Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
File: pJ0uULdziu0KzBoOwv7jAIAlWDg.mft (raw, json)
Hash identifier: wSbqCVyoqz1wxJ9uzblEWieH6AOeCyGC6xBMK2ZTnqE=
Subject key identifier: C9:7B:85:C9:A3:81:50:30:19:A4:4B:B9:C4:D7:DB:A1:DF:67:D2:11
Authority key identifier: A4:9D:2E:50:B7:73:8A:ED:0A:CC:1A:0E:C2:FE:E3:00:80:25:58:38
Certificate issuer: /CN=a49d2e50b7738aed0acc1a0ec2fee30080255838
Certificate serial: 01988A69E8B566DCB1BE4A4DB3816A5ED284
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
Manifest number: 0964
Signing time: Fri 08 Aug 2025 16:00:53 +0000
Manifest this update: Fri 08 Aug 2025 16:00:53 +0000
Manifest next update: Sat 09 Aug 2025 16:00:53 +0000
Files and hashes: 1: cGGNHHL2taAbcfw5rMUB84kQw_k.roa (hash: J56YjCbrct/bNrc5fidg1pLfrEEsu9MaAGzXOMhbxY8=)
2: pJ0uULdziu0KzBoOwv7jAIAlWDg.crl (hash: oQQ+psxi8wOXrZ43Fo9M/zrxiNZElurlY7lCIgfz6VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 16:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:69:e8:b5:66:dc:b1:be:4a:4d:b3:81:6a:5e:d2:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49d2e50b7738aed0acc1a0ec2fee30080255838
Validity
Not Before: Aug 8 16:00:53 2025 GMT
Not After : Aug 9 16:00:53 2025 GMT
Subject: CN=c97b85c9a381503019a44bb9c4d7dba1df67d211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cc:0c:89:de:9c:97:46:85:c2:f3:8d:8a:c2:
e4:37:77:b2:84:6c:5d:bf:89:17:27:84:af:f3:2b:
39:f9:a9:97:88:29:d3:14:cf:7c:fd:09:16:08:db:
bf:13:a9:44:b3:f3:f3:eb:8c:76:14:3f:cb:1d:eb:
81:4b:b9:8e:9b:3b:18:56:76:cc:30:35:1a:e7:1c:
b6:af:e9:8f:ad:ef:51:6f:83:ed:ff:47:d4:84:76:
e2:29:38:be:7a:29:64:ad:f3:ba:99:c7:c5:42:f3:
45:d7:76:38:f5:f1:59:cb:7d:a1:30:22:f7:33:83:
57:c0:24:b2:8b:b3:f0:8c:f3:2e:5e:df:32:4d:0e:
bb:89:13:5d:4a:f0:77:ac:33:30:0b:d7:00:dc:ce:
cb:b8:5a:98:86:f2:fa:4c:d7:91:bd:d1:79:d7:4c:
f4:80:4b:17:b0:80:70:96:3b:26:a2:96:34:ee:0c:
c9:ff:72:fe:f9:a1:1b:08:9b:c6:ee:b4:ff:94:1e:
3c:c9:92:3f:34:39:08:61:e9:65:a0:b1:36:98:5d:
b1:70:01:4c:94:33:a8:b5:89:ef:57:0c:08:1f:65:
29:08:25:3e:5a:e0:7d:61:ba:29:9e:8a:b8:bb:e3:
94:7e:77:0b:78:a8:eb:0a:4c:1e:fc:45:a8:db:84:
de:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7B:85:C9:A3:81:50:30:19:A4:4B:B9:C4:D7:DB:A1:DF:67:D2:11
X509v3 Authority Key Identifier:
keyid:A4:9D:2E:50:B7:73:8A:ED:0A:CC:1A:0E:C2:FE:E3:00:80:25:58:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:03:66:bc:93:c2:e6:ff:fe:a4:02:04:b9:65:73:77:0d:e0:
