Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
File: Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft (raw, json)
Hash identifier: T5s0+ZCkyjjW+xK++L24sY0nEZg/find5noNQ3u2CyI=
Subject key identifier: 20:FA:96:3B:E6:C4:5B:07:5F:B0:B3:F2:6F:78:A3:F2:4A:CA:58:2B
Authority key identifier: 3E:3D:1C:21:A7:7A:0B:0F:7F:0C:E6:63:3E:13:E0:C5:7B:ED:B0:8B
Certificate issuer: /CN=3e3d1c21a77a0b0f7f0ce6633e13e0c57bedb08b
Certificate serial: 0198D5159648FF92FC45103D7ECC3C468200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
Manifest number: 1381
Signing time: Sat 23 Aug 2025 04:00:18 +0000
Manifest this update: Sat 23 Aug 2025 04:00:18 +0000
Manifest next update: Sun 24 Aug 2025 04:00:18 +0000
Files and hashes: 1: Gw9xXGUQ6gOLxmD3uhPbHUjxqdY.roa (hash: iN7hsvC2N6zVGHZJzHIWk+L6xeaF90AdvlMynpLLSsQ=)
2: Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl (hash: 18EmWPmx28fOPXyuRv4or2L7kiq4bD4D/JCoL2OCuN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:96:48:ff:92:fc:45:10:3d:7e:cc:3c:46:82:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e3d1c21a77a0b0f7f0ce6633e13e0c57bedb08b
Validity
Not Before: Aug 23 04:00:18 2025 GMT
Not After : Aug 24 04:00:18 2025 GMT
Subject: CN=20fa963be6c45b075fb0b3f26f78a3f24aca582b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:74:4e:aa:c6:8f:06:29:64:43:86:c1:b5:41:
de:eb:14:c9:dd:98:7a:97:66:ef:9c:03:36:d5:b3:
a7:9e:db:6d:c8:36:4d:bf:27:50:e6:7a:87:56:d6:
27:e2:7c:d3:73:a6:98:63:f3:34:37:03:03:d9:df:
89:b4:87:20:e4:68:82:a5:a6:41:a4:84:be:7c:81:
f4:f8:b6:ed:06:14:99:5a:9d:26:37:35:ea:94:4e:
d6:19:c2:cf:88:ad:6f:c1:66:c9:30:25:14:00:dc:
ee:03:40:5b:98:f1:9b:6a:7e:3d:8d:5a:07:e0:b2:
45:fc:4a:14:8f:c3:c7:4c:56:d5:cc:0f:52:bc:99:
78:81:92:02:03:5f:bb:e5:a9:de:a7:18:3a:a1:0d:
82:4e:ac:0b:68:5a:d5:ec:23:34:02:86:ff:b7:ef:
fc:b1:37:42:eb:1a:93:73:6c:ec:ec:96:b2:41:e7:
cd:57:3d:a5:c1:15:13:4c:06:8e:45:78:85:84:1c:
53:01:9b:19:87:8f:ec:15:5b:cd:52:00:ab:7c:ef:
ad:17:18:91:3b:51:66:e2:3d:6c:8d:04:c5:d7:b3:
06:df:df:85:ae:a8:41:13:de:9e:62:e9:b2:06:77:
38:68:4e:e0:2e:ce:1d:75:70:44:29:60:3c:e4:ae:
72:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FA:96:3B:E6:C4:5B:07:5F:B0:B3:F2:6F:78:A3:F2:4A:CA:58:2B
X509v3 Authority Key Identifier:
keyid:3E:3D:1C:21:A7:7A:0B:0F:7F:0C:E6:63:3E:13:E0:C5:7B:ED:B0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:92:41:12:9d:7e:e5:23:cb:7c:f4:9f:54:86:f1:95:2f:1c:
98:4f:d0:8e:e1:d9:76:a2:72:3a:d4:72:c4:a2:8e:8b:44:6e:
1e:2b:f8:b0:67:6d:fa:d1:0a:bd:58:14:33:7c:0f:16:03:cb:
45:57:73:5d:b1:ca:dd:c2:a1:57:fe:37:43:07:e7:0b:37:05:
eb:4d:59:c1:9b:70:ae:56:0e:2b:9c:26:84:87:18:54:6c:47:
5c:4d:15:46:bb:d5:5f:52:e8:3c:50:7d:a0:67:be:f5:54:7c:
ed:11:1a:5b:a1:7d:68:43:06:06:54:a7:2a:ac:05:22:3e:43:
bc:ec:8e:23:32:1f:a9:91:74:6c:31:96:f6:f5:f2:3f:e8:b8:
1f:22:39:67:de:a5:9c:59:b6:d1:02:32:b5:8e:fa:ed:60:01:
69:4d:38:cc:a7:74:fd:79:7b:6a:35:aa:a0:8e:da:6b:36:47:
9a:64:87:1a:fe:88:50:ea:6a:6a:bd:6d:05:7e:23:de:09:4a:
66:32:c1:f2:fc:0b:8d:f6:ef:b2:dd:8f:c4:e9:0b:63:34:c4:
ee:5e:b7:41:d8:a0:ee:8b:8b:64:ee:49:48:2f:14:29:0d:52:
ac:1a:1e:aa:07:3a:c0:e8:b3:ee:b9:15:32:a7:50:43:5b:8e:
d3:f2:ba:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFZZI/5L8RRA9fsw8RoIAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlM2QxYzIxYTc3YTBiMGY3ZjBjZTY2MzNlMTNlMGM1N2Jl
ZGIwOGIwHhcNMjUwODIzMDQwMDE4WhcNMjUwODI0MDQwMDE4WjAzMTEwLwYDVQQD
EygyMGZhOTYzYmU2YzQ1YjA3NWZiMGIzZjI2Zjc4YTNmMjRhY2E1ODJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnROqsaPBilkQ4bBtUHe6xTJ3Zh6
l2bvnAM21bOnntttyDZNvydQ5nqHVtYn4nzTc6aYY/M0NwMD2d+JtIcg5GiCpaZB
pIS+fIH0+LbtBhSZWp0mNzXqlE7WGcLPiK1vwWbJMCUUANzuA0BbmPGban49jVoH
4LJF/EoUj8PHTFbVzA9SvJl4gZICA1+75anepxg6oQ2CTqwLaFrV7CM0Aob/t+/8
sTdC6xqTc2zs7JayQefNVz2lwRUTTAaORXiFhBxTAZsZh4/sFVvNUgCrfO+tFxiR
O1Fm4j1sjQTF17MG39+FrqhBE96eYumyBnc4aE7gLs4ddXBEKWA85K5yIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCD6ljvmxFsHX7Cz8m94o/JKylgrMB8GA1UdIwQY
MBaAFD49HCGnegsPfwzmYz4T4MV77bCLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGowY0lhZDZDdzlfRE9aalBoUGd4WHZ0c0lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8wZTllMDAtNDZlNi00ODYzLTkzMjAt
MDk4ZjI1OThlNWUzLzEvUGowY0lhZDZDdzlfRE9aalBoUGd4WHZ0c0lzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8wZTllMDAtNDZlNi00ODYzLTkzMjAtMDk4ZjI1OThlNWUz
LzEvUGowY0lhZDZDdzlfRE9aalBoUGd4WHZ0c0lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJJJBEp1+
5SPLfPSfVIbxlS8cmE/QjuHZdqJyOtRyxKKOi0RuHiv4sGdt+tEKvVgUM3wPFgPL
RVdzXbHK3cKhV/43QwfnCzcF601ZwZtwrlYOK5wmhIcYVGxHXE0VRrvVX1LoPFB9
oGe+9VR87REaW6F9aEMGBlSnKqwFIj5DvOyOIzIfqZF0bDGW9vXyP+i4HyI5Z96l
nFm20QIytY767WABaU04zKd0/Xl7ajWqoI7aazZHmmSHGv6IUOpqar1tBX4j3glK
ZjLB8vwLjfbvst2PxOkLYzTE7l63Qdig7ouLZO5JSC8UKQ1SrBoeqgc6wOiz7rkV
MqdQQ1uO0/K6XA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:31 2025 by rpki-client