Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
File: pBM1JPJKSooh1GwGwQJfQPNK0no.mft (raw, json)
Hash identifier: rgnNXb1bEnhUTfAuKAXkPvvi2oKm7tXuj9S3EcsuBAA=
Subject key identifier: FE:AA:48:E0:D2:EF:EB:9E:5C:E1:EC:6A:DB:DE:0E:CB:1A:39:62:11
Authority key identifier: A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
Certificate issuer: /CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Certificate serial: 0198D47342A2EDDFDDAD2777DEE903B007E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 01:03:00 +0000
Manifest this update: Sat 23 Aug 2025 01:03:00 +0000
Manifest next update: Sun 24 Aug 2025 01:03:00 +0000
Files and hashes: 1: hDhJ2OmuACmi7Q_Pysi0Uy5-CBg.roa (hash: IpPR6/fjcqfY1Wb9zSV7h6VOKADAG8xAFr0zyQ+Kgzs=)
2: pBM1JPJKSooh1GwGwQJfQPNK0no.crl (hash: CfYNX9yeccPH1m5iLLVDm3bccDv0Dxn6DFfW0f2cuvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:42:a2:ed:df:dd:ad:27:77:de:e9:03:b0:07:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Validity
Not Before: Aug 23 01:03:00 2025 GMT
Not After : Aug 24 01:03:00 2025 GMT
Subject: CN=feaa48e0d2efeb9e5ce1ec6adbde0ecb1a396211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:db:7b:05:71:98:e2:1b:30:39:c0:fe:13:58:
19:98:63:a5:42:9d:f2:89:5c:8d:08:79:ac:7d:b8:
12:04:b1:89:c5:3e:df:20:4f:7f:d2:c0:ad:5b:32:
55:79:da:2c:b8:8a:d6:a9:09:07:ea:76:09:71:a4:
8c:7a:a3:9d:ca:62:0b:b0:55:c2:af:b3:b5:4b:44:
9e:96:bf:b6:4f:7e:93:97:3b:b6:9b:5f:af:dd:c9:
de:ba:d3:a0:16:12:97:f4:b7:82:93:d0:f0:87:10:
0e:69:2d:bf:c7:f9:c6:87:2f:64:34:a3:c0:0f:20:
b4:d6:76:12:57:0f:f8:c6:1e:83:ec:32:dc:63:48:
6b:10:b4:93:bb:78:36:03:4a:2d:71:20:b7:28:83:
1a:cc:93:19:a2:dd:6a:d8:54:de:90:ef:7e:19:15:
c6:fc:ad:10:69:07:54:f8:c3:a3:1c:b1:c9:d9:8f:
fe:28:7a:ce:d2:b9:cd:8c:6c:7f:cf:2b:c1:b8:85:
83:90:2f:73:f5:34:33:6b:17:3c:22:23:9b:d9:13:
6a:98:81:7e:55:1b:77:62:1e:43:b6:a7:24:1b:ff:
b7:fc:f1:f4:fb:8b:3a:22:55:1c:ea:7c:79:d6:b1:
ff:20:1a:cd:c1:88:c3:71:b1:80:c0:de:95:d4:df:
ec:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AA:48:E0:D2:EF:EB:9E:5C:E1:EC:6A:DB:DE:0E:CB:1A:39:62:11
X509v3 Authority Key Identifier:
keyid:A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:9e:e2:06:95:ad:19:79:70:70:8d:c5:7d:e5:20:b2:ff:b1:
cb:01:2a:72:c2:44:1b:21:68:45:1b:03:39:44:2f:ce:db:4d:
c2:01:73:c7:76:2a:10:31:11:d9:c9:be:85:84:e6:77:6f:4b:
84:90:d0:e7:7b:3d:85:02:dc:4d:6e:b7:eb:78:06:68:5e:0c:
bf:67:a3:d1:4f:4d:7e:e4:2d:fa:e2:cc:87:bb:ef:be:2d:c8:
91:46:3c:0c:13:de:49:8f:9b:36:8b:f3:fa:f4:14:6d:fd:32:
d6:0f:19:8e:c3:01:a0:e5:9a:55:2d:aa:94:b8:e3:05:e7:51:
01:b7:eb:fc:59:c0:25:d1:fd:e6:e9:68:09:88:95:16:b1:4d:
77:5f:0d:79:1c:d2:d1:45:0d:a1:72:6c:17:24:c9:26:70:17:
5c:e8:3d:b5:90:9c:5f:2a:7f:c2:ee:bf:00:74:34:ab:8e:d7:
98:62:f1:3c:2a:7e:99:1c:bf:fa:6f:ae:1e:c5:10:5a:fd:f2:
85:56:b0:0e:e0:f1:49:04:2a:4c:2a:65:06:df:1a:a1:15:28:
98:b3:64:8c:84:ad:85:fe:b1:8c:d2:17:71:24:2f:ef:38:56:
60:58:02:1a:f5:b6:99:17:f3:d4:4c:b1:49:f6:00:6b:02:07:
43:6f:8f:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc0Ki7d/drSd33ukDsAfpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MTMzNTI0ZjI0YTRhOGEyMWQ0NmMwNmMxMDI1ZjQwZjM0
YWQyN2EwHhcNMjUwODIzMDEwMzAwWhcNMjUwODI0MDEwMzAwWjAzMTEwLwYDVQQD
EyhmZWFhNDhlMGQyZWZlYjllNWNlMWVjNmFkYmRlMGVjYjFhMzk2MjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dt7BXGY4hswOcD+E1gZmGOlQp3y
iVyNCHmsfbgSBLGJxT7fIE9/0sCtWzJVedosuIrWqQkH6nYJcaSMeqOdymILsFXC
r7O1S0Selr+2T36Tlzu2m1+v3cneutOgFhKX9LeCk9DwhxAOaS2/x/nGhy9kNKPA
DyC01nYSVw/4xh6D7DLcY0hrELSTu3g2A0otcSC3KIMazJMZot1q2FTekO9+GRXG
/K0QaQdU+MOjHLHJ2Y/+KHrO0rnNjGx/zyvBuIWDkC9z9TQzaxc8IiOb2RNqmIF+
VRt3Yh5DtqckG/+3/PH0+4s6IlUc6nx51rH/IBrNwYjDcbGAwN6V1N/sCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6qSODS7+ueXOHsatveDssaOWIRMB8GA1UdIwQY
MBaAFKQTNSTySkqKIdRsBsECX0DzStJ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEJNMUpQSktTb29oMUd3R3dRSmZRUE5LMG5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zYzI0YmUtMjY2ZS00NTIyLTk3ZDYt
N2Q5ZTYyYWZjNDQ0LzEvcEJNMUpQSktTb29oMUd3R3dRSmZRUE5LMG5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zYzI0YmUtMjY2ZS00NTIyLTk3ZDYtN2Q5ZTYyYWZjNDQ0
LzEvcEJNMUpQSktTb29oMUd3R3dRSmZRUE5LMG5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAip7iBpWt
GXlwcI3FfeUgsv+xywEqcsJEGyFoRRsDOUQvzttNwgFzx3YqEDER2cm+hYTmd29L
hJDQ53s9hQLcTW6363gGaF4Mv2ej0U9NfuQt+uLMh7vvvi3IkUY8DBPeSY+bNovz
+vQUbf0y1g8ZjsMBoOWaVS2qlLjjBedRAbfr/FnAJdH95uloCYiVFrFNd18NeRzS
0UUNoXJsFyTJJnAXXOg9tZCcXyp/wu6/AHQ0q47XmGLxPCp+mRy/+m+uHsUQWv3y
hVawDuDxSQQqTCplBt8aoRUomLNkjISthf6xjNIXcSQv7zhWYFgCGvW2mRfz1Eyx
SfYAawIHQ2+PAw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:41:42 2025 by rpki-client