Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
File: PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft (raw, json)
Hash identifier: Trz3+HDMwFn6vFfPffTWTfdm85CbzT9pcBbHKyFASkY=
Subject key identifier: E5:5F:D8:3D:2D:2D:A2:3B:E0:C0:4A:97:3B:C8:ED:0E:95:D3:22:0B
Authority key identifier: 3D:E4:59:8E:21:73:65:01:A7:39:44:C1:07:11:4C:85:0C:7D:8B:09
Certificate issuer: /CN=3de4598e21736501a73944c107114c850c7d8b09
Certificate serial: 019879AE78D973050795E39A1AF08AEBAD47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
Manifest number: 1341
Signing time: Tue 05 Aug 2025 10:02:13 +0000
Manifest this update: Tue 05 Aug 2025 10:02:13 +0000
Manifest next update: Wed 06 Aug 2025 10:02:13 +0000
Files and hashes: 1: PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl (hash: 4jMl37RGj0N76hf/d1HeMG3z02SKtY3pB6BqbEgjG6M=)
2: UMngkvwaRjIoN5eBBlFi84sCo3g.roa (hash: a8obNUaAoXy5QpQYwb8sCwj2NbkRTv7ZWZ/OkpJ4CGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ae:78:d9:73:05:07:95:e3:9a:1a:f0:8a:eb:ad:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de4598e21736501a73944c107114c850c7d8b09
Validity
Not Before: Aug 5 10:02:13 2025 GMT
Not After : Aug 6 10:02:13 2025 GMT
Subject: CN=e55fd83d2d2da23be0c04a973bc8ed0e95d3220b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:21:97:87:4a:a8:fd:7f:c4:33:b9:92:02:ef:
e0:f2:23:1d:27:73:47:ef:07:59:7d:ad:86:fc:b9:
3b:20:62:ca:3a:35:ee:3e:7c:ac:a1:ef:86:7b:0a:
ef:a3:16:51:b0:53:49:ad:c3:81:11:de:84:e5:a0:
23:ca:85:91:8d:60:71:f1:7e:07:11:68:fc:23:87:
e0:a9:85:e3:de:84:fd:37:83:6d:f3:d2:3b:96:a0:
94:ad:b1:ea:8b:7b:20:b0:2e:74:67:fa:27:c0:0f:
cb:d4:f9:00:5a:cf:56:49:5b:c3:fc:68:9f:8e:2a:
6b:64:c3:29:6e:83:77:9a:f5:06:93:c9:fd:89:ca:
8d:ec:d4:02:18:ab:f9:9f:54:11:4e:2b:6a:60:6e:
42:2e:8f:de:d1:5d:cd:52:ec:33:ca:f0:0c:b0:86:
77:9e:24:de:09:45:1d:70:ab:93:55:32:1a:69:f5:
4d:74:6b:ec:c1:96:31:90:be:ee:1e:4a:a3:e2:0e:
1c:9d:c7:ce:63:fa:ec:0c:fd:10:2d:12:bf:5b:55:
d6:8c:15:94:c2:04:fa:74:12:b5:78:59:25:47:ab:
66:cb:f5:47:7e:40:4f:c7:2f:08:08:9d:0b:af:4f:
56:c9:00:c3:55:94:cc:47:31:b0:8e:ef:a9:d7:6b:
0f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5F:D8:3D:2D:2D:A2:3B:E0:C0:4A:97:3B:C8:ED:0E:95:D3:22:0B
X509v3 Authority Key Identifier:
keyid:3D:E4:59:8E:21:73:65:01:A7:39:44:C1:07:11:4C:85:0C:7D:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:07:24:dd:e2:76:13:8f:6a:f7:74:f3:3d:4d:30:eb:8b:17:
