Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
File: PS60FH7nv8a6cvwDSUU0mPAA5YE.mft (raw, json)
Hash identifier: yxmXtFyUOYr31rOhJ1zNjsn5HRlAJ/GS2ZiNndSvHcg=
Subject key identifier: 8E:22:32:67:E5:F1:E7:65:CE:D8:0A:11:1E:2D:E9:4F:94:16:81:E5
Authority key identifier: 3D:2E:B4:14:7E:E7:BF:C6:BA:72:FC:03:49:45:34:98:F0:00:E5:81
Certificate issuer: /CN=3d2eb4147ee7bfc6ba72fc0349453498f000e581
Certificate serial: 0198D404921B43B0CBCF6F31CA624E9D7B8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
Manifest number: 033C
Signing time: Fri 22 Aug 2025 23:02:05 +0000
Manifest this update: Fri 22 Aug 2025 23:02:05 +0000
Manifest next update: Sat 23 Aug 2025 23:02:05 +0000
Files and hashes: 1: PS60FH7nv8a6cvwDSUU0mPAA5YE.crl (hash: 4sl2qcQN46j9JXDTXcSxKrNbXbVX32qujo9V+hUo+7g=)
2: rhHZBrR5DDkzkDSwq2N2DFoItdo.roa (hash: gfniJmHb/llxXTuf6zA06t/WamUafcFVdlCv/KyOq4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:92:1b:43:b0:cb:cf:6f:31:ca:62:4e:9d:7b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2eb4147ee7bfc6ba72fc0349453498f000e581
Validity
Not Before: Aug 22 23:02:05 2025 GMT
Not After : Aug 23 23:02:05 2025 GMT
Subject: CN=8e223267e5f1e765ced80a111e2de94f941681e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:54:93:47:b6:d1:4b:c3:6c:a2:07:cc:4a:4f:
3f:3d:cd:5e:aa:db:e5:17:b4:b6:4d:bd:bb:49:d4:
6c:6c:81:70:7a:f3:23:25:f6:47:46:21:b3:50:33:
9a:e0:50:c4:8f:a3:91:1c:8f:3e:2d:9f:b9:c4:96:
12:b4:8f:e2:2b:74:df:1d:15:9d:19:12:01:f9:47:
35:2e:99:f6:1e:12:10:6a:e9:13:7c:c6:7f:55:33:
f1:8c:71:a0:27:46:a3:71:b4:34:34:62:f6:2e:07:
c7:38:d0:7d:5d:3f:1c:1c:19:81:6f:08:5d:13:17:
6a:ef:a6:09:bd:8d:d3:ea:34:7e:86:78:46:98:45:
73:bc:6c:3a:19:4d:0f:f9:db:4a:45:53:f5:22:15:
e8:2c:21:f9:e1:a5:f2:5f:22:d2:17:86:6f:a8:4b:
19:7d:be:f7:fe:95:8c:9b:4c:e8:eb:bd:93:d6:60:
4d:a2:37:63:3a:f6:fd:16:39:0b:e1:1b:4d:11:22:
3e:eb:26:66:72:b5:2b:f8:ff:97:90:3b:80:df:59:
b2:e3:fa:7a:19:24:86:86:d6:41:e8:7a:55:f2:31:
60:cf:6b:a2:7f:a0:ed:96:51:dc:e7:e2:32:67:46:
5d:7f:c0:2c:fa:97:ce:23:90:68:ab:78:76:31:45:
da:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:22:32:67:E5:F1:E7:65:CE:D8:0A:11:1E:2D:E9:4F:94:16:81:E5
X509v3 Authority Key Identifier:
keyid:3D:2E:B4:14:7E:E7:BF:C6:BA:72:FC:03:49:45:34:98:F0:00:E5:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:7f:9a:d2:cc:67:31:73:c3:59:a7:fc:eb:84:ee:36:51:e5:
