Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.mft
File: pNyKTpFqo_eO94BHrCDQ0PipUPk.mft (raw, json)
Hash identifier: wipI+JugrG/mjl0u+sFANZrQahzANBD0v7LslB+2RfQ=
Subject key identifier: FA:58:66:8C:60:D4:61:9A:71:F3:11:69:82:22:15:C9:D7:1B:4E:39
Authority key identifier: A4:DC:8A:4E:91:6A:A3:F7:8E:F7:80:47:AC:20:D0:D0:F8:A9:50:F9
Certificate issuer: /CN=a4dc8a4e916aa3f78ef78047ac20d0d0f8a950f9
Certificate serial: 019879AD5A52D0579AC7063A6681EA7F9F50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNyKTpFqo_eO94BHrCDQ0PipUPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.mft
Manifest number: 0C95
Signing time: Tue 05 Aug 2025 10:01:00 +0000
Manifest this update: Tue 05 Aug 2025 10:01:00 +0000
Manifest next update: Wed 06 Aug 2025 10:01:00 +0000
Files and hashes: 1: UTvK6gSJU03H7EOW3gSzFazwB7M.roa (hash: fFNxwITyp66ny+cQJs93d3VRTa/z6HUTvmCKvoybY9I=)
2: pNyKTpFqo_eO94BHrCDQ0PipUPk.crl (hash: DE9TMxjLluDcalHTuZNkYhgAcW5qvbVQAi6j1kuHx4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNyKTpFqo_eO94BHrCDQ0PipUPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ad:5a:52:d0:57:9a:c7:06:3a:66:81:ea:7f:9f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4dc8a4e916aa3f78ef78047ac20d0d0f8a950f9
Validity
Not Before: Aug 5 10:01:00 2025 GMT
Not After : Aug 6 10:01:00 2025 GMT
Subject: CN=fa58668c60d4619a71f31169822215c9d71b4e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bf:95:35:05:0c:2a:7f:c8:96:ca:d5:1a:76:
fc:0b:0d:47:a4:be:d8:92:18:87:f4:36:ff:28:ee:
0e:d6:3a:2e:74:41:1b:3b:2b:02:52:71:26:80:07:
c8:c0:52:83:dd:18:eb:35:ed:84:7f:8b:b2:60:af:
a2:fb:fa:0a:97:46:4d:fb:de:d4:51:14:07:7f:de:
91:50:49:41:05:28:bc:7c:60:5b:91:15:2a:34:5b:
d6:eb:68:85:99:5e:0b:a4:d8:40:43:b0:25:7b:72:
c8:41:48:a5:98:ec:69:0b:32:bc:62:d7:91:4c:db:
a1:c8:de:cf:f0:f7:37:c7:e9:40:2b:96:b5:2b:5e:
8f:5b:a0:fe:c8:16:a2:f4:8e:ac:3c:96:23:84:0f:
39:82:41:49:19:57:ce:b9:10:f4:67:07:49:84:3c:
be:22:57:e3:8b:c4:c5:cb:6e:81:32:bb:d6:14:40:
92:60:72:f1:03:f3:bb:9d:fc:90:68:97:d5:8e:5c:
a4:2a:be:93:43:01:c7:57:53:4b:99:7f:e2:62:4b:
28:10:e2:20:f8:9a:27:8e:4a:73:b2:32:23:1d:85:
9e:4b:34:8a:75:e6:f5:f9:5b:d9:37:ae:82:c1:e4:
5c:5c:56:61:85:50:75:2b:42:13:95:72:18:52:a6:
43:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:58:66:8C:60:D4:61:9A:71:F3:11:69:82:22:15:C9:D7:1B:4E:39
X509v3 Authority Key Identifier:
keyid:A4:DC:8A:4E:91:6A:A3:F7:8E:F7:80:47:AC:20:D0:D0:F8:A9:50:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNyKTpFqo_eO94BHrCDQ0PipUPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d2:17:0b:5b:55:b2:41:f9:7d:2f:76:c3:cc:7d:44:08:d6:
