Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
File: pTjytsVCHgpCkQBAxbhlCKiVuRY.mft (raw, json)
Hash identifier: J/+CIlKLZWzgPsPhPfI/SOodfMFxZyehm63ZsBKnEGE=
Subject key identifier: D9:72:DD:4B:AE:17:63:97:BE:BA:D4:AB:B2:70:A3:53:D0:D6:A0:E2
Authority key identifier: A5:38:F2:B6:C5:42:1E:0A:42:91:00:40:C5:B8:65:08:A8:95:B9:16
Certificate issuer: /CN=a538f2b6c5421e0a42910040c5b86508a895b916
Certificate serial: 0198D7E18FD9E022F77ABC380D482AF42127
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
Manifest number: 04DA
Signing time: Sat 23 Aug 2025 17:02:20 +0000
Manifest this update: Sat 23 Aug 2025 17:02:20 +0000
Manifest next update: Sun 24 Aug 2025 17:02:20 +0000
Files and hashes: 1: pTjytsVCHgpCkQBAxbhlCKiVuRY.crl (hash: vZvNCfa6jbJJpGTeG/l+/js8iL+mH/T7ZshJlYb4K9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:8f:d9:e0:22:f7:7a:bc:38:0d:48:2a:f4:21:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a538f2b6c5421e0a42910040c5b86508a895b916
Validity
Not Before: Aug 23 17:02:20 2025 GMT
Not After : Aug 24 17:02:20 2025 GMT
Subject: CN=d972dd4bae176397bebad4abb270a353d0d6a0e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d6:90:9b:80:1c:54:ac:76:38:b3:a3:6f:c9:
40:8b:59:66:17:2f:06:70:28:91:77:37:be:9f:26:
92:66:e9:99:39:7c:6a:62:5f:5b:61:bf:45:57:02:
75:5a:55:5f:22:8c:1a:d4:b9:35:c7:c6:f4:18:69:
28:d4:d8:e4:6e:02:26:c7:d7:42:d0:82:d4:d3:e1:
f7:c2:f3:71:26:e3:36:e7:16:dd:3c:c7:82:3d:0f:
9b:95:f5:ba:34:75:33:48:a2:f1:da:ce:48:07:6b:
7e:d6:90:b6:06:92:22:c6:66:b2:a6:9f:2d:b3:41:
a7:cc:fa:ce:23:c4:3c:7a:76:54:2b:cb:93:e5:60:
70:79:13:9a:c8:d1:b1:31:b7:de:3f:bf:55:32:3f:
aa:ff:b1:e7:53:a9:76:66:7d:d4:92:bd:24:cd:9f:
63:45:8f:19:cb:7a:64:66:73:6a:5a:20:d7:d4:19:
aa:65:6a:d4:6d:ad:48:fe:a1:87:08:4d:d7:7a:8d:
f6:fe:0f:94:61:a8:ff:5f:ca:22:81:ba:66:14:ad:
58:46:5e:37:ce:fa:e5:1a:aa:60:f9:f3:99:fc:2b:
c6:bd:76:a5:1d:66:e3:3a:ad:5c:60:89:7f:dd:04:
15:88:f9:2f:57:11:35:8c:64:a0:27:40:3e:df:6b:
8d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:72:DD:4B:AE:17:63:97:BE:BA:D4:AB:B2:70:A3:53:D0:D6:A0:E2
X509v3 Authority Key Identifier:
keyid:A5:38:F2:B6:C5:42:1E:0A:42:91:00:40:C5:B8:65:08:A8:95:B9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:1c:29:3b:2a:2f:dd:75:bb:1a:70:1c:40:2d:42:c5:e3:ea:
c1:f4:fc:0b:4a:80:e0:cb:09:cf:fd:b0:9b:a4:42:78:c8:70:
f6:b8:c9:eb:5d:67:17:8c:9f:c7:e8:79:e1:af:c8:25:b5:b2:
8c:76:59:71:66:88:6e:99:52:74:bd:de:da:36:fe:9e:6f:12:
c4:e8:56:e2:c6:13:ac:86:c8:24:c8:6b:5a:d5:9b:97:33:9e:
4d:3b:51:0f:17:a5:48:cd:c8:f4:ff:6e:72:1a:b8:21:fa:af:
64:46:95:f9:7e:7d:6c:20:3b:2d:d7:3e:49:35:e4:d0:de:5a:
6f:3b:35:dc:72:99:44:cb:ee:d0:4f:58:47:0b:9a:95:38:d4:
e0:f1:83:2e:8f:80:51:18:07:7c:78:2d:43:07:0f:de:af:60:
72:74:87:b1:b1:8a:8a:f6:9a:23:19:07:65:ed:e8:1f:3d:67:
73:1b:f7:da:98:f8:a8:fe:aa:5f:96:68:e6:f0:d1:bd:83:54:
ec:08:ce:cd:43:b6:e6:8b:94:6a:3a:e6:6e:48:13:49:8c:07:
21:5c:46:1f:76:4e:1c:df:cf:0f:5a:23:a6:9c:c5:68:09:a4:
9a:63:19:17:29:49:d7:fc:7c:9e:d4:f5:20:c7:c9:47:f5:29:
da:9e:f7:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjX4Y/Z4CL3erw4DUgq9CEnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MzhmMmI2YzU0MjFlMGE0MjkxMDA0MGM1Yjg2NTA4YTg5
NWI5MTYwHhcNMjUwODIzMTcwMjIwWhcNMjUwODI0MTcwMjIwWjAzMTEwLwYDVQQD
EyhkOTcyZGQ0YmFlMTc2Mzk3YmViYWQ0YWJiMjcwYTM1M2QwZDZhMGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9aQm4AcVKx2OLOjb8lAi1lmFy8G
cCiRdze+nyaSZumZOXxqYl9bYb9FVwJ1WlVfIowa1Lk1x8b0GGko1NjkbgImx9dC
0ILU0+H3wvNxJuM25xbdPMeCPQ+blfW6NHUzSKLx2s5IB2t+1pC2BpIixmaypp8t
s0GnzPrOI8Q8enZUK8uT5WBweROayNGxMbfeP79VMj+q/7HnU6l2Zn3Ukr0kzZ9j
RY8Zy3pkZnNqWiDX1BmqZWrUba1I/qGHCE3Xeo32/g+UYaj/X8oigbpmFK1YRl43
zvrlGqpg+fOZ/CvGvXalHWbjOq1cYIl/3QQViPkvVxE1jGSgJ0A+32uNTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNly3UuuF2OXvrrUq7Jwo1PQ1qDiMB8GA1UdIwQY
MBaAFKU48rbFQh4KQpEAQMW4ZQiolbkWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFRqeXRzVkNIZ3BDa1FCQXhiaGxDS2lWdVJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81YWU5MzUtZjZlMC00MDczLTlmNzkt
ZWM2YzAxZjQ3MjRlLzEvcFRqeXRzVkNIZ3BDa1FCQXhiaGxDS2lWdVJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81YWU5MzUtZjZlMC00MDczLTlmNzktZWM2YzAxZjQ3MjRl
LzEvcFRqeXRzVkNIZ3BDa1FCQXhiaGxDS2lWdVJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALRwpOyov
3XW7GnAcQC1CxePqwfT8C0qA4MsJz/2wm6RCeMhw9rjJ611nF4yfx+h54a/IJbWy
jHZZcWaIbplSdL3e2jb+nm8SxOhW4sYTrIbIJMhrWtWblzOeTTtRDxelSM3I9P9u
chq4IfqvZEaV+X59bCA7Ldc+STXk0N5abzs13HKZRMvu0E9YRwualTjU4PGDLo+A
URgHfHgtQwcP3q9gcnSHsbGKivaaIxkHZe3oHz1ncxv32pj4qP6qX5Zo5vDRvYNU
7AjOzUO25ouUajrmbkgTSYwHIVxGH3ZOHN/PD1ojppzFaAmkmmMZFylJ1/x8ntT1
IMfJR/Up2p73Fg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:55:42 2025 by rpki-client