0f:d1:24:dd:bd:24:b9:02:0f:1e:6b:17:bd:9a:2c:52:98:55:
83:fc:b9:26:fb:86:08:8c:b7:9e:5b:29:0a:9e:6d:d2:d0:1d:
9a:62:38:0c:9e:bb:cf:87:85:c7:a9:47:23:79:f1:7c:b5:9f:
a1:4b:08:c8:1e:6d:62:5a:95:0d:75:00:2e:1e:b4:ec:82:83:
00:a3:88:23:35:f8:20:78:17:01:11:20:bc:92:9b:7b:d8:76:
76:eb:3f:1b:a4:d7:a1:56:de:37:a5:78:c9:69:bf:36:71:0f:
1d:59:fb:c8:11:5a:9a:95:2f:1f:f7:01:f8:68:f2:ed:73:ad:
30:39:b2:32:24:c1:34:15:e1:cd:e9:b0:1f:c8:18:2b:21:52:
0b:40:3c:bc:6f:fa:16:a9:fc:4c:4e:e1:ce:27:76:8f:c8:1c:
37:44:67:ab:8c:5d:09:f9:ba:0d:66:e3:a0:a3:fc:ad:80:ef:
18:3a:b3:36:34:19:2f:88:d8:98:23:23:a9:b6:54:27:4b:56:
17:fa:58:f4:be:af:d4:18:f8:d7:56:1d:5f:fd:f0:27:2f:5e:
2c:3c:7c:64:dc:54:bb:cf:7d:d1:5a:f3:bc:55:96:65:a3:d4:
0d:6e:17:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh5rnjZcwUHleOaGvCK661HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkZTQ1OThlMjE3MzY1MDFhNzM5NDRjMTA3MTE0Yzg1MGM3
ZDhiMDkwHhcNMjUwODA1MTAwMjEzWhcNMjUwODA2MTAwMjEzWjAzMTEwLwYDVQQD
EyhlNTVmZDgzZDJkMmRhMjNiZTBjMDRhOTczYmM4ZWQwZTk1ZDMyMjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CGXh0qo/X/EM7mSAu/g8iMdJ3NH
7wdZfa2G/Lk7IGLKOjXuPnysoe+GewrvoxZRsFNJrcOBEd6E5aAjyoWRjWBx8X4H
EWj8I4fgqYXj3oT9N4Nt89I7lqCUrbHqi3sgsC50Z/onwA/L1PkAWs9WSVvD/Gif
jiprZMMpboN3mvUGk8n9icqN7NQCGKv5n1QRTitqYG5CLo/e0V3NUuwzyvAMsIZ3
niTeCUUdcKuTVTIaafVNdGvswZYxkL7uHkqj4g4cncfOY/rsDP0QLRK/W1XWjBWU
wgT6dBK1eFklR6tmy/VHfkBPxy8ICJ0Lr09WyQDDVZTMRzGwju+p12sPmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOVf2D0tLaI74MBKlzvI7Q6V0yILMB8GA1UdIwQY
MBaAFD3kWY4hc2UBpzlEwQcRTIUMfYsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGVSWmppRnpaUUduT1VUQkJ4Rk1oUXg5aXdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi80ZDNiOGMtNzIzOS00ODNjLWE0OGMt
N2Q2MDhiZWUzMTY3LzEvUGVSWmppRnpaUUduT1VUQkJ4Rk1oUXg5aXdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi80ZDNiOGMtNzIzOS00ODNjLWE0OGMtN2Q2MDhiZWUzMTY3
LzEvUGVSWmppRnpaUUduT1VUQkJ4Rk1oUXg5aXdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbQck3eJ2
E49q93TzPU0w64sXD9Ek3b0kuQIPHmsXvZosUphVg/y5JvuGCIy3nlspCp5t0tAd
mmI4DJ67z4eFx6lHI3nxfLWfoUsIyB5tYlqVDXUALh607IKDAKOIIzX4IHgXAREg
vJKbe9h2dus/G6TXoVbeN6V4yWm/NnEPHVn7yBFampUvH/cB+Gjy7XOtMDmyMiTB
NBXhzemwH8gYKyFSC0A8vG/6Fqn8TE7hzid2j8gcN0Rnq4xdCfm6DWbjoKP8rYDv
GDqzNjQZL4jYmCMjqbZUJ0tWF/pY9L6v1Bj411YdX/3wJy9eLDx8ZNxUu8990Vrz
vFWWZaPUDW4XQA==
-----END CERTIFICATE-----
Generated at Tue Aug 5 20:04:47 2025 by rpki-client