Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
File: PnXUne0gVmynRcKPgM_ZqS9LfUc.mft (raw, json)
Hash identifier: 6QhqMrkcCkPhZxy5raHfA4WZD9Zu19x05e1hWYgnnU0=
Subject key identifier: 44:85:89:52:4D:53:53:5D:52:F1:8D:80:16:EF:DE:2E:44:DB:6D:43
Authority key identifier: 3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
Certificate issuer: /CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Certificate serial: 0198D5BB8FE76AF1BA5F2B8B4F3A6D0CDB5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 07:01:35 +0000
Manifest this update: Sat 23 Aug 2025 07:01:35 +0000
Manifest next update: Sun 24 Aug 2025 07:01:35 +0000
Files and hashes: 1: PnXUne0gVmynRcKPgM_ZqS9LfUc.crl (hash: /OUGFRISDxiJyQJNM7eOUx3L1rktTBviIoZ0ll/HfdI=)
2: pXJDsaj0ZUCw_GiSDcUZAr3Eqys.roa (hash: jxE0YH1Sz5qp4TF2g6NLi4CtXpHMgBECSGalZs0qi4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:8f:e7:6a:f1:ba:5f:2b:8b:4f:3a:6d:0c:db:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Validity
Not Before: Aug 23 07:01:35 2025 GMT
Not After : Aug 24 07:01:35 2025 GMT
Subject: CN=448589524d53535d52f18d8016efde2e44db6d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9d:53:15:f4:24:51:33:e0:47:01:c2:71:46:
ae:a4:42:5f:5a:27:97:a6:ef:ce:d3:2c:4d:1d:3d:
a2:34:06:33:61:4e:6c:c5:02:b7:59:6c:7d:cf:d2:
5a:f0:81:cb:18:ce:35:d8:66:5c:11:78:c7:30:4f:
af:13:fe:70:cc:4e:13:cf:d1:2f:e9:9e:63:5a:29:
e1:dd:43:f0:02:b4:c7:03:ed:0c:1e:34:cf:fa:1e:
ea:50:90:fc:f7:5b:b3:2c:85:7a:b2:dc:28:be:30:
91:67:29:5f:83:6c:19:f7:a8:df:8c:f8:73:e6:77:
c5:cf:2c:05:17:01:e1:af:45:fe:36:0a:f8:2c:2b:
f5:3e:8a:fb:65:60:2c:f2:00:67:59:3f:e3:dd:a6:
8c:5e:0b:4f:1c:fc:6e:57:47:e5:41:d3:3e:be:0e:
67:4f:5c:ed:00:95:db:4e:06:fb:2f:1d:14:43:a3:
4a:2d:4b:93:84:8d:8d:38:61:5b:db:62:86:77:78:
40:2e:f4:9f:28:c5:76:23:20:d7:2b:ec:82:cb:72:
2d:39:e3:82:9f:be:f1:f2:ed:b2:44:d1:a3:22:62:
4e:8b:52:03:51:ac:91:46:ce:94:37:b2:e0:8d:75:
f7:9a:5e:e0:4f:c0:dc:e1:bd:c4:56:4a:3c:06:aa:
79:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:85:89:52:4D:53:53:5D:52:F1:8D:80:16:EF:DE:2E:44:DB:6D:43
X509v3 Authority Key Identifier:
keyid:3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ff:e2:3a:5d:a7:35:ba:a1:b3:31:82:dc:a1:37:ee:27:1c:
46:a9:40:2c:fe:fa:2f:de:81:c7:80:00:fd:2d:40:b4:73:b5:
30:7b:f3:80:27:e3:e4:1c:88:8a:94:e4:cc:35:c5:19:36:0a:
