Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft
File: pPP3bj7O8kl-ET6ju664U_YvWP4.mft (raw, json)
Hash identifier: LX08A71REwU5Fy//BRT9+Rz4UenGHCflpZexTByJYsA=
Subject key identifier: 7F:00:CE:CB:76:64:ED:40:50:7A:29:FF:86:E7:60:21:89:50:7E:01
Authority key identifier: A4:F3:F7:6E:3E:CE:F2:49:7E:11:3E:A3:BB:AE:B8:53:F6:2F:58:FE
Certificate issuer: /CN=a4f3f76e3ecef2497e113ea3bbaeb853f62f58fe
Certificate serial: 01987A88D555EAA9D2C2C4FB782231D5B44D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft
Manifest number: 0CAF
Signing time: Tue 05 Aug 2025 14:00:44 +0000
Manifest this update: Tue 05 Aug 2025 14:00:44 +0000
Manifest next update: Wed 06 Aug 2025 14:00:44 +0000
Files and hashes: 1: 66ywR3ba4enexaVdWoqndnOvp4U.roa (hash: Qkz3r6su/bj0dLkhbVaX1i/95TsjjuS65tg9qxOjli4=)
2: pPP3bj7O8kl-ET6ju664U_YvWP4.crl (hash: zD5pKyyiKixEcauEIs9r/aUw/kuhHXIinYh2bwve2Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:88:d5:55:ea:a9:d2:c2:c4:fb:78:22:31:d5:b4:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f3f76e3ecef2497e113ea3bbaeb853f62f58fe
Validity
Not Before: Aug 5 14:00:44 2025 GMT
Not After : Aug 6 14:00:44 2025 GMT
Subject: CN=7f00cecb7664ed40507a29ff86e7602189507e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:39:2a:81:5f:a9:02:eb:2e:28:e2:78:5d:31:
56:09:70:21:8d:35:6b:0a:d7:24:d8:83:88:b0:fc:
29:97:b7:82:47:9b:8f:d0:82:6b:35:bc:13:bb:1b:
06:f1:cd:8d:1e:dd:b0:b6:a6:4c:57:fb:5d:cf:36:
dc:88:a8:f4:86:c7:a4:11:1e:ca:ec:48:91:dc:e7:
83:1f:bd:ce:f4:d5:64:3e:27:e7:48:f4:55:42:a2:
11:81:03:3a:59:af:52:c1:2b:d3:ba:fe:53:28:00:
b7:f5:42:4a:c9:a8:2e:52:a3:97:48:61:5c:f7:99:
a2:15:e2:59:12:c4:10:b9:6c:f5:d8:63:44:08:7f:
20:97:34:0c:39:7f:fe:bd:d8:4c:31:22:f5:b5:a7:
ca:0f:13:4b:5f:58:db:bf:d1:4f:89:66:6c:01:ef:
35:f2:19:96:07:54:e0:7b:29:8b:48:d4:da:6b:9e:
df:53:69:5b:39:15:a1:95:32:eb:e1:6e:c3:4f:5a:
68:91:e2:52:e4:fa:00:dd:e2:53:39:29:ad:f8:e4:
89:30:f2:6d:85:67:20:41:da:e7:c2:66:f8:4e:7a:
13:37:0a:f0:6f:60:cc:00:74:20:cb:b4:4b:02:22:
6c:5b:fb:80:43:5c:96:f6:83:bf:76:fd:d6:37:0f:
5a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:00:CE:CB:76:64:ED:40:50:7A:29:FF:86:E7:60:21:89:50:7E:01
X509v3 Authority Key Identifier:
keyid:A4:F3:F7:6E:3E:CE:F2:49:7E:11:3E:A3:BB:AE:B8:53:F6:2F:58:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f1:d3:52:9a:d1:13:e8:ae:fc:c5:b2:41:c5:a1:1f:95:23:
5d:ad:83:1c:1a:d6:0a:b6:2c:79:29:33:3e:28:1a:54:77:15:
a9:23:e9:32:5c:79:22:8f:89:2e:53:ba:8c:92:cb:b1:b3:ba:
6a:6a:15:94:ae:f9:e9:34:61:3d:65:42:4c:66:ce:3d:96:a4:
6f:fa:d0:7e:34:50:98:40:58:3a:e0:60:d6:37:15:0e:aa:17:
7a:48:95:03:5b:eb:f4:59:cd:fa:f8:18:49:5c:db:66:e9:1a:
ab:bd:6b:3c:3e:9e:f5:8f:bc:6e:64:6f:ae:22:51:a5:97:ff:
f4:90:eb:01:59:b3:1f:9a:7b:42:c3:46:9f:4b:b2:30:f6:c3:
86:10:33:9b:c4:18:33:56:7c:4b:cf:e6:e1:5b:aa:c5:00:08:
3a:83:ed:ca:58:01:f1:36:e1:84:bc:66:85:d1:e4:f4:a3:2c:
ea:af:55:7d:9a:89:8d:5e:bb:df:b4:1a:2d:c1:74:d4:85:a6:
be:89:3b:09:ad:2e:e9:3f:5b:bc:5c:80:d8:5b:3f:9f:26:0c:
80:0e:8a:3d:7f:45:9a:88:71:6c:cb:c0:53:65:bc:57:5d:b2:
92:38:00:41:6c:d3:0d:a9:58:43:9d:f3:0d:60:85:63:32:d1:
50:43:de:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6iNVV6qnSwsT7eCIx1bRNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZjNmNzZlM2VjZWYyNDk3ZTExM2VhM2JiYWViODUzZjYy
ZjU4ZmUwHhcNMjUwODA1MTQwMDQ0WhcNMjUwODA2MTQwMDQ0WjAzMTEwLwYDVQQD
Eyg3ZjAwY2VjYjc2NjRlZDQwNTA3YTI5ZmY4NmU3NjAyMTg5NTA3ZTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTkqgV+pAusuKOJ4XTFWCXAhjTVr
Ctck2IOIsPwpl7eCR5uP0IJrNbwTuxsG8c2NHt2wtqZMV/tdzzbciKj0hsekER7K
7EiR3OeDH73O9NVkPifnSPRVQqIRgQM6Wa9SwSvTuv5TKAC39UJKyaguUqOXSGFc
95miFeJZEsQQuWz12GNECH8glzQMOX/+vdhMMSL1tafKDxNLX1jbv9FPiWZsAe81
8hmWB1TgeymLSNTaa57fU2lbORWhlTLr4W7DT1pokeJS5PoA3eJTOSmt+OSJMPJt
hWcgQdrnwmb4TnoTNwrwb2DMAHQgy7RLAiJsW/uAQ1yW9oO/dv3WNw9aYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH8Azst2ZO1AUHop/4bnYCGJUH4BMB8GA1UdIwQY
MBaAFKTz924+zvJJfhE+o7uuuFP2L1j+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFBQM2JqN084a2wtRVQ2anU2NjRVX1l2V1A0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9kNmM1NWEtODYyOC00MjlmLWEyZWMt
NGYyYzE5YmQ1NGQ3LzEvcFBQM2JqN084a2wtRVQ2anU2NjRVX1l2V1A0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9kNmM1NWEtODYyOC00MjlmLWEyZWMtNGYyYzE5YmQ1NGQ3
LzEvcFBQM2JqN084a2wtRVQ2anU2NjRVX1l2V1A0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMvHTUprR
E+iu/MWyQcWhH5UjXa2DHBrWCrYseSkzPigaVHcVqSPpMlx5Io+JLlO6jJLLsbO6
amoVlK756TRhPWVCTGbOPZakb/rQfjRQmEBYOuBg1jcVDqoXekiVA1vr9FnN+vgY
SVzbZukaq71rPD6e9Y+8bmRvriJRpZf/9JDrAVmzH5p7QsNGn0uyMPbDhhAzm8QY
M1Z8S8/m4VuqxQAIOoPtylgB8TbhhLxmhdHk9KMs6q9VfZqJjV6737QaLcF01IWm
vok7Ca0u6T9bvFyA2Fs/nyYMgA6KPX9FmohxbMvAU2W8V12ykjgAQWzTDalYQ53z
DWCFYzLRUEPedA==
-----END CERTIFICATE-----
Generated at Tue Aug 5 20:04:24 2025 by rpki-client