
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
File: PIbsMh5y_UbJjcwM18cLytVX1Zw.mft (raw, json)
Hash identifier: 3QBCamZdhdibWKo6bKqW036ex5L2MFeUPAO5sJbrAzc=
Subject key identifier: 66:D8:D4:16:9A:96:81:99:36:7F:AA:CD:FA:F4:B8:12:94:9A:EF:EE
Authority key identifier: 3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C
Certificate issuer: /CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c
Certificate serial: 01987BD2D7C318D85A0DF8AE05098F09C4DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
Manifest number: 161E
Signing time: Tue 05 Aug 2025 20:01:11 +0000
Manifest this update: Tue 05 Aug 2025 20:01:11 +0000
Manifest next update: Wed 06 Aug 2025 20:01:11 +0000
Files and hashes: 1: PIbsMh5y_UbJjcwM18cLytVX1Zw.crl (hash: TOYjXjwUjFgz/rqoUIDLb6BwankADT6kxZewFQ4wVPo=)
2: XgpSQjhhfxwk9vZfnDmQ4hugM38.roa (hash: 0VqbQTYbejzGPg6sOJbQNqmXP31XYN5qUoi8IUVN5jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:d7:c3:18:d8:5a:0d:f8:ae:05:09:8f:09:c4:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c
Validity
Not Before: Aug 5 20:01:11 2025 GMT
Not After : Aug 6 20:01:11 2025 GMT
Subject: CN=66d8d4169a968199367faacdfaf4b812949aefee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5d:3a:f7:51:df:87:63:ac:d5:38:cc:c2:21:
cf:e5:23:a8:03:43:74:e3:a9:38:c2:f3:f8:75:97:
ac:3a:2f:15:56:f2:32:d7:43:61:8c:d3:32:32:b3:
24:c9:17:05:2a:fe:be:c2:65:78:b7:19:41:6b:b0:
ef:7f:43:26:e3:ee:f3:46:03:d7:51:aa:5c:1e:78:
c5:50:f7:42:91:df:c2:38:26:77:2a:27:50:78:af:
1b:fa:30:c4:e2:07:b1:59:f1:aa:1c:2f:16:c2:64:
70:ae:bd:ea:6c:5b:ab:fe:04:b4:88:57:42:c5:11:
0f:c0:11:ec:b8:11:9f:c4:62:3a:17:b4:5f:ac:3f:
02:e2:88:c3:1f:d1:d4:d1:b5:3a:f9:e5:6d:72:19:
77:db:07:7e:8f:8a:7e:76:2c:86:a9:59:ac:0d:92:
48:49:96:fe:76:ca:bb:bc:ac:82:b0:a6:88:08:a6:
ce:58:66:e0:a8:23:82:3c:fa:46:08:e5:87:5b:f5:
ff:1b:f7:c2:b2:17:5c:6f:24:bc:ef:45:a2:21:2b:
b0:18:85:27:66:95:c0:5e:9a:72:fd:e3:ed:4b:56:
a1:18:3f:1e:cf:22:70:8f:08:7d:eb:51:d8:80:ac:
73:b2:d8:8b:45:ba:04:c2:49:1e:0b:9b:b1:09:a5:
0f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D8:D4:16:9A:96:81:99:36:7F:AA:CD:FA:F4:B8:12:94:9A:EF:EE
X509v3 Authority Key Identifier:
keyid:3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d9:38:81:9d:b6:26:f9:43:b0:d3:57:c2:82:20:e4:13:69:
90:70:cc:66:08:11:16:94:4d:0e:77:eb:13:8d:bc:d0:8e:c5:
80:34:7f:6f:19:b8:39:98:47:df:17:56:0d:2d:11:5b:31:0d:
e1:dc:92:38:15:c6:25:ce:6b:c5:12:c7:7a:e1:a3:35:b3:86:
0a:8c:98:17:b9:13:29:fe:c1:ec:e4:f4:8e:28:28:8a:df:80:
f5:b4:5a:d1:25:b9:c5:cb:03:01:82:33:ab:71:78:f4:0b:e8:
a6:f3:82:43:23:45:cb:70:52:4c:b8:76:5f:c1:92:bf:0d:99:
f2:41:56:37:76:c9:4e:79:d2:9a:79:0b:44:01:80:03:ba:a1:
8f:37:36:ef:38:ad:54:fb:0f:b4:8b:17:25:de:03:42:9b:5d:
c4:d0:a8:bb:69:dd:0f:b9:17:5c:f5:ec:9c:b1:4e:18:34:cb:
5f:05:28:11:3e:a2:0c:13:ee:85:7e:3b:19:c9:c7:2c:53:74:
5d:aa:58:26:c3:c8:01:9c:63:55:8c:08:d1:8a:b4:9c:7f:73:
3d:d4:5b:6c:1f:8b:10:a0:c1:a9:14:46:23:3b:70:36:ac:43:
1c:bb:d5:98:ab:ba:3e:50:9c:4d:09:26:2f:ef:2d:75:d6:96:
64:13:58:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:51:21 2025 by rpki-client