Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
File: pENNZpHm4nwoLKo3r_kPK8VL8eM.mft (raw, json)
Hash identifier: ZfdzDEmtTJ9xXHOKREPcDKG4QL1UyhHgTMBLEBaH1K4=
Subject key identifier: 18:EC:38:B4:AF:0A:6E:C7:96:08:97:B2:32:15:21:D7:F8:7F:9F:4B
Authority key identifier: A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3
Certificate issuer: /CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3
Certificate serial: 0198729875CCECB1043FE9ED8E24361E122E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 01:00:50 +0000
Manifest this update: Mon 04 Aug 2025 01:00:50 +0000
Manifest next update: Tue 05 Aug 2025 01:00:50 +0000
Files and hashes: 1: V4fEP3mKAgRZldstTINNuk_J6BQ.roa (hash: 8GFsD/JurXta37HamqakliSVJtpBqW+/i/sWeLhcYfE=)
2: pENNZpHm4nwoLKo3r_kPK8VL8eM.crl (hash: UvU7IFckYHohBhRRLEpME/lKwkyXo2DOe+JqK6KB+K8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:75:cc:ec:b1:04:3f:e9:ed:8e:24:36:1e:12:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3
Validity
Not Before: Aug 4 01:00:50 2025 GMT
Not After : Aug 5 01:00:50 2025 GMT
Subject: CN=18ec38b4af0a6ec7960897b2321521d7f87f9f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:11:f7:d3:d5:9b:b3:95:7d:e0:88:c0:cc:10:
f6:01:c3:e1:53:5f:b6:e5:73:9b:31:34:88:6d:4b:
05:ef:5b:ab:76:b2:12:b4:88:f5:50:4b:a5:56:85:
f3:00:14:13:e0:d3:d2:04:bc:ab:ce:a4:dd:f0:5d:
5c:dc:11:81:27:4d:ca:a2:47:7e:0b:1a:b5:f3:54:
b6:1c:9a:42:fd:62:84:f2:99:76:31:57:26:a5:9d:
1f:f9:7c:e7:dc:e8:0b:33:5b:c4:ec:9b:1d:85:ff:
da:69:f3:8d:4e:c5:7b:df:a2:3b:65:62:28:3f:81:
c2:d8:fd:c8:c3:41:c6:6f:83:b9:55:c0:34:9e:9e:
45:22:0a:23:02:2b:d6:86:f1:2c:01:07:11:b4:db:
3a:48:18:84:88:f1:53:0a:a4:28:a9:b4:c9:2f:b8:
dd:8c:07:6f:c7:f2:ad:be:17:db:57:c7:7b:05:e6:
77:da:9f:9a:c3:67:75:c7:6a:54:2e:00:36:db:5e:
0e:77:bf:45:39:37:3f:6c:22:b3:cd:30:de:20:a2:
19:37:cc:25:fb:ac:d2:1b:26:be:33:2b:68:d2:d1:
15:92:b0:92:78:32:b0:62:39:ff:30:98:bd:bf:5f:
93:3f:e2:d8:ed:d5:ab:53:81:2d:2e:cf:29:cf:34:
6a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EC:38:B4:AF:0A:6E:C7:96:08:97:B2:32:15:21:D7:F8:7F:9F:4B
X509v3 Authority Key Identifier:
keyid:A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f6:1e:a9:49:f3:b9:61:33:9c:9a:00:a4:f2:2d:29:5e:e1:
9e:53:10:96:1c:71:9d:c2:6a:ab:a9:4f:07:bc:51:d7:67:d3:
a2:48:dc:21:6d:98:ac:53:72:d7:b2:25:63:5f:95:a8:7c:63:
