Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
File: PJMfJlqEcdMs6ESdnhhvDccRSno.mft (raw, json)
Hash identifier: qaXYQiuxWOp/r02TzrwRSqBpitK2jHTaNBZ4O1ieq0I=
Subject key identifier: 2D:69:19:45:90:7B:CC:4E:A2:45:DE:46:02:26:6F:ED:1F:EB:20:00
Authority key identifier: 3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A
Certificate issuer: /CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a
Certificate serial: 0198D515E6B1FF9AB7DC9C93FB7F915170AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
Manifest number: 1347
Signing time: Sat 23 Aug 2025 04:00:39 +0000
Manifest this update: Sat 23 Aug 2025 04:00:39 +0000
Manifest next update: Sun 24 Aug 2025 04:00:39 +0000
Files and hashes: 1: PJMfJlqEcdMs6ESdnhhvDccRSno.crl (hash: YOZ319GbeP1dHqVsUNQqLKL4W0MZxT6gPiPYwciN90U=)
2: PkJhyt9pT1uGvNEkXULDRnIoKM8.roa (hash: GnXTwsBZIxIhJPycvbpoXf49+cV9ppIdazG5Z3GlNBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:e6:b1:ff:9a:b7:dc:9c:93:fb:7f:91:51:70:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a
Validity
Not Before: Aug 23 04:00:39 2025 GMT
Not After : Aug 24 04:00:39 2025 GMT
Subject: CN=2d691945907bcc4ea245de4602266fed1feb2000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:32:9d:75:83:8e:97:66:37:38:e2:80:f5:86:
26:2a:10:45:36:d2:69:ce:20:2f:9d:62:95:5f:44:
21:d5:ca:67:07:8e:bd:3f:55:25:3a:32:f9:a6:2e:
a1:7a:59:45:24:9b:0f:d7:e1:19:2e:70:88:06:48:
15:16:92:a7:0c:5b:70:5c:7f:12:75:92:b1:17:0c:
5f:32:2b:2a:3b:f7:cb:2b:04:75:59:e2:d3:15:5a:
a9:62:18:c0:4f:55:c6:e9:b6:3b:db:2d:48:83:42:
14:78:af:fd:2d:d4:c6:02:ad:51:ea:6d:94:e7:e1:
fb:58:1f:d2:5a:8d:6a:4b:ef:ae:00:d6:12:59:11:
99:b9:c6:fa:55:f3:c5:3f:8a:1c:c1:e5:48:f2:08:
fb:88:88:33:5b:16:15:82:b7:e2:8f:d7:f3:a7:3b:
8a:ae:a5:9a:51:31:0a:6f:93:8a:9d:3a:20:3d:84:
42:a9:88:0c:e0:67:b8:87:c0:00:c7:f6:55:4f:d9:
1c:31:3f:23:4a:15:79:91:d9:e3:58:6f:4e:29:60:
73:0a:64:f3:a1:de:bf:4b:8b:ed:70:86:dd:33:7d:
c0:50:96:c6:b8:6b:a5:fa:2a:ed:5e:7d:06:a9:36:
14:6f:be:08:c5:7e:f0:a9:d1:10:5e:ce:09:ef:23:
b6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:69:19:45:90:7B:CC:4E:A2:45:DE:46:02:26:6F:ED:1F:EB:20:00
X509v3 Authority Key Identifier:
keyid:3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:05:5d:c2:08:2c:7b:fa:6b:5c:d1:41:c3:10:be:f4:c3:54:
a5:2e:a7:2c:5c:e4:60:ae:8f:65:be:a6:49:47:00:28:dc:ab:
9a:47:df:89:c5:a2:7a:97:9b:84:2b:ca:8e:ad:22:5e:e7:a0:
c1:9a:da:19:02:db:11:71:b9:51:2f:3f:ad:87:fc:60:ff:b4:
ec:e2:4c:70:e2:9f:04:13:56:20:73:ab:0d:2b:ff:2c:f7:02:
79:62:c3:02:d2:e2:70:8c:6b:cc:e5:99:e1:28:55:d5:a2:0d:
bb:52:47:3d:a0:8d:b6:86:a2:d1:0a:ad:a1:3e:5a:39:12:44:
bf:db:11:ca:10:a2:48:61:12:a4:76:d2:eb:41:84:65:93:82:
26:0a:17:c4:a6:d4:43:88:9a:12:0e:e6:86:3b:05:7d:3c:3e:
01:d7:f5:e2:36:11:5d:74:44:cb:d2:85:e3:98:74:db:03:e7:
f8:89:7d:56:51:ca:48:e5:04:93:03:37:74:d6:7f:02:b9:a0:
5f:84:4e:6e:1c:57:b2:f4:c6:4e:56:4b:6f:0a:bc:77:d8:93:
23:62:21:e6:af:8f:db:b3:6c:eb:ee:70:fb:ce:63:16:b0:1b:
07:97:b9:6d:23:3c:ec:44:60:b8:d4:24:c0:ed:5b:fc:77:7a:
e9:16:01:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFeax/5q33JyT+3+RUXCuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjOTMxZjI2NWE4NDcxZDMyY2U4NDQ5ZDllMTg2ZjBkYzcx
MTRhN2EwHhcNMjUwODIzMDQwMDM5WhcNMjUwODI0MDQwMDM5WjAzMTEwLwYDVQQD
EygyZDY5MTk0NTkwN2JjYzRlYTI0NWRlNDYwMjI2NmZlZDFmZWIyMDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjKddYOOl2Y3OOKA9YYmKhBFNtJp
ziAvnWKVX0Qh1cpnB469P1UlOjL5pi6hellFJJsP1+EZLnCIBkgVFpKnDFtwXH8S
dZKxFwxfMisqO/fLKwR1WeLTFVqpYhjAT1XG6bY72y1Ig0IUeK/9LdTGAq1R6m2U
5+H7WB/SWo1qS++uANYSWRGZucb6VfPFP4ocweVI8gj7iIgzWxYVgrfij9fzpzuK
rqWaUTEKb5OKnTogPYRCqYgM4Ge4h8AAx/ZVT9kcMT8jShV5kdnjWG9OKWBzCmTz
od6/S4vtcIbdM33AUJbGuGul+irtXn0GqTYUb74IxX7wqdEQXs4J7yO2hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1pGUWQe8xOokXeRgImb+0f6yAAMB8GA1UdIwQY
MBaAFDyTHyZahHHTLOhEnZ4Ybw3HEUp6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEpNZkpscUVjZE1zNkVTZG5oaHZEY2NSU25vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9iNTBiZGEtNjg5OS00ZWVmLWEyMzEt
NWUwMDI2MzAzNjI5LzEvUEpNZkpscUVjZE1zNkVTZG5oaHZEY2NSU25vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9iNTBiZGEtNjg5OS00ZWVmLWEyMzEtNWUwMDI2MzAzNjI5
LzEvUEpNZkpscUVjZE1zNkVTZG5oaHZEY2NSU25vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASgVdwggs
e/prXNFBwxC+9MNUpS6nLFzkYK6PZb6mSUcAKNyrmkfficWiepebhCvKjq0iXueg
wZraGQLbEXG5US8/rYf8YP+07OJMcOKfBBNWIHOrDSv/LPcCeWLDAtLicIxrzOWZ
4ShV1aINu1JHPaCNtoai0QqtoT5aORJEv9sRyhCiSGESpHbS60GEZZOCJgoXxKbU
Q4iaEg7mhjsFfTw+Adf14jYRXXREy9KF45h02wPn+Il9VlHKSOUEkwM3dNZ/Armg
X4RObhxXsvTGTlZLbwq8d9iTI2Ih5q+P27Ns6+5w+85jFrAbB5e5bSM87ERguNQk
wO1b/Hd66RYB3Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:11 2025 by rpki-client