Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft
File: Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft (raw, json)
Hash identifier: /B8KgBJMyYdpTd1xi8+apFMaGFnDpsAqVv1ByosaY6w=
Subject key identifier: 2A:1C:C4:8A:34:1C:92:21:CE:40:5C:52:24:44:00:7B:30:AC:36:36
Authority key identifier: 3E:46:FA:1D:77:9C:19:6C:EB:28:02:91:06:B4:EF:7D:17:55:3D:2B
Certificate issuer: /CN=3e46fa1d779c196ceb28029106b4ef7d17553d2b
Certificate serial: 0197B6A1FEDE8AD82A08FDABC4B07C5AD371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pkb6HXecGWzrKAKRBrTvfRdVPSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft
Manifest number: 11DC
Signing time: Sat 28 Jun 2025 13:02:39 +0000
Manifest this update: Sat 28 Jun 2025 13:02:39 +0000
Manifest next update: Sun 29 Jun 2025 13:02:39 +0000
Files and hashes: 1: Pkb6HXecGWzrKAKRBrTvfRdVPSs.crl (hash: chnLLZnVygqmDtVigwOPynOF9HdOG2oOOIlvhzg38pA=)
2: TvTxBLGF9a81RGikK2pVw5Qclrk.roa (hash: Swsi8hcudUdP4trO5kArswNQiDBcmbNtUjmXbEXUd0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pkb6HXecGWzrKAKRBrTvfRdVPSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:fe:de:8a:d8:2a:08:fd:ab:c4:b0:7c:5a:d3:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e46fa1d779c196ceb28029106b4ef7d17553d2b
Validity
Not Before: Jun 28 13:02:39 2025 GMT
Not After : Jun 29 13:02:39 2025 GMT
Subject: CN=2a1cc48a341c9221ce405c522444007b30ac3636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0a:59:9a:9c:be:1a:6b:d7:38:ed:40:42:d3:
83:ff:ba:87:31:31:cd:01:ea:89:79:ec:6d:01:cc:
c1:b2:25:15:17:cb:cf:0b:26:6a:cc:87:e6:79:88:
f5:b7:50:2f:f7:d2:6a:de:1e:c7:f1:00:8c:02:1c:
f5:4a:78:03:96:66:2b:c8:60:49:76:c8:b5:9d:3a:
cc:d1:ae:b4:27:e9:b8:cd:af:b7:63:9c:b3:75:88:
f6:81:68:44:f3:c4:56:d2:1e:01:fb:15:d9:72:18:
4b:3c:61:4c:71:ed:c1:ff:ed:69:8b:90:98:6e:41:
10:79:3e:93:50:42:09:24:16:0d:e4:4d:c5:16:96:
a5:83:de:0b:2c:97:d8:87:92:ba:ac:e2:54:88:81:
61:09:85:66:39:7f:98:17:fe:83:da:29:6a:82:8e:
f4:be:ce:b7:f0:71:94:65:4b:e8:77:60:e1:c6:f3:
37:35:e9:d9:fc:10:8a:61:09:df:a6:2a:a9:9e:37:
40:51:1a:04:8f:e1:06:79:77:87:05:c6:51:29:d0:
a3:97:5d:01:8c:a1:8b:66:77:92:c9:e2:52:01:64:
a2:bf:25:61:b3:d6:b1:23:7c:8c:33:ea:b3:19:c1:
79:b0:6b:0c:c1:ca:1f:ca:e8:e7:aa:67:48:3e:94:
f5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1C:C4:8A:34:1C:92:21:CE:40:5C:52:24:44:00:7B:30:AC:36:36
X509v3 Authority Key Identifier:
keyid:3E:46:FA:1D:77:9C:19:6C:EB:28:02:91:06:B4:EF:7D:17:55:3D:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pkb6HXecGWzrKAKRBrTvfRdVPSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c9:76:82:ae:d1:8b:ee:b3:0a:09:b8:3b:4a:7c:de:49:af:
