Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
File: pBdnGZEpiZeeCGEloqQaEz__3CQ.mft (raw, json)
Hash identifier: +SMc94LK77IrHM3LqWbYzrCcTe4rmWjh2WUktnM7bI8=
Subject key identifier: C3:89:27:25:AB:FE:98:4F:C0:7B:DB:F7:62:60:C8:56:6A:E8:8B:A9
Authority key identifier: A4:17:67:19:91:29:89:97:9E:08:61:25:A2:A4:1A:13:3F:FF:DC:24
Certificate issuer: /CN=a4176719912989979e086125a2a41a133fffdc24
Certificate serial: 01987B2DCA7FEA61D7E0950D4164DD3647AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
Manifest number: 0205
Signing time: Tue 05 Aug 2025 17:00:55 +0000
Manifest this update: Tue 05 Aug 2025 17:00:55 +0000
Manifest next update: Wed 06 Aug 2025 17:00:55 +0000
Files and hashes: 1: cbfaYBjluJFGRHIZotfNKfL5QOM.roa (hash: hnnwP5hTMZNnGccOJwmbq229la5aF88t7OiSZXiU/mU=)
2: pBdnGZEpiZeeCGEloqQaEz__3CQ.crl (hash: eD7/Z/L81M9f6CnKd42WVHMzV9bSNt1Y8qFvLX4lGtI=)
3: zwNxRZCXOiLKuZa_7Wmh9NcuOqQ.roa (hash: 6xxBkLaHc1up/veCbZl0eXM5uTf3B1SDA3dM0Oft33U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:2d:ca:7f:ea:61:d7:e0:95:0d:41:64:dd:36:47:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4176719912989979e086125a2a41a133fffdc24
Validity
Not Before: Aug 5 17:00:55 2025 GMT
Not After : Aug 6 17:00:55 2025 GMT
Subject: CN=c3892725abfe984fc07bdbf76260c8566ae88ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f3:be:c5:6a:9c:66:99:9b:67:bc:5f:66:b2:
05:1e:d8:33:1f:50:5a:6b:f9:c1:37:08:eb:89:be:
7e:50:4e:47:d0:94:9a:ad:93:fa:cf:f3:86:91:c1:
d6:4b:18:c9:59:df:32:e6:91:2d:10:71:7e:64:2b:
b3:0b:90:81:1c:57:b2:28:f5:10:73:93:bf:d2:bd:
80:53:d1:e3:68:ba:07:f2:93:ae:52:54:dc:45:db:
4e:f2:e6:ed:0a:13:1e:a9:12:d5:48:6e:66:f4:89:
a3:ee:96:57:82:37:49:55:1d:6d:cd:6b:e3:cf:34:
48:e8:bd:74:b7:6d:ba:1d:53:7a:73:50:2e:dd:47:
9b:9a:0f:95:52:e8:c7:16:39:ad:f7:aa:96:85:58:
17:f1:1f:7e:65:b6:bc:cb:fc:3b:1c:8e:98:a3:c7:
dd:bf:22:4e:73:91:ea:84:d2:11:d8:63:fe:28:4b:
dd:16:90:e8:ea:fb:14:9d:cc:cb:44:ae:a5:e1:b9:
86:3c:81:29:f9:00:ad:4a:71:c8:86:e2:a4:8a:1f:
27:be:1d:a9:fb:d5:06:f4:5d:c1:a0:f4:ab:88:6c:
4d:3f:9d:bb:da:ee:2c:f5:1a:f2:97:32:98:19:c8:
18:3c:dd:9e:4f:b1:c3:49:4c:71:ff:e3:90:87:ec:
78:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:89:27:25:AB:FE:98:4F:C0:7B:DB:F7:62:60:C8:56:6A:E8:8B:A9
X509v3 Authority Key Identifier:
keyid:A4:17:67:19:91:29:89:97:9E:08:61:25:A2:A4:1A:13:3F:FF:DC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:5b:b0:98:1c:e8:5c:dd:bf:32:02:9d:1a:60:7b:75:b9:2f:
