Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
File: pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft (raw, json)
Hash identifier: Q1Yz0e5TMLXy0eWSvIGnjg4cmYzsm1wbe2oYBLaitSU=
Subject key identifier: 9D:F2:DB:63:5C:25:C5:4A:8F:BD:22:FF:71:F9:BD:9E:2B:28:7F:2F
Authority key identifier: A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A
Certificate issuer: /CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a
Certificate serial: 0198D65F7C30F81D68BA971E6092EFA4D08F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:00:38 +0000
Manifest this update: Sat 23 Aug 2025 10:00:38 +0000
Manifest next update: Sun 24 Aug 2025 10:00:38 +0000
Files and hashes: 1: pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl (hash: F8WOkFwzGf7slj5gxjq4/bTKJZFJXeyI9J3b2HuaIts=)
2: t403LtXkOSW8w7w_vK-2ppXvWVA.roa (hash: kUS7ckaNEkh4qS4uYt0WI3yhqZiJYbt1KK2dO98adJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:7c:30:f8:1d:68:ba:97:1e:60:92:ef:a4:d0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a
Validity
Not Before: Aug 23 10:00:38 2025 GMT
Not After : Aug 24 10:00:38 2025 GMT
Subject: CN=9df2db635c25c54a8fbd22ff71f9bd9e2b287f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ac:8c:77:00:d7:86:f1:88:ec:fd:2e:53:67:
de:b8:2b:4d:25:5e:15:ae:26:23:60:df:a9:ea:86:
7a:53:7f:f4:9f:1a:c9:6b:44:17:97:45:46:6e:18:
ab:42:73:7a:82:4f:c6:4e:c2:6a:91:43:4e:d6:f5:
7f:fa:d4:e6:e5:52:28:b1:d3:31:ee:be:02:33:42:
50:f9:52:c0:e4:9f:37:e9:6c:2e:96:40:c6:d8:57:
54:2d:0c:d1:29:de:d4:fa:0d:9a:b7:1a:04:13:25:
bd:5a:e5:0c:68:56:cf:26:96:38:5e:5a:0b:78:ed:
40:ff:6c:0a:3b:98:cb:f8:ff:b4:d1:23:34:fe:d3:
8e:7f:62:ae:c1:92:1d:55:56:9b:b4:33:27:48:1c:
b4:70:dd:aa:1f:82:47:9a:db:bb:da:81:d7:5e:46:
17:da:e0:b6:5f:a5:78:ac:3e:ef:59:69:af:76:c3:
6d:8f:4f:f8:6a:03:35:eb:81:8c:a8:c5:c0:27:71:
86:52:f3:be:72:8d:87:be:e4:28:45:3c:a1:96:59:
fa:08:25:b7:e8:e3:64:57:68:1c:5e:f2:f2:40:df:
f0:69:e9:7e:bc:45:f2:7f:18:9f:0e:58:5f:fb:bf:
38:b5:0d:5f:58:54:c4:bf:1f:94:c2:49:72:a0:0f:
1a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F2:DB:63:5C:25:C5:4A:8F:BD:22:FF:71:F9:BD:9E:2B:28:7F:2F
X509v3 Authority Key Identifier:
keyid:A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:fa:4d:ea:6f:7e:24:10:74:67:b9:a3:5a:3a:03:ac:ae:cd:
81:02:56:b7:5f:e6:52:69:0e:fa:4c:d7:84:2d:ee:20:5e:a1:
