Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
File: P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft (raw, json)
Hash identifier: HNRanqaytQkcVtVFLgii+6p88kFDfo7erpZ33uPnEc8=
Subject key identifier: FF:86:1F:69:D1:9B:8E:35:3E:FA:07:1D:32:81:C1:BC:C2:01:3E:2E
Authority key identifier: 3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
Certificate issuer: /CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Certificate serial: 0197B7EA141A12D28083614539B23193A319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
Manifest number: 0FEC
Signing time: Sat 28 Jun 2025 19:01:00 +0000
Manifest this update: Sat 28 Jun 2025 19:01:00 +0000
Manifest next update: Sun 29 Jun 2025 19:01:00 +0000
Files and hashes: 1: LsnRSFX0fJ6jFaMFhsNOF1N3rXk.roa (hash: dex17lVhtaQHFqLExDWweZahtCv1yqvsMMQYp4bDPYo=)
2: P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl (hash: Crtdyly3rH1om3wbDRI540Pq6K0m1tR5xBiqrGp2Brc=)
3: ZCv1BvgxYc7es0hHXD_Z0b-Ht0s.roa (hash: M90TxVMUtw28EWlnD72m1jWls/YScUzAXqX8GMvniY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:14:1a:12:d2:80:83:61:45:39:b2:31:93:a3:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Validity
Not Before: Jun 28 19:01:00 2025 GMT
Not After : Jun 29 19:01:00 2025 GMT
Subject: CN=ff861f69d19b8e353efa071d3281c1bcc2013e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:65:b6:d5:f1:59:24:31:44:de:1f:21:a4:66:
93:d0:1f:8c:f0:06:57:b2:aa:03:67:21:d6:02:34:
fc:58:e5:85:ad:0e:af:c0:32:84:a9:ee:c9:cc:70:
ce:da:8f:f1:7a:e1:77:4d:f3:89:6c:e7:a9:3a:de:
f8:03:50:aa:d1:26:8b:4a:06:11:f1:e1:89:2b:a5:
77:56:b6:df:2d:2f:29:c3:5e:ec:04:83:58:0e:b3:
41:cc:79:13:6e:aa:83:1b:79:9b:52:7d:10:09:6f:
a2:df:62:e6:2a:57:2e:55:71:2d:e1:b7:2e:04:91:
4f:f3:63:25:0c:7d:3a:ff:3e:5a:32:36:b6:9a:b6:
1a:d4:36:d2:d8:0b:ca:d1:23:c8:0e:9d:1a:97:a4:
34:3a:da:f8:8c:f1:3b:1c:d0:7b:79:a3:d6:20:1c:
9f:96:5f:3f:f8:b6:34:01:f0:e4:99:65:12:0e:ab:
cd:f4:22:8b:45:8e:d4:1b:ac:20:fc:ea:6e:65:34:
35:b0:a8:9e:a6:cf:42:04:51:69:a4:3c:61:1d:95:
b6:30:03:2a:87:57:82:d1:7f:b1:b3:60:43:f2:39:
c0:c0:a2:7b:a2:88:82:5d:1c:1b:c4:a5:74:29:6f:
d5:b3:70:75:df:32:b8:d6:39:20:ad:17:31:3f:77:
34:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:86:1F:69:D1:9B:8E:35:3E:FA:07:1D:32:81:C1:BC:C2:01:3E:2E
X509v3 Authority Key Identifier:
keyid:3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:fb:88:09:25:93:09:99:fc:a2:bd:43:30:3f:3e:a1:1d:ee:
51:56:60:2d:68:98:71:92:a7:d4:ea:ca:bb:64:3c:00:d6:d2:
a8:c0:df:80:d5:18:64:4e:0c:b5:9e:03:76:bb:af:30:f6:af:
de:bc:4c:1e:54:c2:e2:e5:ec:df:68:aa:44:bf:f0:37:0f:32:
4f:2d:1d:8a:0d:e0:39:71:a9:93:57:de:01:8f:81:0e:ff:d0:
2d:20:75:2e:5d:ec:fc:7c:7e:83:90:66:8c:76:4a:0b:55:34:
1b:f1:c5:ef:ea:31:d0:94:f5:81:9c:90:c0:19:68:91:ff:4a:
dd:2e:e1:c6:bd:45:c1:e2:fe:7f:bf:30:4d:95:29:43:4e:b6:
8c:9d:cd:cb:0a:9d:52:62:e0:c7:b6:84:2f:08:9e:98:2e:07:
3e:db:44:86:d6:1c:88:da:cf:84:84:c7:5d:c6:c3:34:cd:28:
a3:b3:7b:71:55:bd:d3:a6:de:25:a4:cd:61:bd:ff:53:d1:d0:
c1:64:f2:10:64:63:61:ce:3a:0c:fb:80:79:5b:59:db:e7:65:
46:da:2a:67:a4:1f:0b:f9:5c:f8:4c:ef:69:64:bb:21:c6:eb:
3a:8f:de:86:2f:1c:b1:0b:a3:c3:08:86:87:ad:82:14:c7:12:
4f:e1:5a:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36hQaEtKAg2FFObIxk6MZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmOTY3MDNmMzBlMjA5OWEzZDkwMDZiZmE4NGU1YzZjNDg2
YThkMmUwHhcNMjUwNjI4MTkwMTAwWhcNMjUwNjI5MTkwMTAwWjAzMTEwLwYDVQQD
EyhmZjg2MWY2OWQxOWI4ZTM1M2VmYTA3MWQzMjgxYzFiY2MyMDEzZTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWW21fFZJDFE3h8hpGaT0B+M8AZX
sqoDZyHWAjT8WOWFrQ6vwDKEqe7JzHDO2o/xeuF3TfOJbOepOt74A1Cq0SaLSgYR
8eGJK6V3VrbfLS8pw17sBINYDrNBzHkTbqqDG3mbUn0QCW+i32LmKlcuVXEt4bcu
BJFP82MlDH06/z5aMja2mrYa1DbS2AvK0SPIDp0al6Q0Otr4jPE7HNB7eaPWIByf
ll8/+LY0AfDkmWUSDqvN9CKLRY7UG6wg/OpuZTQ1sKieps9CBFFppDxhHZW2MAMq
h1eC0X+xs2BD8jnAwKJ7ooiCXRwbxKV0KW/Vs3B13zK41jkgrRcxP3c0QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+GH2nRm441PvoHHTKBwbzCAT4uMB8GA1UdIwQY
MBaAFD+WcD8w4gmaPZAGv6hOXGxIao0uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDVad1B6RGlDWm85a0FhX3FFNWNiRWhxalM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84MzY0N2EtNDRlNS00MDQ5LWI4Nzkt
OTMzN2YzNzQxNjhlLzEvUDVad1B6RGlDWm85a0FhX3FFNWNiRWhxalM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC84MzY0N2EtNDRlNS00MDQ5LWI4NzktOTMzN2YzNzQxNjhl
LzEvUDVad1B6RGlDWm85a0FhX3FFNWNiRWhxalM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk/uICSWT
CZn8or1DMD8+oR3uUVZgLWiYcZKn1OrKu2Q8ANbSqMDfgNUYZE4MtZ4DdruvMPav
3rxMHlTC4uXs32iqRL/wNw8yTy0dig3gOXGpk1feAY+BDv/QLSB1Ll3s/Hx+g5Bm
jHZKC1U0G/HF7+ox0JT1gZyQwBlokf9K3S7hxr1FweL+f78wTZUpQ062jJ3Nywqd
UmLgx7aELwiemC4HPttEhtYciNrPhITHXcbDNM0oo7N7cVW906beJaTNYb3/U9HQ
wWTyEGRjYc46DPuAeVtZ2+dlRtoqZ6QfC/lc+EzvaWS7IcbrOo/ehi8csQujwwiG
h62CFMcST+FaSw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:49 2025 by rpki-client