Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.mft
File: PKap1LWSRrTjNhThpLWRthGOihU.mft (raw, json)
Hash identifier: lwVS119SUdP8QyQ48O6F9OZUDVOYK3pxZJk5ulsK0nw=
Subject key identifier: DC:82:A2:18:8B:55:BB:E3:AC:1E:00:F8:01:B0:05:A7:D0:A8:C1:63
Authority key identifier: 3C:A6:A9:D4:B5:92:46:B4:E3:36:14:E1:A4:B5:91:B6:11:8E:8A:15
Certificate issuer: /CN=3ca6a9d4b59246b4e33614e1a4b591b6118e8a15
Certificate serial: 0197B6A1121C29159353EB3CC6F8527B2B49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKap1LWSRrTjNhThpLWRthGOihU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.mft
Manifest number: 1158
Signing time: Sat 28 Jun 2025 13:01:38 +0000
Manifest this update: Sat 28 Jun 2025 13:01:38 +0000
Manifest next update: Sun 29 Jun 2025 13:01:38 +0000
Files and hashes: 1: PKap1LWSRrTjNhThpLWRthGOihU.crl (hash: tLMeL9OOpAsWLheO77trsBiVdQ884qEbOqdQQNfM+xk=)
2: Szhjvm0y4QI0uwIjWJbCdPZPvps.roa (hash: Y0iaHG2LAJbIgjzTxyOFn6Uuz+FyO1yYuNhr0qnz3To=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PKap1LWSRrTjNhThpLWRthGOihU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:12:1c:29:15:93:53:eb:3c:c6:f8:52:7b:2b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ca6a9d4b59246b4e33614e1a4b591b6118e8a15
Validity
Not Before: Jun 28 13:01:38 2025 GMT
Not After : Jun 29 13:01:38 2025 GMT
Subject: CN=dc82a2188b55bbe3ac1e00f801b005a7d0a8c163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:93:29:ad:1b:38:79:86:14:c8:df:ea:93:d6:
11:36:20:e4:de:e8:4e:92:f0:11:ae:bf:79:12:58:
95:27:50:b9:c7:f0:ae:4f:42:24:97:54:38:a7:21:
a9:f3:d9:c5:37:77:6d:aa:38:e9:15:ee:9f:89:f7:
ed:ed:09:af:49:3d:f8:40:25:69:e1:85:cc:5c:47:
6c:11:ed:60:09:c6:9f:fd:ca:1e:20:e3:53:14:d6:
5d:aa:a4:59:d5:af:2b:9d:7c:4e:ee:4f:d7:3d:17:
a9:fb:b4:10:17:c6:cb:20:4e:8e:8a:7d:f8:67:a1:
78:13:9c:e3:67:f7:53:f6:28:dd:70:7e:b8:2a:08:
db:10:2d:2e:7c:fc:c7:be:08:ed:8e:75:04:e4:3b:
c8:8c:84:37:d4:e4:06:a7:53:1a:db:77:9e:21:6e:
0c:f9:3c:76:d4:f3:a1:fc:93:02:08:19:a4:8a:54:
a1:be:2d:a8:55:2e:a8:e7:79:b4:6a:ac:75:10:c0:
3c:b2:b6:7a:8a:2a:4a:f2:3d:52:18:28:81:3d:f3:
e7:2b:5e:ba:a2:7c:e3:ad:54:aa:be:40:d0:40:e2:
94:73:a8:3b:fb:71:55:58:ac:c6:48:ad:79:7f:16:
7c:43:48:a2:e5:6a:af:ba:29:b8:a0:96:48:c0:0f:
d2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:82:A2:18:8B:55:BB:E3:AC:1E:00:F8:01:B0:05:A7:D0:A8:C1:63
X509v3 Authority Key Identifier:
keyid:3C:A6:A9:D4:B5:92:46:B4:E3:36:14:E1:A4:B5:91:B6:11:8E:8A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKap1LWSRrTjNhThpLWRthGOihU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a1:ad:91:91:35:8c:7c:05:2d:1e:6e:76:ad:ec:67:6c:7d:
