Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.mft
File: pYQcxzKsc43B4_5nwS5RBL74Y7o.mft (raw, json)
Hash identifier: 4TRib1oiHKlQTUmvJSbysQ79QoKwWaysb+aRoRjSLjM=
Subject key identifier: C2:41:B3:0D:50:B8:40:FB:8A:81:67:40:E8:6E:1F:5C:47:B9:88:5E
Authority key identifier: A5:84:1C:C7:32:AC:73:8D:C1:E3:FE:67:C1:2E:51:04:BE:F8:63:BA
Certificate issuer: /CN=a5841cc732ac738dc1e3fe67c12e5104bef863ba
Certificate serial: 0198D54EA320D7200457EE25910D714F0FD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYQcxzKsc43B4_5nwS5RBL74Y7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.mft
Manifest number: 0C33
Signing time: Sat 23 Aug 2025 05:02:37 +0000
Manifest this update: Sat 23 Aug 2025 05:02:37 +0000
Manifest next update: Sun 24 Aug 2025 05:02:37 +0000
Files and hashes: 1: pYQcxzKsc43B4_5nwS5RBL74Y7o.crl (hash: Bdaxvgo5TynHvJzcrhOoxSyyef8m345020dbC0LgwSc=)
2: vkrMhuf_Nwa-DHFTVc7CunyiQxI.roa (hash: K2VF0naJWK7Qtyx/C6l0KfqLVoX8m+LdPWumnPHJSTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pYQcxzKsc43B4_5nwS5RBL74Y7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:a3:20:d7:20:04:57:ee:25:91:0d:71:4f:0f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5841cc732ac738dc1e3fe67c12e5104bef863ba
Validity
Not Before: Aug 23 05:02:37 2025 GMT
Not After : Aug 24 05:02:37 2025 GMT
Subject: CN=c241b30d50b840fb8a816740e86e1f5c47b9885e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1c:9b:4d:13:4d:13:4d:38:53:12:91:0d:aa:
03:8e:50:e8:87:3e:bc:0e:52:04:35:0e:8e:2d:f7:
5e:f8:c2:57:a8:bd:98:53:bc:fb:18:6a:46:76:57:
eb:98:01:b3:fc:bf:62:99:45:4c:89:aa:0a:18:6c:
6a:26:69:6e:b4:82:20:2f:90:6f:5a:f1:ed:ce:32:
83:ca:20:a0:1f:01:4a:31:5f:23:14:3a:5c:a6:4d:
e6:72:36:11:be:9b:e1:87:1d:b4:21:43:ad:a7:32:
f2:c9:ec:42:68:7f:9c:20:86:d1:1d:8d:57:58:8a:
08:21:32:eb:e7:f7:3c:60:ca:0b:a3:84:31:c5:9b:
7d:87:97:59:2a:29:2b:c8:ed:34:71:ab:21:e4:a5:
10:6d:a3:8e:4c:22:e4:f5:e9:c8:a9:1e:5d:c3:6d:
67:18:cd:5e:6b:cf:d2:33:4c:98:fe:1c:29:3b:86:
84:fd:6f:4f:9b:66:61:04:98:55:b4:ba:dd:82:b3:
85:60:95:78:5d:81:c3:94:cf:9e:c4:de:22:c5:78:
ec:39:15:b8:8c:25:cd:0a:bc:c3:24:be:31:35:0d:
12:eb:77:21:9a:26:29:e3:d9:23:f5:91:f2:b2:eb:
00:10:1c:af:df:5f:6e:04:fa:3d:13:78:bc:ac:4a:
b5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:41:B3:0D:50:B8:40:FB:8A:81:67:40:E8:6E:1F:5C:47:B9:88:5E
X509v3 Authority Key Identifier:
keyid:A5:84:1C:C7:32:AC:73:8D:C1:E3:FE:67:C1:2E:51:04:BE:F8:63:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYQcxzKsc43B4_5nwS5RBL74Y7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:32:dc:69:06:67:32:f2:7b:2f:e3:1d:16:37:1b:49:dc:e2:
99:a3:0d:cb:60:f3:39:f7:d8:04:1a:51:4d:28:7d:38:0c:f1:
88:0c:2b:1e:21:2f:ac:31:d1:d9:5d:06:fc:96:3a:c8:72:b0:
99:bc:28:b9:58:12:80:8a:74:94:7e:bc:6f:d6:98:17:2d:2c:
69:c8:ff:a7:07:aa:34:63:25:c2:57:22:be:2f:5e:78:10:44:
9b:ca:30:86:58:43:3e:25:7e:56:0a:49:51:ec:90:41:fc:fc:
0d:b2:a8:d5:56:a4:7b:1f:2f:dd:3f:6b:51:f0:26:02:1d:ed:
79:27:2e:ae:15:e5:16:c7:e4:71:7a:7a:cf:7a:2a:18:4a:65:
bb:eb:ba:9b:ea:5d:5d:8f:60:e3:ef:4e:92:83:67:ff:14:69:
bc:56:22:0d:22:0a:eb:f6:a3:6a:a3:ec:d1:1c:92:52:23:9a:
9a:7a:cb:ef:8e:23:9f:bf:86:e8:12:48:3e:2a:44:a9:82:3b:
4e:28:e8:93:9c:97:5a:b7:25:df:ba:76:7b:1b:8e:0a:cc:c1:
f6:4c:8e:e5:be:c6:a0:5c:9b:aa:5d:36:91:42:37:6c:69:40:
b5:1c:ed:5e:e6:e1:61:8d:54:ab:83:9b:77:01:9d:14:d4:aa:
d8:86:34:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTqMg1yAEV+4lkQ1xTw/TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ODQxY2M3MzJhYzczOGRjMWUzZmU2N2MxMmU1MTA0YmVm
ODYzYmEwHhcNMjUwODIzMDUwMjM3WhcNMjUwODI0MDUwMjM3WjAzMTEwLwYDVQQD
EyhjMjQxYjMwZDUwYjg0MGZiOGE4MTY3NDBlODZlMWY1YzQ3Yjk4ODVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hybTRNNE004UxKRDaoDjlDohz68
DlIENQ6OLfde+MJXqL2YU7z7GGpGdlfrmAGz/L9imUVMiaoKGGxqJmlutIIgL5Bv
WvHtzjKDyiCgHwFKMV8jFDpcpk3mcjYRvpvhhx20IUOtpzLyyexCaH+cIIbRHY1X
WIoIITLr5/c8YMoLo4QxxZt9h5dZKikryO00cash5KUQbaOOTCLk9enIqR5dw21n
GM1ea8/SM0yY/hwpO4aE/W9Pm2ZhBJhVtLrdgrOFYJV4XYHDlM+exN4ixXjsORW4
jCXNCrzDJL4xNQ0S63chmiYp49kj9ZHysusAEByv319uBPo9E3i8rEq19QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJBsw1QuED7ioFnQOhuH1xHuYheMB8GA1UdIwQY
MBaAFKWEHMcyrHONweP+Z8EuUQS++GO6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFlRY3h6S3NjNDNCNF81bndTNVJCTDc0WTdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8xNDFhMmEtMTk0Yi00MDJiLTkyZGQt
NjY2NjBiMjIyZmIwLzEvcFlRY3h6S3NjNDNCNF81bndTNVJCTDc0WTdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8xNDFhMmEtMTk0Yi00MDJiLTkyZGQtNjY2NjBiMjIyZmIw
LzEvcFlRY3h6S3NjNDNCNF81bndTNVJCTDc0WTdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANDLcaQZn
MvJ7L+MdFjcbSdzimaMNy2DzOffYBBpRTSh9OAzxiAwrHiEvrDHR2V0G/JY6yHKw
mbwouVgSgIp0lH68b9aYFy0sacj/pweqNGMlwlcivi9eeBBEm8owhlhDPiV+VgpJ
UeyQQfz8DbKo1Vakex8v3T9rUfAmAh3teScurhXlFsfkcXp6z3oqGEplu+u6m+pd
XY9g4+9OkoNn/xRpvFYiDSIK6/ajaqPs0RySUiOamnrL744jn7+G6BJIPipEqYI7
Tijok5yXWrcl37p2exuOCszB9kyO5b7GoFybql02kUI3bGlAtRztXubhYY1Uq4Ob
dwGdFNSq2IY0fw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:25 2025 by rpki-client