1a:96:09:e3:36:a9:27:a0:24:3e:c2:4c:16:85:ac:ba:5e:01:
5c:09:a0:fa:36:35:89:b3:a1:8f:c1:1d:83:f8:9f:56:57:31:
56:db:04:dd:4b:27:ab:45:d2:6f:0c:90:de:4a:2b:f3:88:41:
72:f4:7c:39:41:71:b3:ea:0c:d4:83:50:82:ab:0d:82:e5:7e:
3a:62:12:97:16:6b:1c:68:2f:27:4b:4b:82:7a:2a:c0:b0:f1:
c8:3a:0f:0c:96:8a:d8:21:03:94:c7:ab:28:22:66:f8:63:0d:
1b:bc:5c:40:87:e0:80:f3:c0:a8:9f:2f:86:d7:ee:a7:99:18:
ca:d4:98:b9:a4:c8:86:24:d9:78:11:ef:52:38:51:2e:ae:48:
60:c5:94:d1:f0:fd:2e:6d:62:6a:04:af:51:7a:f6:0f:66:87:
f0:37:83:04:48:f9:14:0c:85:ea:bc:99:73:d4:8c:03:f9:b4:
42:e7:13:23:0f:1a:05:b5:fd:9b:4d:27:d7:da:a1:66:83:df:
67:dc:e2:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhymHXM7LEEP+ntjiQ2HhIuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NDM0ZDY2OTFlNmUyN2MyODJjYWEzN2FmZjkwZjJiYzU0
YmYxZTMwHhcNMjUwODA0MDEwMDUwWhcNMjUwODA1MDEwMDUwWjAzMTEwLwYDVQQD
EygxOGVjMzhiNGFmMGE2ZWM3OTYwODk3YjIzMjE1MjFkN2Y4N2Y5ZjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRH309Wbs5V94IjAzBD2AcPhU1+2
5XObMTSIbUsF71urdrIStIj1UEulVoXzABQT4NPSBLyrzqTd8F1c3BGBJ03Kokd+
Cxq181S2HJpC/WKE8pl2MVcmpZ0f+Xzn3OgLM1vE7Jsdhf/aafONTsV736I7ZWIo
P4HC2P3Iw0HGb4O5VcA0np5FIgojAivWhvEsAQcRtNs6SBiEiPFTCqQoqbTJL7jd
jAdvx/KtvhfbV8d7BeZ32p+aw2d1x2pULgA2214Od79FOTc/bCKzzTDeIKIZN8wl
+6zSGya+Myto0tEVkrCSeDKwYjn/MJi9v1+TP+LY7dWrU4EtLs8pzzRqxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBjsOLSvCm7HlgiXsjIVIdf4f59LMB8GA1UdIwQY
MBaAFKRDTWaR5uJ8KCyqN6/5DyvFS/HjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEVOTlpwSG00bndvTEtvM3Jfa1BLOFZMOGVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny80NWIyZDktZTg2MS00M2VmLWJjYzAt
ZTk5NzVhMGJkZWE3LzEvcEVOTlpwSG00bndvTEtvM3Jfa1BLOFZMOGVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny80NWIyZDktZTg2MS00M2VmLWJjYzAtZTk5NzVhMGJkZWE3
LzEvcEVOTlpwSG00bndvTEtvM3Jfa1BLOFZMOGVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlfYeqUnz
uWEznJoApPItKV7hnlMQlhxxncJqq6lPB7xR12fTokjcIW2YrFNy17IlY1+VqHxj
GpYJ4zapJ6AkPsJMFoWsul4BXAmg+jY1ibOhj8Edg/ifVlcxVtsE3Usnq0XSbwyQ
3kor84hBcvR8OUFxs+oM1INQgqsNguV+OmISlxZrHGgvJ0tLgnoqwLDxyDoPDJaK
2CEDlMerKCJm+GMNG7xcQIfggPPAqJ8vhtfup5kYytSYuaTIhiTZeBHvUjhRLq5I
YMWU0fD9Lm1iagSvUXr2D2aH8DeDBEj5FAyF6ryZc9SMA/m0QucTIw8aBbX9m00n
19qhZoPfZ9zi+g==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:59 2025 by rpki-client