Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
File: Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft (raw, json)
Hash identifier: KLLXfrfDf9CxRpA06K+ZInlXLUsfmmZhOUukg332XrA=
Subject key identifier: 54:59:BA:05:C7:30:EB:52:B9:C2:85:E4:D1:63:38:64:0C:A3:E2:50
Authority key identifier: 3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29
Certificate issuer: /CN=3ead19096b0ee080fe43810500b718a947fed229
Certificate serial: 019748F9F2E9DCC77BB4ED8FF0BF23AF3055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
Manifest number: 09A5
Signing time: Sat 07 Jun 2025 06:00:29 +0000
Manifest this update: Sat 07 Jun 2025 06:00:29 +0000
Manifest next update: Sun 08 Jun 2025 06:00:29 +0000
Files and hashes: 1: Bk8zYlSKqLYVsGMH3YEvHnLSsEU.roa (hash: LyRPaqVEcdiw5E3uBmgAAh9/7xweVS475crHOVmwvK8=)
2: Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl (hash: MMeCMaO7Ot5Op0Uy3Yg0S1Om/rou7BzndTnxzcZ81NA=)
3: gwj9P8ZuERM-SCTzjIoGfn0Rln0.roa (hash: 9JU5L0oKqu22gCI9ibec6Elcvk/4kJnQuHkzo4ps1r4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:f2:e9:dc:c7:7b:b4:ed:8f:f0:bf:23:af:30:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ead19096b0ee080fe43810500b718a947fed229
Validity
Not Before: Jun 7 06:00:29 2025 GMT
Not After : Jun 8 06:00:29 2025 GMT
Subject: CN=5459ba05c730eb52b9c285e4d16338640ca3e250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b3:a6:c2:ea:5e:21:99:46:d2:d6:39:66:90:
f0:41:9d:dd:16:28:4f:42:41:54:c7:ea:40:e3:7f:
8f:36:88:8a:6e:05:d4:a8:8b:a0:cb:ed:34:f9:9e:
84:14:b3:1b:1d:ae:e3:cc:f0:e8:bf:5b:0f:69:af:
23:9a:ca:bc:ec:88:a2:1c:59:9d:8a:f4:be:81:5a:
31:3d:3a:9c:9e:30:ed:cb:28:6a:b2:2d:68:99:bb:
43:88:d3:8a:21:e6:f8:d7:cc:cb:e1:d7:ae:c4:14:
43:a7:6c:c6:3e:09:46:79:64:24:ff:7f:f2:e4:97:
91:ca:5b:16:2c:75:f9:47:79:80:f3:69:23:85:a6:
82:df:6a:cf:fd:47:c3:81:75:fe:46:1e:2c:64:98:
23:33:c3:51:d2:d6:32:ac:cb:18:fe:fe:f4:20:dd:
bf:69:f8:1b:e7:16:07:72:10:ad:ee:16:38:11:69:
bd:5e:0a:1f:2f:3a:38:a2:b0:df:10:cf:38:7c:e8:
b8:de:e6:e5:1c:99:3f:54:a4:8b:19:c4:b0:c6:65:
4b:57:84:6b:3f:41:47:19:5d:e0:1d:b0:e7:05:81:
73:b9:ec:6c:a4:7c:eb:14:99:c9:9f:df:63:cf:f1:
68:5a:72:cb:cc:7f:84:54:40:38:2e:62:52:92:e3:
4d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:59:BA:05:C7:30:EB:52:B9:C2:85:E4:D1:63:38:64:0C:A3:E2:50
X509v3 Authority Key Identifier:
keyid:3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:25:c1:88:c0:c5:72:ed:e7:e6:7c:3f:f1:97:2d:f0:23:51:
