Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
File: pKAVstPT6Qm2Avn91Pb29hiHPFg.mft (raw, json)
Hash identifier: D32H6mRbox4AMoe0qXJ/EDs1VVWXE1Y9EzWfFthD9EA=
Subject key identifier: BD:D5:14:A6:5E:EA:FE:E7:06:2B:E1:75:7C:5B:EA:7D:C6:04:85:B9
Authority key identifier: A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58
Certificate issuer: /CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58
Certificate serial: 0198D4A81F727AE1180595B5D1C561E946E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
Manifest number: 0CDE
Signing time: Sat 23 Aug 2025 02:00:44 +0000
Manifest this update: Sat 23 Aug 2025 02:00:44 +0000
Manifest next update: Sun 24 Aug 2025 02:00:44 +0000
Files and hashes: 1: 2Qr4P6TtNG8XIKkXI_c0cLDbaUc.roa (hash: MYKMpqtjE4XkNANAGzzsCBedfNhF2YMsBN5+jKHyoYI=)
2: pKAVstPT6Qm2Avn91Pb29hiHPFg.crl (hash: Ati07KWS7CWFYxnhQ/Fo7DIyVw607huXfbSwkxyU4lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:1f:72:7a:e1:18:05:95:b5:d1:c5:61:e9:46:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58
Validity
Not Before: Aug 23 02:00:44 2025 GMT
Not After : Aug 24 02:00:44 2025 GMT
Subject: CN=bdd514a65eeafee7062be1757c5bea7dc60485b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0b:c6:ff:b1:35:c5:e0:5f:12:6b:ab:f8:7b:
b2:b3:0c:49:e6:2f:d0:20:fd:05:01:9b:38:ec:28:
e6:02:da:c4:de:ab:0a:e5:2f:01:b5:ca:4c:ba:96:
ae:73:0a:c0:da:47:25:8f:e8:6c:c1:eb:80:48:da:
e7:74:b5:b7:4b:82:c7:8d:c6:08:1d:ae:2f:a2:26:
ce:8e:b5:90:17:6e:a6:3f:9a:2d:6b:d0:da:e8:ac:
71:f4:eb:85:91:5a:df:51:40:28:a0:d8:09:c1:ea:
5b:45:c6:27:7d:59:7b:cf:28:69:75:1a:dd:7a:e2:
84:0e:c7:05:97:47:b7:3f:38:b9:7a:36:02:fb:ef:
68:45:3c:45:b3:f1:4b:9e:c1:46:8b:dc:a4:f9:8d:
f1:d2:a3:1c:9c:83:3a:5e:c3:03:aa:45:7f:f3:e0:
f2:30:2a:a4:09:bc:df:fe:35:b2:f5:9f:2f:30:60:
3b:c3:5e:c3:7e:2b:bc:69:96:b4:3b:d7:42:a8:66:
f5:20:ba:a7:17:5e:7f:bd:e0:53:de:e0:1e:ae:7f:
dd:18:f6:42:a1:1e:38:ea:bf:0d:d3:a5:0a:a0:ce:
d1:a4:55:f1:24:34:51:41:88:37:54:ef:20:30:08:
f0:3e:c5:0a:5e:e3:6a:36:25:04:1a:2e:19:72:37:
2e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D5:14:A6:5E:EA:FE:E7:06:2B:E1:75:7C:5B:EA:7D:C6:04:85:B9
X509v3 Authority Key Identifier:
keyid:A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:11:d6:1c:a0:00:d6:38:03:4e:f3:ae:a2:64:8b:25:c6:a2:
13:bc:3b:58:63:bf:90:c5:71:56:86:89:38:ef:6d:56:1f:c8:
