Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
File: pTi7DCtB76jDsCBk68UvupLCNiY.mft (raw, json)
Hash identifier: euK61UpKZNJVBy3+dF7pRU6uWC7T6xpIFwc28z1sdCs=
Subject key identifier: 87:52:F3:88:42:0D:69:07:38:9E:01:F3:F2:CD:C6:3D:7F:C9:51:86
Authority key identifier: A5:38:BB:0C:2B:41:EF:A8:C3:B0:20:64:EB:C5:2F:BA:92:C2:36:26
Certificate issuer: /CN=a538bb0c2b41efa8c3b02064ebc52fba92c23626
Certificate serial: 0198808B09CFC9125E0743A1A5A168DDA751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
Manifest number: 1208
Signing time: Wed 06 Aug 2025 18:00:52 +0000
Manifest this update: Wed 06 Aug 2025 18:00:52 +0000
Manifest next update: Thu 07 Aug 2025 18:00:52 +0000
Files and hashes: 1: DSyQL16gVyPuINIFuwqbtqDaLcQ.roa (hash: 4sWGWWc2NQ2B2oMwbMVn1NZgZ93cb0NJnNIgTj1CBqg=)
2: ldlRi9PG7yaWe_OISm5PxetZ-fs.roa (hash: zAtX/bKzY97x7lzgIkaYD8HV9V6BCkypXN+jO7OstUg=)
3: pTi7DCtB76jDsCBk68UvupLCNiY.crl (hash: YL/se8iUpZYMMdBAiNY1iwcnuz4YTCSxmVAzRQ6ZuWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8b:09:cf:c9:12:5e:07:43:a1:a5:a1:68:dd:a7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a538bb0c2b41efa8c3b02064ebc52fba92c23626
Validity
Not Before: Aug 6 18:00:52 2025 GMT
Not After : Aug 7 18:00:52 2025 GMT
Subject: CN=8752f388420d6907389e01f3f2cdc63d7fc95186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f4:8c:0f:be:94:c1:ce:f5:ee:61:82:98:50:
0c:52:ab:f2:94:00:92:8c:26:99:53:95:68:4f:90:
e6:83:06:47:9b:b2:18:10:2a:de:4c:02:f5:22:42:
69:31:ad:50:b2:aa:c1:b2:59:73:65:88:89:d8:3d:
eb:f2:98:5e:96:f9:ae:9f:02:12:af:2d:f9:d0:af:
09:0e:a9:56:25:f0:2c:70:e8:49:f6:51:06:a0:38:
3d:57:0e:d4:44:43:4d:23:fe:6a:b3:0c:4e:f9:42:
af:8b:c1:b2:b0:c0:d8:da:ed:0d:e1:c1:59:87:7a:
0e:91:72:48:fc:e3:60:d6:8d:de:7e:01:41:fc:58:
c9:fc:98:c4:d3:d2:8a:5e:a1:3f:b2:75:91:61:59:
7e:e1:fc:59:45:f3:90:3e:11:af:a5:cc:43:d7:e3:
d4:77:dd:2b:46:3a:00:08:9d:77:2d:89:ab:75:03:
6c:ea:89:df:84:56:6c:bf:94:fe:4c:8e:55:b4:17:
60:c4:0d:60:42:4b:3a:ef:cd:77:92:83:18:46:03:
bc:41:3f:b4:bc:b2:bc:e9:73:49:21:61:1a:3a:03:
e7:52:3c:05:4c:f5:54:6c:3b:bc:9e:c5:64:3a:73:
ab:ef:16:5d:ae:c6:3b:35:a4:ea:39:4c:81:83:31:
77:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:52:F3:88:42:0D:69:07:38:9E:01:F3:F2:CD:C6:3D:7F:C9:51:86
X509v3 Authority Key Identifier:
keyid:A5:38:BB:0C:2B:41:EF:A8:C3:B0:20:64:EB:C5:2F:BA:92:C2:36:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:67:ef:be:b4:17:c0:dc:74:74:c7:96:64:6c:ac:33:e5:19:
