Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
File: PxckOVmdfaUleXiZvyE7jmNVSRQ.mft (raw, json)
Hash identifier: QaKvcJL+k2LNFR0rOl3LLGpziBUagsMVvAq4B3CAwBE=
Subject key identifier: 69:85:15:0C:A6:AD:44:B8:21:3D:D1:B9:28:5C:18:1F:38:E1:5B:1B
Authority key identifier: 3F:17:24:39:59:9D:7D:A5:25:79:78:99:BF:21:3B:8E:63:55:49:14
Certificate issuer: /CN=3f172439599d7da525797899bf213b8e63554914
Certificate serial: 0198D404C6440B3ED2B1DBF2B862479510D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
Manifest number: 15DA
Signing time: Fri 22 Aug 2025 23:02:19 +0000
Manifest this update: Fri 22 Aug 2025 23:02:19 +0000
Manifest next update: Sat 23 Aug 2025 23:02:19 +0000
Files and hashes: 1: ET0yOb6N2KPn9sEOeciwveLzfFQ.roa (hash: 5UaUVXzPjnKQ9N0meCwxNszuKgkyrbDITbh3/+eJ6rg=)
2: PxckOVmdfaUleXiZvyE7jmNVSRQ.crl (hash: 9sEyA+fzPTSK4kaBjfF5EnuhEth/0K4H/t3QKmKRDI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:c6:44:0b:3e:d2:b1:db:f2:b8:62:47:95:10:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f172439599d7da525797899bf213b8e63554914
Validity
Not Before: Aug 22 23:02:19 2025 GMT
Not After : Aug 23 23:02:19 2025 GMT
Subject: CN=6985150ca6ad44b8213dd1b9285c181f38e15b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:44:8e:2c:32:07:47:48:ec:f4:37:98:e7:4a:
c0:01:24:ec:2e:3d:ee:9a:d6:37:75:ec:37:25:c6:
31:95:14:77:98:af:57:9c:ba:e7:20:f6:de:af:e3:
d9:fa:26:dd:1f:c6:41:05:5f:b9:7d:40:46:98:1c:
81:32:db:90:65:01:fd:ea:b3:d3:e3:3f:20:e9:21:
35:97:98:96:24:5d:98:37:8e:a8:1c:7b:46:dd:35:
0b:3b:b8:fe:1a:98:3d:4a:4b:ee:68:d1:25:99:73:
aa:bf:db:50:0b:cd:54:c8:7c:01:b7:7b:8d:1c:a1:
e7:0a:b5:06:6a:9b:b1:43:e7:ab:35:f9:b0:41:5f:
58:31:e8:10:c0:74:c4:6e:ce:7b:74:12:56:e4:2c:
d1:2b:12:f5:db:86:32:77:1b:4f:4e:3a:b0:12:de:
7b:29:5e:96:78:b2:0e:ef:46:ed:7e:8f:57:71:c0:
78:a4:7e:70:11:be:4e:46:98:f2:80:d9:13:06:75:
09:a7:cf:47:48:36:56:61:ed:e2:75:b2:03:60:73:
bd:c3:d0:93:1d:1f:41:14:48:30:b8:31:4f:fc:42:
50:9a:46:fb:58:d9:26:8a:24:9e:36:ea:63:13:63:
66:26:c2:8f:ef:41:3e:10:c8:72:a6:90:e3:13:ec:
92:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:85:15:0C:A6:AD:44:B8:21:3D:D1:B9:28:5C:18:1F:38:E1:5B:1B
X509v3 Authority Key Identifier:
keyid:3F:17:24:39:59:9D:7D:A5:25:79:78:99:BF:21:3B:8E:63:55:49:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c8:5c:12:20:c2:af:dc:8c:30:e7:e8:ca:e7:1c:89:ba:34:
44:ea:a6:32:ae:ea:59:82:a3:11:f7:54:ba:06:69:90:ac:23:
58:bb:23:b2:c1:50:3e:52:4a:5e:46:66:c3:e5:9d:0d:91:9d:
a7:26:42:4e:61:b1:72:7c:db:35:12:6b:64:f5:a4:02:a4:8a:
61:ba:4f:49:45:b6:61:f4:3c:13:9a:4e:63:dd:f5:49:d0:34:
83:2c:45:ad:87:c2:2c:7b:61:ae:9a:0b:bf:7b:40:bc:c9:ee:
63:62:ba:71:dc:fd:0b:bc:72:cd:bf:3d:f0:60:31:31:e0:1f:
05:9b:51:15:88:d6:9e:71:d6:7f:c8:70:e9:ac:92:50:e7:a5:
b6:c6:5d:9f:de:36:63:6d:a2:8c:e4:50:83:ba:8f:e5:26:77:
d1:da:76:96:67:4b:9d:ac:98:47:55:a2:5f:04:28:b7:77:4f:
36:46:64:e0:02:20:10:b7:59:1b:6d:20:bd:01:a9:6f:b1:53:
68:05:25:84:d0:87:58:8e:cf:fb:ac:fb:23:58:2a:e3:e3:a6:
ff:46:f1:a0:15:7d:27:f8:4f:11:74:e8:8b:75:23:29:7e:12:
14:e5:26:1a:e7:52:ac:f1:82:82:ad:87:c7:27:bb:c7:27:36:
de:06:c2:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUBMZECz7SsdvyuGJHlRDYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMTcyNDM5NTk5ZDdkYTUyNTc5Nzg5OWJmMjEzYjhlNjM1
NTQ5MTQwHhcNMjUwODIyMjMwMjE5WhcNMjUwODIzMjMwMjE5WjAzMTEwLwYDVQQD
Eyg2OTg1MTUwY2E2YWQ0NGI4MjEzZGQxYjkyODVjMTgxZjM4ZTE1YjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60SOLDIHR0js9DeY50rAASTsLj3u
mtY3dew3JcYxlRR3mK9XnLrnIPber+PZ+ibdH8ZBBV+5fUBGmByBMtuQZQH96rPT
4z8g6SE1l5iWJF2YN46oHHtG3TULO7j+Gpg9SkvuaNElmXOqv9tQC81UyHwBt3uN
HKHnCrUGapuxQ+erNfmwQV9YMegQwHTEbs57dBJW5CzRKxL124YydxtPTjqwEt57
KV6WeLIO70btfo9XccB4pH5wEb5ORpjygNkTBnUJp89HSDZWYe3idbIDYHO9w9CT
HR9BFEgwuDFP/EJQmkb7WNkmiiSeNupjE2NmJsKP70E+EMhyppDjE+ySSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmFFQymrUS4IT3RuShcGB844VsbMB8GA1UdIwQY
MBaAFD8XJDlZnX2lJXl4mb8hO45jVUkUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHhja09WbWRmYVVsZVhpWnZ5RTdqbU5WU1JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi85ZjlhYTktMDljMC00OGNjLWIwYTEt
ODg3MzMxZWZiNzE1LzEvUHhja09WbWRmYVVsZVhpWnZ5RTdqbU5WU1JRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi85ZjlhYTktMDljMC00OGNjLWIwYTEtODg3MzMxZWZiNzE1
LzEvUHhja09WbWRmYVVsZVhpWnZ5RTdqbU5WU1JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm8hcEiDC
r9yMMOfoyuccibo0ROqmMq7qWYKjEfdUugZpkKwjWLsjssFQPlJKXkZmw+WdDZGd
pyZCTmGxcnzbNRJrZPWkAqSKYbpPSUW2YfQ8E5pOY931SdA0gyxFrYfCLHthrpoL
v3tAvMnuY2K6cdz9C7xyzb898GAxMeAfBZtRFYjWnnHWf8hw6aySUOeltsZdn942
Y22ijORQg7qP5SZ30dp2lmdLnayYR1WiXwQot3dPNkZk4AIgELdZG20gvQGpb7FT
aAUlhNCHWI7P+6z7I1gq4+Om/0bxoBV9J/hPEXToi3UjKX4SFOUmGudSrPGCgq2H
xye7xyc23gbChg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:17:59 2025 by rpki-client