Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
File: pj3LkKFHQqUr5coJy-2N_BzT0e8.mft (raw, json)
Hash identifier: 0bQ46UkrutWI3a640gpDfUx5/p37ZazqRviqHeYaRxU=
Subject key identifier: 3B:81:4B:9D:A4:5F:05:62:C9:CD:E0:76:75:34:58:5C:1A:27:61:0A
Authority key identifier: A6:3D:CB:90:A1:47:42:A5:2B:E5:CA:09:CB:ED:8D:FC:1C:D3:D1:EF
Certificate issuer: /CN=a63dcb90a14742a52be5ca09cbed8dfc1cd3d1ef
Certificate serial: 0198D583B798498A90D8DBBC847AD1C16615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 06:00:35 +0000
Manifest this update: Sat 23 Aug 2025 06:00:35 +0000
Manifest next update: Sun 24 Aug 2025 06:00:35 +0000
Files and hashes: 1: _fFHOJoXpOrY_um7x7QB-vvO3bk.roa (hash: p/LewBD8vsUMOUJR34qULDasx72iNLAz4cIqUSFI+5E=)
2: pj3LkKFHQqUr5coJy-2N_BzT0e8.crl (hash: S20qPNbVJamphd4Ac1smfe826lSHB7vmvamfHEj2Y/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:b7:98:49:8a:90:d8:db:bc:84:7a:d1:c1:66:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63dcb90a14742a52be5ca09cbed8dfc1cd3d1ef
Validity
Not Before: Aug 23 06:00:35 2025 GMT
Not After : Aug 24 06:00:35 2025 GMT
Subject: CN=3b814b9da45f0562c9cde0767534585c1a27610a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f3:2f:a1:a5:65:f0:0e:65:2f:0a:53:1c:9b:
17:43:74:27:56:a5:91:54:36:b5:33:5e:54:3d:6c:
3e:ff:cc:0e:28:2c:e5:63:43:60:9c:d2:ff:80:c3:
32:19:11:35:f0:b0:24:2c:96:89:13:5b:b1:67:f5:
34:a9:c0:7e:70:4b:14:f5:16:7a:dc:b6:0b:2d:14:
a1:f2:69:f0:33:c2:17:d4:9f:e9:4a:58:02:d6:6d:
a9:a7:52:fe:ec:b5:3a:89:33:cf:51:c6:db:21:c1:
4a:13:e1:b5:90:b5:88:08:fb:85:ee:1b:72:3c:5a:
af:c4:85:7d:41:e4:b2:61:e0:41:55:2d:c7:38:b7:
73:74:53:31:28:61:2b:03:6a:a6:0a:70:65:eb:60:
a6:d3:92:41:a0:2c:1c:78:2d:f5:28:da:05:b8:90:
1d:89:e0:fa:e2:0b:54:9a:4a:63:98:7c:d5:ce:86:
0b:da:ba:56:c8:84:41:d1:0c:88:a6:63:32:31:8b:
ca:a2:1f:bd:52:2a:7d:68:d0:88:f5:2a:29:70:03:
8f:20:46:7d:1b:e3:70:35:ac:b2:43:6d:a9:00:fe:
20:78:bb:39:18:06:c6:66:05:59:f2:8f:b7:fe:19:
54:fc:ef:07:e8:85:e5:a5:44:7a:d1:cb:e3:a0:85:
62:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:81:4B:9D:A4:5F:05:62:C9:CD:E0:76:75:34:58:5C:1A:27:61:0A
X509v3 Authority Key Identifier:
keyid:A6:3D:CB:90:A1:47:42:A5:2B:E5:CA:09:CB:ED:8D:FC:1C:D3:D1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:14:e2:5f:dd:6a:96:ab:1e:fa:73:ce:24:3b:ec:50:e0:49:
3d:24:91:d5:9c:b9:06:3e:0c:91:57:e1:44:fd:96:90:a7:bd:
41:81:92:67:46:0a:ab:96:d4:0c:d0:13:56:fc:6b:ea:33:d9:
2b:38:8e:48:15:3c:02:eb:97:03:b2:50:d5:77:44:b9:37:7d:
bc:b4:a7:36:16:41:5f:c6:ef:85:f3:9b:54:04:6b:2b:73:25:
62:bd:92:f2:a7:ae:ef:19:56:81:4b:a2:35:3c:d4:cc:c7:38:
b9:49:f2:a0:9f:a0:22:17:55:d9:70:1f:0e:f6:65:62:25:6b:
d1:8f:b8:65:50:75:96:2b:06:dc:32:33:3c:66:09:01:68:51:
e2:91:26:5e:b1:3b:d9:c8:22:af:1c:2d:9e:55:7f:07:15:b9:
e3:70:cd:6c:0f:94:29:15:f2:22:4a:6a:c0:63:77:1d:d5:56:
be:9b:6e:86:86:d2:c1:38:f2:5f:76:a6:35:36:26:ef:22:5c:
ab:1a:02:cf:85:ae:3e:50:15:ea:b2:4b:0e:f4:95:b1:be:79:
57:10:cc:12:1b:51:81:91:70:4b:c9:d9:5a:da:42:c0:21:2e:
4e:df:29:b8:fa:d9:07:f6:8d:2c:ac:69:c1:58:be:20:92:12:
72:85:04:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg7eYSYqQ2Nu8hHrRwWYVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2M2RjYjkwYTE0NzQyYTUyYmU1Y2EwOWNiZWQ4ZGZjMWNk
M2QxZWYwHhcNMjUwODIzMDYwMDM1WhcNMjUwODI0MDYwMDM1WjAzMTEwLwYDVQQD
EygzYjgxNGI5ZGE0NWYwNTYyYzljZGUwNzY3NTM0NTg1YzFhMjc2MTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvMvoaVl8A5lLwpTHJsXQ3QnVqWR
VDa1M15UPWw+/8wOKCzlY0NgnNL/gMMyGRE18LAkLJaJE1uxZ/U0qcB+cEsU9RZ6
3LYLLRSh8mnwM8IX1J/pSlgC1m2pp1L+7LU6iTPPUcbbIcFKE+G1kLWICPuF7hty
PFqvxIV9QeSyYeBBVS3HOLdzdFMxKGErA2qmCnBl62Cm05JBoCwceC31KNoFuJAd
ieD64gtUmkpjmHzVzoYL2rpWyIRB0QyIpmMyMYvKoh+9Uip9aNCI9SopcAOPIEZ9
G+NwNayyQ22pAP4geLs5GAbGZgVZ8o+3/hlU/O8H6IXlpUR60cvjoIVieQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDuBS52kXwViyc3gdnU0WFwaJ2EKMB8GA1UdIwQY
MBaAFKY9y5ChR0KlK+XKCcvtjfwc09HvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGozTGtLRkhRcVVyNWNvSnktMk5fQnpUMGU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8yYzhiNzAtNjZiYy00MTYzLThmODAt
MjBmN2Q0NGVkMTI2LzEvcGozTGtLRkhRcVVyNWNvSnktMk5fQnpUMGU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy8yYzhiNzAtNjZiYy00MTYzLThmODAtMjBmN2Q0NGVkMTI2
LzEvcGozTGtLRkhRcVVyNWNvSnktMk5fQnpUMGU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIhTiX91q
lqse+nPOJDvsUOBJPSSR1Zy5Bj4MkVfhRP2WkKe9QYGSZ0YKq5bUDNATVvxr6jPZ
KziOSBU8AuuXA7JQ1XdEuTd9vLSnNhZBX8bvhfObVARrK3MlYr2S8qeu7xlWgUui
NTzUzMc4uUnyoJ+gIhdV2XAfDvZlYiVr0Y+4ZVB1lisG3DIzPGYJAWhR4pEmXrE7
2cgirxwtnlV/BxW543DNbA+UKRXyIkpqwGN3HdVWvptuhobSwTjyX3amNTYm7yJc
qxoCz4WuPlAV6rJLDvSVsb55VxDMEhtRgZFwS8nZWtpCwCEuTt8puPrZB/aNLKxp
wVi+IJIScoUEeg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:27 2025 by rpki-client