Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
File: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft (raw, json)
Hash identifier: O3Ccxm/JY/ir0A3fPMzPZbB2KuuMuUMYNUzD7LTwzF0=
Subject key identifier: A6:BC:31:8C:88:9D:2F:F6:A5:76:DE:7A:A4:74:01:97:E2:52:74:81
Authority key identifier: 3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4
Certificate issuer: /CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
Certificate serial: 0198D54EAF36E73EE37D833B889BC0F9DDC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
Manifest number: 0405
Signing time: Sat 23 Aug 2025 05:02:40 +0000
Manifest this update: Sat 23 Aug 2025 05:02:40 +0000
Manifest next update: Sun 24 Aug 2025 05:02:40 +0000
Files and hashes: 1: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl (hash: 9HLnCeH3YMNJrEhZ5rRXl8S+NUX8nnYCff5CNULMYaw=)
2: UTJEyA5eoUQbkVsnzE_qVEPp7QI.roa (hash: QLgDwiA3HQMhzQTCpM1sPvRtSa6KhJD7pUZz4AfYcjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:af:36:e7:3e:e3:7d:83:3b:88:9b:c0:f9:dd:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
Validity
Not Before: Aug 23 05:02:40 2025 GMT
Not After : Aug 24 05:02:40 2025 GMT
Subject: CN=a6bc318c889d2ff6a576de7aa4740197e2527481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1e:25:2b:a9:e2:b5:7f:04:85:a9:cc:28:11:
7c:52:2b:b2:20:14:1c:c6:76:21:8e:5c:83:7e:74:
80:69:36:c9:8c:26:a1:2b:20:37:4c:68:de:97:2d:
9b:93:bd:6c:64:69:74:8d:c1:c2:f1:74:af:9f:fc:
1c:46:4e:3f:6b:54:f7:ed:59:07:8e:33:ae:47:fe:
cc:23:02:12:26:d2:da:3f:b7:61:29:5b:7b:b4:87:
b6:2c:04:8d:cd:d0:b1:ad:b5:d0:ab:64:22:8f:92:
bd:94:98:b8:a5:a3:5a:7b:5e:c1:15:87:46:49:b2:
b7:6c:79:7f:2e:f8:64:16:dc:f5:20:87:aa:03:e7:
5b:e4:4d:7c:bd:b7:a3:60:a9:27:03:a8:2e:d1:8a:
77:f9:4f:c2:89:aa:a0:fa:91:5f:45:a4:d0:44:55:
db:27:90:29:6b:6a:8e:8f:eb:12:88:5f:cc:3e:94:
51:b5:55:3e:a5:6f:37:43:30:7c:81:7b:11:7c:26:
5b:bf:54:f7:5a:0c:b5:66:c3:f6:be:c9:61:12:51:
37:a6:cf:39:b6:d7:26:de:6f:ab:76:c2:8e:e2:53:
36:2f:7d:3f:eb:43:04:01:f3:d7:be:a9:20:a1:2d:
bd:d4:77:f5:0b:c9:ee:dc:24:77:f2:b0:51:f3:7f:
63:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:BC:31:8C:88:9D:2F:F6:A5:76:DE:7A:A4:74:01:97:E2:52:74:81
X509v3 Authority Key Identifier:
keyid:3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:a8:ef:9a:5a:79:39:a2:01:1a:a0:94:3b:f7:1c:5d:c7:60:
1e:31:2f:0f:e8:e7:3b:4a:16:70:e0:88:f8:6f:18:12:ca:3a:
