Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
File: 1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft (raw, json)
Hash identifier: g6oQJfA4CtbV22qJpGCKMfcW2XcwPB0IgxcWcsgZHI8=
Subject key identifier: B4:07:85:4B:B6:E1:C6:DF:F4:71:EF:0B:FC:5B:39:2B:D2:0A:EE:2F
Authority key identifier: F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
Certificate issuer: /CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Certificate serial: 019782E9B4B1BDD03F15B6E629A068AE2B14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
Manifest number: 159E
Signing time: Wed 18 Jun 2025 12:00:43 +0000
Manifest this update: Wed 18 Jun 2025 12:00:43 +0000
Manifest next update: Thu 19 Jun 2025 12:00:43 +0000
Files and hashes: 1: 1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl (hash: yiyfCFEDm+bz3y0IDj+xPpJ+6ctcwK92Qa2SAymhxKw=)
2: D2WLBhbXEMdDEu6VoSCBX9kwKxY.roa (hash: L98txIeHFCVTE5FfZdJjhE+NAuboMbn59/Tg8vXNf1Y=)
3: FPWYS5FPdi_36PocHDQv9w20hsM.roa (hash: lc1AFnplH2+Ms7H/N6TFQmmzCrwqddRkrKSWWiBizwU=)
4: GD4Ao9B2cz5WTYzecC-kGpGE8PU.roa (hash: EMPtxZQPJUmcPd6jCs0XXLsuloEWz1y/aD3A32qr1zk=)
5: W1awuHaHMUM8Quc80WAi-XtdIzY.roa (hash: +ggiQE1BpawHqA/zPCH8mung319bbE2FMHPQr3Jv5zk=)
6: dL_cPR3BvEV2FZeLKttQtUtkTJA.roa (hash: sW6C8Oel7oIOAbSvnZNd6R3ZV3AqqC/NBWFrXS1er6s=)
7: jgF2CfkLgJ6QhMF-SdjdJSTJwMg.roa (hash: mvV2l5CpWyu6M49qXSrw0SVIhjTViniokzpN0H6YY+0=)
8: vRRL6lXZDT1QQeeextawYFp6dTk.roa (hash: OGSPwUDB+II0bvau8QxtXKLAR/Lr2UnzedciO1U9Xfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:e9:b4:b1:bd:d0:3f:15:b6:e6:29:a0:68:ae:2b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Validity
Not Before: Jun 18 12:00:43 2025 GMT
Not After : Jun 19 12:00:43 2025 GMT
Subject: CN=b407854bb6e1c6dff471ef0bfc5b392bd20aee2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:76:cd:51:da:a8:20:e5:55:eb:ea:25:1c:bd:
83:21:13:db:d3:a6:2b:5e:f5:bb:7d:fb:16:d9:8e:
bc:a5:c4:2e:10:f1:a1:b8:89:bc:1c:12:69:cb:1a:
23:29:33:54:74:97:d3:53:63:f7:4d:e8:a3:78:b2:
64:28:7b:bc:3b:91:f7:d3:db:f6:ec:a8:37:82:32:
be:e3:49:3b:71:0c:88:07:fe:b4:28:0d:a6:ce:84:
32:1b:ee:fa:dd:88:2d:ae:16:e6:54:e9:89:cf:cc:
d4:ed:b9:7e:90:95:92:69:c1:0e:42:86:e8:32:0b:
70:55:06:32:b2:8d:df:a8:f2:7d:ee:a7:86:3b:1c:
20:3c:8a:bd:93:8c:46:10:01:77:d9:3b:ad:10:2b:
2c:bc:9c:f1:69:0a:93:c6:61:b0:6a:70:19:28:13:
23:d0:3f:1b:e4:43:a8:4f:67:fa:d6:90:3e:b8:73:
24:7e:d2:a4:b9:db:d3:ab:84:bc:7d:26:0b:76:50:
02:94:22:a3:06:cd:48:68:51:6c:a5:9a:59:ea:b5:
ff:54:97:67:f3:aa:11:19:6b:7e:5a:b4:47:ac:7b:
ef:f4:66:50:ed:44:f5:99:51:9b:23:d1:6a:3e:c3:
0a:a3:4c:2f:4f:79:38:34:b9:bb:a0:22:75:a0:88:
