Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
File: pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft (raw, json)
Hash identifier: gqtantckShheh544Y34Zad9GK1hgo53ViMu3jlF4awA=
Subject key identifier: 9F:EC:63:DE:96:4F:98:86:DE:72:2B:E2:9B:EA:B3:6D:A0:9A:F3:BD
Authority key identifier: A4:F5:53:3A:52:7B:26:4C:A2:E8:37:32:85:D7:80:D3:3A:2B:D0:A1
Certificate issuer: /CN=a4f5533a527b264ca2e8373285d780d33a2bd0a1
Certificate serial: 0198D54E1266C9AFAD4C7194DA5C644F1806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
Manifest number: 02DD
Signing time: Sat 23 Aug 2025 05:01:59 +0000
Manifest this update: Sat 23 Aug 2025 05:01:59 +0000
Manifest next update: Sun 24 Aug 2025 05:01:59 +0000
Files and hashes: 1: aU9nU6J43VKML7pOttC9ZY6jQ98.roa (hash: FbRy0Mzafv2hiOEuNsxPoMw70K3GoSJZXHuz7LnmQeE=)
2: pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl (hash: sD6h6D7zNj/OxIkjxB6h6MxYKk0O7p6ndHGTSqlqL1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:12:66:c9:af:ad:4c:71:94:da:5c:64:4f:18:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f5533a527b264ca2e8373285d780d33a2bd0a1
Validity
Not Before: Aug 23 05:01:59 2025 GMT
Not After : Aug 24 05:01:59 2025 GMT
Subject: CN=9fec63de964f9886de722be29beab36da09af3bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d2:43:a1:6e:1e:08:5c:61:61:c2:95:ee:fa:
68:1c:47:b7:91:0e:3b:ba:9d:78:ba:b1:42:f1:75:
9a:db:ae:11:4c:15:9d:59:a9:d2:20:7a:32:75:54:
07:3e:52:cf:03:50:84:59:85:a3:48:d8:d2:37:f2:
67:a9:82:3f:c2:52:72:5c:0f:55:2c:ec:4c:b4:fe:
e1:03:67:b8:7c:9d:8b:61:08:11:be:d6:42:99:90:
09:93:a2:e8:74:4f:a2:66:21:4d:a9:82:72:63:37:
89:55:95:13:37:8c:6b:8d:c6:8c:f4:f8:fe:16:36:
7a:f5:15:23:9c:9a:b8:a3:0b:52:9f:cd:f6:4a:82:
e2:0e:b8:4c:97:0c:5b:c4:3d:de:ce:5f:f1:3d:23:
13:a3:13:19:f0:ac:a6:1b:67:c4:7b:9a:0d:bb:74:
2e:87:26:35:92:bb:33:1e:23:15:4d:c1:94:ec:fa:
de:40:21:92:7e:72:1b:de:4f:1c:b7:dd:72:a5:2c:
5a:b2:90:5a:7f:d2:90:fc:18:58:74:36:2f:98:2b:
70:c0:09:3e:fb:cd:39:f6:4c:4c:fc:42:66:e8:a8:
78:05:b4:71:3b:e3:01:9f:6e:a8:a1:19:c3:f6:a8:
6f:51:c1:c3:74:99:25:1d:78:8d:29:70:34:af:da:
10:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EC:63:DE:96:4F:98:86:DE:72:2B:E2:9B:EA:B3:6D:A0:9A:F3:BD
X509v3 Authority Key Identifier:
keyid:A4:F5:53:3A:52:7B:26:4C:A2:E8:37:32:85:D7:80:D3:3A:2B:D0:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:bc:fa:11:25:09:af:d0:29:45:b8:36:67:c6:bb:3d:19:e2:
