Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
File: PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft (raw, json)
Hash identifier: HiAJ3HHmHTXHLUmryvknEU5QZ5fEHI6lyuXj4Xtf1Hk=
Subject key identifier: F7:19:96:C5:7A:8F:1D:9A:7F:25:FA:51:65:FF:CC:D9:08:CB:97:C2
Authority key identifier: 3C:17:7B:52:80:43:A8:59:53:FC:25:0F:99:1D:9D:80:20:E2:81:0D
Certificate issuer: /CN=3c177b528043a85953fc250f991d9d8020e2810d
Certificate serial: 0197B8908DA2E315AD593E0E167E13ACD8AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
Manifest number: 15C0
Signing time: Sat 28 Jun 2025 22:02:50 +0000
Manifest this update: Sat 28 Jun 2025 22:02:50 +0000
Manifest next update: Sun 29 Jun 2025 22:02:50 +0000
Files and hashes: 1: 97b_DOZexsMsbNq0jd1_KnrCkGw.roa (hash: Zsql+k4AO5wopmLFKXiIANICmsUjbHpn09FeXgUdFls=)
2: PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl (hash: xI8LtVeBNYIr2JLCjMqA2nbSofjrlik8+xlnixNOEsw=)
3: vFJBXwiLiT0SV6hpYm9T1KH_3Sw.roa (hash: iZ/rALDyZJ1JAyWAtw5uSLsZV8Z+UzVJnNgd7eGfu2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:8d:a2:e3:15:ad:59:3e:0e:16:7e:13:ac:d8:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c177b528043a85953fc250f991d9d8020e2810d
Validity
Not Before: Jun 28 22:02:50 2025 GMT
Not After : Jun 29 22:02:50 2025 GMT
Subject: CN=f71996c57a8f1d9a7f25fa5165ffccd908cb97c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:07:38:0c:d5:53:25:49:1d:19:f1:37:bb:51:
17:78:d1:78:b2:49:d2:a0:6b:4a:85:b0:af:26:4c:
ce:67:af:70:99:90:ac:1e:17:73:80:66:c0:18:48:
fe:98:5f:01:6a:7f:83:b1:5a:cd:8c:36:07:f8:d1:
81:93:6c:04:da:a3:8e:85:f0:51:5a:92:f8:6b:86:
df:bf:de:73:87:7b:8d:4b:68:52:6a:e4:2c:59:e8:
1c:d3:9a:35:3d:b0:43:4b:0e:42:77:d6:01:fa:f2:
d3:0a:d0:2d:9d:16:7c:8c:e8:fa:92:f8:51:12:21:
4c:fb:ec:9e:b2:31:39:9e:91:b8:d6:20:b6:43:6d:
1e:22:0d:66:5a:b6:10:54:3e:75:d2:8d:50:3b:eb:
bc:35:a0:61:ee:65:47:69:2a:07:68:37:26:43:5b:
5e:12:02:ad:55:07:b2:22:76:96:db:de:8d:4b:89:
08:dc:b7:6b:6d:60:5b:94:1c:0f:14:c5:05:70:cc:
36:f3:a4:cc:5e:4e:39:b0:6b:08:be:aa:47:77:36:
e1:88:1b:e3:b0:d1:e2:24:51:f3:14:b8:63:00:68:
e5:a6:91:35:ca:fc:f9:38:98:05:71:f3:3a:0e:cc:
9f:b9:2f:b0:1c:18:8b:24:d4:a9:98:cf:0d:53:ba:
bd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:19:96:C5:7A:8F:1D:9A:7F:25:FA:51:65:FF:CC:D9:08:CB:97:C2
X509v3 Authority Key Identifier:
keyid:3C:17:7B:52:80:43:A8:59:53:FC:25:0F:99:1D:9D:80:20:E2:81:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:66:3a:cb:8f:b5:0c:4d:ba:14:cf:50:f1:0e:0d:3d:ec:75:
90:64:71:ca:2a:59:18:c5:41:15:6a:3e:e2:2b:33:1e:e9:4e:
93:16:8c:6a:df:9d:e1:1f:08:f4:4d:f8:f0:26:6e:3d:5c:0f:
11:6d:f1:50:14:51:b6:cf:12:11:f6:4c:81:4a:f2:bd:35:be:
33:ce:c6:1c:36:49:90:0c:ee:98:a6:b9:6f:61:fd:b4:70:9c:
54:74:9d:00:cf:5f:b6:45:b1:6b:ae:28:a5:63:15:f0:46:c5:
48:5b:fd:4c:2c:ea:da:87:70:cf:76:c6:4c:bc:80:55:5f:bc:
5a:27:80:9e:cf:ac:29:db:35:86:5d:2d:22:b8:a4:5e:dd:24:
fa:44:43:76:1d:41:47:37:92:bb:46:88:fa:6b:52:06:58:04:
cb:a7:d2:39:4c:ec:e4:49:19:8c:e5:02:73:69:05:30:79:85:
cf:52:8e:55:05:0c:27:c3:29:8a:89:1f:c8:bd:88:e6:d8:a3:
fc:e0:79:18:c7:54:9a:90:09:2e:43:55:24:5d:03:6c:13:24:
47:0f:83:bd:2d:90:31:ab:88:20:38:10:b9:c0:19:84:b9:09:
a2:0c:e6:01:9f:63:c3:7e:61:09:c1:ab:88:14:ec:e2:ae:fe:
e6:e2:f7:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4kI2i4xWtWT4OFn4TrNitMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMTc3YjUyODA0M2E4NTk1M2ZjMjUwZjk5MWQ5ZDgwMjBl
MjgxMGQwHhcNMjUwNjI4MjIwMjUwWhcNMjUwNjI5MjIwMjUwWjAzMTEwLwYDVQQD
EyhmNzE5OTZjNTdhOGYxZDlhN2YyNWZhNTE2NWZmY2NkOTA4Y2I5N2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgc4DNVTJUkdGfE3u1EXeNF4sknS
oGtKhbCvJkzOZ69wmZCsHhdzgGbAGEj+mF8Ban+DsVrNjDYH+NGBk2wE2qOOhfBR
WpL4a4bfv95zh3uNS2hSauQsWegc05o1PbBDSw5Cd9YB+vLTCtAtnRZ8jOj6kvhR
EiFM++yesjE5npG41iC2Q20eIg1mWrYQVD510o1QO+u8NaBh7mVHaSoHaDcmQ1te
EgKtVQeyInaW296NS4kI3LdrbWBblBwPFMUFcMw286TMXk45sGsIvqpHdzbhiBvj
sNHiJFHzFLhjAGjlppE1yvz5OJgFcfM6DsyfuS+wHBiLJNSpmM8NU7q9KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcZlsV6jx2afyX6UWX/zNkIy5fCMB8GA1UdIwQY
MBaAFDwXe1KAQ6hZU/wlD5kdnYAg4oENMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEJkN1VvQkRxRmxUX0NVUG1SMmRnQ0RpZ1EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81ZWQ1MjUtM2YzNy00YzcwLWEyZWMt
YTQxNTFiNWUyZmNmLzEvUEJkN1VvQkRxRmxUX0NVUG1SMmRnQ0RpZ1EwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC81ZWQ1MjUtM2YzNy00YzcwLWEyZWMtYTQxNTFiNWUyZmNm
LzEvUEJkN1VvQkRxRmxUX0NVUG1SMmRnQ0RpZ1EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALmY6y4+1
DE26FM9Q8Q4NPex1kGRxyipZGMVBFWo+4iszHulOkxaMat+d4R8I9E348CZuPVwP
EW3xUBRRts8SEfZMgUryvTW+M87GHDZJkAzumKa5b2H9tHCcVHSdAM9ftkWxa64o
pWMV8EbFSFv9TCzq2odwz3bGTLyAVV+8WieAns+sKds1hl0tIrikXt0k+kRDdh1B
RzeSu0aI+mtSBlgEy6fSOUzs5EkZjOUCc2kFMHmFz1KOVQUMJ8MpiokfyL2I5tij
/OB5GMdUmpAJLkNVJF0DbBMkRw+DvS2QMauIIDgQucAZhLkJogzmAZ9jw35hCcGr
iBTs4q7+5uL3hQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:20:32 2025 by rpki-client