bd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:07:85:4B:B6:E1:C6:DF:F4:71:EF:0B:FC:5B:39:2B:D2:0A:EE:2F
X509v3 Authority Key Identifier:
keyid:F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:95:cd:d0:21:81:cd:f3:2d:1f:26:05:8b:ba:b6:d0:18:58:
85:e8:b9:8b:7f:c9:ee:f9:0b:76:c5:7d:fc:19:43:82:b2:ff:
28:57:0e:f9:33:5f:de:ed:17:0e:6d:d8:a1:d0:78:e5:af:a7:
b4:1f:00:81:5a:8e:98:56:48:c6:da:7c:37:64:a3:b1:3b:c9:
79:0e:82:e7:82:68:cb:c5:ae:8c:44:de:15:71:2d:fb:0e:1f:
ad:05:30:1f:03:24:99:f6:dd:16:ee:d7:c5:69:02:18:bc:5a:
74:f7:64:1f:ec:3d:2b:c9:57:c4:7f:0b:89:8c:55:ee:d5:45:
88:bf:7f:72:db:66:82:66:8d:2b:21:7c:07:15:38:d8:43:7f:
c1:5c:c3:6f:5b:6f:a9:29:3d:a3:4c:f8:68:0f:83:94:13:8b:
2e:18:c2:1e:69:4d:9a:a9:66:ea:13:14:0c:dd:11:01:42:76:
81:b4:12:b6:d2:86:2f:7a:50:e6:0d:d3:f1:53:bc:4f:84:8b:
36:75:0e:42:10:4a:77:a0:b2:f1:d4:62:47:1f:8c:ea:16:c6:
84:be:f8:91:75:91:67:45:51:61:bc:23:44:e2:55:0e:5b:7f:
ca:e3:4c:66:ce:c3:62:6f:0e:01:fa:39:d3:b6:99:48:a6:75:
88:6a:d9:f7
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZeC6bSxvdA/FbbmKaBorisUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZjE5ZTIyNGM3M2Y4M2M0ZmRkMTk2ZDA2NjA4YWViM2E4
ODE4MDQwHhcNMjUwNjE4MTIwMDQzWhcNMjUwNjE5MTIwMDQzWjAzMTEwLwYDVQQD
EyhiNDA3ODU0YmI2ZTFjNmRmZjQ3MWVmMGJmYzViMzkyYmQyMGFlZTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnbNUdqoIOVV6+olHL2DIRPb06Yr
XvW7ffsW2Y68pcQuEPGhuIm8HBJpyxojKTNUdJfTU2P3TeijeLJkKHu8O5H309v2
7Kg3gjK+40k7cQyIB/60KA2mzoQyG+763YgtrhbmVOmJz8zU7bl+kJWSacEOQobo
MgtwVQYyso3fqPJ97qeGOxwgPIq9k4xGEAF32TutECssvJzxaQqTxmGwanAZKBMj
0D8b5EOoT2f61pA+uHMkftKkudvTq4S8fSYLdlAClCKjBs1IaFFspZpZ6rX/VJdn
86oRGWt+WrRHrHvv9GZQ7UT1mVGbI9FqPsMKo0wvT3k4NLm7oCJ1oIi97QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLQHhUu24cbf9HHvC/xbOSvSCu4vMB8GA1UdIwQY
MBaAFPjxniJMc/g8T90ZbQZgius6iBgEMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1QR2VJa3h6LUR4UDNSbHRCbUNLNnpxSUdBUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvZjQwNDg2LTJjZDktNDc1Yi1iYmUx
LTE2Y2Q4ZjRmYjRiOS8xLzEtUEdlSWt4ei1EeFAzUmx0Qm1DSzZ6cUlHQVEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzc3L2Y0MDQ4Ni0yY2Q5LTQ3NWItYmJlMS0xNmNkOGY0ZmI0
YjkvMS8xLVBHZUlreHotRHhQM1JsdEJtQ0s2enFJR0FRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACZXN
0CGBzfMtHyYFi7q20BhYhei5i3/J7vkLdsV9/BlDgrL/KFcO+TNf3u0XDm3YodB4
5a+ntB8AgVqOmFZIxtp8N2SjsTvJeQ6C54Joy8WujETeFXEt+w4frQUwHwMkmfbd
Fu7XxWkCGLxadPdkH+w9K8lXxH8LiYxV7tVFiL9/cttmgmaNKyF8BxU42EN/wVzD
b1tvqSk9o0z4aA+DlBOLLhjCHmlNmqlm6hMUDN0RAUJ2gbQSttKGL3pQ5g3T8VO8
T4SLNnUOQhBKd6Cy8dRiRx+M6hbGhL74kXWRZ0VRYbwjROJVDlt/yuNMZs7DYm8O
Afo507aZSKZ1iGrZ9w==
-----END CERTIFICATE-----
Generated at Wed Jun 18 15:38:14 2025 by rpki-client