Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft
File: Pls0eWfOpnu2K2nSWazeS4-elBc.mft (raw, json)
Hash identifier: UuzE+/RAAP1RT7Bd4QOebbfwgGe0AdftCCeBuqwQtoM=
Subject key identifier: FF:B9:08:F0:28:90:DD:37:86:30:12:6D:F2:1C:1E:48:47:1D:81:63
Authority key identifier: 3E:5B:34:79:67:CE:A6:7B:B6:2B:69:D2:59:AC:DE:4B:8F:9E:94:17
Certificate issuer: /CN=3e5b347967cea67bb62b69d259acde4b8f9e9417
Certificate serial: 01976EF4BC99189A6AAADB66A34AB5A8382D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft
Manifest number: 0AA7
Signing time: Sat 14 Jun 2025 15:00:22 +0000
Manifest this update: Sat 14 Jun 2025 15:00:22 +0000
Manifest next update: Sun 15 Jun 2025 15:00:22 +0000
Files and hashes: 1: Pls0eWfOpnu2K2nSWazeS4-elBc.crl (hash: I89tIZDmUqZD/7S+zoWt7RPYhFoh0lZZYFodngg3QZA=)
2: yeykCTxRfXSLEqjo1MZ7zObmrks.roa (hash: 1vVWF5KJNfMy/yYL5Sp0YWKLB5R7wsPTTiR6VRMJgCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:bc:99:18:9a:6a:aa:db:66:a3:4a:b5:a8:38:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e5b347967cea67bb62b69d259acde4b8f9e9417
Validity
Not Before: Jun 14 15:00:22 2025 GMT
Not After : Jun 15 15:00:22 2025 GMT
Subject: CN=ffb908f02890dd378630126df21c1e48471d8163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:60:ce:6f:ec:a8:1e:d6:fe:89:6a:28:5f:e6:
99:b9:e7:80:d0:3b:33:04:18:7c:85:0a:97:1a:dd:
cc:4a:53:4d:88:c1:59:f8:35:ba:e9:b0:15:f4:e8:
50:89:9b:3d:90:f9:41:9d:18:2f:46:fc:0d:70:f5:
83:e7:0f:b0:27:87:8d:50:d4:97:6f:9a:14:67:87:
cb:2c:07:b7:b4:82:b6:bc:8c:70:c1:45:04:e9:27:
38:69:ff:0d:ab:c9:6d:99:01:2b:34:fb:9e:36:f6:
2c:af:a7:2a:4b:2e:15:87:5e:93:9f:c8:49:d7:82:
ed:fd:03:6b:b8:24:ca:a2:7c:0d:6e:8a:ba:a5:fa:
2b:87:5f:bf:be:83:76:1b:a3:63:a8:12:ae:8a:ef:
a7:d1:f5:1f:60:6c:a5:ed:ee:73:23:2a:dc:80:cd:
cf:f4:8b:0f:d6:9c:70:2e:bd:73:0f:ef:9a:b8:2a:
1f:98:f1:d1:c1:87:7f:78:45:1d:43:9e:c4:74:09:
09:f9:f4:3b:8b:68:f1:12:bd:15:e4:0d:a6:8f:85:
12:ac:d8:df:ed:9c:80:14:93:a3:23:33:8b:ed:67:
f1:fd:65:2b:77:99:90:f0:d3:32:7b:bc:54:ac:47:
03:89:33:2a:05:69:65:92:f1:c5:98:ec:69:54:54:
9d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B9:08:F0:28:90:DD:37:86:30:12:6D:F2:1C:1E:48:47:1D:81:63
X509v3 Authority Key Identifier:
keyid:3E:5B:34:79:67:CE:A6:7B:B6:2B:69:D2:59:AC:DE:4B:8F:9E:94:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:17:05:49:79:a3:7e:f2:53:e6:58:90:f2:c7:12:d7:ed:89:
