Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
File: pdCLMVCtNN4riFkhdBkkCDlvEfs.mft (raw, json)
Hash identifier: PhzmMDP6I1zN4kLCPKhz53fxVVnRZNT1NHKwQWX9lHM=
Subject key identifier: 12:52:AF:9D:4B:D9:79:B0:99:75:93:EB:32:BE:D8:C0:A1:CF:E0:E4
Authority key identifier: A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB
Certificate issuer: /CN=a5d08b3150ad34de2b88592174192408396f11fb
Certificate serial: 0198D6CD7C372B308994D99BD4303E5DC4E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 12:00:47 +0000
Manifest this update: Sat 23 Aug 2025 12:00:47 +0000
Manifest next update: Sun 24 Aug 2025 12:00:47 +0000
Files and hashes: 1: bY2tBQ51YL8a-pcphuYuVQz7bOg.roa (hash: FnAC9AE4W5+r++w2y10UXXpTgultC6LrjOa8S41rhns=)
2: pdCLMVCtNN4riFkhdBkkCDlvEfs.crl (hash: jh8qS/93hO3bJyeqRJl9Ugn+Np5lxss8aM2o4UHLprw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:7c:37:2b:30:89:94:d9:9b:d4:30:3e:5d:c4:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d08b3150ad34de2b88592174192408396f11fb
Validity
Not Before: Aug 23 12:00:47 2025 GMT
Not After : Aug 24 12:00:47 2025 GMT
Subject: CN=1252af9d4bd979b0997593eb32bed8c0a1cfe0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ba:aa:e5:37:69:1a:f8:17:8b:78:c2:ab:7b:
67:16:38:18:b8:65:54:d2:87:3d:e9:52:b6:23:40:
6e:cc:41:41:02:10:7e:f3:ef:89:80:af:d0:25:60:
4e:bc:69:80:3f:85:8a:40:d1:b8:d3:c2:c0:d0:a4:
af:f8:82:fd:12:01:11:81:fa:33:fb:d4:8b:84:7f:
75:89:4c:84:28:d5:ad:42:60:97:fa:0e:f3:50:80:
26:35:f8:bd:c5:03:3e:66:4b:17:e8:0f:7b:9f:76:
76:63:25:3d:b9:39:26:eb:7c:1e:75:e6:ae:36:e4:
a4:f0:ae:78:41:90:9f:8b:f1:7a:02:cc:e1:b0:39:
06:6d:1f:6a:eb:28:a9:31:98:39:1c:65:58:a2:72:
81:e6:26:e9:14:e0:b8:6f:21:26:f8:ff:1b:7b:d7:
e8:a1:dd:43:de:53:e5:85:c3:0b:1b:1d:cb:8f:97:
f8:dc:db:e8:1a:60:a4:4a:08:97:2f:36:00:18:9a:
5a:7a:b7:8d:9c:a6:2f:39:1f:b9:6a:bb:09:71:79:
2b:09:ea:38:11:83:0a:30:3a:6e:72:9a:48:ff:f0:
31:af:7b:d5:02:6c:ab:ed:68:49:25:4f:ad:f1:de:
3f:68:dd:88:1a:f9:ce:86:54:d8:d6:09:1d:68:7e:
2b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:52:AF:9D:4B:D9:79:B0:99:75:93:EB:32:BE:D8:C0:A1:CF:E0:E4
X509v3 Authority Key Identifier:
keyid:A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:03:a5:60:e5:96:b2:15:e1:bd:a6:13:c0:7d:b3:a4:25:ff:
64:e7:7d:59:57:2e:34:ff:07:6c:27:e4:96:70:fc:78:bc:d4:
5f:fd:48:74:ac:3e:de:c9:ea:c9:5b:74:a7:fb:bc:9e:ca:1d:
01:50:9d:fa:be:9b:8d:c4:1b:4c:49:35:ae:52:85:58:d0:28:
1b:85:71:fc:3a:53:e2:9f:c3:85:ba:65:64:40:ee:69:26:5a:
0f:83:16:3b:be:f5:ff:d0:6c:2e:72:c2:df:38:c7:9d:ab:8d:
b7:d9:a6:c1:64:72:da:bd:ca:e0:a4:65:50:e7:9d:3f:fa:08:
82:75:15:8f:d0:1d:ef:96:6f:47:45:99:c7:6f:ad:6a:2d:ff:
84:27:fe:aa:ec:10:32:95:8d:88:6c:fd:4f:93:78:c2:30:80:
7c:08:51:14:2a:ad:fe:2e:be:b3:0f:98:af:aa:d8:a8:ce:53:
fc:f7:b9:77:82:ef:ba:68:d9:58:f6:bb:af:18:39:75:be:e1:
33:c9:8f:a9:fe:e9:b9:c1:42:a7:d7:97:d3:9d:cc:f0:e6:60:
60:c4:72:20:96:63:71:b4:0c:09:42:96:83:c0:aa:4d:29:22:
48:94:ca:30:b8:9f:6d:40:7d:02:c0:37:af:d2:0d:31:d6:8d:
da:3c:91:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzXw3KzCJlNmb1DA+XcTmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ZDA4YjMxNTBhZDM0ZGUyYjg4NTkyMTc0MTkyNDA4Mzk2
ZjExZmIwHhcNMjUwODIzMTIwMDQ3WhcNMjUwODI0MTIwMDQ3WjAzMTEwLwYDVQQD
EygxMjUyYWY5ZDRiZDk3OWIwOTk3NTkzZWIzMmJlZDhjMGExY2ZlMGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbqq5TdpGvgXi3jCq3tnFjgYuGVU
0oc96VK2I0BuzEFBAhB+8++JgK/QJWBOvGmAP4WKQNG408LA0KSv+IL9EgERgfoz
+9SLhH91iUyEKNWtQmCX+g7zUIAmNfi9xQM+ZksX6A97n3Z2YyU9uTkm63wedeau
NuSk8K54QZCfi/F6AszhsDkGbR9q6yipMZg5HGVYonKB5ibpFOC4byEm+P8be9fo
od1D3lPlhcMLGx3Lj5f43NvoGmCkSgiXLzYAGJpaereNnKYvOR+5arsJcXkrCeo4
EYMKMDpucppI//Axr3vVAmyr7WhJJU+t8d4/aN2IGvnOhlTY1gkdaH4r0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJSr51L2XmwmXWT6zK+2MChz+DkMB8GA1UdIwQY
MBaAFKXQizFQrTTeK4hZIXQZJAg5bxH7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGRDTE1WQ3ROTjRyaUZraGRCa2tDRGx2RWZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85MDE4MzktMGVmMi00MGVjLTk5YjMt
NDNjYzViNDZkNWIyLzEvcGRDTE1WQ3ROTjRyaUZraGRCa2tDRGx2RWZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85MDE4MzktMGVmMi00MGVjLTk5YjMtNDNjYzViNDZkNWIy
LzEvcGRDTE1WQ3ROTjRyaUZraGRCa2tDRGx2RWZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALQOlYOWW
shXhvaYTwH2zpCX/ZOd9WVcuNP8HbCfklnD8eLzUX/1IdKw+3snqyVt0p/u8nsod
AVCd+r6bjcQbTEk1rlKFWNAoG4Vx/DpT4p/DhbplZEDuaSZaD4MWO771/9BsLnLC
3zjHnauNt9mmwWRy2r3K4KRlUOedP/oIgnUVj9Ad75ZvR0WZx2+tai3/hCf+quwQ
MpWNiGz9T5N4wjCAfAhRFCqt/i6+sw+Yr6rYqM5T/Pe5d4LvumjZWPa7rxg5db7h
M8mPqf7pucFCp9eX053M8OZgYMRyIJZjcbQMCUKWg8CqTSkiSJTKMLifbUB9AsA3
r9INMdaN2jyRPQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:05:25 2025 by rpki-client