12:09:2d:ee:6f:32:09:40:d7:33:bf:dc:dc:74:78:82:90:03:
d9:a2:9a:71:90:a4:b9:a3:c8:a0:f6:f1:ee:98:1a:96:20:28:
f4:e8:cf:7b:43:a0:29:b7:f5:18:c7:41:39:4c:b3:54:43:23:
3c:2f:b5:23:5f:4b:9d:d0:38:67:86:78:d8:80:4a:d5:f9:42:
36:c3:30:de:6f:b9:f9:39:a3:2f:f8:ec:5d:dd:31:8d:0d:66:
e3:d6:b0:ed:f2:8a:cc:ab:d6:b7:58:1c:cc:10:38:06:2d:bb:
f6:ee:2e:5a:19:12:16:86:38:48:69:bf:a5:b7:23:22:84:da:
50:34:d3:b1:85:83:df:5a:37:94:12:b5:d5:13:d4:42:d7:8b:
16:a4:d6:94:11:36:ca:30:a5:fa:96:40:fb:72:31:7c:f9:03:
75:f6:41:e0:37:73:30:de:b6:71:49:e8:25:b4:12:b7:c7:99:
f9:14:48:39:42:3d:7e:30:11:87:44:66:4e:6c:91:0f:d4:8f:
f4:55:c5:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu4/navG6XyuLTzptDNtdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNzVkNDlkZWQyMDU2NmNhNzQ1YzI4ZjgwY2ZkOWE5MmY0
YjdkNDcwHhcNMjUwODIzMDcwMTM1WhcNMjUwODI0MDcwMTM1WjAzMTEwLwYDVQQD
Eyg0NDg1ODk1MjRkNTM1MzVkNTJmMThkODAxNmVmZGUyZTQ0ZGI2ZDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1J1TFfQkUTPgRwHCcUaupEJfWieX
pu/O0yxNHT2iNAYzYU5sxQK3WWx9z9Ja8IHLGM412GZcEXjHME+vE/5wzE4Tz9Ev
6Z5jWinh3UPwArTHA+0MHjTP+h7qUJD891uzLIV6stwovjCRZylfg2wZ96jfjPhz
5nfFzywFFwHhr0X+Ngr4LCv1Por7ZWAs8gBnWT/j3aaMXgtPHPxuV0flQdM+vg5n
T1ztAJXbTgb7Lx0UQ6NKLUuThI2NOGFb22KGd3hALvSfKMV2IyDXK+yCy3ItOeOC
n77x8u2yRNGjImJOi1IDUayRRs6UN7LgjXX3ml7gT8Dc4b3EVko8Bqp5GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESFiVJNU1NdUvGNgBbv3i5E221DMB8GA1UdIwQY
MBaAFD511J3tIFZsp0XCj4DP2akvS31HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG5YVW5lMGdWbXluUmNLUGdNX1pxUzlMZlVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xYzE1YTItZDBlYy00YzNhLTg2Y2Qt
ODM2Mzg0NzVkOGFiLzEvUG5YVW5lMGdWbXluUmNLUGdNX1pxUzlMZlVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8xYzE1YTItZDBlYy00YzNhLTg2Y2QtODM2Mzg0NzVkOGFi
LzEvUG5YVW5lMGdWbXluUmNLUGdNX1pxUzlMZlVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb//iOl2n
NbqhszGC3KE37iccRqlALP76L96Bx4AA/S1AtHO1MHvzgCfj5ByIipTkzDXFGTYK
Egkt7m8yCUDXM7/c3HR4gpAD2aKacZCkuaPIoPbx7pgaliAo9OjPe0OgKbf1GMdB
OUyzVEMjPC+1I19LndA4Z4Z42IBK1flCNsMw3m+5+TmjL/jsXd0xjQ1m49aw7fKK
zKvWt1gczBA4Bi279u4uWhkSFoY4SGm/pbcjIoTaUDTTsYWD31o3lBK11RPUQteL
FqTWlBE2yjCl+pZA+3IxfPkDdfZB4DdzMN62cUnoJbQSt8eZ+RRIOUI9fjARh0Rm
TmyRD9SP9FXFYg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:33:29 2025 by rpki-client