Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
File: PxnYdtwluWxdxZi-Lb9uywZal18.mft (raw, json)
Hash identifier: F2LlC02clSZulQY2n7nV29mECsKqT8w4fLBBUQMiw1E=
Subject key identifier: 56:5B:69:61:26:B1:DA:71:E0:17:85:92:F7:2F:6C:10:0A:5C:AB:23
Authority key identifier: 3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
Certificate issuer: /CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Certificate serial: 0197B70F53EFEEEACC9DE1840EDB9CF0A586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
Manifest number: 03E2
Signing time: Sat 28 Jun 2025 15:02:04 +0000
Manifest this update: Sat 28 Jun 2025 15:02:04 +0000
Manifest next update: Sun 29 Jun 2025 15:02:04 +0000
Files and hashes: 1: PxnYdtwluWxdxZi-Lb9uywZal18.crl (hash: iuWn1ibtZHbnS/TEW2FhDIBtMca1Yqt7QU7TEY9t6GU=)
2: x8ghvFiQy8y7__Pm7K2GUSehU3A.roa (hash: 97TGydFeZ3RUDp9TsIz5UQ8MNV819kJP2yTvYQ+TbKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:53:ef:ee:ea:cc:9d:e1:84:0e:db:9c:f0:a5:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Validity
Not Before: Jun 28 15:02:04 2025 GMT
Not After : Jun 29 15:02:04 2025 GMT
Subject: CN=565b696126b1da71e0178592f72f6c100a5cab23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b1:cf:55:b0:00:c8:78:9e:5a:de:59:cc:25:
c1:f6:9b:a4:74:37:ba:65:00:0a:c5:80:70:ed:cd:
98:11:9d:70:82:23:30:04:0b:20:71:2e:2e:21:89:
7b:13:bf:f7:cd:57:a3:4e:01:bf:58:f9:b5:a7:c0:
a4:9f:17:12:32:ff:8d:0b:41:4a:57:ac:5a:48:2f:
8a:d8:79:ec:a6:af:29:e3:0e:c6:6e:e9:24:34:5e:
86:b3:34:33:3e:5c:d6:bd:97:81:0d:77:30:70:0e:
30:94:fc:e7:b4:42:77:6c:87:6e:d4:46:82:e4:5a:
68:14:78:ef:30:b3:2e:07:6d:35:dd:62:85:e9:03:
87:e0:cc:2a:35:e8:a0:93:2a:8e:4c:5c:b7:45:7b:
a5:8b:01:de:10:e3:ca:85:58:ad:a1:1e:ba:af:48:
ab:8e:e4:b4:15:bb:cb:5f:b4:3d:16:8f:a4:a2:ba:
c9:fd:df:45:7a:6f:aa:92:57:ba:48:b8:87:01:26:
81:eb:c2:15:eb:db:b6:ae:3e:f7:c6:61:e2:cb:50:
6c:69:ac:94:70:30:d5:d0:19:b6:05:13:cf:4c:32:
65:ba:b2:71:28:a8:ca:e5:97:a5:45:ca:d0:9c:ff:
9e:fd:bb:e8:dc:78:b5:24:9c:44:e9:0a:57:e4:20:
23:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5B:69:61:26:B1:DA:71:E0:17:85:92:F7:2F:6C:10:0A:5C:AB:23
X509v3 Authority Key Identifier:
keyid:3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:da:09:37:05:8c:49:21:75:d1:17:ae:4e:d4:1d:98:2b:cb:
9e:a6:c5:5a:76:63:90:d8:f1:63:95:d4:88:18:53:01:af:8f:
