7NJXKC9jJjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjOTMxZjI2NWE4NDcxZDMyY2U4NDQ5ZDllMTg2ZjBkYzcx
MTRhN2EwHhcNMjUwODA5MTYwMDM0WhcNMjUwODEwMTYwMDM0WjAzMTEwLwYDVQQD
EygzNjZkMmZhZWU1MTg0MjQ5N2UzNjcyYTcxOTYxZTM4OTAwMTM5YzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqj2dikOV+2+S7sIFB27bqAALQCn
GhEH7B5inoeBqVNbQAOFlLAkYVCaeBlHInqfTCKZbquY2OK+LhVwuIVogu271JPT
EWLZ1ui0K/GTn4M0czeMAFCxX8amAUOysYElJumCZRdS6ZnSwK/21Tt9iIcTRdQV
vW17VTIkq7rG0ikkXUWEvglEc073MAqQPvt4Ihkyervced7mktmrfI0hoS2rPGLB
rD8oVXepoIR6fwSsOXzc6xogd36SzKDeiHBmS/46VYeB9FMtJ9Biwooi5sUaAiU0
RD6WYyQIk34krEi2J4HMW+ccgmh3A0IwhUUIcBYdzRi0fEaWlXYrUE7OpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDZtL67lGEJJfjZypxlh44kAE5wgMB8GA1UdIwQY
MBaAFDyTHyZahHHTLOhEnZ4Ybw3HEUp6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEpNZkpscUVjZE1zNkVTZG5oaHZEY2NSU25vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9iNTBiZGEtNjg5OS00ZWVmLWEyMzEt
NWUwMDI2MzAzNjI5LzEvUEpNZkpscUVjZE1zNkVTZG5oaHZEY2NSU25vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9iNTBiZGEtNjg5OS00ZWVmLWEyMzEtNWUwMDI2MzAzNjI5
LzEvUEpNZkpscUVjZE1zNkVTZG5oaHZEY2NSU25vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdQnXNAJx
esKJZdIwxjsy/OKPi1B9+v/0nnMjjpaFXeRj7ffdTBPf8ixyfBPDrNAkM73K9Wl5
KIAthh8dRwCsRMgiZ0C+U0117XMUF5dMun4hoyf75xrppJCegPvDnX7emv6R0Jkc
0dEMLYd5HTOOPzod535xaWEwbxAmH/ZOIf2NCmQIDpe6rru1k2IMRKkRtQPiR4yq
Rpt97mie9tp0RqbLm+s5o0dslXpmMekF1fbsKvk23DKZIkBo2OBW8oEKnyvIJsSe
LwPlwb7oczyL2Uuz41xLDgTLQyIgjTnZMO7+wJM2KJsFguGgGt65E5d4eIdTFUmd
+J45ksy0DQPGMQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 20:51:25 2025 by rpki-client