Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
File: PD9FAh1us0CkKy5d0fv3IaGmbWE.mft (raw, json)
Hash identifier: TqADxiMXYbrE56wUEU0ofUKDIc3x+SPyBIypGRPdjv0=
Subject key identifier: 89:10:72:4C:8D:66:D6:98:54:B2:18:74:AA:29:68:A1:8A:74:6F:22
Authority key identifier: 3C:3F:45:02:1D:6E:B3:40:A4:2B:2E:5D:D1:FB:F7:21:A1:A6:6D:61
Certificate issuer: /CN=3c3f45021d6eb340a42b2e5dd1fbf721a1a66d61
Certificate serial: 0198D6984CA38D3C0FDD01B5CA540297E46A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
Manifest number: 0D31
Signing time: Sat 23 Aug 2025 11:02:41 +0000
Manifest this update: Sat 23 Aug 2025 11:02:41 +0000
Manifest next update: Sun 24 Aug 2025 11:02:41 +0000
Files and hashes: 1: PD9FAh1us0CkKy5d0fv3IaGmbWE.crl (hash: xADfYbTtdH8n90GcvTCY1JSVzLtfPbitJeeXfN7A5p8=)
2: x9hUxJfn47T_kDyiFQOIzJ-cz6A.roa (hash: xdaaD+GtntD/xfR79byZL40UTK4Nd3mN7SfVEUnzNx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:4c:a3:8d:3c:0f:dd:01:b5:ca:54:02:97:e4:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c3f45021d6eb340a42b2e5dd1fbf721a1a66d61
Validity
Not Before: Aug 23 11:02:41 2025 GMT
Not After : Aug 24 11:02:41 2025 GMT
Subject: CN=8910724c8d66d69854b21874aa2968a18a746f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ad:d2:34:74:4d:1d:8a:20:4a:15:05:0f:21:
4b:05:a4:30:0e:e1:cf:3f:6d:0c:a8:d5:de:f1:9b:
69:d7:b0:6c:f4:5b:8e:f3:ec:51:51:3d:cc:4b:a7:
ad:42:ab:31:01:f9:a9:9a:a2:8b:d3:b9:9b:ef:71:
03:ac:b8:4a:c0:18:3a:21:ef:2b:67:a4:c4:e0:76:
a7:20:49:81:99:29:f9:67:a5:ff:92:cf:fb:bc:a2:
3f:8f:eb:2c:1e:78:1e:2d:63:5d:5d:7e:8d:5e:44:
84:89:77:c6:d0:1f:6d:21:7c:df:74:3b:b6:62:af:
49:23:bc:1f:8d:27:2d:5c:c3:59:3b:00:64:04:e8:
75:fa:d9:37:5e:c3:0a:8d:18:b3:da:03:c0:45:f8:
72:21:a7:d3:83:66:44:80:82:f2:53:3f:e4:05:c2:
7b:c1:50:1e:72:46:6a:cd:a8:6e:d9:ff:0a:4d:3a:
eb:aa:a1:44:3b:b7:be:57:19:ab:4d:01:ea:d7:d0:
5f:c8:fe:31:90:96:0e:22:fe:5c:69:93:fb:04:da:
c0:e0:3f:fb:a0:ee:56:60:c1:80:e6:dc:26:15:c9:
33:32:bd:ef:ab:95:6b:44:26:cf:38:05:ac:04:dc:
27:d6:5b:76:1b:a3:b9:82:3c:db:78:ba:c8:48:8a:
43:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:10:72:4C:8D:66:D6:98:54:B2:18:74:AA:29:68:A1:8A:74:6F:22
X509v3 Authority Key Identifier:
keyid:3C:3F:45:02:1D:6E:B3:40:A4:2B:2E:5D:D1:FB:F7:21:A1:A6:6D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:bb:54:2b:6e:95:32:2a:fa:23:a2:71:b5:98:e9:f5:8e:78:
