Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
File: PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft (raw, json)
Hash identifier: xi9u8SHaWl+cHabnokTbtixxS+ICwrisPwUB+nSreJU=
Subject key identifier: A0:54:FC:C1:57:D5:35:52:1F:AE:6C:8C:8E:75:C6:E9:C9:A9:32:40
Authority key identifier: 3D:C4:10:E3:F0:9B:EA:6A:BC:9D:D8:C6:FF:41:85:65:1B:0A:B8:67
Certificate issuer: /CN=3dc410e3f09bea6abc9dd8c6ff4185651b0ab867
Certificate serial: 019847AD97069EA00AC9D5ED498E56A8D1D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
Manifest number: 1592
Signing time: Sat 26 Jul 2025 17:00:15 +0000
Manifest this update: Sat 26 Jul 2025 17:00:15 +0000
Manifest next update: Sun 27 Jul 2025 17:00:15 +0000
Files and hashes: 1: PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.crl (hash: MfLt6QvK7yE/efgsdxSAcxpI1rTUlDeIRcYIdmlIArU=)
2: itPEMbOZFFR8e5L5AvpBnlFEedQ.roa (hash: pIQ9iWRr1eE7BBGNob9EZxPiOkZPJVC3FeL7vrrHIjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:97:06:9e:a0:0a:c9:d5:ed:49:8e:56:a8:d1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc410e3f09bea6abc9dd8c6ff4185651b0ab867
Validity
Not Before: Jul 26 17:00:15 2025 GMT
Not After : Jul 27 17:00:15 2025 GMT
Subject: CN=a054fcc157d535521fae6c8c8e75c6e9c9a93240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c9:a5:76:ae:24:8a:31:02:18:11:23:c2:d6:
36:23:e2:b9:f0:4a:f6:a5:42:22:a0:19:96:24:94:
6d:13:eb:e0:d5:dd:01:74:20:98:01:a5:96:62:92:
2e:cf:76:a8:21:c2:d9:66:f3:26:48:b1:aa:8e:3d:
80:64:d3:e0:88:4e:56:38:60:9d:46:15:a3:d0:1d:
5d:12:a3:d3:83:6b:28:a5:26:db:1c:76:4b:23:83:
89:70:a5:46:32:c3:76:a0:38:02:64:e7:c2:2b:57:
80:e2:f7:39:11:cd:8d:2d:0f:e3:86:69:34:3a:d1:
84:10:aa:fd:c8:55:d9:4e:f4:bc:00:af:33:e8:7d:
f3:cc:8b:80:bd:14:d3:80:9d:f5:15:c4:d8:7e:ba:
92:13:68:b7:5a:cb:bd:69:47:e2:b5:5f:32:02:64:
82:cf:1e:7b:25:c3:54:3e:7b:c6:e5:40:a9:80:cb:
7e:ca:7c:f1:cb:ac:a4:4a:a9:6e:27:7e:b5:e1:6d:
0b:0d:94:8b:7b:eb:de:bf:44:e8:b6:06:55:74:78:
a7:3e:5a:11:60:29:e9:88:2a:b8:84:f7:4d:00:28:
02:1b:00:65:e3:20:95:d9:cc:b5:83:fc:6d:0d:ee:
de:36:77:f0:c4:1b:52:d8:48:c4:51:6d:53:ca:5b:
39:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:54:FC:C1:57:D5:35:52:1F:AE:6C:8C:8E:75:C6:E9:C9:A9:32:40
X509v3 Authority Key Identifier:
keyid:3D:C4:10:E3:F0:9B:EA:6A:BC:9D:D8:C6:FF:41:85:65:1B:0A:B8:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:8a:07:ce:89:f1:02:fb:d7:26:7c:e7:4a:df:cd:d3:2d:a8:
d9:82:4e:15:7e:03:56:0a:21:1b:c9:35:45:51:db:f2:4b:ec:
3a:cc:6b:9d:23:25:d4:d1:dd:b8:c0:7a:d8:e0:a0:2d:62:58:
0e:df:c4:23:1c:71:a2:6d:b9:aa:24:29:50:69:86:03:12:34:
54:0f:90:05:1b:7d:df:50:05:30:d4:07:5e:e6:42:c7:61:b5:
0c:c1:3d:59:0c:86:8f:41:2e:13:ad:ea:41:65:b2:e2:ba:67:
09:f7:44:bf:dd:51:bb:5b:35:34:1a:3d:f0:3d:51:ee:ea:32:
ba:84:2d:0e:ec:ed:48:44:0f:51:13:97:49:1f:ae:2c:fb:2f:
3a:cf:53:76:3a:a2:98:59:33:ef:71:25:3c:8c:bc:60:6f:05:
53:3b:ae:2c:f4:ea:4f:fb:f5:04:19:76:ce:1a:7f:cb:4b:af:
f9:0f:c8:3a:4d:b1:47:16:50:ec:63:2b:01:4b:34:b6:77:5d:
7a:22:2d:0c:c0:79:54:88:df:f6:f4:57:81:c2:f2:90:f7:58:
0d:bb:39:c9:ce:8d:63:f2:7e:eb:2c:db:76:ca:d8:26:98:7b:
ca:3a:cd:b1:1f:3e:be:34:de:8e:ac:62:ce:4d:95:37:6c:06:
0f:6a:31:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHrZcGnqAKydXtSY5WqNHVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYzQxMGUzZjA5YmVhNmFiYzlkZDhjNmZmNDE4NTY1MWIw
YWI4NjcwHhcNMjUwNzI2MTcwMDE1WhcNMjUwNzI3MTcwMDE1WjAzMTEwLwYDVQQD
EyhhMDU0ZmNjMTU3ZDUzNTUyMWZhZTZjOGM4ZTc1YzZlOWM5YTkzMjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMmldq4kijECGBEjwtY2I+K58Er2
pUIioBmWJJRtE+vg1d0BdCCYAaWWYpIuz3aoIcLZZvMmSLGqjj2AZNPgiE5WOGCd
RhWj0B1dEqPTg2sopSbbHHZLI4OJcKVGMsN2oDgCZOfCK1eA4vc5Ec2NLQ/jhmk0
OtGEEKr9yFXZTvS8AK8z6H3zzIuAvRTTgJ31FcTYfrqSE2i3Wsu9aUfitV8yAmSC
zx57JcNUPnvG5UCpgMt+ynzxy6ykSqluJ3614W0LDZSLe+vev0TotgZVdHinPloR
YCnpiCq4hPdNACgCGwBl4yCV2cy1g/xtDe7eNnfwxBtS2EjEUW1Tyls59wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBU/MFX1TVSH65sjI51xunJqTJAMB8GA1UdIwQY
MBaAFD3EEOPwm+pqvJ3Yxv9BhWUbCrhnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGNRUTRfQ2I2bXE4bmRqR18wR0ZaUnNLdUdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8wNDI5NTEtNTRkOC00NjljLWJiYTEt
YTY1NDZjZDlkYTk0LzEvUGNRUTRfQ2I2bXE4bmRqR18wR0ZaUnNLdUdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8wNDI5NTEtNTRkOC00NjljLWJiYTEtYTY1NDZjZDlkYTk0
LzEvUGNRUTRfQ2I2bXE4bmRqR18wR0ZaUnNLdUdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADYoHzonx
AvvXJnznSt/N0y2o2YJOFX4DVgohG8k1RVHb8kvsOsxrnSMl1NHduMB62OCgLWJY
Dt/EIxxxom25qiQpUGmGAxI0VA+QBRt931AFMNQHXuZCx2G1DME9WQyGj0EuE63q
QWWy4rpnCfdEv91Ru1s1NBo98D1R7uoyuoQtDuztSEQPUROXSR+uLPsvOs9Tdjqi
mFkz73ElPIy8YG8FUzuuLPTqT/v1BBl2zhp/y0uv+Q/IOk2xRxZQ7GMrAUs0tndd
eiItDMB5VIjf9vRXgcLykPdYDbs5yc6NY/J+6yzbdsrYJph7yjrNsR8+vjTejqxi
zk2VN2wGD2ox5g==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:04:10 2025 by rpki-client