Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.mft
File: pnYhghhEiOf3hxIqcYCZfOjpDUw.mft (raw, json)
Hash identifier: Ra284pW7h1tYZxO9OuOL2w6nXFTh4twojHM9QzX8ObQ=
Subject key identifier: 3E:19:CF:A4:4C:F8:63:24:97:EC:99:D8:C7:80:98:2F:1A:78:DD:18
Authority key identifier: A6:76:21:82:18:44:88:E7:F7:87:12:2A:71:80:99:7C:E8:E9:0D:4C
Certificate issuer: /CN=a6762182184488e7f787122a7180997ce8e90d4c
Certificate serial: 01976CCF95D81EFC378B5B7E4648A109E5DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnYhghhEiOf3hxIqcYCZfOjpDUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.mft
Manifest number: 0254
Signing time: Sat 14 Jun 2025 05:00:32 +0000
Manifest this update: Sat 14 Jun 2025 05:00:32 +0000
Manifest next update: Sun 15 Jun 2025 05:00:32 +0000
Files and hashes: 1: pnYhghhEiOf3hxIqcYCZfOjpDUw.crl (hash: jjxi9zXMjnJPuw7R4wB7kyQpPC9gRgRJL9GMGOo4okk=)
2: yNyV4cceOnlRqYhPeAllARW73Jw.roa (hash: 8x/01ij81KHBd33TvjxnJ5OVDsgBIBKqbtRkLV2shYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pnYhghhEiOf3hxIqcYCZfOjpDUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:95:d8:1e:fc:37:8b:5b:7e:46:48:a1:09:e5:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6762182184488e7f787122a7180997ce8e90d4c
Validity
Not Before: Jun 14 05:00:32 2025 GMT
Not After : Jun 15 05:00:32 2025 GMT
Subject: CN=3e19cfa44cf8632497ec99d8c780982f1a78dd18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dd:ce:ae:e8:bb:d4:35:b5:2c:e2:40:3d:53:
a8:92:9d:48:7f:48:11:e9:aa:e6:d9:87:92:6d:57:
ee:0a:96:80:1f:f4:38:53:eb:4d:cc:0c:53:c1:b5:
97:f3:58:2c:7a:ad:9d:9b:94:0b:c7:67:a2:3d:40:
67:26:4c:cf:eb:f3:24:44:8a:4e:34:65:52:6d:bc:
c5:47:26:4d:77:9c:7d:8d:7f:8b:27:d0:98:81:3f:
1b:d3:f8:42:46:a9:b7:f3:fb:b3:99:67:3e:e2:08:
5b:92:46:b0:fb:28:a1:e7:d8:99:a9:d1:50:45:88:
ec:1a:5d:29:3f:c8:4d:9f:fa:de:40:8b:e3:a6:01:
ac:3c:5f:0b:0b:cf:39:7c:17:e0:44:d6:ce:c8:9a:
3b:88:63:f9:64:6d:9c:4e:0d:aa:30:7a:b0:df:8e:
ca:cb:91:c1:48:1d:34:1a:d6:c7:43:b3:3b:83:85:
78:64:e7:f4:ef:b7:51:c6:cc:bc:15:0b:07:15:52:
73:4d:2a:ca:3c:a4:c3:17:c1:c0:80:64:9d:15:4a:
42:a2:4a:94:c9:24:1f:36:45:7a:30:55:06:86:ae:
6a:55:a4:4f:9a:59:d2:63:b3:2d:3b:be:52:30:6e:
9c:63:87:e1:3c:87:39:2f:41:49:68:3d:a8:db:7d:
3b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:19:CF:A4:4C:F8:63:24:97:EC:99:D8:C7:80:98:2F:1A:78:DD:18
X509v3 Authority Key Identifier:
keyid:A6:76:21:82:18:44:88:E7:F7:87:12:2A:71:80:99:7C:E8:E9:0D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnYhghhEiOf3hxIqcYCZfOjpDUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f1:bb:8a:96:d6:53:15:4c:45:37:55:91:cb:ca:2b:66:cf:
