Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
File: pZrIMj67a-IPronQmMokE4-MkAU.mft (raw, json)
Hash identifier: uUcycTeWIxI4gSl3O0ao/gBf1K4wAB5Xf60FjtAvlfc=
Subject key identifier: 82:6F:48:B4:A3:7A:D6:D5:AA:5E:93:2C:E0:62:70:31:04:3A:32:B2
Authority key identifier: A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
Certificate issuer: /CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Certificate serial: 0198D5833D68ED378E22B6BB2ADAACF005B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 06:00:04 +0000
Manifest this update: Sat 23 Aug 2025 06:00:04 +0000
Manifest next update: Sun 24 Aug 2025 06:00:04 +0000
Files and hashes: 1: W2MvJBZ0wxtLqJdYlYA_0d8K8JQ.roa (hash: FE4tThC8aEaRa276a1uqrtHjLbN4YSEI6M3SskM13qQ=)
2: haFD9cLDeKJLdXFJ_FlWsDWQa1Y.roa (hash: suCkhBPt7Sy5Urm3257mrhUG7HADlPxpmTzTdnyQTPQ=)
3: pZrIMj67a-IPronQmMokE4-MkAU.crl (hash: Kj2FNxafguwwXWs9OmL0DrcPPkuBSi2LaeXnDEyvClo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:3d:68:ed:37:8e:22:b6:bb:2a:da:ac:f0:05:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Validity
Not Before: Aug 23 06:00:04 2025 GMT
Not After : Aug 24 06:00:04 2025 GMT
Subject: CN=826f48b4a37ad6d5aa5e932ce0627031043a32b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f3:96:e1:65:67:88:9f:4a:2e:ba:49:e6:ff:
76:de:43:4a:18:b4:18:5d:9a:bf:ec:eb:8a:28:a4:
38:97:f5:f1:24:ae:8e:b7:c0:0e:5e:0f:13:dc:96:
27:72:94:3d:28:b2:c9:ca:96:ae:ac:ee:b5:01:88:
aa:1d:ab:90:47:42:56:25:88:4d:a1:4f:22:58:2a:
98:7d:51:07:b8:c0:6c:91:a6:dd:b8:eb:80:d1:e0:
31:f4:76:8d:6e:4a:42:34:23:df:6d:e7:3a:81:6b:
4c:3e:9f:9b:f5:4e:ba:94:c9:00:a6:1f:15:73:f0:
5a:3f:98:53:5b:96:d5:e5:67:7a:eb:da:dd:83:4b:
72:81:60:a4:20:75:4c:9b:25:15:93:a0:4e:72:0e:
c4:23:72:a2:8e:29:98:60:26:9a:0b:a7:44:04:9f:
c0:d3:4e:b2:c9:46:c4:47:92:42:23:62:1e:5f:aa:
43:0f:81:20:3c:4b:a0:22:87:d3:ec:a5:b6:97:1a:
bf:19:4a:9c:e0:11:fe:fc:de:d2:20:4b:72:f2:df:
92:30:c1:32:0a:6d:4d:0d:a0:76:4f:0e:f0:b4:ad:
f3:f2:7d:b1:21:bb:70:2b:d7:ed:07:f9:6d:88:c9:
b2:8e:7f:b5:28:7c:16:2c:6a:9c:3e:1a:8a:7b:70:
30:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6F:48:B4:A3:7A:D6:D5:AA:5E:93:2C:E0:62:70:31:04:3A:32:B2
X509v3 Authority Key Identifier:
keyid:A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:8c:42:71:08:ec:ca:e9:1c:af:ba:d8:b7:da:59:07:63:d8:
d2:29:f7:17:59:29:5d:62:94:09:1f:06:73:6c:17:83:69:4b:
f1:24:b1:95:9c:7d:f0:ed:7f:7d:71:5a:33:92:15:63:6f:11:
ba:ad:2a:49:e9:4a:67:e9:4a:ec:b0:73:16:65:d9:06:8e:5a:
1f:ec:c9:b0:20:84:47:d3:ad:f5:3c:59:15:ce:6c:af:ae:98:
e4:4a:0b:e3:28:87:32:e0:52:8e:62:da:73:91:42:e3:8a:1f:
b4:aa:6d:26:cb:db:ad:7c:29:fe:9e:19:71:b9:6b:04:b0:54:
9b:44:03:e4:1e:b3:f4:11:71:11:35:c2:98:0f:26:72:3f:bf:
a2:b6:a7:69:7f:c4:7a:11:9a:cc:2e:ae:b2:c6:3c:5b:93:49:
6b:c0:5c:1f:d8:36:97:e9:63:5b:b9:72:19:75:d3:08:7c:4e:
59:c1:17:03:2c:bd:4e:1e:ae:52:1e:c8:f9:a2:7d:b2:db:82:
85:cd:75:fc:6d:61:ed:b8:f4:32:0f:4b:7a:bf:bb:43:7e:6f:
c9:eb:d1:3b:99:91:63:c1:77:f2:62:9f:d4:b8:09:65:35:bb:
a1:fb:81:48:66:57:74:31:af:43:6d:c5:11:8e:ce:73:4f:72:
aa:09:af:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVgz1o7TeOIra7Ktqs8AWyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1OWFjODMyM2ViYjZiZTIwZmFlODlkMDk4Y2EyNDEzOGY4
YzkwMDUwHhcNMjUwODIzMDYwMDA0WhcNMjUwODI0MDYwMDA0WjAzMTEwLwYDVQQD
Eyg4MjZmNDhiNGEzN2FkNmQ1YWE1ZTkzMmNlMDYyNzAzMTA0M2EzMmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvOW4WVniJ9KLrpJ5v923kNKGLQY
XZq/7OuKKKQ4l/XxJK6Ot8AOXg8T3JYncpQ9KLLJypaurO61AYiqHauQR0JWJYhN
oU8iWCqYfVEHuMBskabduOuA0eAx9HaNbkpCNCPfbec6gWtMPp+b9U66lMkAph8V
c/BaP5hTW5bV5Wd669rdg0tygWCkIHVMmyUVk6BOcg7EI3KijimYYCaaC6dEBJ/A
006yyUbER5JCI2IeX6pDD4EgPEugIofT7KW2lxq/GUqc4BH+/N7SIEty8t+SMMEy
Cm1NDaB2Tw7wtK3z8n2xIbtwK9ftB/ltiMmyjn+1KHwWLGqcPhqKe3AwqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJvSLSjetbVql6TLOBicDEEOjKyMB8GA1UdIwQY
MBaAFKWayDI+u2viD66J0JjKJBOPjJAFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFpySU1qNjdhLUlQcm9uUW1Nb2tFNC1Na0FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9hMDFmODItOTE5My00MTk5LTk1YTgt
ODNhZTVkOWM4MzJmLzEvcFpySU1qNjdhLUlQcm9uUW1Nb2tFNC1Na0FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9hMDFmODItOTE5My00MTk5LTk1YTgtODNhZTVkOWM4MzJm
LzEvcFpySU1qNjdhLUlQcm9uUW1Nb2tFNC1Na0FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuoxCcQjs
yukcr7rYt9pZB2PY0in3F1kpXWKUCR8Gc2wXg2lL8SSxlZx98O1/fXFaM5IVY28R
uq0qSelKZ+lK7LBzFmXZBo5aH+zJsCCER9Ot9TxZFc5sr66Y5EoL4yiHMuBSjmLa
c5FC44oftKptJsvbrXwp/p4ZcblrBLBUm0QD5B6z9BFxETXCmA8mcj+/oranaX/E
ehGazC6ussY8W5NJa8BcH9g2l+ljW7lyGXXTCHxOWcEXAyy9Th6uUh7I+aJ9stuC
hc11/G1h7bj0Mg9Ler+7Q35vyevRO5mRY8F38mKf1LgJZTW7ofuBSGZXdDGvQ23F
EY7Oc09yqgmvjQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:46 2025 by rpki-client