Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
File: pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft (raw, json)
Hash identifier: ApjgY/8YhfWEKQGmsUOVrt6+uykVdCMJpDA6d3MEC5c=
Subject key identifier: 88:6F:0B:85:EA:4C:40:67:D8:90:16:0C:F6:91:58:82:9E:91:C8:1E
Authority key identifier: A4:40:B8:5F:0F:7B:A6:38:5C:D4:FE:E8:A0:EC:04:E8:18:41:54:2C
Certificate issuer: /CN=a440b85f0f7ba6385cd4fee8a0ec04e81841542c
Certificate serial: 0198D515AF5EB71CB4C5360E1D8379A9BE4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
Manifest number: 15DD
Signing time: Sat 23 Aug 2025 04:00:24 +0000
Manifest this update: Sat 23 Aug 2025 04:00:24 +0000
Manifest next update: Sun 24 Aug 2025 04:00:24 +0000
Files and hashes: 1: LnuT6eEdb88-TghvQ_FZnRefVyk.roa (hash: XQk1e8dAGrgYT1azOGp5hpmR57maWf6UhLO79IbQj1k=)
2: pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl (hash: EQqfy4cZsaNLFfhfks1SqKm+hw63Bgc74/gvV0GtIyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:af:5e:b7:1c:b4:c5:36:0e:1d:83:79:a9:be:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a440b85f0f7ba6385cd4fee8a0ec04e81841542c
Validity
Not Before: Aug 23 04:00:24 2025 GMT
Not After : Aug 24 04:00:24 2025 GMT
Subject: CN=886f0b85ea4c4067d890160cf69158829e91c81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:43:8d:f0:f1:48:22:75:35:d3:2f:a5:d5:43:
2a:da:8f:8d:80:69:a7:2a:e7:12:94:f7:2c:18:8b:
52:4d:ec:85:72:7a:99:49:54:35:e2:23:d6:4a:a1:
bc:68:be:37:d0:65:96:d4:23:aa:b8:12:75:36:35:
24:61:fb:db:76:91:30:1d:15:f9:d4:e8:ae:6d:c2:
b6:ae:74:3f:bf:5c:62:e1:1c:bd:59:09:6f:68:c6:
0e:a0:c3:d2:b4:f3:8e:f2:16:91:af:5c:8c:e6:6a:
c1:0c:3b:e2:e0:c5:3c:98:2a:36:91:b4:bd:ab:c6:
10:34:30:fa:61:08:a2:ea:a5:57:15:14:d3:da:7e:
ad:69:91:89:41:39:48:66:77:49:4e:39:74:77:f3:
4c:3b:85:20:d2:ff:ce:a3:ba:ca:2a:8d:7f:a2:9c:
22:d1:65:f4:1a:de:68:46:30:76:9b:50:2c:93:d4:
c1:5c:7a:47:f8:d4:5e:31:99:3a:54:9d:2d:d6:36:
51:2e:a6:55:62:86:64:0b:d8:03:4d:c2:e1:7c:99:
10:f4:1f:aa:30:6c:27:1c:a1:c2:c7:16:c2:38:ae:
12:72:38:39:a7:ca:13:f8:27:93:03:e4:c5:b9:eb:
13:e7:13:0d:15:3d:88:bd:67:28:52:de:16:5f:fa:
92:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6F:0B:85:EA:4C:40:67:D8:90:16:0C:F6:91:58:82:9E:91:C8:1E
X509v3 Authority Key Identifier:
keyid:A4:40:B8:5F:0F:7B:A6:38:5C:D4:FE:E8:A0:EC:04:E8:18:41:54:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:17:a0:6d:90:3d:1e:e2:db:cc:f1:2e:a1:06:99:50:5f:9e:
28:b9:b9:43:7d:24:60:66:79:09:14:32:b2:18:04:e9:28:f9:
f7:91:95:2d:89:60:e3:86:d0:c6:f3:16:03:13:e6:48:54:5c:
17:4a:fe:d0:5f:dd:e7:a6:bc:8d:47:c5:2a:9f:54:79:56:4b:
9a:87:02:8a:fb:49:a6:3f:e1:43:ab:05:07:ba:c9:a2:9b:5d:
11:6e:1a:f6:99:e3:0b:ae:ca:39:08:28:41:f7:f3:3f:3b:dc:
3a:e1:de:94:e5:64:69:e8:39:99:fd:f7:74:52:43:7b:3f:6a:
38:0f:ee:0f:fd:92:fa:20:79:af:cb:ec:d3:d9:a1:ff:55:33:
15:54:89:86:11:5e:24:f8:a1:21:78:e0:54:30:a8:83:b6:dc:
f3:ae:d7:fd:55:04:de:0e:bc:1c:9e:5b:e2:74:f2:3b:48:c3:
54:a2:85:e8:c7:44:56:e1:9d:37:ff:78:65:9d:bb:d5:19:06:
b7:7c:5a:00:8f:8d:5e:3a:61:cf:c3:05:28:2b:28:35:14:df:
1d:4e:e3:91:93:6d:fe:54:ea:00:57:9e:96:ae:f8:4c:fc:4f:
c4:cd:e1:21:c0:a3:82:20:df:77:b2:92:f0:3b:71:7e:85:8d:
ea:a4:6c:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFa9etxy0xTYOHYN5qb5LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NDBiODVmMGY3YmE2Mzg1Y2Q0ZmVlOGEwZWMwNGU4MTg0
MTU0MmMwHhcNMjUwODIzMDQwMDI0WhcNMjUwODI0MDQwMDI0WjAzMTEwLwYDVQQD
Eyg4ODZmMGI4NWVhNGM0MDY3ZDg5MDE2MGNmNjkxNTg4MjllOTFjODFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUON8PFIInU10y+l1UMq2o+NgGmn
KucSlPcsGItSTeyFcnqZSVQ14iPWSqG8aL430GWW1COquBJ1NjUkYfvbdpEwHRX5
1OiubcK2rnQ/v1xi4Ry9WQlvaMYOoMPStPOO8haRr1yM5mrBDDvi4MU8mCo2kbS9
q8YQNDD6YQii6qVXFRTT2n6taZGJQTlIZndJTjl0d/NMO4Ug0v/Oo7rKKo1/opwi
0WX0Gt5oRjB2m1Ask9TBXHpH+NReMZk6VJ0t1jZRLqZVYoZkC9gDTcLhfJkQ9B+q
MGwnHKHCxxbCOK4Scjg5p8oT+CeTA+TFuesT5xMNFT2IvWcoUt4WX/qSzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhvC4XqTEBn2JAWDPaRWIKekcgeMB8GA1UdIwQY
MBaAFKRAuF8Pe6Y4XNT+6KDsBOgYQVQsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEVDNFh3OTdwamhjMVA3b29Pd0U2QmhCVkN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8yMWVjMGYtYTFlYy00YWQ0LWE3NDkt
ZGRjZmUzNmY0MzNiLzEvcEVDNFh3OTdwamhjMVA3b29Pd0U2QmhCVkN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8yMWVjMGYtYTFlYy00YWQ0LWE3NDktZGRjZmUzNmY0MzNi
LzEvcEVDNFh3OTdwamhjMVA3b29Pd0U2QmhCVkN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUBegbZA9
HuLbzPEuoQaZUF+eKLm5Q30kYGZ5CRQyshgE6Sj595GVLYlg44bQxvMWAxPmSFRc
F0r+0F/d56a8jUfFKp9UeVZLmocCivtJpj/hQ6sFB7rJoptdEW4a9pnjC67KOQgo
QffzPzvcOuHelOVkaeg5mf33dFJDez9qOA/uD/2S+iB5r8vs09mh/1UzFVSJhhFe
JPihIXjgVDCog7bc867X/VUE3g68HJ5b4nTyO0jDVKKF6MdEVuGdN/94ZZ271RkG
t3xaAI+NXjphz8MFKCsoNRTfHU7jkZNt/lTqAFeelq74TPxPxM3hIcCjgiDfd7KS
8DtxfoWN6qRs8w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:19 2025 by rpki-client