Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
File: pqjzQ2_YPor2EPIWgImW6QrKx10.mft (raw, json)
Hash identifier: TDVuFV/1J38xxt0+fVE1LPGlpGuuIvMDN7wU6VupgGA=
Subject key identifier: 30:B0:ED:91:24:DE:88:3E:2D:91:D1:52:73:80:92:01:72:77:F5:37
Authority key identifier: A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
Certificate issuer: /CN=a6a8f3436fd83e8af610f216808996e90acac75d
Certificate serial: 019844762203491E3FBDF2F195F5BB60F790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
Manifest number: 01BA
Signing time: Sat 26 Jul 2025 02:00:49 +0000
Manifest this update: Sat 26 Jul 2025 02:00:49 +0000
Manifest next update: Sun 27 Jul 2025 02:00:49 +0000
Files and hashes: 1: ZUpNPohL23tCs0p7RIJ5CSnq_nE.roa (hash: IdApViwu1d+gOIrjS2rsEi8/hl56lvmzjtXUhg292sQ=)
2: pqjzQ2_YPor2EPIWgImW6QrKx10.crl (hash: Wvnuo12AP2kUk40QQwtPWO9S+pftlXsyXQENe5sc4Vo=)
3: s_VH1RJUenuP8OvNJaH6yu7OYsg.roa (hash: vyeEoRPPlhaqhjAq4VATA3B5K5D/1bqk7r9/7EELRFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:76:22:03:49:1e:3f:bd:f2:f1:95:f5:bb:60:f7:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a8f3436fd83e8af610f216808996e90acac75d
Validity
Not Before: Jul 26 02:00:49 2025 GMT
Not After : Jul 27 02:00:49 2025 GMT
Subject: CN=30b0ed9124de883e2d91d152738092017277f537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bb:78:4b:e9:90:0e:1a:dc:8e:87:cf:2f:cc:
21:19:00:24:ba:57:76:bc:80:fe:27:47:03:05:b5:
1a:1f:cc:16:6d:eb:25:93:f7:06:d2:ef:54:c0:47:
3a:85:3b:58:3f:cf:1b:88:d5:70:da:44:65:21:7a:
65:f3:b7:08:3a:6f:1b:73:13:46:bb:4e:b4:dd:80:
46:a8:b7:4a:37:2f:10:20:eb:ee:c7:b7:25:ac:9f:
2a:7f:15:92:83:47:d1:68:41:6f:bd:f4:e0:d2:06:
18:f6:ee:c1:cb:e9:bf:ad:01:5a:b9:0b:cb:f9:7b:
3b:9a:45:03:67:5c:15:eb:27:e5:8c:49:8c:06:75:
86:5c:82:4d:ab:63:1b:25:b8:a0:a4:cf:a1:2e:ef:
db:90:19:64:49:ca:3b:2c:3c:73:40:8a:eb:60:1f:
d5:a0:08:1b:94:53:5f:75:f7:56:f6:71:b0:1f:00:
6b:4e:2a:b8:ad:5b:85:c6:5a:1b:a3:58:40:b4:06:
47:c6:99:b5:91:e4:fc:bd:19:3d:a6:4b:70:b3:e4:
b6:15:f4:30:9e:c2:f8:92:bc:05:2e:c3:68:de:ce:
1a:ad:c3:b1:66:a8:7c:53:9d:9e:d6:ed:d2:0f:cb:
22:06:8f:be:6d:dc:74:4d:42:dc:a7:b4:ec:b6:69:
5e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B0:ED:91:24:DE:88:3E:2D:91:D1:52:73:80:92:01:72:77:F5:37
X509v3 Authority Key Identifier:
keyid:A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:28:57:62:74:97:51:69:ac:00:4e:74:0a:b8:05:34:24:e8:
ff:20:d9:fa:93:26:a6:79:cc:cd:d9:33:9b:f9:fd:1b:99:ad:
85:68:fe:6c:30:b4:aa:17:b2:76:36:63:e0:53:0c:26:ee:d3:
56:91:cb:96:87:de:e9:2e:e7:eb:23:f2:88:e4:ca:b9:c9:2d:
dc:41:2a:c7:83:9e:3d:f0:ac:28:b6:b2:12:84:4e:44:4d:1f:
68:32:65:70:93:ad:99:61:dc:48:0c:9d:ba:f6:6c:dc:bc:77:
e9:f8:f4:d9:17:da:d0:6d:e0:25:ec:2c:56:0f:43:00:fc:18:
b9:ae:f4:fc:27:c1:46:42:df:d5:6c:94:86:c4:bf:1c:12:22:
f2:d2:62:71:a4:b9:41:13:42:60:12:3a:1b:2a:e3:85:d4:85:
e7:95:24:b2:be:b9:74:7c:38:e5:12:8f:32:57:ca:ed:b1:69:
d2:d5:fd:25:3c:28:9a:4e:fc:ba:f3:5d:2f:10:b4:53:16:28:
3a:6c:7d:84:38:81:93:b7:68:b2:65:44:19:7c:7d:44:b6:19:
76:85:54:a8:3c:01:e9:e8:42:dc:ef:67:b8:fd:ab:b0:6d:5f:
16:79:06:f9:82:67:77:6f:1c:d7:f1:f0:82:eb:f0:2f:82:a6:
ef:74:7a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:20:49 2025 by rpki-client