Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
File: PD9FAh1us0CkKy5d0fv3IaGmbWE.mft (raw, json)
Hash identifier: CMOBfClInXr7Q+GcnVep81BYwBdGOCILdpuVOPT8JME=
Subject key identifier: 22:6B:81:18:B3:48:BF:0B:36:E4:9E:C1:28:F6:2D:6A:16:5E:49:4F
Authority key identifier: 3C:3F:45:02:1D:6E:B3:40:A4:2B:2E:5D:D1:FB:F7:21:A1:A6:6D:61
Certificate issuer: /CN=3c3f45021d6eb340a42b2e5dd1fbf721a1a66d61
Certificate serial: 01987419551294FCC585FE3956E0AB4A2EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
Manifest number: 0CFE
Signing time: Mon 04 Aug 2025 08:01:13 +0000
Manifest this update: Mon 04 Aug 2025 08:01:13 +0000
Manifest next update: Tue 05 Aug 2025 08:01:13 +0000
Files and hashes: 1: PD9FAh1us0CkKy5d0fv3IaGmbWE.crl (hash: y5YFRoKrFP4JmXRlIhz+B9Kg8qsnTmKQc49QMLw3Ipw=)
2: x9hUxJfn47T_kDyiFQOIzJ-cz6A.roa (hash: xdaaD+GtntD/xfR79byZL40UTK4Nd3mN7SfVEUnzNx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:55:12:94:fc:c5:85:fe:39:56:e0:ab:4a:2e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c3f45021d6eb340a42b2e5dd1fbf721a1a66d61
Validity
Not Before: Aug 4 08:01:13 2025 GMT
Not After : Aug 5 08:01:13 2025 GMT
Subject: CN=226b8118b348bf0b36e49ec128f62d6a165e494f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:78:99:72:3c:00:dc:c7:bf:6d:ea:e0:93:67:
c0:f4:c4:5c:34:8b:26:cc:14:8f:31:99:6f:17:5b:
73:13:e2:24:8d:ec:ce:87:03:55:41:65:cb:57:13:
d0:e5:13:a8:50:51:d6:49:27:b7:17:84:3b:d7:c1:
33:82:de:2c:8d:89:50:45:9d:aa:f4:e5:04:33:4f:
65:77:87:88:d2:fd:14:51:98:a1:29:45:22:ae:ff:
ea:ef:b5:7e:aa:47:16:2f:24:3c:a8:ab:94:fa:ee:
3a:98:98:82:c3:26:46:61:64:e3:6d:57:da:2b:ec:
27:f4:16:2e:8f:cf:7f:f4:ca:11:66:11:25:f5:e5:
3d:03:d7:1b:d2:04:54:cd:84:0c:fc:3a:d5:eb:7d:
3a:c0:38:81:cd:be:7c:6b:78:07:93:64:67:5a:43:
4a:87:4d:78:91:67:b0:42:0b:1d:1c:73:ae:47:e7:
91:ab:ce:e0:1e:0d:8e:6d:d1:da:b8:74:cc:c0:ad:
56:79:a9:08:bc:cd:91:5d:71:8b:f5:74:4f:3e:0e:
90:44:45:52:37:9f:ec:70:1c:16:2b:b5:47:f1:d5:
0c:c1:4c:b4:da:05:37:c7:fc:a6:2b:03:8c:60:e9:
47:31:55:f9:f8:3c:29:b6:0d:42:a1:2c:ad:77:cc:
57:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6B:81:18:B3:48:BF:0B:36:E4:9E:C1:28:F6:2D:6A:16:5E:49:4F
X509v3 Authority Key Identifier:
keyid:3C:3F:45:02:1D:6E:B3:40:A4:2B:2E:5D:D1:FB:F7:21:A1:A6:6D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:52:dc:4e:20:8e:2a:6b:ef:e6:43:aa:7a:38:01:52:c2:15:
b0:c9:71:d6:d9:80:31:79:c2:7f:de:e3:c8:51:77:0c:a5:1e:
da:e0:e9:65:dc:ed:f9:59:20:01:24:19:20:80:1f:8f:b6:48:
d4:ac:b5:62:83:52:e8:37:74:9e:fa:dc:d6:f9:0e:c1:72:14:
55:4d:25:e6:29:f9:f6:6a:52:ff:7c:38:fb:bd:9b:05:dd:99:
bb:bc:e7:1c:33:6a:bb:ad:21:d1:f8:9f:69:92:33:6a:da:b5:
00:1e:42:20:d2:c6:60:b8:b9:1e:76:d9:7f:0a:ef:db:c7:96:
36:12:4b:44:3b:29:50:67:cd:ba:d4:b7:95:1d:a4:1c:bc:88:
97:fe:b2:40:67:33:28:d0:29:90:b1:03:75:93:29:33:ee:6c:
c7:14:38:2b:15:76:24:45:81:49:ec:00:5b:e0:53:97:64:53:
b3:94:c9:84:60:be:a3:19:26:b9:59:b8:5b:4c:b7:79:2d:90:
d9:f5:01:15:78:f5:90:29:a0:02:18:7b:bf:0f:3a:ae:0f:57:
e6:d1:53:76:b7:9c:30:b2:f9:5b:c5:b6:82:8a:7b:12:c0:19:
fa:a4:a1:91:6b:ca:ff:ef:41:12:b4:27:78:0a:f2:23:2c:98:
b8:bd:20:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GVUSlPzFhf45VuCrSi65MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjM2Y0NTAyMWQ2ZWIzNDBhNDJiMmU1ZGQxZmJmNzIxYTFh
NjZkNjEwHhcNMjUwODA0MDgwMTEzWhcNMjUwODA1MDgwMTEzWjAzMTEwLwYDVQQD
EygyMjZiODExOGIzNDhiZjBiMzZlNDllYzEyOGY2MmQ2YTE2NWU0OTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXiZcjwA3Me/bergk2fA9MRcNIsm
zBSPMZlvF1tzE+IkjezOhwNVQWXLVxPQ5ROoUFHWSSe3F4Q718Ezgt4sjYlQRZ2q
9OUEM09ld4eI0v0UUZihKUUirv/q77V+qkcWLyQ8qKuU+u46mJiCwyZGYWTjbVfa
K+wn9BYuj89/9MoRZhEl9eU9A9cb0gRUzYQM/DrV6306wDiBzb58a3gHk2RnWkNK
h014kWewQgsdHHOuR+eRq87gHg2ObdHauHTMwK1WeakIvM2RXXGL9XRPPg6QREVS
N5/scBwWK7VH8dUMwUy02gU3x/ymKwOMYOlHMVX5+Dwptg1CoSytd8xXWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJrgRizSL8LNuSewSj2LWoWXklPMB8GA1UdIwQY
MBaAFDw/RQIdbrNApCsuXdH79yGhpm1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEQ5RkFoMXVzMENrS3k1ZDBmdjNJYUdtYldFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8wNTI1N2UtMWU2Ny00MTU4LThhZGIt
NDdkNmU0YmFlMmNmLzEvUEQ5RkFoMXVzMENrS3k1ZDBmdjNJYUdtYldFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8wNTI1N2UtMWU2Ny00MTU4LThhZGItNDdkNmU0YmFlMmNm
LzEvUEQ5RkFoMXVzMENrS3k1ZDBmdjNJYUdtYldFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAClLcTiCO
Kmvv5kOqejgBUsIVsMlx1tmAMXnCf97jyFF3DKUe2uDpZdzt+VkgASQZIIAfj7ZI
1Ky1YoNS6Dd0nvrc1vkOwXIUVU0l5in59mpS/3w4+72bBd2Zu7znHDNqu60h0fif
aZIzatq1AB5CINLGYLi5HnbZfwrv28eWNhJLRDspUGfNutS3lR2kHLyIl/6yQGcz
KNApkLEDdZMpM+5sxxQ4KxV2JEWBSewAW+BTl2RTs5TJhGC+oxkmuVm4W0y3eS2Q
2fUBFXj1kCmgAhh7vw86rg9X5tFTdrecMLL5W8W2gop7EsAZ+qShkWvK/+9BErQn
eAryIyyYuL0gcw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:22 2025 by rpki-client