Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
File: pJKfzWHcadzPvgHV_wA1tBrJUmA.mft (raw, json)
Hash identifier: /iz6YgTdt46FDunQukMb76OC9KRRKdJkQIbQeZemFK4=
Subject key identifier: 4C:4F:3C:AD:70:22:50:8F:13:0B:1A:EF:3B:77:1C:4D:1E:A7:06:1D
Authority key identifier: A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60
Certificate issuer: /CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260
Certificate serial: 0197C4936FE6C638652B2DD3700E591440B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
Manifest number: 0ED1
Signing time: Tue 01 Jul 2025 06:01:26 +0000
Manifest this update: Tue 01 Jul 2025 06:01:26 +0000
Manifest next update: Wed 02 Jul 2025 06:01:26 +0000
Files and hashes: 1: FMd4ncvFc0vMJ63ZqH_KhMZqr00.roa (hash: GAIpznWNN7ttQuk7XL5JgmFjADI10rnA9JaXxJOak4g=)
2: pJKfzWHcadzPvgHV_wA1tBrJUmA.crl (hash: NQUBKb7GdKM2ktvUkgD8uXHLP0ad/L1HfodEsf+whU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 06:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:93:6f:e6:c6:38:65:2b:2d:d3:70:0e:59:14:40:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260
Validity
Not Before: Jul 1 06:01:26 2025 GMT
Not After : Jul 2 06:01:26 2025 GMT
Subject: CN=4c4f3cad7022508f130b1aef3b771c4d1ea7061d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:82:51:e3:42:95:c9:d1:9d:1f:e3:1a:0c:38:
a0:2b:48:22:9d:e3:32:fc:20:ce:5f:b9:cd:75:5b:
f0:00:e3:2b:92:7c:5b:c8:c6:fa:6e:35:94:2d:f8:
db:a7:e8:47:2b:b6:76:66:7f:8f:d8:36:72:80:43:
07:03:67:aa:a5:d5:e4:30:8f:72:eb:1f:7c:32:c5:
ac:b2:3b:db:d1:e4:04:e0:d1:4d:6c:b6:d1:00:1e:
07:b1:a3:31:a5:55:e1:b8:ac:27:9c:c6:42:b7:04:
b8:c1:78:b7:b8:bf:0a:e3:72:1c:7e:48:52:2f:77:
d8:0c:90:c0:4e:25:c7:a5:a4:b7:a5:bd:64:7c:ae:
83:c5:da:e6:97:69:d8:02:d3:c0:22:b6:06:af:e2:
20:55:32:4c:fd:f9:26:ac:a2:af:26:76:ff:7b:c2:
72:a1:60:c5:50:df:36:d4:f9:b0:71:03:45:04:c5:
72:ff:a3:09:7c:cf:bd:85:51:8e:fa:65:4b:d5:62:
bb:64:86:80:48:2c:c8:a0:f7:18:db:b6:5f:45:55:
73:2f:79:51:13:e9:89:51:2f:44:bb:52:59:a9:ac:
10:65:00:47:df:46:67:28:06:63:3b:cf:41:f4:16:
e2:e9:6f:92:48:41:de:2c:35:aa:02:06:d6:81:f2:
71:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4F:3C:AD:70:22:50:8F:13:0B:1A:EF:3B:77:1C:4D:1E:A7:06:1D
X509v3 Authority Key Identifier:
keyid:A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:88:6e:3a:87:2a:12:2d:95:60:49:69:08:a9:a4:d9:fb:93:
c2:bf:5d:cc:6a:ee:25:78:89:02:56:b0:f6:ed:7d:e7:f2:f0:
