Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
File: pT2P6iKY_zVCptwIkLEIySIYNjU.mft (raw, json)
Hash identifier: +qztM7G3h3UBaBOCrQUFkfZz3yUiMjA0zufc1yHGAao=
Subject key identifier: 0C:EA:4F:15:2C:C2:42:55:18:EB:6F:5A:EC:00:98:11:27:BA:0E:36
Authority key identifier: A5:3D:8F:EA:22:98:FF:35:42:A6:DC:08:90:B1:08:C9:22:18:36:35
Certificate issuer: /CN=a53d8fea2298ff3542a6dc0890b108c922183635
Certificate serial: 019873E201631D549B8AD4ECDE112637DD12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
Manifest number: 0E60
Signing time: Mon 04 Aug 2025 07:00:47 +0000
Manifest this update: Mon 04 Aug 2025 07:00:47 +0000
Manifest next update: Tue 05 Aug 2025 07:00:47 +0000
Files and hashes: 1: LIngfuzVyfR9OxY7cIj5Eo9UJhU.roa (hash: I7nX5ROvffTNGyuWZrNpPLtJJE4OFOAqh82VhWKzBDY=)
2: pT2P6iKY_zVCptwIkLEIySIYNjU.crl (hash: HOwrVYA3lAzpX6O7A7kA6Z4xYWLvcfzAXNDF4GyEeUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:01:63:1d:54:9b:8a:d4:ec:de:11:26:37:dd:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53d8fea2298ff3542a6dc0890b108c922183635
Validity
Not Before: Aug 4 07:00:47 2025 GMT
Not After : Aug 5 07:00:47 2025 GMT
Subject: CN=0cea4f152cc2425518eb6f5aec00981127ba0e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b2:e4:1c:9a:34:93:63:3d:1d:53:ca:84:f3:
9a:61:d6:74:f1:0f:3a:ca:89:7d:46:4f:87:22:90:
a1:ce:80:71:1f:80:c2:d6:5c:9d:26:50:b1:ff:29:
c3:80:01:5b:c4:b4:ca:e1:a4:af:97:39:47:27:77:
01:4b:21:53:dc:0b:66:79:f2:fb:b5:37:2d:b3:de:
54:fb:a2:7e:b6:4a:a0:4b:c5:13:29:c0:27:7c:f4:
b4:3f:d4:6c:c8:95:aa:79:05:1b:a2:68:12:9f:09:
5b:00:33:6f:44:e7:61:cd:d4:6a:1c:c3:a4:01:51:
fe:2f:81:0a:9e:97:61:28:a0:17:50:bf:db:c3:b3:
15:78:53:9f:61:48:c9:f0:18:17:27:ca:9e:86:7e:
72:ca:21:d8:b9:f5:7c:00:56:88:f7:80:14:1a:36:
f5:a2:8a:1e:84:6b:61:88:91:9e:30:4c:86:41:40:
1b:a7:6b:5b:e6:3b:9b:8a:a4:27:d5:f2:38:01:b8:
ee:29:e6:75:bc:fb:38:30:45:a9:75:7f:d5:36:f8:
02:70:65:96:e4:34:11:9f:8f:4e:c7:8d:91:02:af:
f9:6a:ba:5c:69:2c:59:6f:0f:47:60:6b:94:72:aa:
3f:27:24:5e:af:3d:c8:fa:f1:6b:97:dd:5c:1e:71:
0e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EA:4F:15:2C:C2:42:55:18:EB:6F:5A:EC:00:98:11:27:BA:0E:36
X509v3 Authority Key Identifier:
keyid:A5:3D:8F:EA:22:98:FF:35:42:A6:DC:08:90:B1:08:C9:22:18:36:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b4:b6:f3:bb:d2:c5:e3:7e:38:5f:e9:f2:49:80:11:05:71:
dd:d6:37:d1:af:2c:d8:59:0a:1b:16:00:c3:f0:2a:d3:49:f3:
04:86:26:43:69:b9:6a:71:af:a9:68:27:31:cc:42:70:14:b7:
26:fd:12:e0:20:56:4d:92:5a:58:af:ac:85:f8:b6:01:d5:5b:
d2:49:45:ba:01:c6:91:5e:7c:1c:36:50:0a:60:98:7f:9d:17:
a7:12:f4:ca:52:3c:42:5c:84:44:00:bb:6b:86:b9:7f:61:36:
a2:bb:ff:ac:4a:4e:1e:05:f4:8b:27:e3:0d:e7:01:13:63:f7:
e5:50:41:eb:dc:5a:5f:8a:5b:76:ac:d5:3d:b5:62:93:42:43:
fb:87:9e:16:e4:52:63:4d:a8:50:c7:41:f3:77:74:45:3f:e9:
13:5e:19:3a:7e:07:14:11:e8:c3:4a:61:f9:d3:a2:f0:54:38:
1a:f0:2c:e0:6b:3c:9e:90:c8:76:69:ff:3d:da:a2:29:62:56:
3e:ad:a9:bf:18:35:ad:d2:4c:14:cd:37:9e:80:4b:5f:92:14:
01:40:77:68:39:d5:4c:83:10:ba:62:a8:8c:ce:63:8e:ff:56:
4b:24:68:ca:79:0f:1a:53:9c:de:82:a6:9c:77:30:75:75:bf:
43:51:bd:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4gFjHVSbitTs3hEmN90SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1M2Q4ZmVhMjI5OGZmMzU0MmE2ZGMwODkwYjEwOGM5MjIx
ODM2MzUwHhcNMjUwODA0MDcwMDQ3WhcNMjUwODA1MDcwMDQ3WjAzMTEwLwYDVQQD
EygwY2VhNGYxNTJjYzI0MjU1MThlYjZmNWFlYzAwOTgxMTI3YmEwZTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rLkHJo0k2M9HVPKhPOaYdZ08Q86
yol9Rk+HIpChzoBxH4DC1lydJlCx/ynDgAFbxLTK4aSvlzlHJ3cBSyFT3AtmefL7
tTcts95U+6J+tkqgS8UTKcAnfPS0P9RsyJWqeQUbomgSnwlbADNvROdhzdRqHMOk
AVH+L4EKnpdhKKAXUL/bw7MVeFOfYUjJ8BgXJ8qehn5yyiHYufV8AFaI94AUGjb1
oooehGthiJGeMEyGQUAbp2tb5jubiqQn1fI4AbjuKeZ1vPs4MEWpdX/VNvgCcGWW
5DQRn49Ox42RAq/5arpcaSxZbw9HYGuUcqo/JyRerz3I+vFrl91cHnEORwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAzqTxUswkJVGOtvWuwAmBEnug42MB8GA1UdIwQY
MBaAFKU9j+oimP81QqbcCJCxCMkiGDY1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFQyUDZpS1lfelZDcHR3SWtMRUl5U0lZTmpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9iYTNiYTMtOTUxZS00MjgwLWFmOTgt
Y2Q4MjQyNzhjY2U4LzEvcFQyUDZpS1lfelZDcHR3SWtMRUl5U0lZTmpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9iYTNiYTMtOTUxZS00MjgwLWFmOTgtY2Q4MjQyNzhjY2U4
LzEvcFQyUDZpS1lfelZDcHR3SWtMRUl5U0lZTmpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlLS287vS
xeN+OF/p8kmAEQVx3dY30a8s2FkKGxYAw/Aq00nzBIYmQ2m5anGvqWgnMcxCcBS3
Jv0S4CBWTZJaWK+shfi2AdVb0klFugHGkV58HDZQCmCYf50XpxL0ylI8QlyERAC7
a4a5f2E2orv/rEpOHgX0iyfjDecBE2P35VBB69xaX4pbdqzVPbVik0JD+4eeFuRS
Y02oUMdB83d0RT/pE14ZOn4HFBHow0ph+dOi8FQ4GvAs4Gs8npDIdmn/PdqiKWJW
Pq2pvxg1rdJMFM03noBLX5IUAUB3aDnVTIMQumKojM5jjv9WSyRoynkPGlOc3oKm
nHcwdXW/Q1G9Ng==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:17 2025 by rpki-client