fc:bd:ed:75:d6:32:a2:a9:32:87:63:5b:2a:4d:d4:a3:1e:58:
70:e6:25:74:86:18:5d:b3:56:ec:2a:9e:2a:d5:ea:c5:48:33:
7a:cd:6a:9b:e0:0e:54:9c:eb:7d:42:18:4c:66:d0:26:20:55:
e2:62:be:40:df:f3:e5:fb:02:8b:1a:87:5c:77:de:7b:05:38:
af:fa:24:51:68:6b:ef:84:c5:0a:10:9b:a7:e1:42:fe:bd:a8:
94:61:0c:e2:ef:b6:9a:c5:da:0e:b7:7d:05:56:fa:ed:4a:91:
af:3f:1d:3d:69:c4:1c:fe:44:0e:3f:fd:c9:9e:60:b7:36:32:
a2:31:40:3c:bf:aa:26:8f:38:a5:c6:79:54:bf:48:83:e1:74:
44:56:25:0f:1a:92:91:29:13:4b:d7:06:e9:56:1e:eb:da:fe:
14:f0:4e:c3:2c:48:66:a7:b5:75:73:5f:12:82:9e:52:aa:cf:
0d:e1:27:da:12:e7:54:07:1f:be:88:8b:55:5a:94:a9:ef:78:
18:22:d0:60:b6:0a:92:b1:16:4a:d8:bb:69:45:65:12:35:b6:
b1:4b:ef:d8:7d:fe:ad:80:ec:f1:77:4a:18:8f:a1:28:62:4a:
87:02:65:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdu9LyZGJpqqttmo0q1qDgtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNWIzNDc5NjdjZWE2N2JiNjJiNjlkMjU5YWNkZTRiOGY5
ZTk0MTcwHhcNMjUwNjE0MTUwMDIyWhcNMjUwNjE1MTUwMDIyWjAzMTEwLwYDVQQD
EyhmZmI5MDhmMDI4OTBkZDM3ODYzMDEyNmRmMjFjMWU0ODQ3MWQ4MTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGDOb+yoHtb+iWooX+aZueeA0Dsz
BBh8hQqXGt3MSlNNiMFZ+DW66bAV9OhQiZs9kPlBnRgvRvwNcPWD5w+wJ4eNUNSX
b5oUZ4fLLAe3tIK2vIxwwUUE6Sc4af8Nq8ltmQErNPueNvYsr6cqSy4Vh16Tn8hJ
14Lt/QNruCTKonwNboq6pforh1+/voN2G6NjqBKuiu+n0fUfYGyl7e5zIyrcgM3P
9IsP1pxwLr1zD++auCofmPHRwYd/eEUdQ57EdAkJ+fQ7i2jxEr0V5A2mj4USrNjf
7ZyAFJOjIzOL7Wfx/WUrd5mQ8NMye7xUrEcDiTMqBWllkvHFmOxpVFSdGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+5CPAokN03hjASbfIcHkhHHYFjMB8GA1UdIwQY
MBaAFD5bNHlnzqZ7titp0lms3kuPnpQXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGxzMGVXZk9wbnUySzJuU1dhemVTNC1lbEJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8yNTZkYTctMTlkMC00NTlhLWI1M2Ut
OTRlN2QwN2ZiMzFkLzEvUGxzMGVXZk9wbnUySzJuU1dhemVTNC1lbEJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8yNTZkYTctMTlkMC00NTlhLWI1M2UtOTRlN2QwN2ZiMzFk
LzEvUGxzMGVXZk9wbnUySzJuU1dhemVTNC1lbEJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRcFSXmj
fvJT5liQ8scS1+2J/L3tddYyoqkyh2NbKk3Uox5YcOYldIYYXbNW7CqeKtXqxUgz
es1qm+AOVJzrfUIYTGbQJiBV4mK+QN/z5fsCixqHXHfeewU4r/okUWhr74TFChCb
p+FC/r2olGEM4u+2msXaDrd9BVb67UqRrz8dPWnEHP5EDj/9yZ5gtzYyojFAPL+q
Jo84pcZ5VL9Ig+F0RFYlDxqSkSkTS9cG6VYe69r+FPBOwyxIZqe1dXNfEoKeUqrP
DeEn2hLnVAcfvoiLVVqUqe94GCLQYLYKkrEWSti7aUVlEjW2sUvv2H3+rYDs8XdK
GI+hKGJKhwJlig==
-----END CERTIFICATE-----
Generated at Sat Jun 14 21:37:28 2025 by rpki-client