9a:58:4f:4e:68:de:9a:0d:aa:d0:ab:90:19:e5:3b:73:1a:f7:
48:a7:66:f0:4a:d3:07:c6:2d:9d:f6:dc:7d:79:1d:97:58:3b:
54:cc:1e:be:1b:14:1e:ce:8c:79:8d:61:2e:78:6d:ac:bf:23:
74:a4:a7:fe:08:00:e7:08:89:85:45:e9:cc:1a:26:85:a6:78:
a8:d9:e1:34:45:64:d6:95:cc:ce:59:fd:74:ab:cd:a9:a1:3b:
fb:2b:c0:a5:c6:ce:ab:44:33:f6:d9:42:f6:bb:af:f2:6f:f2:
ae:88:54:f8:06:78:bb:22:d5:78:81:51:26:2b:8c:89:dc:cf:
64:df:a6:5e:bf:0e:25:b7:d9:cc:8a:eb:57:69:35:7b:98:f2:
2a:7d:0d:f4:7c:06:8a:46:83:a6:d8:22:4c:83:63:89:17:76:
41:ea:72:a6:87:d0:20:90:bc:fb:90:e6:35:58:d3:28:78:45:
ae:d8:de:17:09:5e:8b:c9:ab:a8:20:59:6a:04:f2:f4:3d:8f:
fc:ca:a3:20:28:bb:dd:fb:e1:76:ea:af:cd:54:5b:b6:45:8f:
f7:08:cb:61:5e:51:ba:b5:fa:be:a7:d3:50:8c:16:bf:01:73:
ac:15:7f:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAiwnPyRJeB0OhpaFo3adRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MzhiYjBjMmI0MWVmYThjM2IwMjA2NGViYzUyZmJhOTJj
MjM2MjYwHhcNMjUwODA2MTgwMDUyWhcNMjUwODA3MTgwMDUyWjAzMTEwLwYDVQQD
Eyg4NzUyZjM4ODQyMGQ2OTA3Mzg5ZTAxZjNmMmNkYzYzZDdmYzk1MTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfSMD76Uwc717mGCmFAMUqvylACS
jCaZU5VoT5DmgwZHm7IYECreTAL1IkJpMa1QsqrBsllzZYiJ2D3r8phelvmunwIS
ry350K8JDqlWJfAscOhJ9lEGoDg9Vw7URENNI/5qswxO+UKvi8GysMDY2u0N4cFZ
h3oOkXJI/ONg1o3efgFB/FjJ/JjE09KKXqE/snWRYVl+4fxZRfOQPhGvpcxD1+PU
d90rRjoACJ13LYmrdQNs6onfhFZsv5T+TI5VtBdgxA1gQks67813koMYRgO8QT+0
vLK86XNJIWEaOgPnUjwFTPVUbDu8nsVkOnOr7xZdrsY7NaTqOUyBgzF3nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdS84hCDWkHOJ4B8/LNxj1/yVGGMB8GA1UdIwQY
MBaAFKU4uwwrQe+ow7AgZOvFL7qSwjYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFRpN0RDdEI3NmpEc0NCazY4VXZ1cExDTmlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9jZWJhNWMtZTlkOS00ZTkxLWJhYmMt
NjcyODJkNzEzOGEwLzEvcFRpN0RDdEI3NmpEc0NCazY4VXZ1cExDTmlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9jZWJhNWMtZTlkOS00ZTkxLWJhYmMtNjcyODJkNzEzOGEw
LzEvcFRpN0RDdEI3NmpEc0NCazY4VXZ1cExDTmlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHWfvvrQX
wNx0dMeWZGysM+UZmlhPTmjemg2q0KuQGeU7cxr3SKdm8ErTB8YtnfbcfXkdl1g7
VMwevhsUHs6MeY1hLnhtrL8jdKSn/ggA5wiJhUXpzBomhaZ4qNnhNEVk1pXMzln9
dKvNqaE7+yvApcbOq0Qz9tlC9ruv8m/yrohU+AZ4uyLVeIFRJiuMidzPZN+mXr8O
JbfZzIrrV2k1e5jyKn0N9HwGikaDptgiTINjiRd2QepypofQIJC8+5DmNVjTKHhF
rtjeFwlei8mrqCBZagTy9D2P/MqjICi73fvhduqvzVRbtkWP9wjLYV5RurX6vqfT
UIwWvwFzrBV/Gw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 01:57:33 2025 by rpki-client