75:d8:89:03:af:3b:16:d9:6e:f8:5d:2b:29:c9:1a:31:99:b6:
db:22:44:6c:e5:8c:6b:66:9a:b2:dc:b8:bd:19:84:b4:f8:3b:
03:13:a0:7c:9f:96:a0:af:50:b4:64:d7:a3:ef:53:2e:bb:c9:
6f:13:02:33:8a:9a:8e:a3:2b:8a:c3:e8:1f:63:5f:00:9b:ee:
1d:38:84:4f:11:90:ff:54:de:da:a4:74:78:f6:7b:f5:f8:91:
3c:0f:b5:44:be:59:8a:2b:5a:42:fd:fa:7e:fd:b2:7e:41:7c:
8f:f0:0b:1c:76:e3:8b:61:8a:b4:70:04:6b:1d:8d:f0:25:60:
06:78:0c:ba:ea:c9:11:1d:ab:9a:b6:02:1f:2e:2b:4a:99:91:
fc:f3:ee:36:50:11:de:ea:b6:f3:17:dd:91:28:93:df:70:bd:
ae:a5:fe:4a:62:3e:47:48:6a:b7:cd:7b:f3:5c:cd:24:ec:b3:
10:3f:08:86:56:61:27:63:e8:74:64:d2:41:70:e5:54:67:54:
3b:68:91:56:65:a3:6b:74:6f:d4:9a:cb:68:e1:8c:47:e1:e2:
5c:24:98:60:94:21:16:0b:43:f4:b5:bc:e0:9b:a3:df:3b:82:
b8:3e:5a:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmEyjjTwP3QG1ylQCl+RqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjM2Y0NTAyMWQ2ZWIzNDBhNDJiMmU1ZGQxZmJmNzIxYTFh
NjZkNjEwHhcNMjUwODIzMTEwMjQxWhcNMjUwODI0MTEwMjQxWjAzMTEwLwYDVQQD
Eyg4OTEwNzI0YzhkNjZkNjk4NTRiMjE4NzRhYTI5NjhhMThhNzQ2ZjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4a3SNHRNHYogShUFDyFLBaQwDuHP
P20MqNXe8Ztp17Bs9FuO8+xRUT3MS6etQqsxAfmpmqKL07mb73EDrLhKwBg6Ie8r
Z6TE4HanIEmBmSn5Z6X/ks/7vKI/j+ssHngeLWNdXX6NXkSEiXfG0B9tIXzfdDu2
Yq9JI7wfjSctXMNZOwBkBOh1+tk3XsMKjRiz2gPARfhyIafTg2ZEgILyUz/kBcJ7
wVAeckZqzahu2f8KTTrrqqFEO7e+VxmrTQHq19BfyP4xkJYOIv5caZP7BNrA4D/7
oO5WYMGA5twmFckzMr3vq5VrRCbPOAWsBNwn1lt2G6O5gjzbeLrISIpDmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkQckyNZtaYVLIYdKopaKGKdG8iMB8GA1UdIwQY
MBaAFDw/RQIdbrNApCsuXdH79yGhpm1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEQ5RkFoMXVzMENrS3k1ZDBmdjNJYUdtYldFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8wNTI1N2UtMWU2Ny00MTU4LThhZGIt
NDdkNmU0YmFlMmNmLzEvUEQ5RkFoMXVzMENrS3k1ZDBmdjNJYUdtYldFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8wNTI1N2UtMWU2Ny00MTU4LThhZGItNDdkNmU0YmFlMmNm
LzEvUEQ5RkFoMXVzMENrS3k1ZDBmdjNJYUdtYldFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAbtUK26V
Mir6I6JxtZjp9Y54ddiJA687Ftlu+F0rKckaMZm22yJEbOWMa2aasty4vRmEtPg7
AxOgfJ+WoK9QtGTXo+9TLrvJbxMCM4qajqMrisPoH2NfAJvuHTiETxGQ/1Te2qR0
ePZ79fiRPA+1RL5ZiitaQv36fv2yfkF8j/ALHHbji2GKtHAEax2N8CVgBngMuurJ
ER2rmrYCHy4rSpmR/PPuNlAR3uq28xfdkSiT33C9rqX+SmI+R0hqt81781zNJOyz
ED8IhlZhJ2PodGTSQXDlVGdUO2iRVmWja3Rv1JrLaOGMR+HiXCSYYJQhFgtD9LW8
4Juj3zuCuD5aIw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:35 2025 by rpki-client