Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
File: pCAAxPTsSgPNTTZX4BtwA07CO5c.mft (raw, json)
Hash identifier: SSZzr23fF8YsmgRb3g+s3yK2Gd2YInTfcBXL9ids/fI=
Subject key identifier: B4:AC:24:29:BA:C3:8F:BB:CF:9D:AA:A3:F9:08:D0:8A:07:F3:72:F1
Authority key identifier: A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
Certificate issuer: /CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Certificate serial: 0198D5BBEF522B8BBB839E74EF73C4FA728D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 07:02:00 +0000
Manifest this update: Sat 23 Aug 2025 07:02:00 +0000
Manifest next update: Sun 24 Aug 2025 07:02:00 +0000
Files and hashes: 1: 41_o2BIwv76TF64VP1DAdfjTxPo.roa (hash: ZsvXvwGlxNqhMT0bqp079C/5ezKY6fiYSiOoxT1NO2o=)
2: 4mRSyOWbS8hQScfHLulGf4Y6ZgQ.roa (hash: o3JSSVtXNFoFrqvnt6XhA+Y0uItKhtMcyPKqriXcd08=)
3: Qw_MgL0jZxAEcUaQV1xqF4PVe2w.roa (hash: K6DZu82eoM3254ECuNlV9U+0ldDohrzL2NCBM61LLzM=)
4: Zl3HHM0URwuJSk9LlxkNHY3QJSA.roa (hash: Ael3rTKnV/t1wOUc5dyvS7YOaqG/u0QZHukcBegGERg=)
5: pCAAxPTsSgPNTTZX4BtwA07CO5c.crl (hash: zpA4ImJ7DmAeEVxBft/jpC4oGd4H1uJbhCCkJZI/0ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:ef:52:2b:8b:bb:83:9e:74:ef:73:c4:fa:72:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Validity
Not Before: Aug 23 07:02:00 2025 GMT
Not After : Aug 24 07:02:00 2025 GMT
Subject: CN=b4ac2429bac38fbbcf9daaa3f908d08a07f372f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:e4:59:de:70:47:65:70:0e:08:5c:a7:27:
4c:b7:e9:01:5f:b0:ed:76:7c:dd:d5:4d:db:48:58:
30:13:70:9e:33:67:f9:36:8e:13:ef:dc:bf:03:36:
f5:82:3e:c8:6d:11:1c:01:2b:69:6b:68:cf:58:ff:
87:9e:ad:d1:84:b2:29:c2:81:36:49:e0:59:24:14:
63:cf:33:e6:ba:a6:0b:0c:06:d2:25:22:7c:0d:d8:
04:dc:41:8e:a7:88:9f:b3:d3:73:62:95:88:75:c0:
64:30:59:44:9d:74:68:a9:6e:30:09:70:16:c2:95:
cc:52:7f:a1:cc:0b:b0:a2:ab:3c:ac:d0:f6:55:7a:
ee:8d:ff:cb:9d:41:78:86:0d:49:8d:bb:63:9a:cb:
3b:bb:51:20:11:15:ac:1e:d1:88:6b:a8:2c:d9:d7:
ae:9c:5f:c5:6c:e8:53:e1:f6:f9:18:2f:e3:b5:7b:
c4:20:f4:5b:42:d8:15:b1:29:c2:a1:fe:8c:45:04:
c9:c0:b1:9e:81:27:f4:76:fe:08:4d:3f:ac:00:c3:
0a:2b:e0:82:7f:dc:77:15:0c:64:f3:55:00:ab:a5:
e6:92:81:e7:70:27:69:7a:4c:f2:fa:54:61:aa:09:
9d:16:7f:0f:9e:08:dd:78:ca:ae:7d:ae:e2:c6:65:
0f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AC:24:29:BA:C3:8F:BB:CF:9D:AA:A3:F9:08:D0:8A:07:F3:72:F1
X509v3 Authority Key Identifier:
keyid:A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:8c:1b:96:01:72:0d:d7:7b:d9:e8:2e:f6:c3:52:55:ea:da:
88:5f:3e:46:8b:e6:95:72:9d:46:83:17:c6:2e:52:de:b0:fa:
d6:fa:1b:04:c8:c2:5a:38:a6:2b:75:f9:c4:56:63:08:9b:0d:
21:11:28:0d:3a:89:e4:fe:6a:67:84:05:df:12:6e:dc:9d:b7:
13:57:7f:19:56:0d:d0:23:11:6e:55:89:e7:88:61:d9:0f:6b:
fe:06:4b:9b:5c:83:cc:7c:e3:02:17:b9:34:56:7b:1a:dd:b7:
69:a1:d3:07:c4:c2:da:9f:c0:11:8e:00:7d:19:f5:db:bb:ca:
bd:15:04:b2:28:97:68:fa:5b:81:46:1a:19:46:10:4b:7a:45:
60:32:bc:1e:b8:ce:56:b3:1f:6a:3c:80:cb:2a:a7:d9:62:96:
3c:6c:0f:0f:ad:cf:c6:7a:46:ef:d7:45:3a:91:ce:f4:7c:dc:
33:09:84:f8:85:6e:ee:09:82:49:2c:8b:b7:01:d0:36:4e:21:
1b:be:97:45:84:93:02:99:65:4c:ce:79:2d:a2:8b:02:9b:42:
89:24:32:57:06:9e:3b:a9:a9:91:e6:ae:d5:8c:ab:c7:c4:4c:
81:25:95:17:45:3e:e5:f7:8d:16:60:2e:ec:03:75:55:de:61:
6d:66:bc:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu+9SK4u7g55073PE+nKNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MjAwMGM0ZjRlYzRhMDNjZDRkMzY1N2UwMWI3MDAzNGVj
MjNiOTcwHhcNMjUwODIzMDcwMjAwWhcNMjUwODI0MDcwMjAwWjAzMTEwLwYDVQQD
EyhiNGFjMjQyOWJhYzM4ZmJiY2Y5ZGFhYTNmOTA4ZDA4YTA3ZjM3MmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlTkWd5wR2VwDghcpydMt+kBX7Dt
dnzd1U3bSFgwE3CeM2f5No4T79y/Azb1gj7IbREcAStpa2jPWP+Hnq3RhLIpwoE2
SeBZJBRjzzPmuqYLDAbSJSJ8DdgE3EGOp4ifs9NzYpWIdcBkMFlEnXRoqW4wCXAW
wpXMUn+hzAuwoqs8rND2VXrujf/LnUF4hg1Jjbtjmss7u1EgERWsHtGIa6gs2deu
nF/FbOhT4fb5GC/jtXvEIPRbQtgVsSnCof6MRQTJwLGegSf0dv4ITT+sAMMKK+CC
f9x3FQxk81UAq6XmkoHncCdpekzy+lRhqgmdFn8PngjdeMqufa7ixmUPaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSsJCm6w4+7z52qo/kI0IoH83LxMB8GA1UdIwQY
MBaAFKQgAMT07EoDzU02V+AbcANOwjuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcENBQXhQVHNTZ1BOVFRaWDRCdHdBMDdDTzVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xNjNkNzctNGZlYS00MTMxLWJlY2It
MGYyMmQ4OTY4OWEwLzEvcENBQXhQVHNTZ1BOVFRaWDRCdHdBMDdDTzVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xNjNkNzctNGZlYS00MTMxLWJlY2ItMGYyMmQ4OTY4OWEw
LzEvcENBQXhQVHNTZ1BOVFRaWDRCdHdBMDdDTzVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH4wblgFy
Ddd72egu9sNSVeraiF8+RovmlXKdRoMXxi5S3rD61vobBMjCWjimK3X5xFZjCJsN
IREoDTqJ5P5qZ4QF3xJu3J23E1d/GVYN0CMRblWJ54hh2Q9r/gZLm1yDzHzjAhe5
NFZ7Gt23aaHTB8TC2p/AEY4AfRn127vKvRUEsiiXaPpbgUYaGUYQS3pFYDK8HrjO
VrMfajyAyyqn2WKWPGwPD63PxnpG79dFOpHO9HzcMwmE+IVu7gmCSSyLtwHQNk4h
G76XRYSTApllTM55LaKLAptCiSQyVwaeO6mpkeau1Yyrx8RMgSWVF0U+5feNFmAu
7AN1Vd5hbWa8ag==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:32:45 2025 by rpki-client