c6:85:6a:a9:d6:96:ee:e5:99:f8:ed:f7:c2:61:e5:2a:e6:ca:
48:a7:63:ea:e4:c7:49:35:6d:17:17:e0:64:b9:ff:9b:fb:ec:
03:7f:21:a4:74:e4:9e:a6:1a:59:6f:bc:8c:b3:02:69:ff:4e:
1e:29:a1:15:33:9a:b3:e1:0a:04:b9:5b:bd:4b:4e:69:00:12:
82:33:4a:eb:14:70:25:c8:5b:ff:0d:2a:3d:58:aa:f7:5f:41:
3c:f6:7e:e3:55:6a:5a:0f:17:15:53:10:f2:8b:57:a9:68:87:
46:61:5c:89:d6:10:81:d2:97:b6:19:57:e5:e7:13:03:b8:e9:
c3:bb:1f:82:62:7c:23:91:a6:57:1a:a3:c9:75:10:ec:62:f5:
2b:1f:a3:67:b3:75:6f:3d:63:23:1f:bd:30:b3:29:f8:26:04:
7e:c0:5e:5e:e6:bd:67:ff:e2:63:57:a2:b7:92:e6:6a:e1:4b:
5a:ca:b1:0a:61:7e:4d:1c:22:87:2c:3a:4f:bc:b9:6c:a9:29:
c7:c9:3b:4a:fe:1e:2f:78:51:9f:47:ac:ce:33:75:6d:b2:71:
fd:51:06:83:59:93:19:9c:2d:21:23:78:8f:52:9f:65:e1:0d:
01:69:2c:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsz5XYHvw3i1t+RkihCeXcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NzYyMTgyMTg0NDg4ZTdmNzg3MTIyYTcxODA5OTdjZThl
OTBkNGMwHhcNMjUwNjE0MDUwMDMyWhcNMjUwNjE1MDUwMDMyWjAzMTEwLwYDVQQD
EygzZTE5Y2ZhNDRjZjg2MzI0OTdlYzk5ZDhjNzgwOTgyZjFhNzhkZDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN3Orui71DW1LOJAPVOokp1If0gR
6arm2YeSbVfuCpaAH/Q4U+tNzAxTwbWX81gseq2dm5QLx2eiPUBnJkzP6/MkRIpO
NGVSbbzFRyZNd5x9jX+LJ9CYgT8b0/hCRqm38/uzmWc+4ghbkkaw+yih59iZqdFQ
RYjsGl0pP8hNn/reQIvjpgGsPF8LC885fBfgRNbOyJo7iGP5ZG2cTg2qMHqw347K
y5HBSB00GtbHQ7M7g4V4ZOf077dRxsy8FQsHFVJzTSrKPKTDF8HAgGSdFUpCokqU
ySQfNkV6MFUGhq5qVaRPmlnSY7MtO75SMG6cY4fhPIc5L0FJaD2o2307gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4Zz6RM+GMkl+yZ2MeAmC8aeN0YMB8GA1UdIwQY
MBaAFKZ2IYIYRIjn94cSKnGAmXzo6Q1MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcG5ZaGdoaEVpT2YzaHhJcWNZQ1pmT2pwRFV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yZjMxOWUtMjY4NS00NDI3LWFlYzAt
ZWQ2MGJhYjc1NzJmLzEvcG5ZaGdoaEVpT2YzaHhJcWNZQ1pmT2pwRFV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8yZjMxOWUtMjY4NS00NDI3LWFlYzAtZWQ2MGJhYjc1NzJm
LzEvcG5ZaGdoaEVpT2YzaHhJcWNZQ1pmT2pwRFV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOvG7ipbW
UxVMRTdVkcvKK2bPxoVqqdaW7uWZ+O33wmHlKubKSKdj6uTHSTVtFxfgZLn/m/vs
A38hpHTknqYaWW+8jLMCaf9OHimhFTOas+EKBLlbvUtOaQASgjNK6xRwJchb/w0q
PViq919BPPZ+41VqWg8XFVMQ8otXqWiHRmFcidYQgdKXthlX5ecTA7jpw7sfgmJ8
I5GmVxqjyXUQ7GL1Kx+jZ7N1bz1jIx+9MLMp+CYEfsBeXua9Z//iY1eit5LmauFL
WsqxCmF+TRwihyw6T7y5bKkpx8k7Sv4eL3hRn0eszjN1bbJx/VEGg1mTGZwtISN4
j1KfZeENAWksdQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:28:59 2025 by rpki-client