Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
File: PBHQXNKatxkq8DnPXz0AvpIVeTk.mft (raw, json)
Hash identifier: NeQDDB3J7BsQXTNxAfz377AesFqYwW+e4mQpw8mElXU=
Subject key identifier: BE:48:9C:E8:A4:E9:74:D7:3F:45:B6:34:1C:4A:FE:D7:9D:8C:FC:90
Authority key identifier: 3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39
Certificate issuer: /CN=3c11d05cd29ab7192af039cf5f3d00be92157939
Certificate serial: 0198D515A15A2098364876AADA2556ADE6E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
Manifest number: 0898
Signing time: Sat 23 Aug 2025 04:00:21 +0000
Manifest this update: Sat 23 Aug 2025 04:00:21 +0000
Manifest next update: Sun 24 Aug 2025 04:00:21 +0000
Files and hashes: 1: PBHQXNKatxkq8DnPXz0AvpIVeTk.crl (hash: 3KUbbGkJxpl5vA2FJAtyv6y86X4AUuCkMM9lBhsoezg=)
2: uXWEOT5kLicjM9eRqYG2MPSav7U.roa (hash: WztCPaYNfJzy3qntVN7a2OFcCyo/yo2zpUp1jJXzcgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:a1:5a:20:98:36:48:76:aa:da:25:56:ad:e6:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c11d05cd29ab7192af039cf5f3d00be92157939
Validity
Not Before: Aug 23 04:00:21 2025 GMT
Not After : Aug 24 04:00:21 2025 GMT
Subject: CN=be489ce8a4e974d73f45b6341c4afed79d8cfc90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ad:83:4d:b1:b6:fb:0d:c4:b4:13:87:ca:36:
7e:5a:67:59:f4:09:94:87:53:93:86:c7:d8:2e:9a:
06:68:b0:78:0e:ab:ba:2b:cc:58:89:67:7c:d1:e1:
b6:2a:76:00:05:45:63:71:11:e6:42:4a:be:c2:ea:
38:f9:56:b7:5f:5c:5f:ab:44:fb:f0:d2:b7:c9:18:
0d:25:c4:c3:3a:ad:23:88:55:c3:a1:59:f1:4b:12:
02:9f:96:5d:68:c4:4b:76:eb:57:5b:ef:dc:e0:cc:
8e:56:bb:4f:01:87:db:b0:6c:8d:60:8d:93:3d:8f:
f0:5c:76:56:6d:fb:b1:d0:bf:cc:d3:03:9e:7b:03:
fe:54:14:4c:48:d8:64:ce:44:6b:f6:9a:c0:57:26:
e2:d2:57:5c:c1:6b:36:41:36:d8:91:31:8d:0b:7f:
75:5a:4c:71:90:73:39:3f:ed:2c:75:0f:20:e3:0a:
72:98:7f:03:b3:b3:bc:81:e0:75:ea:53:44:96:b2:
40:4b:63:2d:b1:19:3d:29:94:90:bc:68:e4:cb:c3:
13:b7:e7:b1:bd:7d:b6:5f:67:b3:58:60:45:27:78:
a1:4a:93:02:fe:c5:54:e9:2d:1a:e5:ea:3a:66:e7:
ef:8c:38:ad:d0:f7:19:f0:d6:40:b8:b6:a0:77:50:
1c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:48:9C:E8:A4:E9:74:D7:3F:45:B6:34:1C:4A:FE:D7:9D:8C:FC:90
X509v3 Authority Key Identifier:
keyid:3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:3f:bf:72:8f:59:fc:4e:85:2f:75:90:a6:a0:e6:a6:31:aa:
80:60:d3:9f:e0:5e:af:72:31:f6:f4:cc:ea:25:d8:08:74:0c:
b3:be:ef:da:15:07:b3:02:82:33:ec:a2:81:e6:0e:7d:cc:51:
e1:a2:ed:cc:4b:fb:b4:a6:59:c1:e8:49:bf:2b:77:90:50:75:
e5:2c:e7:89:05:18:77:0b:fc:75:bb:ff:d8:dd:a3:dd:20:b6:
75:8f:1a:d4:e5:23:52:32:dc:b2:1b:1e:62:7e:7a:c9:a8:21:
57:11:0e:89:af:db:73:41:3c:14:3b:c1:b0:ad:42:c7:73:ef:
6c:c8:96:9f:07:0b:a9:95:ca:9a:96:28:53:8e:d1:30:2e:ea:
94:98:70:8a:c3:5f:10:a7:5d:07:89:38:e2:85:40:d4:bd:56:
31:e6:49:ba:93:03:45:38:7e:27:6b:b5:48:00:40:be:b3:3c:
14:7e:20:f0:d2:99:ed:92:92:f5:13:f6:e9:fa:c8:f6:b1:5c:
22:90:ce:71:3c:b7:27:e6:37:45:3b:fc:e4:68:94:7f:a9:d6:
7a:7a:66:e4:49:6d:bd:6b:c8:2a:da:9e:2a:e5:55:a4:12:cd:
8e:39:76:33:09:82:76:4d:f1:c9:13:fc:fb:48:0a:73:70:9a:
d9:b4:66:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFaFaIJg2SHaq2iVWrebnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMTFkMDVjZDI5YWI3MTkyYWYwMzljZjVmM2QwMGJlOTIx
NTc5MzkwHhcNMjUwODIzMDQwMDIxWhcNMjUwODI0MDQwMDIxWjAzMTEwLwYDVQQD
EyhiZTQ4OWNlOGE0ZTk3NGQ3M2Y0NWI2MzQxYzRhZmVkNzlkOGNmYzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmK2DTbG2+w3EtBOHyjZ+WmdZ9AmU
h1OThsfYLpoGaLB4Dqu6K8xYiWd80eG2KnYABUVjcRHmQkq+wuo4+Va3X1xfq0T7
8NK3yRgNJcTDOq0jiFXDoVnxSxICn5ZdaMRLdutXW+/c4MyOVrtPAYfbsGyNYI2T
PY/wXHZWbfux0L/M0wOeewP+VBRMSNhkzkRr9prAVybi0ldcwWs2QTbYkTGNC391
WkxxkHM5P+0sdQ8g4wpymH8Ds7O8geB16lNElrJAS2MtsRk9KZSQvGjky8MTt+ex
vX22X2ezWGBFJ3ihSpMC/sVU6S0a5eo6ZufvjDit0PcZ8NZAuLagd1AchwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5InOik6XTXP0W2NBxK/tedjPyQMB8GA1UdIwQY
MBaAFDwR0FzSmrcZKvA5z189AL6SFXk5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEJIUVhOS2F0eGtxOERuUFh6MEF2cElWZVRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9jZGIxMDQtMDVkYi00Y2RiLWE0MmUt
NzA4ZGMwOTdmZmZlLzEvUEJIUVhOS2F0eGtxOERuUFh6MEF2cElWZVRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9jZGIxMDQtMDVkYi00Y2RiLWE0MmUtNzA4ZGMwOTdmZmZl
LzEvUEJIUVhOS2F0eGtxOERuUFh6MEF2cElWZVRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXz+/co9Z
/E6FL3WQpqDmpjGqgGDTn+Ber3Ix9vTM6iXYCHQMs77v2hUHswKCM+yigeYOfcxR
4aLtzEv7tKZZwehJvyt3kFB15SzniQUYdwv8dbv/2N2j3SC2dY8a1OUjUjLcshse
Yn56yaghVxEOia/bc0E8FDvBsK1Cx3PvbMiWnwcLqZXKmpYoU47RMC7qlJhwisNf
EKddB4k44oVA1L1WMeZJupMDRTh+J2u1SABAvrM8FH4g8NKZ7ZKS9RP26frI9rFc
IpDOcTy3J+Y3RTv85GiUf6nWenpm5EltvWvIKtqeKuVVpBLNjjl2MwmCdk3xyRP8
+0gKc3Ca2bRmKw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:04:16 2025 by rpki-client