4a:55:01:95:b8:65:a9:9c:9a:b0:ad:ce:6a:de:41:fe:25:71:
72:cf:fc:d6:eb:0a:b9:86:9b:5a:5a:c4:ed:70:cc:4e:88:97:
40:ca:c4:e6:be:5f:06:2f:76:8b:42:f6:8c:63:4c:70:89:e7:
a9:2a:69:e3:14:da:48:d7:92:41:96:f2:80:4e:73:23:01:53:
3c:f8:51:5b:00:32:ee:1b:ae:ff:32:60:81:5f:69:17:b5:c7:
64:3f:77:cc:ef:fd:a7:09:1c:14:02:1c:90:52:ac:5e:17:73:
37:13:61:f0:ce:1d:b7:dd:09:a4:1d:6f:76:80:63:66:c5:32:
ea:2b:e6:ac:20:0f:73:25:9c:cc:4d:b9:79:62:d8:d5:ec:92:
eb:d2:88:60:2c:90:f0:d0:26:ed:db:6d:06:78:03:8f:f9:34:
f4:07:f6:b1:38:b6:b4:e2:7f:19:34:9b:d5:1b:13:2b:3f:6a:
53:cb:d1:a5:e3:f7:7c:7f:89:6c:35:24:c3:41:71:80:92:02:
ac:75:2c:9a:9b:8e:d8:d3:e7:48:32:13:c5:5c:c2:40:15:c4:
aa:f4:63:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTq825z7jfYM7iJvA+d3CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjODdmZWI0YWI5YTU3NzY1ZmMwYTY2NDU3MmMzNTAzMmU4
NjZhZDQwHhcNMjUwODIzMDUwMjQwWhcNMjUwODI0MDUwMjQwWjAzMTEwLwYDVQQD
EyhhNmJjMzE4Yzg4OWQyZmY2YTU3NmRlN2FhNDc0MDE5N2UyNTI3NDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB4lK6nitX8EhanMKBF8UiuyIBQc
xnYhjlyDfnSAaTbJjCahKyA3TGjely2bk71sZGl0jcHC8XSvn/wcRk4/a1T37VkH
jjOuR/7MIwISJtLaP7dhKVt7tIe2LASNzdCxrbXQq2Qij5K9lJi4paNae17BFYdG
SbK3bHl/LvhkFtz1IIeqA+db5E18vbejYKknA6gu0Yp3+U/Ciaqg+pFfRaTQRFXb
J5Apa2qOj+sSiF/MPpRRtVU+pW83QzB8gXsRfCZbv1T3Wgy1ZsP2vslhElE3ps85
ttcm3m+rdsKO4lM2L30/60MEAfPXvqkgoS291Hf1C8nu3CR38rBR839jRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKa8MYyInS/2pXbeeqR0AZfiUnSBMB8GA1UdIwQY
MBaAFDyH/rSrmld2X8CmZFcsNQMuhmrUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUElmLXRLdWFWM1pmd0taa1Z5dzFBeTZHYXRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8wZTQxYTYtZDg0NS00ZGExLThiMzQt
NDhmYjAwZmM5N2I2LzEvUElmLXRLdWFWM1pmd0taa1Z5dzFBeTZHYXRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8wZTQxYTYtZDg0NS00ZGExLThiMzQtNDhmYjAwZmM5N2I2
LzEvUElmLXRLdWFWM1pmd0taa1Z5dzFBeTZHYXRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqKjvmlp5
OaIBGqCUO/ccXcdgHjEvD+jnO0oWcOCI+G8YEso6SlUBlbhlqZyasK3Oat5B/iVx
cs/81usKuYabWlrE7XDMToiXQMrE5r5fBi92i0L2jGNMcInnqSpp4xTaSNeSQZby
gE5zIwFTPPhRWwAy7huu/zJggV9pF7XHZD93zO/9pwkcFAIckFKsXhdzNxNh8M4d
t90JpB1vdoBjZsUy6ivmrCAPcyWczE25eWLY1eyS69KIYCyQ8NAm7dttBngDj/k0
9Af2sTi2tOJ/GTSb1RsTKz9qU8vRpeP3fH+JbDUkw0FxgJICrHUsmpuO2NPnSDIT
xVzCQBXEqvRj1Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:25 2025 by rpki-client