93:53:99:3d:02:af:10:c6:b1:66:a3:87:2b:8e:f7:a6:f1:c6:
9d:de:9a:68:48:b2:c9:78:6f:32:ab:b7:66:d4:6b:e4:eb:f4:
04:45:c1:4b:2e:b6:fb:6f:31:03:61:17:a9:96:d0:52:4c:87:
69:15:f4:39:a6:0e:aa:78:af:f0:79:0b:62:ac:fd:55:63:97:
70:16:e2:58:4e:bb:e2:de:68:48:3f:3c:33:73:36:5b:13:c2:
d1:b0:a6:63:1e:fe:98:05:8e:4d:97:4f:dd:43:d8:93:c7:bf:
bc:23:e8:a3:b5:2c:41:7f:f0:ab:de:f1:1f:8b:56:a4:64:ea:
d4:5c:e2:d4:70:e4:aa:cb:e0:81:41:f6:bb:49:ed:71:a8:61:
b9:59:71:ca:c7:30:42:7f:ef:01:50:71:1a:a9:65:13:f5:0b:
21:10:de:9a:10:8b:72:c9:91:73:61:f0:9a:97:47:1e:d5:9f:
f0:35:af:58:02:37:d0:bd:e1:76:b1:3f:92:b1:8a:fe:33:c7:
94:10:47:65:14:9e:5f:ae:c4:08:d6:ed:bb:3b:f9:1d:47:ab:
cd:ee:d1:07:7c:46:64:14:90:2a:07:e2:44:8c:42:81:bd:3f:
73:96:20:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiKaei1ZtyxvkpNs4FqXtKEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OWQyZTUwYjc3MzhhZWQwYWNjMWEwZWMyZmVlMzAwODAy
NTU4MzgwHhcNMjUwODA4MTYwMDUzWhcNMjUwODA5MTYwMDUzWjAzMTEwLwYDVQQD
EyhjOTdiODVjOWEzODE1MDMwMTlhNDRiYjljNGQ3ZGJhMWRmNjdkMjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8wMid6cl0aFwvONisLkN3eyhGxd
v4kXJ4Sv8ys5+amXiCnTFM98/QkWCNu/E6lEs/Pz64x2FD/LHeuBS7mOmzsYVnbM
MDUa5xy2r+mPre9Rb4Pt/0fUhHbiKTi+eilkrfO6mcfFQvNF13Y49fFZy32hMCL3
M4NXwCSyi7PwjPMuXt8yTQ67iRNdSvB3rDMwC9cA3M7LuFqYhvL6TNeRvdF510z0
gEsXsIBwljsmopY07gzJ/3L++aEbCJvG7rT/lB48yZI/NDkIYelloLE2mF2xcAFM
lDOotYnvVwwIH2UpCCU+WuB9Ybopnoq4u+OUfncLeKjrCkwe/EWo24TeowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMl7hcmjgVAwGaRLucTX26HfZ9IRMB8GA1UdIwQY
MBaAFKSdLlC3c4rtCswaDsL+4wCAJVg4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEowdVVMZHppdTBLekJvT3d2N2pBSUFsV0RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8zOTMyMTgtNDZlNS00NjhiLWI1OGIt
N2YzMzUyMjM0ZTIxLzEvcEowdVVMZHppdTBLekJvT3d2N2pBSUFsV0RnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8zOTMyMTgtNDZlNS00NjhiLWI1OGItN2YzMzUyMjM0ZTIx
LzEvcEowdVVMZHppdTBLekJvT3d2N2pBSUFsV0RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdgNmvJPC
5v/+pAIEuWVzdw3gk1OZPQKvEMaxZqOHK473pvHGnd6aaEiyyXhvMqu3ZtRr5Ov0
BEXBSy62+28xA2EXqZbQUkyHaRX0OaYOqniv8HkLYqz9VWOXcBbiWE674t5oSD88
M3M2WxPC0bCmYx7+mAWOTZdP3UPYk8e/vCPoo7UsQX/wq97xH4tWpGTq1Fzi1HDk
qsvggUH2u0ntcahhuVlxyscwQn/vAVBxGqllE/ULIRDemhCLcsmRc2HwmpdHHtWf
8DWvWAI30L3hdrE/krGK/jPHlBBHZRSeX67ECNbtuzv5HUerze7RB3xGZBSQKgfi
RIxCgb0/c5Ygow==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:09:48 2025 by rpki-client