Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
File: PB4_3feITXhacI_U5mS2LekQ6-g.mft (raw, json)
Hash identifier: h7wV0JJdOcGWCH5J3FF3SqQl0//9t5SIv0vOTca6S4U=
Subject key identifier: E2:CA:40:47:15:12:57:FB:9E:1F:A6:9B:05:E4:76:1A:30:E8:CA:19
Authority key identifier: 3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8
Certificate issuer: /CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8
Certificate serial: 0197B7EA370878C2DBC60B79A094D63440D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 19:01:09 +0000
Manifest this update: Sat 28 Jun 2025 19:01:09 +0000
Manifest next update: Sun 29 Jun 2025 19:01:09 +0000
Files and hashes: 1: PB4_3feITXhacI_U5mS2LekQ6-g.crl (hash: B8zkdcnZ/MVHYKM5PXI5tYOlBq0x+YcbJEOQetEdVEE=)
2: rVIEtQUeZ960hMeEwx6AF679dhM.roa (hash: s8qUIneeKVi7X6yParz6sZwUc96D/kko1q8RujoMkJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:37:08:78:c2:db:c6:0b:79:a0:94:d6:34:40:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8
Validity
Not Before: Jun 28 19:01:09 2025 GMT
Not After : Jun 29 19:01:09 2025 GMT
Subject: CN=e2ca4047151257fb9e1fa69b05e4761a30e8ca19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:13:c8:f6:77:61:11:bd:f9:64:1d:7e:f6:4b:
aa:ae:60:2e:73:8c:81:1c:ca:62:a0:96:93:a6:4b:
23:3b:70:12:70:b2:b4:c6:f4:60:76:83:76:e9:31:
ce:8d:f8:30:27:d6:b2:4f:cb:3e:0a:6b:0d:a7:24:
18:b2:0f:1b:b7:5f:0d:72:3c:b5:92:cc:65:25:f6:
1a:d5:a6:b6:74:3c:0b:d5:ba:37:3e:ec:e9:9c:2b:
fb:7f:3f:e0:b8:84:35:65:ac:89:0b:95:fd:9d:d7:
f0:aa:fd:10:b4:39:76:6a:bb:58:2e:c9:4e:0b:6b:
cf:09:1f:b0:c7:f6:ba:65:0e:7d:2a:c4:a2:7a:6c:
ba:33:df:58:c5:2b:8c:ad:95:d3:3a:ea:16:e5:87:
e3:cc:17:39:89:78:20:5e:44:2e:23:36:dc:04:be:
1c:59:9b:df:55:5e:6d:3e:8f:1e:13:30:5b:bb:0e:
59:9e:e3:d8:0a:87:91:40:ac:cc:3c:d1:a7:1a:bb:
65:bd:71:3c:5c:37:b5:e8:4a:2a:74:c6:7e:a1:42:
dc:fc:14:07:cb:73:46:5c:6c:c6:eb:74:61:b6:76:
c2:a4:ab:ab:ef:ea:96:f1:ef:71:96:57:87:4d:38:
75:73:0c:65:8c:2b:c3:21:6e:ed:e5:9d:1b:fd:cf:
f2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CA:40:47:15:12:57:FB:9E:1F:A6:9B:05:E4:76:1A:30:E8:CA:19
X509v3 Authority Key Identifier:
keyid:3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:96:31:5a:9e:61:2e:05:2d:0b:04:7a:0b:ec:fd:57:fc:a0:
ea:c0:23:c5:79:35:61:95:f5:0e:82:fd:b9:f3:ae:49:e1:89:
3e:68:ab:8a:18:91:5b:8f:e6:ac:f6:ca:52:58:50:92:b4:b6:
f1:bf:85:82:e3:35:13:fe:29:71:1f:4e:5e:96:b2:84:d8:0a:
92:67:25:0f:39:35:ea:7c:0f:e9:39:82:e7:90:8a:bd:d2:31:
59:25:79:29:3c:ee:49:13:d9:5f:46:2e:2d:69:d3:11:5c:a4:
e2:b6:c8:ef:e1:24:aa:a5:7b:d4:c7:24:b9:f5:b9:9c:a8:38:
6a:06:23:f7:07:e7:02:2a:42:4a:3c:87:f1:5a:13:b4:1e:57:
47:75:ce:33:7b:47:29:2c:e3:3b:f6:91:f8:67:45:69:50:4b:
b7:ec:1c:9e:14:5d:56:dc:cc:c5:4f:54:27:5a:70:75:6d:dd:
a2:72:fb:46:61:02:b3:37:e6:9e:02:14:04:a2:62:cf:48:ab:
94:f7:ff:c6:35:71:76:56:82:6b:b4:4e:1a:7f:de:ad:28:85:
af:76:ee:82:77:a4:9a:91:ec:4a:40:a2:f5:9d:63:7a:c7:56:
86:11:aa:83:8c:1c:ae:16:b7:b3:70:e0:e4:19:a4:1a:bc:f5:
3a:85:7c:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36jcIeMLbxgt5oJTWNEDVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMWUzZmRkZjc4ODRkNzg1YTcwOGZkNGU2NjRiNjJkZTkx
MGViZTgwHhcNMjUwNjI4MTkwMTA5WhcNMjUwNjI5MTkwMTA5WjAzMTEwLwYDVQQD
EyhlMmNhNDA0NzE1MTI1N2ZiOWUxZmE2OWIwNWU0NzYxYTMwZThjYTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxPI9ndhEb35ZB1+9kuqrmAuc4yB
HMpioJaTpksjO3AScLK0xvRgdoN26THOjfgwJ9ayT8s+CmsNpyQYsg8bt18Ncjy1
ksxlJfYa1aa2dDwL1bo3PuzpnCv7fz/guIQ1ZayJC5X9ndfwqv0QtDl2artYLslO
C2vPCR+wx/a6ZQ59KsSiemy6M99YxSuMrZXTOuoW5YfjzBc5iXggXkQuIzbcBL4c
WZvfVV5tPo8eEzBbuw5ZnuPYCoeRQKzMPNGnGrtlvXE8XDe16EoqdMZ+oULc/BQH
y3NGXGzG63RhtnbCpKur7+qW8e9xlleHTTh1cwxljCvDIW7t5Z0b/c/yiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLKQEcVElf7nh+mmwXkdhow6MoZMB8GA1UdIwQY
MBaAFDweP933iE14WnCP1OZkti3pEOvoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEI0XzNmZUlUWGhhY0lfVTVtUzJMZWtRNi1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80ZThlNzQtNzdlNi00MWViLTkwNDct
NTljMThhZGEzNTJmLzEvUEI0XzNmZUlUWGhhY0lfVTVtUzJMZWtRNi1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS80ZThlNzQtNzdlNi00MWViLTkwNDctNTljMThhZGEzNTJm
LzEvUEI0XzNmZUlUWGhhY0lfVTVtUzJMZWtRNi1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABpYxWp5h
LgUtCwR6C+z9V/yg6sAjxXk1YZX1DoL9ufOuSeGJPmirihiRW4/mrPbKUlhQkrS2
8b+FguM1E/4pcR9OXpayhNgKkmclDzk16nwP6TmC55CKvdIxWSV5KTzuSRPZX0Yu
LWnTEVyk4rbI7+EkqqV71MckufW5nKg4agYj9wfnAipCSjyH8VoTtB5XR3XOM3tH
KSzjO/aR+GdFaVBLt+wcnhRdVtzMxU9UJ1pwdW3donL7RmECszfmngIUBKJiz0ir
lPf/xjVxdlaCa7ROGn/erSiFr3bugnekmpHsSkCi9Z1jesdWhhGqg4wcrha3s3Dg
5BmkGrz1OoV8wg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:31 2025 by rpki-client