e2:d4:76:cb:db:49:5a:e6:82:02:64:24:e9:fe:46:0c:a4:fc:
98:c6:b1:04:61:06:fc:ee:93:66:ce:30:d3:10:41:4b:23:44:
28:ea:c6:52:d8:5e:40:89:77:d2:4c:99:50:70:89:fc:65:00:
2c:62:9a:b8:47:af:c4:3e:a3:d5:bf:b6:80:5d:b1:f3:21:38:
3a:8b:ab:9c:e8:35:0a:c9:49:37:51:b9:bf:8b:07:24:e2:a5:
76:a8:55:c4:95:88:85:95:76:46:ad:a8:0e:14:65:5d:f3:ec:
19:0f:e8:12:25:cd:1d:c9:2c:20:f0:8c:35:23:63:90:d6:4b:
b6:9b:88:f8:f1:66:f0:0a:3a:ee:50:a9:6b:15:40:b4:f5:6f:
df:7e:a4:2e:0d:55:17:4c:38:91:a5:88:a8:c7:07:72:fb:e6:
03:b7:7f:d9:39:b2:19:61:06:30:40:e3:fb:eb:4c:6b:bc:0b:
50:88:1c:3c:b6:ae:ca:bd:83:34:01:bd:5c:bf:3b:35:d3:11:
1b:00:3e:77:73:19:24:18:5f:23:7d:17:b3:e3:d9:e3:c2:53:
cf:d1:40:1e:f6:6d:85:7d:30:e6:65:72:65:ca:f2:c9:36:4b:
8d:98:29:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUBJIbQ7DLz28xymJOnXuOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMmViNDE0N2VlN2JmYzZiYTcyZmMwMzQ5NDUzNDk4ZjAw
MGU1ODEwHhcNMjUwODIyMjMwMjA1WhcNMjUwODIzMjMwMjA1WjAzMTEwLwYDVQQD
Eyg4ZTIyMzI2N2U1ZjFlNzY1Y2VkODBhMTExZTJkZTk0Zjk0MTY4MWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lSTR7bRS8NsogfMSk8/Pc1eqtvl
F7S2Tb27SdRsbIFwevMjJfZHRiGzUDOa4FDEj6ORHI8+LZ+5xJYStI/iK3TfHRWd
GRIB+Uc1Lpn2HhIQaukTfMZ/VTPxjHGgJ0ajcbQ0NGL2LgfHONB9XT8cHBmBbwhd
Exdq76YJvY3T6jR+hnhGmEVzvGw6GU0P+dtKRVP1IhXoLCH54aXyXyLSF4ZvqEsZ
fb73/pWMm0zo672T1mBNojdjOvb9FjkL4RtNESI+6yZmcrUr+P+XkDuA31my4/p6
GSSGhtZB6HpV8jFgz2uif6DtllHc5+IyZ0Zdf8As+pfOI5Boq3h2MUXaQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI4iMmfl8edlztgKER4t6U+UFoHlMB8GA1UdIwQY
MBaAFD0utBR+57/GunL8A0lFNJjwAOWBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFM2MEZIN252OGE2Y3Z3RFNVVTBtUEFBNVlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9iOGY1M2YtNDY3Zi00NWNmLTgzMDYt
NDI5NTFjMmNhNzM4LzEvUFM2MEZIN252OGE2Y3Z3RFNVVTBtUEFBNVlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9iOGY1M2YtNDY3Zi00NWNmLTgzMDYtNDI5NTFjMmNhNzM4
LzEvUFM2MEZIN252OGE2Y3Z3RFNVVTBtUEFBNVlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaH+a0sxn
MXPDWaf864TuNlHl4tR2y9tJWuaCAmQk6f5GDKT8mMaxBGEG/O6TZs4w0xBBSyNE
KOrGUtheQIl30kyZUHCJ/GUALGKauEevxD6j1b+2gF2x8yE4OournOg1CslJN1G5
v4sHJOKldqhVxJWIhZV2Rq2oDhRlXfPsGQ/oEiXNHcksIPCMNSNjkNZLtpuI+PFm
8Ao67lCpaxVAtPVv336kLg1VF0w4kaWIqMcHcvvmA7d/2TmyGWEGMEDj++tMa7wL
UIgcPLauyr2DNAG9XL87NdMRGwA+d3MZJBhfI30Xs+PZ48JTz9FAHvZthX0w5mVy
ZcryyTZLjZgpOw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:14 2025 by rpki-client