69:92:44:35:8a:b9:ba:60:b4:ca:95:55:d7:70:fa:79:40:09:
24:b5:f7:8c:e2:99:58:4b:2e:7f:3f:4a:d6:32:1e:a0:6e:53:
9e:e9:10:e4:e1:f1:33:d6:03:04:42:9d:e2:ae:a8:b0:e9:45:
b0:3f:5f:e3:09:0f:fe:87:8c:68:96:67:42:76:2b:49:eb:aa:
fa:34:fe:1c:14:0a:61:52:bd:ab:23:38:a7:50:cf:3a:93:52:
21:0b:ae:6e:2d:22:ef:0e:7b:b7:3c:51:b8:52:83:63:d2:4c:
3d:83:1b:b2:7a:69:77:eb:6c:b5:34:2d:f4:85:a4:7f:7b:d4:
1f:41:47:ec:ea:df:28:a3:13:34:e9:4f:1f:4a:ad:1b:25:94:
51:eb:3f:59:31:9e:4d:34:43:e3:dc:2c:89:ba:6b:28:e0:2f:
e2:79:54:84:3c:1d:35:77:60:c3:dc:4e:ef:e5:da:59:b5:c4:
5c:ab:28:af:c0:c1:94:18:51:89:6f:63:14:b3:f5:b9:d9:85:
40:77:6c:e2:6a:6a:36:7c:0f:85:24:1a:d4:76:e6:3d:ab:93:
cf:c2:51:24:ee:33:40:4c:2a:ba:f6:f3:3d:ce:aa:54:af:d4:
7e:38:26:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVThJmya+tTHGU2lxkTxgGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZjU1MzNhNTI3YjI2NGNhMmU4MzczMjg1ZDc4MGQzM2Ey
YmQwYTEwHhcNMjUwODIzMDUwMTU5WhcNMjUwODI0MDUwMTU5WjAzMTEwLwYDVQQD
Eyg5ZmVjNjNkZTk2NGY5ODg2ZGU3MjJiZTI5YmVhYjM2ZGEwOWFmM2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29JDoW4eCFxhYcKV7vpoHEe3kQ47
up14urFC8XWa264RTBWdWanSIHoydVQHPlLPA1CEWYWjSNjSN/JnqYI/wlJyXA9V
LOxMtP7hA2e4fJ2LYQgRvtZCmZAJk6LodE+iZiFNqYJyYzeJVZUTN4xrjcaM9Pj+
FjZ69RUjnJq4owtSn832SoLiDrhMlwxbxD3ezl/xPSMToxMZ8KymG2fEe5oNu3Qu
hyY1krszHiMVTcGU7PreQCGSfnIb3k8ct91ypSxaspBaf9KQ/BhYdDYvmCtwwAk+
+8059kxM/EJm6Kh4BbRxO+MBn26ooRnD9qhvUcHDdJklHXiNKXA0r9oQfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/sY96WT5iG3nIr4pvqs22gmvO9MB8GA1UdIwQY
MBaAFKT1UzpSeyZMoug3MoXXgNM6K9ChMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFBWVE9sSjdKa3lpNkRjeWhkZUEwem9yMEtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hZmMzYzgtZTk1Mi00MDcwLWE1NDYt
NDI0NDYyYmM5NDliLzEvcFBWVE9sSjdKa3lpNkRjeWhkZUEwem9yMEtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9hZmMzYzgtZTk1Mi00MDcwLWE1NDYtNDI0NDYyYmM5NDli
LzEvcFBWVE9sSjdKa3lpNkRjeWhkZUEwem9yMEtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARrz6ESUJ
r9ApRbg2Z8a7PRniaZJENYq5umC0ypVV13D6eUAJJLX3jOKZWEsufz9K1jIeoG5T
nukQ5OHxM9YDBEKd4q6osOlFsD9f4wkP/oeMaJZnQnYrSeuq+jT+HBQKYVK9qyM4
p1DPOpNSIQuubi0i7w57tzxRuFKDY9JMPYMbsnppd+tstTQt9IWkf3vUH0FH7Orf
KKMTNOlPH0qtGyWUUes/WTGeTTRD49wsibprKOAv4nlUhDwdNXdgw9xO7+XaWbXE
XKsor8DBlBhRiW9jFLP1udmFQHds4mpqNnwPhSQa1HbmPauTz8JRJO4zQEwquvbz
Pc6qVK/Ufjgm+g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:42:43 2025 by rpki-client