18:55:d1:7b:62:8d:1a:cc:ec:ab:bf:4c:f2:16:f0:33:2b:63:
fd:6c:3d:bb:9d:62:d1:7a:51:a1:8c:64:e9:c7:cb:ca:1a:e1:
52:d3:f2:0f:75:40:38:cf:23:7c:e1:2a:45:55:df:e1:f2:26:
d6:7e:d3:9c:e7:b7:7d:6c:1a:93:bc:f3:3e:c7:21:5b:e7:e3:
81:2b:61:a2:90:d7:3f:0c:c3:be:ee:76:bc:e7:d8:d4:5f:08:
8c:ab:81:aa:a7:7b:29:60:16:cd:6c:a0:42:0b:15:38:f8:39:
26:39:2b:e9:52:ff:d3:53:ce:84:31:66:a7:af:79:f6:4d:37:
12:cd:50:6f:d1:20:00:08:6e:67:c3:ee:29:9f:2f:9d:17:4a:
4a:bb:85:d4:db:0e:4e:ec:2d:e9:e6:69:f0:f3:a1:f5:88:f5:
b2:ce:09:a3:cd:dd:f4:db:dd:7c:7a:5e:0b:92:92:e6:62:1f:
67:33:2a:dd:fd:d3:9c:a6:ff:11:b6:ed:34:dd:02:30:75:05:
40:28:cf:47:45:c6:de:50:5c:00:bf:fe:71:34:45:70:33:b4:
df:f2:ed:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqB9yeuEYBZW10cVh6UbpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YTAxNWIyZDNkM2U5MDliNjAyZjlmZGQ0ZjZmNmY2MTg4
NzNjNTgwHhcNMjUwODIzMDIwMDQ0WhcNMjUwODI0MDIwMDQ0WjAzMTEwLwYDVQQD
EyhiZGQ1MTRhNjVlZWFmZWU3MDYyYmUxNzU3YzViZWE3ZGM2MDQ4NWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgvG/7E1xeBfEmur+HuyswxJ5i/Q
IP0FAZs47CjmAtrE3qsK5S8BtcpMupaucwrA2kclj+hsweuASNrndLW3S4LHjcYI
Ha4voibOjrWQF26mP5ota9Da6Kxx9OuFkVrfUUAooNgJwepbRcYnfVl7zyhpdRrd
euKEDscFl0e3Pzi5ejYC++9oRTxFs/FLnsFGi9yk+Y3x0qMcnIM6XsMDqkV/8+Dy
MCqkCbzf/jWy9Z8vMGA7w17Dfiu8aZa0O9dCqGb1ILqnF15/veBT3uAern/dGPZC
oR446r8N06UKoM7RpFXxJDRRQYg3VO8gMAjwPsUKXuNqNiUEGi4ZcjcuhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL3VFKZe6v7nBivhdXxb6n3GBIW5MB8GA1UdIwQY
MBaAFKSgFbLT0+kJtgL5/dT29vYYhzxYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEtBVnN0UFQ2UW0yQXZuOTFQYjI5aGlIUEZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iOWJkYTMtYjYxMS00MzM4LWJiZTgt
YTdkZDE2MzQzMjk3LzEvcEtBVnN0UFQ2UW0yQXZuOTFQYjI5aGlIUEZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iOWJkYTMtYjYxMS00MzM4LWJiZTgtYTdkZDE2MzQzMjk3
LzEvcEtBVnN0UFQ2UW0yQXZuOTFQYjI5aGlIUEZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkRHWHKAA
1jgDTvOuomSLJcaiE7w7WGO/kMVxVoaJOO9tVh/IGFXRe2KNGszsq79M8hbwMytj
/Ww9u51i0XpRoYxk6cfLyhrhUtPyD3VAOM8jfOEqRVXf4fIm1n7TnOe3fWwak7zz
PschW+fjgSthopDXPwzDvu52vOfY1F8IjKuBqqd7KWAWzWygQgsVOPg5Jjkr6VL/
01POhDFmp6959k03Es1Qb9EgAAhuZ8PuKZ8vnRdKSruF1NsOTuwt6eZp8POh9Yj1
ss4Jo83d9NvdfHpeC5KS5mIfZzMq3f3TnKb/EbbtNN0CMHUFQCjPR0XG3lBcAL/+
cTRFcDO03/Ltyw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:02 2025 by rpki-client