Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
File: pENNZpHm4nwoLKo3r_kPK8VL8eM.mft (raw, json)
Hash identifier: 4ne+sGVjjZYoGDnQfQ59ma2yIHxFXXKfRv+lkNRlKgg=
Subject key identifier: 41:E8:D6:AC:6D:35:29:19:A7:73:53:D8:65:5A:8A:49:F5:20:B7:22
Authority key identifier: A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3
Certificate issuer: /CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3
Certificate serial: 0197B745309349EFD164C77F8E9051EB06B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 16:00:54 +0000
Manifest this update: Sat 28 Jun 2025 16:00:54 +0000
Manifest next update: Sun 29 Jun 2025 16:00:54 +0000
Files and hashes: 1: V4fEP3mKAgRZldstTINNuk_J6BQ.roa (hash: 8GFsD/JurXta37HamqakliSVJtpBqW+/i/sWeLhcYfE=)
2: pENNZpHm4nwoLKo3r_kPK8VL8eM.crl (hash: FS0vUxK+pAhGKZ5rRq86TGbUSEINI2jrWjEdjCFfBFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:30:93:49:ef:d1:64:c7:7f:8e:90:51:eb:06:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3
Validity
Not Before: Jun 28 16:00:54 2025 GMT
Not After : Jun 29 16:00:54 2025 GMT
Subject: CN=41e8d6ac6d352919a77353d8655a8a49f520b722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:eb:e0:6a:1e:7f:43:05:a2:de:e4:07:98:57:
f1:6b:ee:9b:38:bc:68:a4:4c:89:b8:14:7c:89:95:
3b:21:26:53:2b:c2:12:3b:b2:21:b8:8c:f6:55:37:
f2:3c:eb:a6:aa:24:88:4f:82:c8:0b:d8:bc:81:4f:
fb:18:9b:ef:69:fa:21:cf:16:5f:2d:43:4e:ff:a8:
69:79:49:64:6b:14:43:25:fb:99:93:b9:97:d1:cf:
35:ae:3c:6b:b8:cc:c0:e5:d2:d8:f6:b3:41:d9:ff:
1c:c2:43:86:c9:cc:af:e9:d8:bd:35:24:7f:f7:2e:
c1:4f:0f:5c:3d:f5:7a:55:59:c1:9c:25:82:46:3f:
8f:22:a5:bd:05:c4:3f:5a:fe:94:48:d3:cb:8e:6c:
65:b7:e9:2a:87:3c:1c:a4:99:59:46:88:17:ae:4e:
23:bc:d0:d2:91:64:1b:c5:20:2b:e6:be:12:3d:1e:
69:c3:a4:7f:eb:3f:c9:0f:a8:f3:da:65:1b:2e:6e:
a1:ad:de:6a:5f:70:34:99:8c:4b:d4:cd:e4:fc:58:
70:0c:ab:86:87:1a:90:97:7b:cb:80:7c:dc:34:79:
d6:4b:65:ee:74:51:f3:c9:3f:86:04:54:92:cc:92:
94:3f:c8:e8:cf:3d:db:aa:0b:e0:ba:dd:4b:d4:3f:
ef:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E8:D6:AC:6D:35:29:19:A7:73:53:D8:65:5A:8A:49:F5:20:B7:22
X509v3 Authority Key Identifier:
keyid:A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:17:eb:96:fc:fe:2c:cb:06:2e:c5:aa:75:fa:a0:84:c1:63:
ca:a0:8b:6f:ed:12:a2:ce:14:bb:4a:e4:7d:67:9c:28:db:e8:
c5:3f:4c:c0:15:b5:48:a8:5e:55:9d:35:77:93:d7:51:aa:a7:
5a:ae:64:72:09:12:0b:33:74:21:bc:e5:e6:c8:54:7b:9d:82:
8d:2f:9b:f6:95:42:e3:1d:27:73:ec:ac:78:b0:f6:fe:58:48:
24:27:f4:5f:aa:54:80:84:b8:3b:42:0e:4e:ff:f2:cb:bf:d2:
0d:c0:10:c2:f8:5d:eb:ec:14:75:ac:0c:ba:50:42:e4:61:16:
8a:c7:fa:97:e1:c9:db:65:12:16:9b:6b:1e:bb:16:25:41:10:
fa:b7:72:73:9d:6f:c3:3e:f8:0b:99:7b:2c:66:71:3a:4e:60:
18:d8:dc:23:4d:2a:ea:fb:cd:36:38:c3:5e:54:12:3b:30:90:
32:d2:27:76:ec:fe:bf:63:bd:70:cd:50:6b:cf:cf:16:e6:09:
db:26:c1:ad:3a:1b:9b:62:aa:50:4c:e2:10:1a:5a:0a:64:1e:
fb:9b:db:8e:0a:7c:7a:df:1a:f8:48:52:4a:75:25:0b:83:2a:
ca:49:4f:09:e5:ce:ad:b5:d7:78:5e:2c:ee:b5:70:08:b7:be:
d4:6c:e6:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RTCTSe/RZMd/jpBR6wazMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NDM0ZDY2OTFlNmUyN2MyODJjYWEzN2FmZjkwZjJiYzU0
YmYxZTMwHhcNMjUwNjI4MTYwMDU0WhcNMjUwNjI5MTYwMDU0WjAzMTEwLwYDVQQD
Eyg0MWU4ZDZhYzZkMzUyOTE5YTc3MzUzZDg2NTVhOGE0OWY1MjBiNzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOvgah5/QwWi3uQHmFfxa+6bOLxo
pEyJuBR8iZU7ISZTK8ISO7IhuIz2VTfyPOumqiSIT4LIC9i8gU/7GJvvafohzxZf
LUNO/6hpeUlkaxRDJfuZk7mX0c81rjxruMzA5dLY9rNB2f8cwkOGycyv6di9NSR/
9y7BTw9cPfV6VVnBnCWCRj+PIqW9BcQ/Wv6USNPLjmxlt+kqhzwcpJlZRogXrk4j
vNDSkWQbxSAr5r4SPR5pw6R/6z/JD6jz2mUbLm6hrd5qX3A0mYxL1M3k/FhwDKuG
hxqQl3vLgHzcNHnWS2XudFHzyT+GBFSSzJKUP8jozz3bqgvgut1L1D/v8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHo1qxtNSkZp3NT2GVaikn1ILciMB8GA1UdIwQY
MBaAFKRDTWaR5uJ8KCyqN6/5DyvFS/HjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEVOTlpwSG00bndvTEtvM3Jfa1BLOFZMOGVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny80NWIyZDktZTg2MS00M2VmLWJjYzAt
ZTk5NzVhMGJkZWE3LzEvcEVOTlpwSG00bndvTEtvM3Jfa1BLOFZMOGVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny80NWIyZDktZTg2MS00M2VmLWJjYzAtZTk5NzVhMGJkZWE3
LzEvcEVOTlpwSG00bndvTEtvM3Jfa1BLOFZMOGVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfRfrlvz+
LMsGLsWqdfqghMFjyqCLb+0Sos4Uu0rkfWecKNvoxT9MwBW1SKheVZ01d5PXUaqn
Wq5kcgkSCzN0Ibzl5shUe52CjS+b9pVC4x0nc+yseLD2/lhIJCf0X6pUgIS4O0IO
Tv/yy7/SDcAQwvhd6+wUdawMulBC5GEWisf6l+HJ22USFptrHrsWJUEQ+rdyc51v
wz74C5l7LGZxOk5gGNjcI00q6vvNNjjDXlQSOzCQMtInduz+v2O9cM1Qa8/PFuYJ
2ybBrTobm2KqUEziEBpaCmQe+5vbjgp8et8a+EhSSnUlC4MqyklPCeXOrbXXeF4s
7rVwCLe+1Gzm1w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:00:37 2025 by rpki-client