Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
File: P1vEQBQoW28-KHKuz11PM-Jozos.mft (raw, json)
Hash identifier: R6FJhKJLA3oVbcZE49037YXZkNfGsw8NFJADe0/oIaM=
Subject key identifier: F8:4D:AE:BF:72:0B:E5:54:56:6B:C1:F8:F3:F9:EF:D3:F0:D1:45:83
Authority key identifier: 3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
Certificate issuer: /CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Certificate serial: 0198D7A97772A852076A9F78450675662B41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
Manifest number: 0749
Signing time: Sat 23 Aug 2025 16:01:04 +0000
Manifest this update: Sat 23 Aug 2025 16:01:04 +0000
Manifest next update: Sun 24 Aug 2025 16:01:04 +0000
Files and hashes: 1: AcEkQsHgOk9cJvafcwY_24-gqJU.roa (hash: P0WFMbng9Ro3ND0yeTy1ArY8fd/+6N/p4Vx6hJOnIpk=)
2: AhGacAZRO8Gx3hNBgiDjl4oZgqI.roa (hash: /EpJOq122VUgjLXObaWDOaWwB7lmX3CrZN3WS11mATY=)
3: P1vEQBQoW28-KHKuz11PM-Jozos.crl (hash: ShdgAXI919t+L1fteoq9Fi8FmysoTVzzs86naEk4WeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:77:72:a8:52:07:6a:9f:78:45:06:75:66:2b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Validity
Not Before: Aug 23 16:01:04 2025 GMT
Not After : Aug 24 16:01:04 2025 GMT
Subject: CN=f84daebf720be554566bc1f8f3f9efd3f0d14583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d6:6a:18:2e:e8:56:cc:73:90:89:d6:79:4f:
83:f0:72:af:65:55:d2:ca:eb:c2:e4:05:29:97:c1:
c4:aa:81:61:9e:df:7c:ef:d3:87:69:8d:c6:fb:78:
a9:77:c4:9e:35:d7:7d:48:d1:2f:36:d7:d3:64:3b:
ab:2d:0b:57:a1:19:8e:19:2b:6c:47:35:0f:72:33:
bf:48:62:06:c2:bd:36:7b:eb:14:6b:e7:83:15:2c:
d9:52:c0:77:cc:00:a7:6c:30:9b:0f:ae:98:38:e7:
97:9c:be:80:dd:9c:46:00:68:fe:b7:d2:7f:6d:84:
e0:78:da:53:28:21:84:58:ba:3c:68:f2:92:fe:19:
2e:ec:96:58:6c:32:bc:df:8f:2b:c2:78:eb:a7:fb:
98:88:d0:8a:87:d6:23:1a:e2:56:02:b4:40:8a:37:
c4:63:a0:7d:7d:f0:c2:5a:2a:a1:85:9b:dc:a0:aa:
2c:b4:db:b2:0f:a7:dd:b4:34:9f:7c:72:1e:9f:9b:
19:dc:4a:f9:4b:f4:ec:fc:b2:bd:8e:09:91:ab:b0:
08:60:aa:9c:94:9b:e4:be:e5:92:14:80:ea:5e:ee:
67:88:2b:0b:50:ac:ac:0d:53:f1:80:26:06:15:80:
6f:72:a4:d4:57:a3:f3:71:f3:48:cc:ac:38:c0:99:
91:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:4D:AE:BF:72:0B:E5:54:56:6B:C1:F8:F3:F9:EF:D3:F0:D1:45:83
X509v3 Authority Key Identifier:
keyid:3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:86:04:2c:40:71:3a:e6:16:45:96:a6:e8:2d:bd:52:d2:bc:
7b:39:7a:bc:39:7c:c7:0a:ba:ee:5b:63:0f:6a:44:07:ff:2f:
ea:69:8e:27:fa:09:f2:ac:34:ba:2d:bf:93:1b:bc:0e:8d:82:
ab:fa:52:69:88:ba:8b:36:8d:aa:d1:71:25:13:57:2e:55:47:
09:dd:91:9c:49:ad:41:59:01:9c:b9:78:1c:5b:4c:3b:62:70:
ac:fa:4f:01:3f:b6:07:55:47:3a:97:30:ed:58:07:66:31:9f:
f3:93:49:a7:05:09:33:79:e1:a7:50:8f:79:b7:65:8f:4b:f1:
73:c5:c8:53:de:2e:43:52:e9:6d:75:8f:dc:96:4f:36:4a:bc:
c5:75:6c:3b:72:b3:b7:73:19:21:2a:4b:a3:a0:73:4e:69:41:
30:89:3d:da:51:c2:fa:84:df:58:64:08:17:dc:96:b1:4e:46:
9c:89:1c:74:6e:90:5b:19:82:bd:43:ac:7a:ad:2f:ba:66:30:
07:f1:60:b8:e7:96:1c:05:28:8a:72:9e:56:22:1a:e9:68:eb:
99:72:16:cf:c8:52:65:31:fd:44:64:04:00:a4:32:ec:67:d7:
8b:b9:77:a8:42:64:09:d6:13:44:5d:d5:43:a1:e4:ac:06:00:
4c:16:5e:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXqXdyqFIHap94RQZ1ZitBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmNWJjNDQwMTQyODViNmYzZTI4NzJhZWNmNWQ0ZjMzZTI2
OGNlOGIwHhcNMjUwODIzMTYwMTA0WhcNMjUwODI0MTYwMTA0WjAzMTEwLwYDVQQD
EyhmODRkYWViZjcyMGJlNTU0NTY2YmMxZjhmM2Y5ZWZkM2YwZDE0NTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdZqGC7oVsxzkInWeU+D8HKvZVXS
yuvC5AUpl8HEqoFhnt9879OHaY3G+3ipd8SeNdd9SNEvNtfTZDurLQtXoRmOGSts
RzUPcjO/SGIGwr02e+sUa+eDFSzZUsB3zACnbDCbD66YOOeXnL6A3ZxGAGj+t9J/
bYTgeNpTKCGEWLo8aPKS/hku7JZYbDK8348rwnjrp/uYiNCKh9YjGuJWArRAijfE
Y6B9ffDCWiqhhZvcoKostNuyD6fdtDSffHIen5sZ3Er5S/Ts/LK9jgmRq7AIYKqc
lJvkvuWSFIDqXu5niCsLUKysDVPxgCYGFYBvcqTUV6PzcfNIzKw4wJmRvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhNrr9yC+VUVmvB+PP579Pw0UWDMB8GA1UdIwQY
MBaAFD9bxEAUKFtvPihyrs9dTzPiaM6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDF2RVFCUW9XMjgtS0hLdXoxMVBNLUpvem9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zMjI2OTMtZTU4Yi00OGUyLWJkZDkt
MDI5NTNjZTYzODQzLzEvUDF2RVFCUW9XMjgtS0hLdXoxMVBNLUpvem9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8zMjI2OTMtZTU4Yi00OGUyLWJkZDktMDI5NTNjZTYzODQz
LzEvUDF2RVFCUW9XMjgtS0hLdXoxMVBNLUpvem9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOIYELEBx
OuYWRZam6C29UtK8ezl6vDl8xwq67ltjD2pEB/8v6mmOJ/oJ8qw0ui2/kxu8Do2C
q/pSaYi6izaNqtFxJRNXLlVHCd2RnEmtQVkBnLl4HFtMO2JwrPpPAT+2B1VHOpcw
7VgHZjGf85NJpwUJM3nhp1CPebdlj0vxc8XIU94uQ1LpbXWP3JZPNkq8xXVsO3Kz
t3MZISpLo6BzTmlBMIk92lHC+oTfWGQIF9yWsU5GnIkcdG6QWxmCvUOseq0vumYw
B/FguOeWHAUoinKeViIa6WjrmXIWz8hSZTH9RGQEAKQy7GfXi7l3qEJkCdYTRF3V
Q6HkrAYATBZesw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:03:26 2025 by rpki-client