Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft
File: Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft (raw, json)
Hash identifier: uJabgDffXixIBfB/lUr//IkDuqFLRGkw0UAdI6lXq4Y=
Subject key identifier: A9:97:5A:E1:C0:02:46:56:6B:C6:09:D7:27:86:0F:5E:45:CB:13:98
Authority key identifier: 3E:78:2D:E1:B5:D5:29:2E:DD:13:6D:52:78:25:8C:67:B0:5B:E2:2A
Certificate issuer: /CN=3e782de1b5d5292edd136d5278258c67b05be22a
Certificate serial: 0197B70F1E54CF9A01911FE8B4C4069FE83A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pngt4bXVKS7dE21SeCWMZ7Bb4io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft
Manifest number: 02F9
Signing time: Sat 28 Jun 2025 15:01:50 +0000
Manifest this update: Sat 28 Jun 2025 15:01:50 +0000
Manifest next update: Sun 29 Jun 2025 15:01:50 +0000
Files and hashes: 1: HsLH977Wr8CRqPeFRIsKeWuqNBQ.roa (hash: DfN2Ce+eFgUYzjRB1SnZEzwBexeV9U5bLQB9J92xhK4=)
2: Pngt4bXVKS7dE21SeCWMZ7Bb4io.crl (hash: wDUdK35fttqDF1hGQL4izfFOKrdOAw+l6LobztiB9YU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pngt4bXVKS7dE21SeCWMZ7Bb4io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:1e:54:cf:9a:01:91:1f:e8:b4:c4:06:9f:e8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e782de1b5d5292edd136d5278258c67b05be22a
Validity
Not Before: Jun 28 15:01:50 2025 GMT
Not After : Jun 29 15:01:50 2025 GMT
Subject: CN=a9975ae1c00246566bc609d727860f5e45cb1398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f6:56:bf:c6:47:ed:5c:67:6e:38:6c:52:57:
26:ad:14:8b:76:62:05:e3:54:69:76:bb:d2:78:49:
dd:ea:4e:0d:fb:60:fe:15:ef:f3:13:59:91:a1:55:
53:b9:a1:57:c7:bb:e8:75:29:ef:bb:71:40:53:e5:
4b:94:ee:00:5c:a2:6c:d9:c6:7e:2a:4b:f5:58:5e:
5f:82:a2:cb:d2:d0:0a:93:c8:6b:05:cf:17:f6:50:
84:78:c8:e0:7a:bc:03:3c:6a:8f:4f:bd:4d:7c:82:
4d:40:57:77:a1:16:ad:4f:3f:de:de:4a:ee:ad:f7:
78:38:73:73:03:d7:fc:89:29:d2:a6:5c:32:c5:f5:
64:60:12:37:4b:a2:0b:4c:a8:fb:49:09:01:68:15:
6a:c3:5a:65:2d:c8:c2:d2:91:1c:b8:e5:b5:25:24:
a7:db:4b:00:e8:a4:81:29:fe:ec:9b:21:3d:87:5d:
64:48:dd:6a:aa:71:17:95:92:c8:2d:bb:72:c9:f1:
a9:f9:f8:49:9f:c6:7b:74:4e:c9:af:ec:60:a3:87:
a3:75:25:e3:35:ce:6e:d3:9f:37:75:1b:b7:e0:04:
71:96:55:e3:fa:1c:52:3c:56:4b:1e:58:ba:9e:de:
58:98:7f:5e:62:c1:a9:7b:9d:c3:c4:05:4e:ca:d6:
57:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:97:5A:E1:C0:02:46:56:6B:C6:09:D7:27:86:0F:5E:45:CB:13:98
X509v3 Authority Key Identifier:
keyid:3E:78:2D:E1:B5:D5:29:2E:DD:13:6D:52:78:25:8C:67:B0:5B:E2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pngt4bXVKS7dE21SeCWMZ7Bb4io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:df:28:ce:47:03:90:33:a7:da:d7:e8:ba:1b:9a:29:07:fb:
b5:cc:73:3f:aa:c0:d8:ac:a1:f6:92:01:84:6f:fe:04:3b:d5:
74:2f:6c:15:d9:22:c4:ea:a8:97:3a:fb:fb:2b:7d:75:89:ee:
1c:9d:7d:53:50:5c:c1:8c:bc:3f:7a:b9:e0:93:8b:40:1b:33:
c6:32:a7:c4:39:38:70:51:3f:c9:25:47:4b:36:94:d9:13:aa:
96:a7:18:d1:a4:37:dd:13:ce:1f:9a:6d:c7:85:67:01:69:a2:
2a:33:c7:db:f8:61:bd:45:8a:83:e5:55:86:16:5d:77:42:8b:
ab:07:80:10:01:65:76:01:e8:c2:a7:aa:fe:1f:a1:c9:41:8f:
99:13:ae:e4:43:74:66:02:4b:37:0b:2f:51:72:f1:9b:1b:6c:
b3:f4:12:07:cc:23:55:20:e8:65:51:2b:93:f1:c4:0c:d8:8e:
f4:28:c4:62:79:5e:1e:64:b4:3c:d4:ee:92:90:f2:ff:a8:16:
82:af:f2:70:5e:c8:d7:34:1b:ba:9f:94:a1:19:5a:57:7b:f7:
0f:75:c2:15:1c:9a:66:0c:6d:e5:27:bd:bf:43:5c:f9:17:44:
17:39:e0:68:c1:80:1e:9c:27:c6:b7:b8:b1:5f:3f:e2:a3:1b:
9c:8e:dc:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dx5Uz5oBkR/otMQGn+g6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNzgyZGUxYjVkNTI5MmVkZDEzNmQ1Mjc4MjU4YzY3YjA1
YmUyMmEwHhcNMjUwNjI4MTUwMTUwWhcNMjUwNjI5MTUwMTUwWjAzMTEwLwYDVQQD
EyhhOTk3NWFlMWMwMDI0NjU2NmJjNjA5ZDcyNzg2MGY1ZTQ1Y2IxMzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvZWv8ZH7VxnbjhsUlcmrRSLdmIF
41RpdrvSeEnd6k4N+2D+Fe/zE1mRoVVTuaFXx7vodSnvu3FAU+VLlO4AXKJs2cZ+
Kkv1WF5fgqLL0tAKk8hrBc8X9lCEeMjgerwDPGqPT71NfIJNQFd3oRatTz/e3kru
rfd4OHNzA9f8iSnSplwyxfVkYBI3S6ILTKj7SQkBaBVqw1plLcjC0pEcuOW1JSSn
20sA6KSBKf7smyE9h11kSN1qqnEXlZLILbtyyfGp+fhJn8Z7dE7Jr+xgo4ejdSXj
Nc5u0583dRu34ARxllXj+hxSPFZLHli6nt5YmH9eYsGpe53DxAVOytZXYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmXWuHAAkZWa8YJ1yeGD15FyxOYMB8GA1UdIwQY
MBaAFD54LeG11Sku3RNtUngljGewW+IqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG5ndDRiWFZLUzdkRTIxU2VDV01aN0JiNGlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9kMDM1ZmItZTg2MC00NjFkLTk3Mjgt
MTQ5ZTJhM2FkZTc2LzEvUG5ndDRiWFZLUzdkRTIxU2VDV01aN0JiNGlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9kMDM1ZmItZTg2MC00NjFkLTk3MjgtMTQ5ZTJhM2FkZTc2
LzEvUG5ndDRiWFZLUzdkRTIxU2VDV01aN0JiNGlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZt8ozkcD
kDOn2tfouhuaKQf7tcxzP6rA2Kyh9pIBhG/+BDvVdC9sFdkixOqolzr7+yt9dYnu
HJ19U1BcwYy8P3q54JOLQBszxjKnxDk4cFE/ySVHSzaU2ROqlqcY0aQ33RPOH5pt
x4VnAWmiKjPH2/hhvUWKg+VVhhZdd0KLqweAEAFldgHowqeq/h+hyUGPmROu5EN0
ZgJLNwsvUXLxmxtss/QSB8wjVSDoZVErk/HEDNiO9CjEYnleHmS0PNTukpDy/6gW
gq/ycF7I1zQbup+UoRlaV3v3D3XCFRyaZgxt5Se9v0Nc+RdEFzngaMGAHpwnxre4
sV8/4qMbnI7cJA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:50 2025 by rpki-client