ed:90:90:f8:94:b4:35:75:a4:fa:b7:59:c6:6c:ce:8e:ad:61:
79:f6:e1:ec:84:26:65:bf:af:6c:84:ba:a0:f1:af:77:87:f9:
aa:b7:e6:c2:92:76:cf:96:6a:0d:27:73:6d:c1:88:06:92:da:
f4:14:ae:a3:03:10:da:e5:b9:e9:b8:47:be:9b:2e:53:0b:ac:
0d:f1:92:17:0f:bf:78:0e:95:b6:0c:51:0d:a4:b6:88:13:da:
83:89:c9:94:e6:91:04:05:2f:bd:57:98:ae:9d:2c:f0:3b:2f:
1c:b8:6f:42:b6:31:60:75:ae:dc:36:94:20:75:5b:10:9a:26:
69:50:67:e6:36:6b:ef:88:90:88:43:5c:eb:1a:66:63:30:49:
1a:66:43:82:68:cc:84:27:58:e8:5f:fd:96:67:e9:71:2a:e5:
27:65:4c:7e:81:95:60:bf:dc:ac:26:16:2d:56:2a:73:cb:02:
cc:8b:22:af:b5:c6:f4:e8:a5:94:73:fe:fb:39:94:67:81:a8:
f6:2a:3f:64:97:2e:ea:a5:24:a8:86:d2:9f:cb:85:63:59:1a:
0f:62:df:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3D1Pv7urMneGEDtuc8KWGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMTlkODc2ZGMyNWI5NmM1ZGM1OThiZTJkYmY2ZWNiMDY1
YTk3NWYwHhcNMjUwNjI4MTUwMjA0WhcNMjUwNjI5MTUwMjA0WjAzMTEwLwYDVQQD
Eyg1NjViNjk2MTI2YjFkYTcxZTAxNzg1OTJmNzJmNmMxMDBhNWNhYjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrHPVbAAyHieWt5ZzCXB9pukdDe6
ZQAKxYBw7c2YEZ1wgiMwBAsgcS4uIYl7E7/3zVejTgG/WPm1p8CknxcSMv+NC0FK
V6xaSC+K2Hnspq8p4w7GbukkNF6GszQzPlzWvZeBDXcwcA4wlPzntEJ3bIdu1EaC
5FpoFHjvMLMuB2013WKF6QOH4MwqNeigkyqOTFy3RXuliwHeEOPKhVitoR66r0ir
juS0FbvLX7Q9Fo+korrJ/d9Fem+qkle6SLiHASaB68IV69u2rj73xmHiy1BsaayU
cDDV0Bm2BRPPTDJlurJxKKjK5ZelRcrQnP+e/bvo3Hi1JJxE6QpX5CAjWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZbaWEmsdpx4BeFkvcvbBAKXKsjMB8GA1UdIwQY
MBaAFD8Z2HbcJblsXcWYvi2/bssGWpdfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHhuWWR0d2x1V3hkeFppLUxiOXV5d1phbDE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yMjY0NTUtMTdhMC00NjNjLTg5NTkt
MGZiMTM5MWI1NGViLzEvUHhuWWR0d2x1V3hkeFppLUxiOXV5d1phbDE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8yMjY0NTUtMTdhMC00NjNjLTg5NTktMGZiMTM5MWI1NGVi
LzEvUHhuWWR0d2x1V3hkeFppLUxiOXV5d1phbDE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAItoJNwWM
SSF10ReuTtQdmCvLnqbFWnZjkNjxY5XUiBhTAa+P7ZCQ+JS0NXWk+rdZxmzOjq1h
efbh7IQmZb+vbIS6oPGvd4f5qrfmwpJ2z5ZqDSdzbcGIBpLa9BSuowMQ2uW56bhH
vpsuUwusDfGSFw+/eA6VtgxRDaS2iBPag4nJlOaRBAUvvVeYrp0s8DsvHLhvQrYx
YHWu3DaUIHVbEJomaVBn5jZr74iQiENc6xpmYzBJGmZDgmjMhCdY6F/9lmfpcSrl
J2VMfoGVYL/crCYWLVYqc8sCzIsir7XG9OillHP++zmUZ4Go9io/ZJcu6qUkqIbS
n8uFY1kaD2LfUQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:35 2025 by rpki-client