95:f9:a5:0f:41:6f:1c:42:6f:22:3b:47:03:72:f2:d5:3d:d5:
c7:49:1b:56:56:7b:0e:d3:bf:34:69:42:72:62:8f:e6:e9:e9:
c5:ad:60:d2:2e:ba:a6:55:9f:00:a1:66:7f:d1:c1:c3:61:a2:
bf:35:f4:6d:95:17:3d:2b:27:f4:a3:63:f2:4d:99:da:7a:14:
f8:a3:3a:e6:4c:7b:ba:2d:28:e4:5c:01:a0:5a:62:13:56:13:
69:48:6d:6c:49:58:61:ef:c1:b0:64:64:6b:b0:db:64:a3:30:
35:f9:30:2d:db:6c:68:a8:0f:f1:aa:7d:c2:0c:ac:8b:cf:2f:
ed:33:88:f5:30:9b:8e:25:00:04:14:fb:f6:2e:58:07:15:56:
df:af:df:0c:1e:f1:17:b6:7c:b5:84:bf:6e:93:45:a8:b1:ff:
09:b0:29:8b:73:48:40:e0:20:2b:25:92:45:ca:e2:4f:22:40:
6b:3c:6b:11:44:a0:5f:df:9e:c3:cf:f4:7a:a0:a1:9b:b1:ba:
04:2b:96:ac:e1:ce:a7:86:c8:f6:9d:1b:50:df:ea:5c:94:86:
8a:6c:37:dd:e0:ce:61:51:8d:51:a7:10:f5:06:5d:82:24:76:
51:40:5e:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oRIcKRWTU+s8xvhSeytJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjYTZhOWQ0YjU5MjQ2YjRlMzM2MTRlMWE0YjU5MWI2MTE4
ZThhMTUwHhcNMjUwNjI4MTMwMTM4WhcNMjUwNjI5MTMwMTM4WjAzMTEwLwYDVQQD
EyhkYzgyYTIxODhiNTViYmUzYWMxZTAwZjgwMWIwMDVhN2QwYThjMTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5MprRs4eYYUyN/qk9YRNiDk3uhO
kvARrr95EliVJ1C5x/CuT0Ikl1Q4pyGp89nFN3dtqjjpFe6fifft7QmvST34QCVp
4YXMXEdsEe1gCcaf/coeIONTFNZdqqRZ1a8rnXxO7k/XPRep+7QQF8bLIE6Oin34
Z6F4E5zjZ/dT9ijdcH64KgjbEC0ufPzHvgjtjnUE5DvIjIQ31OQGp1Ma23eeIW4M
+Tx21POh/JMCCBmkilShvi2oVS6o53m0aqx1EMA8srZ6iipK8j1SGCiBPfPnK166
onzjrVSqvkDQQOKUc6g7+3FVWKzGSK15fxZ8Q0ii5Wqvuim4oJZIwA/SzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNyCohiLVbvjrB4A+AGwBafQqMFjMB8GA1UdIwQY
MBaAFDymqdS1kka04zYU4aS1kbYRjooVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEthcDFMV1NSclRqTmhUaHBMV1J0aEdPaWhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9kZDY1MTgtYmYzNS00YzU4LWI4MWIt
OTRiMTQ5M2RmMWYyLzEvUEthcDFMV1NSclRqTmhUaHBMV1J0aEdPaWhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9kZDY1MTgtYmYzNS00YzU4LWI4MWItOTRiMTQ5M2RmMWYy
LzEvUEthcDFMV1NSclRqTmhUaHBMV1J0aEdPaWhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWaGtkZE1
jHwFLR5udq3sZ2x9lfmlD0FvHEJvIjtHA3Ly1T3Vx0kbVlZ7DtO/NGlCcmKP5unp
xa1g0i66plWfAKFmf9HBw2GivzX0bZUXPSsn9KNj8k2Z2noU+KM65kx7ui0o5FwB
oFpiE1YTaUhtbElYYe/BsGRka7DbZKMwNfkwLdtsaKgP8ap9wgysi88v7TOI9TCb
jiUABBT79i5YBxVW36/fDB7xF7Z8tYS/bpNFqLH/CbApi3NIQOAgKyWSRcriTyJA
azxrEUSgX9+ew8/0eqChm7G6BCuWrOHOp4bI9p0bUN/qXJSGimw33eDOYVGNUacQ
9QZdgiR2UUBexg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:17 2025 by rpki-client