3c:b4:94:06:5a:ee:15:33:73:6a:b8:b5:18:45:ec:4d:43:c0:
6a:dc:b4:91:a2:c2:4c:0c:b0:7b:81:bd:6a:ce:12:a8:f2:fa:
86:33:c4:d9:cd:ae:86:12:6b:de:c4:ce:55:43:33:b8:33:07:
0d:5c:be:93:8e:21:cc:ea:6d:2c:b6:b8:3a:e4:8a:f5:f2:e1:
74:f0:16:66:da:0c:50:21:eb:b8:24:e6:7c:64:49:cb:e7:88:
4e:cd:db:1b:c9:22:c6:99:db:0d:b4:20:97:a4:88:c2:f5:04:
36:86:73:c3:a4:71:e6:fd:ca:b5:0c:3b:47:dd:7e:21:65:48:
79:27:80:cc:a8:eb:0a:00:20:ef:59:ed:2d:f9:df:60:26:49:
07:e2:1b:61:5d:0e:3f:5d:ad:52:c4:c9:8a:fc:ad:a3:1d:fb:
89:0f:8b:ce:3b:83:cd:81:e0:c6:56:11:26:b8:d8:b0:a8:2e:
6c:2f:5d:39:88:8a:79:ea:52:4c:c3:62:77:77:c7:de:f7:5c:
ef:ca:b6:a0:23:8f:83:fa:49:9c:83:2a:4f:91:62:49:45:3f:
ca:9d:5a:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfEk2/mxjhlKy3TcA5ZFEC4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OTI5ZmNkNjFkYzY5ZGNjZmJlMDFkNWZmMDAzNWI0MWFj
OTUyNjAwHhcNMjUwNzAxMDYwMTI2WhcNMjUwNzAyMDYwMTI2WjAzMTEwLwYDVQQD
Eyg0YzRmM2NhZDcwMjI1MDhmMTMwYjFhZWYzYjc3MWM0ZDFlYTcwNjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4JR40KVydGdH+MaDDigK0gineMy
/CDOX7nNdVvwAOMrknxbyMb6bjWULfjbp+hHK7Z2Zn+P2DZygEMHA2eqpdXkMI9y
6x98MsWssjvb0eQE4NFNbLbRAB4HsaMxpVXhuKwnnMZCtwS4wXi3uL8K43IcfkhS
L3fYDJDATiXHpaS3pb1kfK6Dxdrml2nYAtPAIrYGr+IgVTJM/fkmrKKvJnb/e8Jy
oWDFUN821PmwcQNFBMVy/6MJfM+9hVGO+mVL1WK7ZIaASCzIoPcY27ZfRVVzL3lR
E+mJUS9Eu1JZqawQZQBH30ZnKAZjO89B9Bbi6W+SSEHeLDWqAgbWgfJx5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFExPPK1wIlCPEwsa7zt3HE0epwYdMB8GA1UdIwQY
MBaAFKSSn81h3Gncz74B1f8ANbQayVJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEpLZnpXSGNhZHpQdmdIVl93QTF0QnJKVW1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81YTIxMTctZjU4My00NDVkLWI3MmUt
ZWJhOWM1Y2IzMmQwLzEvcEpLZnpXSGNhZHpQdmdIVl93QTF0QnJKVW1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81YTIxMTctZjU4My00NDVkLWI3MmUtZWJhOWM1Y2IzMmQw
LzEvcEpLZnpXSGNhZHpQdmdIVl93QTF0QnJKVW1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp4huOocq
Ei2VYElpCKmk2fuTwr9dzGruJXiJAlaw9u195/LwPLSUBlruFTNzari1GEXsTUPA
aty0kaLCTAywe4G9as4SqPL6hjPE2c2uhhJr3sTOVUMzuDMHDVy+k44hzOptLLa4
OuSK9fLhdPAWZtoMUCHruCTmfGRJy+eITs3bG8kixpnbDbQgl6SIwvUENoZzw6Rx
5v3KtQw7R91+IWVIeSeAzKjrCgAg71ntLfnfYCZJB+IbYV0OP12tUsTJivytox37
iQ+LzjuDzYHgxlYRJrjYsKgubC9dOYiKeepSTMNid3fH3vdc78q2oCOPg/pJnIMq
T5FiSUU/yp1aJg==
-----END CERTIFICATE-----
Generated at Tue Jul 1 11:18:22 2025 by rpki-client