Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
File: pKAVstPT6Qm2Avn91Pb29hiHPFg.mft (raw, json)
Hash identifier: b4MolrGR6A/edR3dcpDdPYWajAndmSl09FMZNOCHTx4=
Subject key identifier: 08:4A:30:32:7D:B2:EE:20:D2:0E:46:5A:8E:77:90:2D:78:94:17:4A
Authority key identifier: A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58
Certificate issuer: /CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58
Certificate serial: 0198819E41D16D3EA39AF73E5FCD47691B05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
Manifest number: 0CB3
Signing time: Wed 06 Aug 2025 23:01:29 +0000
Manifest this update: Wed 06 Aug 2025 23:01:29 +0000
Manifest next update: Thu 07 Aug 2025 23:01:29 +0000
Files and hashes: 1: 2Qr4P6TtNG8XIKkXI_c0cLDbaUc.roa (hash: MYKMpqtjE4XkNANAGzzsCBedfNhF2YMsBN5+jKHyoYI=)
2: pKAVstPT6Qm2Avn91Pb29hiHPFg.crl (hash: A7lY3VktN22yY9/LwzXsEjGI+y11UUmYAxab8iz25rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9e:41:d1:6d:3e:a3:9a:f7:3e:5f:cd:47:69:1b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58
Validity
Not Before: Aug 6 23:01:29 2025 GMT
Not After : Aug 7 23:01:29 2025 GMT
Subject: CN=084a30327db2ee20d20e465a8e77902d7894174a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bf:27:4e:df:7e:10:89:ff:c9:67:6c:3d:0d:
88:d5:f4:7b:fb:c6:2e:df:fe:c3:80:98:8d:14:0b:
49:17:d0:5e:ed:42:db:0e:7f:9b:ac:68:ff:b0:9d:
69:63:4a:3e:d6:bd:f6:3b:a7:05:88:ee:f3:80:f4:
56:c8:98:2d:54:61:7c:6a:16:bb:a8:2b:56:2d:96:
06:aa:86:d9:0c:fd:8f:19:c4:ce:ad:ce:5f:32:e6:
f3:fd:9b:fe:5c:0a:0c:8f:d4:c3:ee:c6:84:65:9b:
3c:cf:21:d3:5e:1e:af:2a:00:8c:39:47:c9:03:b0:
d3:2c:e9:7e:25:96:74:c7:b0:0f:ed:f1:bf:2a:a8:
2c:d3:b3:92:31:92:63:84:48:c6:6f:2f:0c:15:54:
0d:ef:7a:a4:cd:aa:46:07:af:8f:0f:d4:05:a9:bd:
1c:eb:69:bb:1a:da:32:57:c4:36:50:e5:7a:ea:0e:
fa:a6:33:46:84:88:56:af:20:81:57:93:0d:d0:d7:
81:b2:8a:e8:2d:c1:3e:38:9b:46:55:61:be:41:e6:
de:00:1a:0e:44:19:70:78:88:af:51:46:da:47:b3:
90:06:1c:0b:89:77:bc:a1:ce:4b:f1:19:0d:f8:e9:
24:83:60:a9:26:b8:d5:fa:e7:07:69:05:f0:82:b4:
5b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4A:30:32:7D:B2:EE:20:D2:0E:46:5A:8E:77:90:2D:78:94:17:4A
X509v3 Authority Key Identifier:
keyid:A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:57:c5:a8:c1:75:58:34:84:fd:70:f9:e3:a4:bd:fd:0b:c6:
df:23:bf:91:d7:1e:11:55:dc:94:45:26:65:94:a0:06:5d:1b:
49:b9:cd:a2:f4:3d:8f:f2:69:c7:e0:e7:79:31:e9:4b:eb:43:
c8:56:d4:79:dc:e9:50:56:54:02:51:f7:b0:30:97:4b:19:52:
21:ac:91:86:28:78:54:77:f6:88:25:e6:1f:b2:e9:96:a5:00:
09:cc:58:98:66:c3:b3:e5:3f:f0:19:60:8e:e0:37:e4:89:03:
6b:ea:1e:4d:24:bf:55:fe:0f:38:e5:ff:8f:df:5b:32:e0:f1:
0c:8a:c5:4a:00:45:a1:9b:ef:d0:1d:f0:87:da:b0:78:9f:90:
bb:c5:30:80:d4:9a:fc:e4:7c:30:33:fa:b2:4e:6c:7b:dc:ab:
e4:9e:b0:3f:f5:36:d6:30:db:20:f4:e4:8f:84:32:10:43:58:
76:df:d8:32:81:19:0e:b7:7e:27:94:b9:16:46:12:e1:bc:ea:
86:20:b8:43:41:1b:e0:51:20:c2:61:1e:34:ce:ae:20:89:71:
87:af:db:01:19:cd:d1:9f:88:99:97:bb:e8:c2:07:de:1c:05:
93:40:ed:04:08:6a:98:ce:c7:00:1c:c0:0c:2e:56:0b:ca:c3:
6e:f5:bd:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBnkHRbT6jmvc+X81HaRsFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YTAxNWIyZDNkM2U5MDliNjAyZjlmZGQ0ZjZmNmY2MTg4
NzNjNTgwHhcNMjUwODA2MjMwMTI5WhcNMjUwODA3MjMwMTI5WjAzMTEwLwYDVQQD
EygwODRhMzAzMjdkYjJlZTIwZDIwZTQ2NWE4ZTc3OTAyZDc4OTQxNzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr8nTt9+EIn/yWdsPQ2I1fR7+8Yu
3/7DgJiNFAtJF9Be7ULbDn+brGj/sJ1pY0o+1r32O6cFiO7zgPRWyJgtVGF8aha7
qCtWLZYGqobZDP2PGcTOrc5fMubz/Zv+XAoMj9TD7saEZZs8zyHTXh6vKgCMOUfJ
A7DTLOl+JZZ0x7AP7fG/Kqgs07OSMZJjhEjGby8MFVQN73qkzapGB6+PD9QFqb0c
62m7GtoyV8Q2UOV66g76pjNGhIhWryCBV5MN0NeBsoroLcE+OJtGVWG+QebeABoO
RBlweIivUUbaR7OQBhwLiXe8oc5L8RkN+Okkg2CpJrjV+ucHaQXwgrRbtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAhKMDJ9su4g0g5GWo53kC14lBdKMB8GA1UdIwQY
MBaAFKSgFbLT0+kJtgL5/dT29vYYhzxYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEtBVnN0UFQ2UW0yQXZuOTFQYjI5aGlIUEZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iOWJkYTMtYjYxMS00MzM4LWJiZTgt
YTdkZDE2MzQzMjk3LzEvcEtBVnN0UFQ2UW0yQXZuOTFQYjI5aGlIUEZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iOWJkYTMtYjYxMS00MzM4LWJiZTgtYTdkZDE2MzQzMjk3
LzEvcEtBVnN0UFQ2UW0yQXZuOTFQYjI5aGlIUEZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUlfFqMF1
WDSE/XD546S9/QvG3yO/kdceEVXclEUmZZSgBl0bSbnNovQ9j/Jpx+DneTHpS+tD
yFbUedzpUFZUAlH3sDCXSxlSIayRhih4VHf2iCXmH7LplqUACcxYmGbDs+U/8Blg
juA35IkDa+oeTSS/Vf4POOX/j99bMuDxDIrFSgBFoZvv0B3wh9qweJ+Qu8UwgNSa
/OR8MDP6sk5se9yr5J6wP/U21jDbIPTkj4QyEENYdt/YMoEZDrd+J5S5FkYS4bzq
hiC4Q0Eb4FEgwmEeNM6uIIlxh6/bARnN0Z+ImZe76MIH3hwFk0DtBAhqmM7HABzA
DC5WC8rDbvW9qg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:31:28 2025 by rpki-client