Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
File: pCzz6j9GGa3XsfheXbx2jNPRdC0.mft (raw, json)
Hash identifier: yyLraDk7XFaooAxP2tkJF6k+EGBAx6Bmzlh9UiZM0Cc=
Subject key identifier: 57:48:19:07:B0:65:4C:8D:95:83:B7:2B:03:35:AA:E0:AF:ED:F6:3A
Authority key identifier: A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
Certificate issuer: /CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Certificate serial: 019768BC3DACEBE151498A3DE2ECC508E53A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 10:00:56 +0000
Manifest this update: Fri 13 Jun 2025 10:00:56 +0000
Manifest next update: Sat 14 Jun 2025 10:00:56 +0000
Files and hashes: 1: SNV_1VpgwAmnXneSKWb5jRq8ToE.roa (hash: WATnXIVshclXFF3TBwoPfH1QR7+uJEv7hk540ZBWOkc=)
2: lVzggsEuwHNUmwDhZ4XQcolHpDk.roa (hash: eA/BupKOc3qojEoZ8E13TwJIMViSsM3/KaYEEgTR1Jc=)
3: pCzz6j9GGa3XsfheXbx2jNPRdC0.crl (hash: fzn+dRA8p8QuDArb7HcMKqYWetp7uO+NxROBQyaNlgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:3d:ac:eb:e1:51:49:8a:3d:e2:ec:c5:08:e5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Validity
Not Before: Jun 13 10:00:56 2025 GMT
Not After : Jun 14 10:00:56 2025 GMT
Subject: CN=57481907b0654c8d9583b72b0335aae0afedf63a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:c6:23:4b:49:48:19:16:fa:1b:55:d5:bb:
aa:6b:a6:a0:0b:ec:29:b3:17:75:8c:71:5b:6f:ef:
d6:00:87:84:39:10:63:7c:56:43:db:67:4f:b0:c0:
05:56:c2:21:1c:90:b0:04:a4:96:1d:9f:9b:9a:02:
2d:48:1b:1c:1b:30:87:54:df:21:8f:2d:39:d9:73:
f2:79:92:7a:ca:ae:6d:5d:02:71:45:59:17:b0:8f:
76:61:f7:ae:86:90:49:96:37:93:0c:98:ef:51:f6:
8c:aa:e9:e8:52:e0:bc:94:90:0f:de:a5:80:37:ac:
1b:87:34:5b:0a:8c:e6:9f:0d:f4:97:21:26:05:c2:
f2:85:73:9d:6f:67:07:54:1b:b1:e2:33:a4:e6:ea:
c0:fb:22:db:5b:b9:bd:f9:e6:e0:9f:71:48:ea:98:
08:0c:a6:c7:35:1b:00:22:3d:cd:9c:96:af:fa:92:
a4:e5:58:51:54:4f:fe:9d:b1:8d:35:9b:98:05:03:
e4:db:aa:75:6e:99:ce:bc:07:17:30:af:ed:76:15:
bb:b5:12:47:99:e3:d5:86:57:2e:bb:08:37:72:57:
c5:59:2a:fa:86:f5:1d:4d:4c:a0:be:09:1a:5e:46:
0a:b4:99:82:7b:c4:01:12:87:d1:a1:3e:60:d1:d8:
7c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:48:19:07:B0:65:4C:8D:95:83:B7:2B:03:35:AA:E0:AF:ED:F6:3A
X509v3 Authority Key Identifier:
keyid:A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:a8:cc:af:24:45:46:e6:ca:b0:b9:81:f0:b4:95:ab:9b:75:
05:78:4b:64:9b:8d:44:3a:3c:79:23:9e:51:2b:0b:8b:96:ee:
02:4f:e5:54:8b:27:f5:31:12:43:cd:86:bc:e9:a8:16:fc:46:
88:c3:11:49:84:6c:e6:37:74:d7:3f:25:c0:74:dc:83:71:02:
42:52:d8:33:92:89:de:8e:84:e7:41:41:2b:4c:00:36:8a:a8:
33:86:90:76:51:43:c7:28:49:b2:05:d1:6e:e5:03:aa:4b:43:
97:b3:1b:e0:b9:ea:26:5f:da:bf:8f:e4:e0:c8:4b:72:0d:4c:
05:2e:58:ba:14:cb:4d:13:b9:7e:93:69:1f:7a:76:93:9b:0c:
fc:03:e1:0b:cb:a2:a6:ad:f4:ab:d3:be:16:f8:b8:26:78:eb:
a8:47:a8:5e:92:5c:a3:0b:a2:da:93:c5:b9:0b:1f:92:60:48:
0d:13:73:d6:a6:af:91:e0:f7:9f:d5:04:d7:22:cd:81:0d:62:
e4:85:9b:ce:b5:fd:d9:9e:9d:3e:af:cf:ea:9d:dc:74:db:1c:
0c:79:27:0a:14:93:cd:36:f2:3e:b6:76:a8:eb:55:e1:91:d8:
c3:61:23:28:dc:8c:05:08:29:b7:7f:0f:a7:bf:0a:dc:40:f4:
8e:b2:fb:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdovD2s6+FRSYo94uzFCOU6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MmNmM2VhM2Y0NjE5YWRkN2IxZjg1ZTVkYmM3NjhjZDNk
MTc0MmQwHhcNMjUwNjEzMTAwMDU2WhcNMjUwNjE0MTAwMDU2WjAzMTEwLwYDVQQD
Eyg1NzQ4MTkwN2IwNjU0YzhkOTU4M2I3MmIwMzM1YWFlMGFmZWRmNjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQPGI0tJSBkW+htV1buqa6agC+wp
sxd1jHFbb+/WAIeEORBjfFZD22dPsMAFVsIhHJCwBKSWHZ+bmgItSBscGzCHVN8h
jy052XPyeZJ6yq5tXQJxRVkXsI92YfeuhpBJljeTDJjvUfaMqunoUuC8lJAP3qWA
N6wbhzRbCozmnw30lyEmBcLyhXOdb2cHVBux4jOk5urA+yLbW7m9+ebgn3FI6pgI
DKbHNRsAIj3NnJav+pKk5VhRVE/+nbGNNZuYBQPk26p1bpnOvAcXMK/tdhW7tRJH
mePVhlcuuwg3clfFWSr6hvUdTUygvgkaXkYKtJmCe8QBEofRoT5g0dh8ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdIGQewZUyNlYO3KwM1quCv7fY6MB8GA1UdIwQY
MBaAFKQs8+o/Rhmt17H4Xl28dozT0XQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEN6ejZqOUdHYTNYc2ZoZVhieDJqTlBSZEMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81NzI2OWItMGY3MC00NmNmLWJjZTIt
Yzc3NzUxNTlmYzgyLzEvcEN6ejZqOUdHYTNYc2ZoZVhieDJqTlBSZEMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC81NzI2OWItMGY3MC00NmNmLWJjZTItYzc3NzUxNTlmYzgy
LzEvcEN6ejZqOUdHYTNYc2ZoZVhieDJqTlBSZEMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtqjMryRF
RubKsLmB8LSVq5t1BXhLZJuNRDo8eSOeUSsLi5buAk/lVIsn9TESQ82GvOmoFvxG
iMMRSYRs5jd01z8lwHTcg3ECQlLYM5KJ3o6E50FBK0wANoqoM4aQdlFDxyhJsgXR
buUDqktDl7Mb4LnqJl/av4/k4MhLcg1MBS5YuhTLTRO5fpNpH3p2k5sM/APhC8ui
pq30q9O+Fvi4JnjrqEeoXpJcowui2pPFuQsfkmBIDRNz1qavkeD3n9UE1yLNgQ1i
5IWbzrX92Z6dPq/P6p3cdNscDHknChSTzTbyPrZ2qOtV4ZHYw2EjKNyMBQgpt38P
p78K3ED0jrL7gw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:27:25 2025 by rpki-client