Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
File: pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft (raw, json)
Hash identifier: uwVS+K/bRIJOyOyyQWt5OiAJQPI0tWNYawnbjezsIxw=
Subject key identifier: 5D:66:EB:C3:C3:0C:6B:10:A4:72:94:39:25:88:96:71:A0:4C:7C:0E
Authority key identifier: A4:33:E3:2A:C0:C6:FA:73:5A:6C:7B:E1:44:CF:A3:FC:29:7C:0B:98
Certificate issuer: /CN=a433e32ac0c6fa735a6c7be144cfa3fc297c0b98
Certificate serial: 01976BBD52ECCDDE34DEB87B3F509A1EBF9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 00:00:58 +0000
Manifest this update: Sat 14 Jun 2025 00:00:58 +0000
Manifest next update: Sun 15 Jun 2025 00:00:58 +0000
Files and hashes: 1: 1-y3mku53CxfcZTDAjLzjGLNjKug.roa (hash: tkrqALFJZS9oKOrZg8mNnpPdOdg26RzEKwv9Z2r59k4=)
2: pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl (hash: fpKdLFZgiWSUDOc5HNbjTtbh88DZhLbDhzY1fByK/Kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:52:ec:cd:de:34:de:b8:7b:3f:50:9a:1e:bf:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a433e32ac0c6fa735a6c7be144cfa3fc297c0b98
Validity
Not Before: Jun 14 00:00:58 2025 GMT
Not After : Jun 15 00:00:58 2025 GMT
Subject: CN=5d66ebc3c30c6b10a472943925889671a04c7c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e7:0a:9b:09:74:ec:eb:85:24:52:59:fd:8e:
2d:5f:61:04:6c:6c:06:23:3b:0a:39:22:76:3e:80:
c8:b5:5f:6e:d2:f2:bc:c1:44:8f:54:6e:8d:0f:8a:
38:6c:c8:10:74:ba:fa:6f:d3:ae:75:7f:05:1c:ef:
c7:b1:b7:40:4b:e0:ed:3d:3b:33:60:58:9f:b0:f5:
48:38:0f:71:22:db:4d:4d:6b:0f:4b:4b:06:19:61:
2f:f9:86:f5:15:24:32:5c:75:67:79:f7:b2:9b:d8:
33:02:5c:f5:a9:d8:88:91:89:5e:bc:1a:4b:a1:f8:
ad:83:17:e6:93:32:6f:d9:38:dc:f4:81:a7:71:00:
b5:02:2b:2b:7e:79:bd:a3:a8:8d:c4:d8:dc:d6:f9:
c8:1b:e2:fa:22:8f:3b:db:1a:92:be:e3:0d:c4:08:
01:03:03:0a:86:2b:e6:66:a7:6b:c0:52:2c:74:86:
18:94:24:4c:ff:27:2c:f7:61:53:de:46:2e:4b:af:
68:8a:8d:21:34:92:ab:8e:59:d5:5d:f5:a8:3a:f7:
9d:61:7d:c1:2a:c7:ed:fb:2d:d6:88:6b:b0:4b:f3:
e5:31:06:96:a8:c7:e7:33:36:54:b8:dd:79:c5:ec:
76:ca:f1:96:61:3e:99:4e:c8:1b:1c:10:76:48:3c:
de:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:66:EB:C3:C3:0C:6B:10:A4:72:94:39:25:88:96:71:A0:4C:7C:0E
X509v3 Authority Key Identifier:
keyid:A4:33:E3:2A:C0:C6:FA:73:5A:6C:7B:E1:44:CF:A3:FC:29:7C:0B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ba:94:54:bd:96:f9:3b:20:f0:fb:58:6f:e8:e8:45:68:69:
f9:37:8a:e9:63:59:70:0c:43:e1:2e:b4:a5:ab:70:a5:96:8e:
61:6d:b5:47:bb:30:c0:e7:98:4a:7e:c0:0f:99:9e:cb:14:a5:
c6:8d:6e:70:46:5c:4b:62:bc:93:c0:20:1c:0d:65:14:d0:cf:
60:67:f4:a4:80:dc:17:a6:ab:7c:cd:20:6f:c8:2a:ef:e0:3d:
d6:1e:27:aa:92:b4:b1:ca:bb:b9:63:d7:1f:50:ce:6c:82:aa:
27:13:62:c4:4c:b8:0c:80:0f:4d:a9:c4:f1:89:4c:91:45:f1:
7b:ab:46:a9:79:07:2f:3a:ba:2c:b5:a3:58:53:b5:ca:18:c6:
03:7c:a5:a6:e8:23:4f:ee:c1:8b:d3:9f:d4:75:b2:a5:3e:9a:
9a:26:d5:32:38:c0:e6:aa:2e:97:cf:92:15:1b:bb:89:b8:2a:
ad:8f:46:97:6a:31:f1:c5:79:41:ba:53:db:89:66:ed:d0:3f:
a0:92:a2:ac:71:9c:03:9a:5f:f2:7e:2f:2d:16:e0:0e:c8:1c:
dd:95:15:fd:e9:3a:9b:99:df:7b:74:4d:22:e2:11:c1:8a:c5:
2c:89:df:7e:d6:1b:f3:67:b4:d6:57:d2:8c:24:bf:86:c6:bd:
48:fb:78:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdrvVLszd403rh7P1CaHr+cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MzNlMzJhYzBjNmZhNzM1YTZjN2JlMTQ0Y2ZhM2ZjMjk3
YzBiOTgwHhcNMjUwNjE0MDAwMDU4WhcNMjUwNjE1MDAwMDU4WjAzMTEwLwYDVQQD
Eyg1ZDY2ZWJjM2MzMGM2YjEwYTQ3Mjk0MzkyNTg4OTY3MWEwNGM3YzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApucKmwl07OuFJFJZ/Y4tX2EEbGwG
IzsKOSJ2PoDItV9u0vK8wUSPVG6ND4o4bMgQdLr6b9OudX8FHO/HsbdAS+DtPTsz
YFifsPVIOA9xIttNTWsPS0sGGWEv+Yb1FSQyXHVnefeym9gzAlz1qdiIkYlevBpL
ofitgxfmkzJv2Tjc9IGncQC1Aisrfnm9o6iNxNjc1vnIG+L6Io872xqSvuMNxAgB
AwMKhivmZqdrwFIsdIYYlCRM/ycs92FT3kYuS69oio0hNJKrjlnVXfWoOvedYX3B
Ksft+y3WiGuwS/PlMQaWqMfnMzZUuN15xex2yvGWYT6ZTsgbHBB2SDzeOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF1m68PDDGsQpHKUOSWIlnGgTHwOMB8GA1UdIwQY
MBaAFKQz4yrAxvpzWmx74UTPo/wpfAuYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcERQaktzREctbk5hYkh2aFJNLWpfQ2w4QzVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi84NjU5Y2YtZjgyNC00ZjkzLTg2MDQt
YjgxMmJkNTk0NzM5LzEvcERQaktzREctbk5hYkh2aFJNLWpfQ2w4QzVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi84NjU5Y2YtZjgyNC00ZjkzLTg2MDQtYjgxMmJkNTk0NzM5
LzEvcERQaktzREctbk5hYkh2aFJNLWpfQ2w4QzVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAirqUVL2W
+Tsg8PtYb+joRWhp+TeK6WNZcAxD4S60patwpZaOYW21R7swwOeYSn7AD5meyxSl
xo1ucEZcS2K8k8AgHA1lFNDPYGf0pIDcF6arfM0gb8gq7+A91h4nqpK0scq7uWPX
H1DObIKqJxNixEy4DIAPTanE8YlMkUXxe6tGqXkHLzq6LLWjWFO1yhjGA3ylpugj
T+7Bi9Of1HWypT6amibVMjjA5qoul8+SFRu7ibgqrY9Gl2ox8cV5QbpT24lm7dA/
oJKirHGcA5pf8n4vLRbgDsgc3ZUV/ek6m5nfe3RNIuIRwYrFLInfftYb82e01lfS
jCS/hsa9SPt4wA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:32:29 2025 by rpki-client