c4:e9:8f:7a:76:1f:75:be:c5:b5:b8:f4:6b:2a:47:1f:65:a9:
82:11:93:5d:ca:cb:24:a1:48:b8:c4:44:2d:81:87:3d:23:22:
53:62:71:09:5f:6a:23:cd:2b:c9:4e:75:e7:97:2f:7e:e9:df:
b6:7d:3a:c4:91:62:56:12:90:4a:6f:6b:b0:bf:5a:6e:5b:95:
c5:8a:04:aa:71:44:cf:c6:32:33:b3:68:53:41:48:e5:96:f6:
d8:bf:5d:72:24:a3:3a:9e:fd:89:03:ca:61:4b:b3:67:a0:6b:
05:76:db:1a:e2:5d:78:64:a7:57:3c:e0:d5:58:b9:83:36:ce:
dd:67:c0:d4:0d:a2:6c:00:db:45:31:eb:86:82:ad:e4:58:91:
5d:fe:67:50:cd:bb:5e:35:4f:b7:43:8a:ff:27:b8:31:49:01:
08:8b:64:ba:8b:4e:a9:dc:cd:b6:44:00:dc:56:0a:e8:df:ae:
1d:f9:00:40:07:a9:32:43:41:52:39:46:41:86:7f:0e:c9:16:
44:62:b8:dc:2a:44:58:a5:5b:b4:6c:a3:5b:78:bc:a0:61:3f:
aa:4c:e4:c5:7c:a9:d6:48:03:50:3e:00:71:2f:3c:67:e6:4e:
83:c5:8d:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2of7eitgqCP2rxLB8WtNxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNDZmYTFkNzc5YzE5NmNlYjI4MDI5MTA2YjRlZjdkMTc1
NTNkMmIwHhcNMjUwNjI4MTMwMjM5WhcNMjUwNjI5MTMwMjM5WjAzMTEwLwYDVQQD
EygyYTFjYzQ4YTM0MWM5MjIxY2U0MDVjNTIyNDQ0MDA3YjMwYWMzNjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsApZmpy+GmvXOO1AQtOD/7qHMTHN
AeqJeextAczBsiUVF8vPCyZqzIfmeYj1t1Av99Jq3h7H8QCMAhz1SngDlmYryGBJ
dsi1nTrM0a60J+m4za+3Y5yzdYj2gWhE88RW0h4B+xXZchhLPGFMce3B/+1pi5CY
bkEQeT6TUEIJJBYN5E3FFpalg94LLJfYh5K6rOJUiIFhCYVmOX+YF/6D2ilqgo70
vs638HGUZUvod2DhxvM3NenZ/BCKYQnfpiqpnjdAURoEj+EGeXeHBcZRKdCjl10B
jKGLZneSyeJSAWSivyVhs9axI3yMM+qzGcF5sGsMwcofyujnqmdIPpT1NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCocxIo0HJIhzkBcUiREAHswrDY2MB8GA1UdIwQY
MBaAFD5G+h13nBls6ygCkQa0730XVT0rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGtiNkhYZWNHV3pyS0FLUkJyVHZmUmRWUFNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8wM2NiMzEtNjJmMi00OGM3LTliN2Yt
MGNkMWQyODk2NWQxLzEvUGtiNkhYZWNHV3pyS0FLUkJyVHZmUmRWUFNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8wM2NiMzEtNjJmMi00OGM3LTliN2YtMGNkMWQyODk2NWQx
LzEvUGtiNkhYZWNHV3pyS0FLUkJyVHZmUmRWUFNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARcl2gq7R
i+6zCgm4O0p83kmvxOmPenYfdb7Ftbj0aypHH2WpghGTXcrLJKFIuMRELYGHPSMi
U2JxCV9qI80ryU5155cvfunftn06xJFiVhKQSm9rsL9abluVxYoEqnFEz8YyM7No
U0FI5Zb22L9dciSjOp79iQPKYUuzZ6BrBXbbGuJdeGSnVzzg1Vi5gzbO3WfA1A2i
bADbRTHrhoKt5FiRXf5nUM27XjVPt0OK/ye4MUkBCItkuotOqdzNtkQA3FYK6N+u
HfkAQAepMkNBUjlGQYZ/DskWRGK43CpEWKVbtGyjW3i8oGE/qkzkxXyp1kgDUD4A
cS88Z+ZOg8WNrQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:56:53 2025 by rpki-client