68:a4:b3:61:62:2d:2f:d4:16:ce:16:49:a3:75:99:74:22:e3:
52:71:55:fc:bb:18:92:71:f5:9e:f8:05:9d:c5:3e:08:91:f1:
7c:df:0b:c3:3d:7c:4e:86:11:64:24:a5:2f:38:c1:2c:4f:6a:
17:8f:eb:c8:0f:6c:b4:90:85:cb:7b:a8:ae:e5:f9:21:c1:21:
79:a1:9b:8d:54:59:2b:e9:8e:65:af:3d:d3:5b:7f:d1:49:a7:
5d:31:3b:63:e7:29:5c:61:e4:5d:95:89:04:72:f6:e3:4c:f0:
38:4e:a6:79:75:96:2c:64:f3:5f:7e:c9:7b:e5:85:49:b4:4a:
b1:76:01:d8:16:51:4d:45:f4:55:f6:82:55:0f:be:59:29:7a:
a5:cd:52:a2:71:f1:f1:bb:0b:74:6a:df:ef:a5:57:c6:a2:a8:
76:fc:fb:85:5b:4b:62:bf:15:94:0e:d3:e4:f6:47:b8:ff:5b:
36:be:95:37:00:86:6c:c2:bc:2c:de:51:0d:d6:fa:9e:40:b7:
a1:36:fe:27:6e:6e:49:b0:66:a0:5a:85:f4:da:eb:39:0f:51:
fd:47:2c:a8:0a:a9:58:b2:48:4c:92:4d:a6:0b:d1:57:c4:3b:
76:fe:c2:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+fLp3Md7tO2P8L8jrzBVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYWQxOTA5NmIwZWUwODBmZTQzODEwNTAwYjcxOGE5NDdm
ZWQyMjkwHhcNMjUwNjA3MDYwMDI5WhcNMjUwNjA4MDYwMDI5WjAzMTEwLwYDVQQD
Eyg1NDU5YmEwNWM3MzBlYjUyYjljMjg1ZTRkMTYzMzg2NDBjYTNlMjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7OmwupeIZlG0tY5ZpDwQZ3dFihP
QkFUx+pA43+PNoiKbgXUqIugy+00+Z6EFLMbHa7jzPDov1sPaa8jmsq87IiiHFmd
ivS+gVoxPTqcnjDtyyhqsi1ombtDiNOKIeb418zL4deuxBRDp2zGPglGeWQk/3/y
5JeRylsWLHX5R3mA82kjhaaC32rP/UfDgXX+Rh4sZJgjM8NR0tYyrMsY/v70IN2/
afgb5xYHchCt7hY4EWm9XgofLzo4orDfEM84fOi43ublHJk/VKSLGcSwxmVLV4Rr
P0FHGV3gHbDnBYFzuexspHzrFJnJn99jz/FoWnLLzH+EVEA4LmJSkuNN2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRZugXHMOtSucKF5NFjOGQMo+JQMB8GA1UdIwQY
MBaAFD6tGQlrDuCA/kOBBQC3GKlH/tIpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHEwWkNXc080SUQtUTRFRkFMY1lxVWYtMGlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82M2JiNzktOTNiMC00OTlmLTk3OGQt
MTBmZTQ0NzI2OTA4LzEvUHEwWkNXc080SUQtUTRFRkFMY1lxVWYtMGlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy82M2JiNzktOTNiMC00OTlmLTk3OGQtMTBmZTQ0NzI2OTA4
LzEvUHEwWkNXc080SUQtUTRFRkFMY1lxVWYtMGlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcSXBiMDF
cu3n5nw/8Zct8CNRaKSzYWItL9QWzhZJo3WZdCLjUnFV/LsYknH1nvgFncU+CJHx
fN8Lwz18ToYRZCSlLzjBLE9qF4/ryA9stJCFy3uoruX5IcEheaGbjVRZK+mOZa89
01t/0UmnXTE7Y+cpXGHkXZWJBHL240zwOE6meXWWLGTzX37Je+WFSbRKsXYB2BZR
TUX0VfaCVQ++WSl6pc1SonHx8bsLdGrf76VXxqKodvz7hVtLYr8VlA7T5PZHuP9b
Nr6VNwCGbMK8LN5RDdb6nkC3oTb+J25uSbBmoFqF9NrrOQ9R/UcsqAqpWLJITJJN
pgvRV8Q7dv7C4g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:10:03 2025 by rpki-client