Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
File: pcatcQWg6X4ZLw6I5mgYq2D33sg.mft (raw, json)
Hash identifier: tUiDbqCpiKf+hZEhbhmPcF9adYFokJJ48p5crMQTfjs=
Subject key identifier: 18:3E:36:D2:9D:A0:D6:09:25:EC:C8:11:3B:B6:6D:47:87:DC:30:93
Authority key identifier: A5:C6:AD:71:05:A0:E9:7E:19:2F:0E:88:E6:68:18:AB:60:F7:DE:C8
Certificate issuer: /CN=a5c6ad7105a0e97e192f0e88e66818ab60f7dec8
Certificate serial: 01976F2C2597C7017158BD0C01B9D5633B64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
Manifest number: 158C
Signing time: Sat 14 Jun 2025 16:00:53 +0000
Manifest this update: Sat 14 Jun 2025 16:00:53 +0000
Manifest next update: Sun 15 Jun 2025 16:00:53 +0000
Files and hashes: 1: pcatcQWg6X4ZLw6I5mgYq2D33sg.crl (hash: iwWb70h5ITxL5FMGlorF5ihLfA4Ijl+3GzldPmOIQiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:25:97:c7:01:71:58:bd:0c:01:b9:d5:63:3b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6ad7105a0e97e192f0e88e66818ab60f7dec8
Validity
Not Before: Jun 14 16:00:53 2025 GMT
Not After : Jun 15 16:00:53 2025 GMT
Subject: CN=183e36d29da0d60925ecc8113bb66d4787dc3093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:13:53:25:ca:43:e6:84:bd:ed:af:50:47:8c:
79:7b:b7:7f:16:76:ca:bb:1b:c6:85:46:f6:e9:6a:
7a:eb:d0:b8:4f:7d:be:25:62:5c:98:13:23:23:88:
aa:77:15:e6:6c:f8:ac:28:b3:bf:e9:b9:36:65:83:
67:b4:1a:48:78:30:ad:60:7d:8d:37:62:8c:ce:c7:
6a:ec:ba:3b:eb:f3:83:39:5c:4a:23:eb:ed:85:41:
ee:f0:9f:f7:8a:f3:8c:08:87:7b:71:3a:b9:00:84:
c6:21:17:f3:8c:31:d3:a0:36:b4:89:6e:4d:54:a5:
d6:5c:17:1a:e5:de:38:3e:d4:bb:b6:a5:18:70:d8:
1f:d1:e0:9b:60:9d:5b:f4:51:81:54:0a:99:55:c0:
c3:f4:68:ce:d2:75:15:8f:7f:87:14:62:86:ba:ef:
9f:5f:9c:64:6a:04:c7:3c:6f:b9:21:47:08:95:45:
83:77:7e:3e:74:f7:4a:df:bd:e6:37:7d:1d:94:f2:
1d:3e:50:99:3e:24:13:69:68:3e:9b:70:a4:9b:8e:
e4:d0:fd:37:0a:bb:13:d4:94:ad:8e:7c:3e:47:4b:
fd:8a:77:ef:b4:0c:bf:d9:d6:a1:78:91:6a:d3:12:
bb:0e:f9:28:fe:08:89:69:72:b0:44:c5:36:b3:8c:
32:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3E:36:D2:9D:A0:D6:09:25:EC:C8:11:3B:B6:6D:47:87:DC:30:93
X509v3 Authority Key Identifier:
keyid:A5:C6:AD:71:05:A0:E9:7E:19:2F:0E:88:E6:68:18:AB:60:F7:DE:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:1d:89:1f:35:77:cb:ae:91:d2:27:d3:c9:2e:aa:9a:f7:73:
61:99:96:d5:26:b7:50:58:88:74:76:c5:66:4f:94:f8:b2:82:
ca:21:17:fb:0a:06:7a:99:bc:e7:32:f5:5c:c5:2e:cd:f8:34:
12:d5:47:30:a9:15:7f:57:20:d1:f2:43:76:c9:f4:58:6a:67:
3d:2d:9d:38:ed:c6:3a:62:92:0a:ea:0b:2c:89:1c:1c:48:42:
56:53:8e:45:e0:69:c8:12:1a:d5:7d:96:aa:2b:5e:d5:dd:7e:
86:f6:88:f0:14:5c:3d:b4:eb:0c:3e:23:3f:46:82:f8:d2:e9:
31:f5:f0:88:32:d3:0b:6b:c6:16:45:14:38:28:9c:70:e0:86:
37:db:a4:19:5b:cf:96:ed:04:3b:bb:93:68:14:5f:b2:82:28:
68:98:d0:dd:8c:4b:69:b5:b6:31:23:3a:58:10:44:c3:cc:4e:
2c:1c:8b:f5:4d:14:6a:de:b4:93:e6:a9:c5:8c:d2:92:a3:d8:
66:13:7e:31:ea:52:49:5c:92:82:2a:f5:90:ab:75:1b:90:f1:
61:83:81:b3:1f:8d:20:ce:74:9d:93:b5:84:f0:81:49:17:10:
85:16:23:5a:51:ea:bd:51:c2:23:72:f7:06:8f:9f:41:5b:10:
6b:25:35:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvLCWXxwFxWL0MAbnVYztkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YzZhZDcxMDVhMGU5N2UxOTJmMGU4OGU2NjgxOGFiNjBm
N2RlYzgwHhcNMjUwNjE0MTYwMDUzWhcNMjUwNjE1MTYwMDUzWjAzMTEwLwYDVQQD
EygxODNlMzZkMjlkYTBkNjA5MjVlY2M4MTEzYmI2NmQ0Nzg3ZGMzMDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthNTJcpD5oS97a9QR4x5e7d/FnbK
uxvGhUb26Wp669C4T32+JWJcmBMjI4iqdxXmbPisKLO/6bk2ZYNntBpIeDCtYH2N
N2KMzsdq7Lo76/ODOVxKI+vthUHu8J/3ivOMCId7cTq5AITGIRfzjDHToDa0iW5N
VKXWXBca5d44PtS7tqUYcNgf0eCbYJ1b9FGBVAqZVcDD9GjO0nUVj3+HFGKGuu+f
X5xkagTHPG+5IUcIlUWDd34+dPdK373mN30dlPIdPlCZPiQTaWg+m3Ckm47k0P03
CrsT1JStjnw+R0v9infvtAy/2daheJFq0xK7Dvko/giJaXKwRMU2s4wyWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBg+NtKdoNYJJezIETu2bUeH3DCTMB8GA1UdIwQY
MBaAFKXGrXEFoOl+GS8OiOZoGKtg997IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGNhdGNRV2c2WDRaTHc2STVtZ1lxMkQzM3NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni83YTBhYTItZjk5Yi00MTg1LThmMjQt
MTY0NmM2N2Y0Mjk0LzEvcGNhdGNRV2c2WDRaTHc2STVtZ1lxMkQzM3NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni83YTBhYTItZjk5Yi00MTg1LThmMjQtMTY0NmM2N2Y0Mjk0
LzEvcGNhdGNRV2c2WDRaTHc2STVtZ1lxMkQzM3NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArR2JHzV3
y66R0ifTyS6qmvdzYZmW1Sa3UFiIdHbFZk+U+LKCyiEX+woGepm85zL1XMUuzfg0
EtVHMKkVf1cg0fJDdsn0WGpnPS2dOO3GOmKSCuoLLIkcHEhCVlOOReBpyBIa1X2W
qite1d1+hvaI8BRcPbTrDD4jP0aC+NLpMfXwiDLTC2vGFkUUOCiccOCGN9ukGVvP
lu0EO7uTaBRfsoIoaJjQ3YxLabW2MSM6WBBEw8xOLByL9U0Uat60k+apxYzSkqPY
ZhN+MepSSVySgir1kKt1G5DxYYOBsx+NIM50nZO1hPCBSRcQhRYjWlHqvVHCI3L3
Bo+fQVsQayU1FA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:19:05 2025 by rpki-client