7a:c0:19:1a:4d:68:09:f2:cc:e7:65:16:ed:e3:0c:19:2d:3c:
0c:5c:a3:0d:11:b9:92:a3:2a:f5:b0:46:65:79:f2:db:ae:37:
31:c2:9a:ca:0b:a9:ac:ff:7e:97:f1:b6:66:4a:14:b3:33:fa:
93:ac:e2:f8:ac:cd:bf:58:58:44:21:4f:6b:54:27:13:d4:07:
d4:3c:63:6a:7a:48:43:a9:56:a6:ed:0b:f7:0c:f5:b4:52:4b:
90:04:cc:58:ed:89:78:5d:a7:6c:94:bf:3f:6c:41:53:87:0f:
5d:59:cc:6c:c1:d4:a1:38:53:29:2e:57:fa:3e:dc:a1:15:d9:
9c:bb:0d:3a:d8:a7:94:ca:5b:95:6f:43:c5:a9:16:c3:28:8c:
9f:fd:b9:d4:87:75:24:ea:47:0d:e3:0d:6a:47:8b:d6:42:ad:
66:d1:e8:97:b8:ae:e4:80:2d:a5:30:fe:4e:ae:61:dc:60:60:
98:5c:51:9f:a0:23:04:27:cd:36:f9:c4:f1:5e:29:01:23:54:
be:fb:4a:47:38:87:a3:28:7b:18:6c:04:4f:33:b7:94:8f:d9:
36:bd:c2:b2:df:d0:43:0f:4e:cb:e8:2e:ca:ae:dc:10:2d:6e:
62:a8:4f:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh7Lcp/6mHX4JUNQWTdNkerMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MTc2NzE5OTEyOTg5OTc5ZTA4NjEyNWEyYTQxYTEzM2Zm
ZmRjMjQwHhcNMjUwODA1MTcwMDU1WhcNMjUwODA2MTcwMDU1WjAzMTEwLwYDVQQD
EyhjMzg5MjcyNWFiZmU5ODRmYzA3YmRiZjc2MjYwYzg1NjZhZTg4YmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovO+xWqcZpmbZ7xfZrIFHtgzH1Ba
a/nBNwjrib5+UE5H0JSarZP6z/OGkcHWSxjJWd8y5pEtEHF+ZCuzC5CBHFeyKPUQ
c5O/0r2AU9HjaLoH8pOuUlTcRdtO8ubtChMeqRLVSG5m9Imj7pZXgjdJVR1tzWvj
zzRI6L10t226HVN6c1Au3Uebmg+VUujHFjmt96qWhVgX8R9+Zba8y/w7HI6Yo8fd
vyJOc5HqhNIR2GP+KEvdFpDo6vsUnczLRK6l4bmGPIEp+QCtSnHIhuKkih8nvh2p
+9UG9F3BoPSriGxNP5272u4s9RrylzKYGcgYPN2eT7HDSUxx/+OQh+x4RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMOJJyWr/phPwHvb92JgyFZq6IupMB8GA1UdIwQY
MBaAFKQXZxmRKYmXnghhJaKkGhM//9wkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEJkbkdaRXBpWmVlQ0dFbG9xUWFFel9fM0NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xYTQwZjUtYjljOS00ODU2LTgzYzYt
ZWYwNDBhZWJlYTYwLzEvcEJkbkdaRXBpWmVlQ0dFbG9xUWFFel9fM0NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8xYTQwZjUtYjljOS00ODU2LTgzYzYtZWYwNDBhZWJlYTYw
LzEvcEJkbkdaRXBpWmVlQ0dFbG9xUWFFel9fM0NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALFuwmBzo
XN2/MgKdGmB7dbkvesAZGk1oCfLM52UW7eMMGS08DFyjDRG5kqMq9bBGZXny2643
McKayguprP9+l/G2ZkoUszP6k6zi+KzNv1hYRCFPa1QnE9QH1DxjanpIQ6lWpu0L
9wz1tFJLkATMWO2JeF2nbJS/P2xBU4cPXVnMbMHUoThTKS5X+j7coRXZnLsNOtin
lMpblW9DxakWwyiMn/251Id1JOpHDeMNakeL1kKtZtHol7iu5IAtpTD+Tq5h3GBg
mFxRn6AjBCfNNvnE8V4pASNUvvtKRziHoyh7GGwETzO3lI/ZNr3Cst/QQw9Oy+gu
yq7cEC1uYqhP6g==
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:35:20 2025 by rpki-client