06:2c:6b:6d:ed:5c:7d:9f:99:7f:0e:51:d6:44:0f:71:0c:73:
bb:c7:d3:2d:ba:79:2e:36:82:13:b7:5f:60:3b:8c:40:24:3c:
88:9b:3b:fd:a6:bc:a9:08:7a:30:60:65:12:9e:25:f7:44:51:
5c:80:32:6c:13:36:b8:d0:fd:c0:fc:7f:b7:ce:34:44:d7:a2:
01:9e:c6:3c:cb:90:12:28:b4:ee:bc:b1:c8:cc:25:11:e4:f9:
f6:b6:8e:9a:31:64:47:8b:14:ae:17:b9:9f:76:f7:b7:df:6d:
05:75:03:59:a6:6b:dd:df:bb:f3:5c:2c:06:ee:d5:a3:87:52:
1e:a2:f1:7a:7f:45:d7:e8:59:75:52:f6:63:82:25:2b:b0:bd:
67:f3:56:fb:69:e5:a8:05:f7:d8:9d:9c:c1:2c:25:46:a0:cf:
23:c7:e3:e8:f9:5c:d0:fd:f0:25:82:8b:ed:d4:15:52:c8:bc:
c9:a9:6f:31:14:7c:56:6b:b9:1f:57:18:62:1e:e0:77:98:4c:
15:f7:07:9c:65:88:f2:95:bd:3c:22:de:fb:2a:62:08:5f:e0:
38:f8:6b:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX3ww+B1oupceYJLvpNCPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MzA3NWNiYjdlYjE2OTNlZTcxYmM5MGU1ZjczZGFkYzIy
NWQ5MWEwHhcNMjUwODIzMTAwMDM4WhcNMjUwODI0MTAwMDM4WjAzMTEwLwYDVQQD
Eyg5ZGYyZGI2MzVjMjVjNTRhOGZiZDIyZmY3MWY5YmQ5ZTJiMjg3ZjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqyMdwDXhvGI7P0uU2feuCtNJV4V
riYjYN+p6oZ6U3/0nxrJa0QXl0VGbhirQnN6gk/GTsJqkUNO1vV/+tTm5VIosdMx
7r4CM0JQ+VLA5J836WwulkDG2FdULQzRKd7U+g2atxoEEyW9WuUMaFbPJpY4XloL
eO1A/2wKO5jL+P+00SM0/tOOf2KuwZIdVVabtDMnSBy0cN2qH4JHmtu72oHXXkYX
2uC2X6V4rD7vWWmvdsNtj0/4agM164GMqMXAJ3GGUvO+co2HvuQoRTyhlln6CCW3
6ONkV2gcXvLyQN/wael+vEXyfxifDlhf+784tQ1fWFTEvx+UwklyoA8agwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3y22NcJcVKj70i/3H5vZ4rKH8vMB8GA1UdIwQY
MBaAFKYwdcu36xaT7nG8kOX3Pa3CJdkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGpCMXk3ZnJGcFB1Y2J5UTVmYzlyY0lsMlJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iYmU5ZmYtMjM2NS00OWM4LTk4ZDYt
ZTcxYzMxN2EzZmE4LzEvcGpCMXk3ZnJGcFB1Y2J5UTVmYzlyY0lsMlJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9iYmU5ZmYtMjM2NS00OWM4LTk4ZDYtZTcxYzMxN2EzZmE4
LzEvcGpCMXk3ZnJGcFB1Y2J5UTVmYzlyY0lsMlJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjPpN6m9+
JBB0Z7mjWjoDrK7NgQJWt1/mUmkO+kzXhC3uIF6hBixrbe1cfZ+Zfw5R1kQPcQxz
u8fTLbp5LjaCE7dfYDuMQCQ8iJs7/aa8qQh6MGBlEp4l90RRXIAybBM2uND9wPx/
t840RNeiAZ7GPMuQEii07ryxyMwlEeT59raOmjFkR4sUrhe5n3b3t99tBXUDWaZr
3d+781wsBu7Vo4dSHqLxen9F1+hZdVL2Y4IlK7C9Z/NW+2nlqAX32J2cwSwlRqDP
I8fj6Plc0P3wJYKL7dQVUsi8yalvMRR8Vmu5H1cYYh7gd5hMFfcHnGWI8pW9PCLe
+ypiCF/gOPhr1Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:22 2025 by rpki-client