d9:1c:ae:67:0f:02:0d:51:84:b7:15:b9:3e:2a:8c:31:db:11:
71:7a:1a:45:5b:5d:6a:d2:ec:59:99:a6:47:ba:45:05:61:22:
88:bf:41:5f:40:21:6d:1d:66:6f:53:06:5c:3d:ca:de:ce:55:
8f:1c:4e:cc:8a:ea:b5:a4:bb:b5:95:4d:92:09:d9:9a:d8:6f:
e1:ae:35:9f:59:6a:c4:a4:a8:12:c6:49:d2:f7:17:d4:a8:c0:
49:60:23:19:5c:3e:4d:62:d7:e2:5f:05:b7:c9:c7:b9:1d:67:
0c:bd:df:85:2a:89:5e:46:f4:50:25:01:c1:a3:e2:75:a3:33:
69:c7:72:e5:14:95:7e:b1:a4:5d:cf:8f:31:6d:f1:8c:79:d0:
77:4c:a6:1e:da:52:df:31:4d:11:bc:5c:f2:8d:22:9d:23:1f:
90:65:3a:05:3b:c9:e0:5e:ca:f5:71:fa:8a:5a:9a:45:da:43:
e2:49:44:46:1a:57:ba:d0:4f:22:c0:fd:9c:06:3e:76:b2:09:
6b:fa:4c:01:f2:90:e7:30:3d:0c:f3:55:60:d7:65:c8:04:10:
55:75:91:f1:94:33:52:46:d7:ad:52:4d:06:60:fc:d8:27:3b:
ba:5f:6d:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh5rVpS0FeaxwY6ZoHqf59QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZGM4YTRlOTE2YWEzZjc4ZWY3ODA0N2FjMjBkMGQwZjhh
OTUwZjkwHhcNMjUwODA1MTAwMTAwWhcNMjUwODA2MTAwMTAwWjAzMTEwLwYDVQQD
EyhmYTU4NjY4YzYwZDQ2MTlhNzFmMzExNjk4MjIyMTVjOWQ3MWI0ZTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzb+VNQUMKn/IlsrVGnb8Cw1HpL7Y
khiH9Db/KO4O1joudEEbOysCUnEmgAfIwFKD3RjrNe2Ef4uyYK+i+/oKl0ZN+97U
URQHf96RUElBBSi8fGBbkRUqNFvW62iFmV4LpNhAQ7Ale3LIQUilmOxpCzK8YteR
TNuhyN7P8Pc3x+lAK5a1K16PW6D+yBai9I6sPJYjhA85gkFJGVfOuRD0ZwdJhDy+
Ilfji8TFy26BMrvWFECSYHLxA/O7nfyQaJfVjlykKr6TQwHHV1NLmX/iYksoEOIg
+JonjkpzsjIjHYWeSzSKdeb1+VvZN66CweRcXFZhhVB1K0ITlXIYUqZDgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpYZoxg1GGacfMRaYIiFcnXG045MB8GA1UdIwQY
MBaAFKTcik6RaqP3jveAR6wg0ND4qVD5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE55S1RwRnFvX2VPOTRCSHJDRFEwUGlwVVBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9hZTFiODktZmQ0OC00YjJkLWE4OGUt
OTY2YmU0ODMyODE1LzEvcE55S1RwRnFvX2VPOTRCSHJDRFEwUGlwVVBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9hZTFiODktZmQ0OC00YjJkLWE4OGUtOTY2YmU0ODMyODE1
LzEvcE55S1RwRnFvX2VPOTRCSHJDRFEwUGlwVVBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlNIXC1tV
skH5fS92w8x9RAjW2RyuZw8CDVGEtxW5PiqMMdsRcXoaRVtdatLsWZmmR7pFBWEi
iL9BX0AhbR1mb1MGXD3K3s5VjxxOzIrqtaS7tZVNkgnZmthv4a41n1lqxKSoEsZJ
0vcX1KjASWAjGVw+TWLX4l8Ft8nHuR1nDL3fhSqJXkb0UCUBwaPidaMzacdy5RSV
frGkXc+PMW3xjHnQd0ymHtpS3zFNEbxc8o0inSMfkGU6BTvJ4F7K9XH6ilqaRdpD
4klERhpXutBPIsD9nAY+drIJa/pMAfKQ5zA9DPNVYNdlyAQQVXWR8ZQzUkbXrVJN
BmD82Cc7ul9t5g==
-----END CERTIFICATE-----
Generated at Tue Aug 5 20:02:26 2025 by rpki-client