Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
File: PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft (raw, json)
Hash identifier: Yhaztyr5ujEMU0yhLBxiczgQK7Ot67T93h3OxLhV5FU=
Subject key identifier: 5C:B8:F8:AA:C3:66:DD:90:AD:E6:19:7E:12:B1:E6:73:CA:84:13:E4
Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
Certificate issuer: /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Certificate serial: 0198D54E5682DE8F6C747D1025BA9492FC8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
Manifest number: 1087
Signing time: Sat 23 Aug 2025 05:02:17 +0000
Manifest this update: Sat 23 Aug 2025 05:02:17 +0000
Manifest next update: Sun 24 Aug 2025 05:02:17 +0000
Files and hashes: 1: PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl (hash: oML+8Z/1NkLw4OIECRnGIHBPo/zp2+MoKHnp0QOJXAA=)
2: X4mIRbShCI_swD4AYibAfXumzPE.roa (hash: ZCD8FV34ZVGGbkTB2fH3uXc5W92QDu1a+e1QI3r0+es=)
3: k0e8XrkRjigLyVCK_c8tyoDjXqU.roa (hash: VlaMdbNDNwgFwQ8MfYZ/SEPVePx9cKrNfoX/5Qh79Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:56:82:de:8f:6c:74:7d:10:25:ba:94:92:fc:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Validity
Not Before: Aug 23 05:02:17 2025 GMT
Not After : Aug 24 05:02:17 2025 GMT
Subject: CN=5cb8f8aac366dd90ade6197e12b1e673ca8413e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ef:b4:f3:66:91:ff:5e:26:79:2a:00:f9:ac:
66:45:28:9f:d9:74:32:dc:80:88:ab:ac:90:4d:5e:
5d:66:a6:fa:fb:0f:7d:e4:ad:34:10:ea:66:c6:0c:
17:2e:12:92:bc:41:49:95:ba:ba:55:92:50:df:8a:
a0:78:25:94:4f:67:33:51:86:10:0a:16:08:99:53:
af:62:81:76:31:57:c8:91:3c:07:a1:65:6e:0a:89:
fb:cd:40:1d:db:84:20:1b:5e:15:14:2b:26:40:39:
7e:37:c9:e0:68:0c:82:dd:a6:8d:73:eb:b1:21:31:
76:03:e4:d5:f7:36:81:81:d7:4c:92:06:d9:6e:0a:
5e:3a:73:b8:eb:13:c6:fd:85:a6:e5:9b:81:da:b7:
6e:e3:1f:fa:88:96:18:25:3e:38:4b:d0:52:e4:4c:
2b:f4:24:c5:9d:d9:c1:aa:d1:a4:d0:f6:a5:78:23:
58:de:60:20:9e:e8:4c:bc:b7:5f:d5:b6:b0:09:fb:
d1:4a:57:87:6a:c0:4b:63:01:96:e3:76:ba:05:44:
d0:28:fb:00:12:d0:9e:21:d4:f4:6f:06:33:52:85:
00:e7:85:69:31:ef:9a:97:ac:3a:fc:03:8e:81:62:
e4:69:ce:e0:b7:c6:e7:0b:26:ad:ab:42:06:01:8e:
19:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B8:F8:AA:C3:66:DD:90:AD:E6:19:7E:12:B1:E6:73:CA:84:13:E4
X509v3 Authority Key Identifier:
keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:15:8c:56:e9:36:70:65:85:5d:b3:16:d9:5f:5f:0f:00:fd:
e6:21:79:f1:cd:c5:cf:f9:9b:f4:7c:fb:dc:d1:49:d2:cf:5f:
22:e2:8d:f8:03:88:a0:68:20:ef:8f:87:0d:db:9e:aa:9f:bd:
41:20:82:e8:01:a0:3f:8f:e8:45:42:72:3f:ab:dc:7a:58:cd:
84:aa:e5:c6:ae:9b:32:a8:3b:2b:ae:cb:0f:23:c5:bd:b6:99:
37:e5:7f:60:e0:41:99:f7:88:a3:60:57:f6:7d:c9:de:ec:a2:
f0:93:6a:3a:09:76:5b:02:b8:da:5d:e9:db:56:10:d5:31:20:
c8:04:9b:9b:da:dd:9d:92:99:62:a0:87:62:e3:0a:b1:21:ab:
22:93:80:f3:ea:59:66:56:4b:cb:92:35:93:8d:8e:62:55:07:
82:1c:7d:57:bc:6f:db:67:f6:97:0f:b3:2d:20:92:6c:90:05:
e4:71:80:ae:15:c7:f7:01:33:8a:09:b9:2f:2e:a1:48:48:04:
fd:c5:58:6e:bd:b3:26:44:bb:14:4a:f6:06:45:bd:cb:1f:37:
6e:b1:03:27:8d:db:54:e8:0f:ec:ed:52:6a:cf:e2:ff:08:7b:
a4:4c:8f:0a:d1:4a:42:dc:00:df:c4:85:63:87:01:b9:14:b6:
7c:17:0e:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTlaC3o9sdH0QJbqUkvyPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkZmEyOTM2OGM4YmU2OWM4ZWRkNWFhMTkzNTU3ZmNiYTJh
NTdlYzgwHhcNMjUwODIzMDUwMjE3WhcNMjUwODI0MDUwMjE3WjAzMTEwLwYDVQQD
Eyg1Y2I4ZjhhYWMzNjZkZDkwYWRlNjE5N2UxMmIxZTY3M2NhODQxM2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAie+082aR/14meSoA+axmRSif2XQy
3ICIq6yQTV5dZqb6+w995K00EOpmxgwXLhKSvEFJlbq6VZJQ34qgeCWUT2czUYYQ
ChYImVOvYoF2MVfIkTwHoWVuCon7zUAd24QgG14VFCsmQDl+N8ngaAyC3aaNc+ux
ITF2A+TV9zaBgddMkgbZbgpeOnO46xPG/YWm5ZuB2rdu4x/6iJYYJT44S9BS5Ewr
9CTFndnBqtGk0PaleCNY3mAgnuhMvLdf1bawCfvRSleHasBLYwGW43a6BUTQKPsA
EtCeIdT0bwYzUoUA54VpMe+al6w6/AOOgWLkac7gt8bnCyatq0IGAY4ZaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFy4+KrDZt2QreYZfhKx5nPKhBPkMB8GA1UdIwQY
MBaAFD36KTaMi+acjt1aoZNVf8uipX7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGZvcE5veUw1cHlPM1ZxaGsxVl95NktsZnNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8yZDRmN2YtMTZlNy00ZmU2LWExODkt
YmQ1OGQwMDIxYTA5LzEvUGZvcE5veUw1cHlPM1ZxaGsxVl95NktsZnNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8yZDRmN2YtMTZlNy00ZmU2LWExODktYmQ1OGQwMDIxYTA5
LzEvUGZvcE5veUw1cHlPM1ZxaGsxVl95NktsZnNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFxWMVuk2
cGWFXbMW2V9fDwD95iF58c3Fz/mb9Hz73NFJ0s9fIuKN+AOIoGgg74+HDdueqp+9
QSCC6AGgP4/oRUJyP6vceljNhKrlxq6bMqg7K67LDyPFvbaZN+V/YOBBmfeIo2BX
9n3J3uyi8JNqOgl2WwK42l3p21YQ1TEgyASbm9rdnZKZYqCHYuMKsSGrIpOA8+pZ
ZlZLy5I1k42OYlUHghx9V7xv22f2lw+zLSCSbJAF5HGArhXH9wEzigm5Ly6hSEgE
/cVYbr2zJkS7FEr2BkW9yx83brEDJ43bVOgP7O1Sas/i/wh7pEyPCtFKQtwA38SF
Y4cBuRS2fBcO4Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:17:56 2025 by rpki-client