Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
File: PIbsMh5y_UbJjcwM18cLytVX1Zw.mft (raw, json)
Hash identifier: sd+OnzaJM3xa142JRHmUpr1zd5+z9SD8EMLhkwMy64A=
Subject key identifier: 9F:A7:88:28:7F:C5:73:ED:B8:82:80:23:A9:D9:77:B6:29:C7:D2:35
Authority key identifier: 3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C
Certificate issuer: /CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c
Certificate serial: 019769977765DBE705FC53799EB412FBB974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
Manifest number: 1590
Signing time: Fri 13 Jun 2025 14:00:23 +0000
Manifest this update: Fri 13 Jun 2025 14:00:23 +0000
Manifest next update: Sat 14 Jun 2025 14:00:23 +0000
Files and hashes: 1: PIbsMh5y_UbJjcwM18cLytVX1Zw.crl (hash: PCfTgT06SryLctLjBwZijkI9VIXGAi3FRfk2WpZxYJ8=)
2: XgpSQjhhfxwk9vZfnDmQ4hugM38.roa (hash: 0VqbQTYbejzGPg6sOJbQNqmXP31XYN5qUoi8IUVN5jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:77:65:db:e7:05:fc:53:79:9e:b4:12:fb:b9:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c
Validity
Not Before: Jun 13 14:00:23 2025 GMT
Not After : Jun 14 14:00:23 2025 GMT
Subject: CN=9fa788287fc573edb8828023a9d977b629c7d235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:48:34:bf:8b:5f:d3:95:2b:eb:42:29:48:12:
e8:c2:5c:5c:18:7c:cf:18:5d:8b:e3:61:04:b4:f1:
29:0b:c4:9c:99:55:8b:fe:2b:e1:35:4d:a3:b9:e3:
67:42:35:19:f2:d2:ec:76:34:d9:c2:42:40:98:f8:
d7:8e:e2:b5:57:a6:da:89:f5:48:ea:d2:d9:18:30:
52:77:6d:3d:54:ef:97:c9:6f:33:da:d9:d2:03:57:
31:d2:29:81:ba:8c:60:75:f5:3d:4c:b9:1d:12:49:
6a:e3:b1:61:87:64:4e:8d:9e:c5:9a:f8:5c:4a:d0:
f5:d1:09:6e:06:2a:eb:22:eb:55:da:cd:d9:eb:31:
85:1c:97:13:3b:b3:88:9e:00:6c:88:84:09:ab:fa:
8f:4c:66:de:d9:9a:ba:2d:9d:0b:1b:85:dc:5b:dd:
4f:e7:02:6c:22:89:23:19:e1:64:7b:f3:3a:42:a2:
92:0f:9e:f4:58:c3:31:2a:28:73:67:52:22:c5:54:
80:ef:5f:3a:0b:c9:69:6c:1e:77:e7:f3:07:86:60:
9a:ee:0c:5c:3f:a1:6d:b8:6e:0f:0e:06:3c:e4:4c:
78:e4:9a:89:42:84:45:ab:73:ec:4e:36:45:a2:55:
90:d0:16:7a:de:8c:4c:cc:3f:da:28:cf:e0:29:db:
b9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A7:88:28:7F:C5:73:ED:B8:82:80:23:A9:D9:77:B6:29:C7:D2:35
X509v3 Authority Key Identifier:
keyid:3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:67:e9:44:32:ae:8b:36:d7:59:a4:87:2a:a0:1d:1d:bb:bd:
b1:c6:d7:f8:25:27:d2:9c:1b:bb:ca:48:ed:0f:4e:5c:ba:75:
01:49:06:2a:f8:ee:92:c7:f6:86:6e:cd:7f:b4:77:7f:c0:82:
7c:89:09:cb:95:b4:45:7a:a8:d3:e7:42:5e:95:be:95:7b:40:
a1:25:8c:9d:20:26:67:0d:d1:98:82:35:0b:cc:30:99:9d:cb:
11:c7:47:ee:6c:f7:21:11:2f:78:18:df:a5:6a:72:3e:47:7f:
c3:0e:bb:89:5d:ca:b0:67:21:e5:3d:59:90:5a:2c:18:e1:6c:
cf:86:5a:ad:e5:42:75:38:1f:2e:65:00:52:6f:15:ab:70:7e:
d7:67:d0:5b:2f:35:b9:38:24:cc:5a:b9:ce:df:e2:76:0b:17:
5f:70:25:f9:2c:74:f3:fc:83:90:03:e3:26:51:d1:34:ec:69:
8e:92:68:fa:b7:ff:60:bb:1d:35:ee:d9:67:12:1b:30:11:8a:
72:ce:bd:02:81:b0:1a:56:c7:da:cc:49:59:76:d5:ee:2c:18:
68:6d:0d:ac:ea:90:4d:d1:c0:ca:21:69:a9:3a:e9:fa:ff:0d:
9a:de:1f:eb:1c:9e:8b:8f:71:a5:17:ce:40:95:a9:99:45:bd:
83:d8:c4:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpl3dl2+cF/FN5nrQS+7l0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjODZlYzMyMWU3MmZkNDZjOThkY2MwY2Q3YzcwYmNhZDU1
N2Q1OWMwHhcNMjUwNjEzMTQwMDIzWhcNMjUwNjE0MTQwMDIzWjAzMTEwLwYDVQQD
Eyg5ZmE3ODgyODdmYzU3M2VkYjg4MjgwMjNhOWQ5NzdiNjI5YzdkMjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskg0v4tf05Ur60IpSBLowlxcGHzP
GF2L42EEtPEpC8ScmVWL/ivhNU2jueNnQjUZ8tLsdjTZwkJAmPjXjuK1V6baifVI
6tLZGDBSd209VO+XyW8z2tnSA1cx0imBuoxgdfU9TLkdEklq47Fhh2ROjZ7Fmvhc
StD10QluBirrIutV2s3Z6zGFHJcTO7OIngBsiIQJq/qPTGbe2Zq6LZ0LG4XcW91P
5wJsIokjGeFke/M6QqKSD570WMMxKihzZ1IixVSA7186C8lpbB535/MHhmCa7gxc
P6FtuG4PDgY85Ex45JqJQoRFq3PsTjZFolWQ0BZ63oxMzD/aKM/gKdu5cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+niCh/xXPtuIKAI6nZd7Ypx9I1MB8GA1UdIwQY
MBaAFDyG7DIecv1GyY3MDNfHC8rVV9WcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUElic01oNXlfVWJKamN3TTE4Y0x5dFZYMVp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi81YzBmZDItNjc0My00NjgyLTk2N2It
NWYxNWJlYWZhOWIxLzEvUElic01oNXlfVWJKamN3TTE4Y0x5dFZYMVp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi81YzBmZDItNjc0My00NjgyLTk2N2ItNWYxNWJlYWZhOWIx
LzEvUElic01oNXlfVWJKamN3TTE4Y0x5dFZYMVp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc2fpRDKu
izbXWaSHKqAdHbu9scbX+CUn0pwbu8pI7Q9OXLp1AUkGKvjuksf2hm7Nf7R3f8CC
fIkJy5W0RXqo0+dCXpW+lXtAoSWMnSAmZw3RmII1C8wwmZ3LEcdH7mz3IREveBjf
pWpyPkd/ww67iV3KsGch5T1ZkFosGOFsz4ZareVCdTgfLmUAUm8Vq3B+12fQWy81
uTgkzFq5zt/idgsXX3Al+Sx08/yDkAPjJlHRNOxpjpJo+rf/YLsdNe7ZZxIbMBGK
cs69AoGwGlbH2sxJWXbV7iwYaG0NrOqQTdHAyiFpqTrp+v8Nmt4f6xyei49xpRfO
QJWpmUW9g9jEcg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:28:19 2025 by rpki-client