Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
File: pstoJGZQvVjCKirgCtBmF4qB628.mft (raw, json)
Hash identifier: 0K5hXqy6DQZVa6bZEN4grBW9Qh9dHJwi/03Qz0ihRpQ=
Subject key identifier: 61:E4:D7:4A:8A:59:B2:DF:1D:11:42:E0:A6:C5:F4:A4:9F:90:34:41
Authority key identifier: A6:CB:68:24:66:50:BD:58:C2:2A:2A:E0:0A:D0:66:17:8A:81:EB:6F
Certificate issuer: /CN=a6cb68246650bd58c22a2ae00ad066178a81eb6f
Certificate serial: 01988920F605BEDBFD6AAE5C1494849165C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
Manifest number: 0E9F
Signing time: Fri 08 Aug 2025 10:01:35 +0000
Manifest this update: Fri 08 Aug 2025 10:01:35 +0000
Manifest next update: Sat 09 Aug 2025 10:01:35 +0000
Files and hashes: 1: PUpMBlY3y3LiEyvtN3mwZr7fC6o.roa (hash: 83wzwEaj6Lu4SVxQ13wsJpRArhNJgziukBIbApzP3jM=)
2: pstoJGZQvVjCKirgCtBmF4qB628.crl (hash: XuPKOBYfEdJT+AvEydTzuG+hWR2SJ/4Sl85rGtnjjzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:20:f6:05:be:db:fd:6a:ae:5c:14:94:84:91:65:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6cb68246650bd58c22a2ae00ad066178a81eb6f
Validity
Not Before: Aug 8 10:01:35 2025 GMT
Not After : Aug 9 10:01:35 2025 GMT
Subject: CN=61e4d74a8a59b2df1d1142e0a6c5f4a49f903441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c4:50:67:d5:e0:04:30:01:94:96:ac:ee:06:
54:2f:81:8b:ab:27:b4:cc:a6:fc:4d:8c:3c:e6:d8:
31:a1:d6:73:f5:cf:b0:e4:4e:a3:4f:d5:49:15:34:
e3:43:31:5f:44:72:1c:5e:81:a3:fb:91:8c:9b:dc:
28:25:55:da:a0:84:07:d8:c8:7c:03:df:0b:49:b4:
32:12:73:69:18:45:14:a6:04:a3:14:91:62:4a:f7:
7a:48:a5:63:9a:a3:fb:d0:3b:99:a0:58:c4:5e:c1:
12:7a:1c:b3:40:83:86:4c:70:ad:42:f1:b8:87:03:
60:03:6d:c6:31:e1:a2:06:89:b9:7a:8b:30:80:4d:
4b:12:b2:e2:6e:db:0f:45:64:0d:68:dc:96:78:ba:
4f:bb:33:31:3b:28:b3:38:c8:8e:7f:c7:a7:12:0d:
f6:19:63:63:e0:64:22:95:bb:ac:3f:c6:d2:1d:16:
ec:ed:a7:c4:47:f8:c2:f9:1f:fa:12:4e:84:b7:9f:
e4:19:8f:d9:21:4b:dd:19:10:5a:33:af:d4:0e:29:
69:14:67:43:10:55:59:14:6a:9a:94:09:92:d1:2f:
c3:5f:f6:21:51:31:c0:4d:64:56:1b:e7:fb:eb:7a:
31:6a:28:a9:d4:bf:a2:d1:dd:07:c0:24:6b:ba:54:
65:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E4:D7:4A:8A:59:B2:DF:1D:11:42:E0:A6:C5:F4:A4:9F:90:34:41
X509v3 Authority Key Identifier:
keyid:A6:CB:68:24:66:50:BD:58:C2:2A:2A:E0:0A:D0:66:17:8A:81:EB:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:54:f2:3a:f4:aa:16:12:20:07:31:62:65:79:24:19:a6:a1:
d1:b5:50:cc:04:26:cd:5e:eb:28:d7:65:75:93:04:1a:b3:e1:
b0:e4:04:35:9e:7e:19:29:dd:84:79:46:47:6d:14:db:d9:cf:
31:3f:f5:bc:57:96:5d:ea:cf:8e:ba:bd:d9:ea:7d:ad:96:0f:
45:d2:30:63:f6:92:f4:37:37:fe:5a:ae:37:b5:e8:f0:33:9e:
08:a2:ad:79:f0:0f:96:47:a6:5d:ff:45:1b:eb:01:ce:99:ac:
91:8a:88:b5:1e:6f:d1:8f:52:f3:9e:31:34:7d:c5:e2:c0:c0:
ca:73:68:39:d2:bd:2f:9d:45:f4:85:18:0e:53:0b:03:92:bb:
79:93:59:05:4c:45:9c:b4:fd:d6:f3:48:f2:fa:09:32:84:2a:
90:ca:86:9d:55:74:0b:5c:8d:63:c8:e7:a3:f2:08:ec:d3:9a:
a3:6f:bf:20:35:22:4e:3f:22:d6:28:27:e0:87:39:0d:7e:e6:
a8:69:b7:5a:11:16:40:db:6d:04:36:c9:5d:f1:1f:b1:ca:cd:
48:30:1b:ff:7e:f0:bc:67:40:17:c8:d9:41:3e:b3:0b:c3:e5:
80:c1:41:1e:10:c2:18:2d:00:c0:48:4e:c4:af:2f:50:ed:4f:
cb:28:24:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiJIPYFvtv9aq5cFJSEkWXCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2Y2I2ODI0NjY1MGJkNThjMjJhMmFlMDBhZDA2NjE3OGE4
MWViNmYwHhcNMjUwODA4MTAwMTM1WhcNMjUwODA5MTAwMTM1WjAzMTEwLwYDVQQD
Eyg2MWU0ZDc0YThhNTliMmRmMWQxMTQyZTBhNmM1ZjRhNDlmOTAzNDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMRQZ9XgBDABlJas7gZUL4GLqye0
zKb8TYw85tgxodZz9c+w5E6jT9VJFTTjQzFfRHIcXoGj+5GMm9woJVXaoIQH2Mh8
A98LSbQyEnNpGEUUpgSjFJFiSvd6SKVjmqP70DuZoFjEXsESehyzQIOGTHCtQvG4
hwNgA23GMeGiBom5eoswgE1LErLibtsPRWQNaNyWeLpPuzMxOyizOMiOf8enEg32
GWNj4GQilbusP8bSHRbs7afER/jC+R/6Ek6Et5/kGY/ZIUvdGRBaM6/UDilpFGdD
EFVZFGqalAmS0S/DX/YhUTHATWRWG+f763oxaiip1L+i0d0HwCRrulRl6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHk10qKWbLfHRFC4KbF9KSfkDRBMB8GA1UdIwQY
MBaAFKbLaCRmUL1Ywioq4ArQZheKgetvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHN0b0pHWlF2VmpDS2lyZ0N0Qm1GNHFCNjI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9iNjBkNTAtNTUyYS00NGFmLThiYTUt
MzZlNGZiNTZmZGI0LzEvcHN0b0pHWlF2VmpDS2lyZ0N0Qm1GNHFCNjI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9iNjBkNTAtNTUyYS00NGFmLThiYTUtMzZlNGZiNTZmZGI0
LzEvcHN0b0pHWlF2VmpDS2lyZ0N0Qm1GNHFCNjI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG1TyOvSq
FhIgBzFiZXkkGaah0bVQzAQmzV7rKNdldZMEGrPhsOQENZ5+GSndhHlGR20U29nP
MT/1vFeWXerPjrq92ep9rZYPRdIwY/aS9Dc3/lquN7Xo8DOeCKKtefAPlkemXf9F
G+sBzpmskYqItR5v0Y9S854xNH3F4sDAynNoOdK9L51F9IUYDlMLA5K7eZNZBUxF
nLT91vNI8voJMoQqkMqGnVV0C1yNY8jno/II7NOao2+/IDUiTj8i1ign4Ic5DX7m
qGm3WhEWQNttBDbJXfEfscrNSDAb/37wvGdAF8jZQT6zC8PlgMFBHhDCGC0AwEhO
xK8vUO1Pyygkaw==
-----END CERTIFICATE-----
Generated at Fri Aug 8 19:22:16 2025 by rpki-client