Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft
File: pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft (raw, json)
Hash identifier: nmLzgVzHj40dbn9bpRE0RlSzDuXYN0+ClRi4hzyGaS8=
Subject key identifier: DA:7C:51:EB:13:83:15:00:AF:61:C6:41:90:17:13:02:CA:83:0B:08
Authority key identifier: A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A
Certificate issuer: /CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a
Certificate serial: 0198733D10BE7336B3D3A3FBC5B741351648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 04:00:38 +0000
Manifest this update: Mon 04 Aug 2025 04:00:38 +0000
Manifest next update: Tue 05 Aug 2025 04:00:38 +0000
Files and hashes: 1: C68Jy4vS9ZhrosrQ0hLHm1uIuZY.roa (hash: KriDQtKp0/6qr4HNTZ8vH7ju161mMdjIkNUJn2wDbds=)
2: TTYqeImd9Bx1jE17xCXwGjIy_ds.roa (hash: zl9hhkn8MVjXkdNWr2SWdYWZOS+aR6DMyQIaYbl32sI=)
3: aLyfJT6We20ULVg1UbujnE5UVaI.roa (hash: XttwXUAYz6CHALtumX6fckhDuT6Y4LNJR+NAILB010U=)
4: lixJMjo5-_bNmfYtadlmrrGpsCg.roa (hash: OW5E61Tvo1LN0X4Q2KSxHXhfLjcuHjhFHfnXTwr/DjA=)
5: pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl (hash: 6kXUJlbBqkzcJmUBXohHDlVkGW15jJf0uF6f8awKJiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:10:be:73:36:b3:d3:a3:fb:c5:b7:41:35:16:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a
Validity
Not Before: Aug 4 04:00:38 2025 GMT
Not After : Aug 5 04:00:38 2025 GMT
Subject: CN=da7c51eb13831500af61c64190171302ca830b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:da:b1:a4:54:db:34:a1:dd:15:28:01:2f:03:
84:7a:eb:40:b1:f1:e5:8c:b2:96:2c:77:d1:88:93:
3e:ce:e8:31:2e:44:39:40:54:fd:dc:e9:14:f9:38:
54:31:be:90:27:05:4c:cc:1c:29:7d:32:b1:2a:24:
e7:6a:a8:08:11:dd:1d:79:26:54:0d:d3:8a:6d:bf:
65:24:5d:2c:fb:90:23:3e:6c:7a:8e:0a:10:bc:dc:
89:01:44:8f:4c:90:bd:ab:88:84:d4:66:0a:f1:ff:
48:2f:ac:90:24:83:f2:61:ea:5f:6e:b8:00:c4:a0:
b4:f7:64:5b:34:dc:48:cc:88:e9:05:df:32:48:6c:
81:20:a0:97:2e:b9:be:4d:74:52:43:e0:01:5a:22:
bb:ac:27:d8:b9:cc:42:06:68:8d:9a:f9:0d:e7:c8:
b0:7a:d4:7f:8e:ca:9e:02:0a:bc:a0:69:19:70:af:
99:09:32:76:e6:d2:b0:2b:f7:43:7b:98:69:ed:79:
96:a1:95:dc:67:83:a7:85:39:04:18:99:54:64:7e:
1a:17:44:9e:f1:37:7b:b1:20:d4:fa:19:84:66:a6:
a3:41:1e:30:4f:33:4c:ed:d3:81:f4:77:24:99:2c:
0c:97:b4:a7:9b:31:69:17:9f:e7:07:55:be:58:c9:
a0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7C:51:EB:13:83:15:00:AF:61:C6:41:90:17:13:02:CA:83:0B:08
X509v3 Authority Key Identifier:
keyid:A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d8:bc:7a:4f:7a:3b:be:18:4d:a7:3e:fa:54:8b:dc:15:b1:
5d:a7:9c:6e:b1:a2:c4:1b:32:be:99:9b:ad:80:f3:dc:e6:a7:
d6:f3:06:be:cc:e0:9e:dd:96:e9:4a:50:56:05:2e:f9:e6:0f:
14:72:1e:da:72:d3:70:76:98:98:b8:9e:3d:0c:55:36:36:e4:
c2:af:5d:f8:d0:53:ad:f5:95:51:78:7c:d9:ea:aa:11:85:f2:
5a:c4:3f:e9:bd:e4:5e:b4:e6:13:5a:55:d0:d6:1f:b3:9f:02:
a1:d9:41:57:07:8f:fe:9b:ee:36:0e:f4:1a:c7:c0:77:b4:4c:
7f:fb:17:bc:40:3f:9d:da:3d:2b:41:02:b6:a0:fd:57:1d:ac:
88:40:fb:fa:c9:2e:38:7c:cf:72:c8:0f:08:7f:15:01:f9:21:
91:75:94:2c:d7:94:4e:39:e8:20:ef:e9:6d:e0:24:82:8c:07:
cb:57:ac:b4:90:7b:b0:4f:a8:1e:53:25:47:89:7e:6a:90:a1:
05:3f:bd:a1:25:84:82:2e:12:38:eb:ed:ef:75:d9:20:71:e0:
af:4d:15:8d:ff:bf:d8:b4:c9:1d:93:8a:9d:b3:05:3b:73:49:
76:8a:36:e6:83:9e:73:16:96:03:a5:97:9d:bf:25:be:18:5c:
7e:af:8b:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPRC+czaz06P7xbdBNRZIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ODI0MzA4YmM4M2I0ZWU1NmYxYzBjMWI5ZmJmYzMxMWIw
Y2Q0NGEwHhcNMjUwODA0MDQwMDM4WhcNMjUwODA1MDQwMDM4WjAzMTEwLwYDVQQD
EyhkYTdjNTFlYjEzODMxNTAwYWY2MWM2NDE5MDE3MTMwMmNhODMwYjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndqxpFTbNKHdFSgBLwOEeutAsfHl
jLKWLHfRiJM+zugxLkQ5QFT93OkU+ThUMb6QJwVMzBwpfTKxKiTnaqgIEd0deSZU
DdOKbb9lJF0s+5AjPmx6jgoQvNyJAUSPTJC9q4iE1GYK8f9IL6yQJIPyYepfbrgA
xKC092RbNNxIzIjpBd8ySGyBIKCXLrm+TXRSQ+ABWiK7rCfYucxCBmiNmvkN58iw
etR/jsqeAgq8oGkZcK+ZCTJ25tKwK/dDe5hp7XmWoZXcZ4OnhTkEGJlUZH4aF0Se
8Td7sSDU+hmEZqajQR4wTzNM7dOB9HckmSwMl7SnmzFpF5/nB1W+WMmghwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNp8UesTgxUAr2HGQZAXEwLKgwsIMB8GA1UdIwQY
MBaAFKSCQwi8g7TuVvHAwbn7/DEbDNRKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcElKRENMeUR0TzVXOGNEQnVmdjhNUnNNMUVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81ZmViMTMtOWU0My00MzI1LTg1Yzkt
MTk2ZTZmMzc1ZmQ2LzEvcElKRENMeUR0TzVXOGNEQnVmdjhNUnNNMUVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS81ZmViMTMtOWU0My00MzI1LTg1YzktMTk2ZTZmMzc1ZmQ2
LzEvcElKRENMeUR0TzVXOGNEQnVmdjhNUnNNMUVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ9i8ek96
O74YTac++lSL3BWxXaecbrGixBsyvpmbrYDz3Oan1vMGvszgnt2W6UpQVgUu+eYP
FHIe2nLTcHaYmLiePQxVNjbkwq9d+NBTrfWVUXh82eqqEYXyWsQ/6b3kXrTmE1pV
0NYfs58CodlBVweP/pvuNg70GsfAd7RMf/sXvEA/ndo9K0ECtqD9Vx2siED7+sku
OHzPcsgPCH8VAfkhkXWULNeUTjnoIO/pbeAkgowHy1estJB7sE+oHlMlR4l+apCh
BT+9oSWEgi4SOOvt73XZIHHgr00Vjf+/2LTJHZOKnbMFO3NJdoo25oOecxaWA6WX
nb8lvhhcfq+LgA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:16 2025 by rpki-client