Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
File: pqjzQ2_YPor2EPIWgImW6QrKx10.mft (raw, json)
Hash identifier: Y6UGwrYcDE3ID/dLtOytKzyKm8gisSJxu9ygMTLYLAQ=
Subject key identifier: BE:C8:42:C7:96:38:0B:2B:CA:DE:83:2B:E5:A9:C1:23:0F:06:32:9C
Authority key identifier: A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
Certificate issuer: /CN=a6a8f3436fd83e8af610f216808996e90acac75d
Certificate serial: 01974B566D768F50C0B82EFDD01F3529D11C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
Manifest number: 0139
Signing time: Sat 07 Jun 2025 17:00:44 +0000
Manifest this update: Sat 07 Jun 2025 17:00:44 +0000
Manifest next update: Sun 08 Jun 2025 17:00:44 +0000
Files and hashes: 1: ZUpNPohL23tCs0p7RIJ5CSnq_nE.roa (hash: IdApViwu1d+gOIrjS2rsEi8/hl56lvmzjtXUhg292sQ=)
2: pqjzQ2_YPor2EPIWgImW6QrKx10.crl (hash: fo4ChSjonGNodtphqlp6jCZZmyPyMdBJDTukNxjvcQA=)
3: s_VH1RJUenuP8OvNJaH6yu7OYsg.roa (hash: vyeEoRPPlhaqhjAq4VATA3B5K5D/1bqk7r9/7EELRFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:6d:76:8f:50:c0:b8:2e:fd:d0:1f:35:29:d1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a8f3436fd83e8af610f216808996e90acac75d
Validity
Not Before: Jun 7 17:00:44 2025 GMT
Not After : Jun 8 17:00:44 2025 GMT
Subject: CN=bec842c796380b2bcade832be5a9c1230f06329c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:35:93:80:24:a6:7e:18:8a:39:a1:0d:32:6a:
cb:9a:14:ba:87:bc:e7:6f:f9:05:5d:26:bc:42:18:
c8:1a:53:c4:b4:50:02:92:e3:25:70:88:0e:d8:8c:
ae:d8:af:fe:16:fb:9c:68:ca:4e:2e:c4:4a:c7:dc:
2a:a6:ab:86:d3:1c:08:de:86:65:15:23:b7:75:8d:
9e:62:c9:0c:6e:c4:ca:29:98:67:32:04:6e:4e:1b:
bf:fb:78:e1:7e:81:f8:58:4b:f4:5a:bf:6e:a8:16:
7a:38:e8:9b:ae:dd:d4:6c:ec:bd:88:c5:ec:f6:cc:
ca:ab:ef:f0:97:e5:61:20:47:9a:02:28:b3:0e:88:
37:17:8f:cd:87:ed:f3:81:7a:a6:0d:dc:c7:4f:f0:
b0:13:39:5e:d6:84:35:58:87:5e:47:94:23:8f:f8:
04:19:56:4c:9f:e2:b5:fe:96:1f:0b:0d:32:ed:c4:
5a:0e:8c:1a:69:66:e5:f1:12:c2:41:43:79:15:72:
9f:68:a9:8c:da:68:81:5b:4d:d2:66:86:49:43:c3:
84:c4:2d:25:30:72:ee:94:df:84:91:0b:46:24:7f:
28:fb:cd:92:cf:f8:25:d4:a1:1a:9e:f8:36:e0:f3:
ec:15:4f:74:20:d1:31:f2:9d:79:bb:2c:01:a9:61:
ac:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C8:42:C7:96:38:0B:2B:CA:DE:83:2B:E5:A9:C1:23:0F:06:32:9C
X509v3 Authority Key Identifier:
keyid:A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c6:3f:48:6b:f2:54:51:d8:2c:ce:00:ab:da:ee:35:ba:3f:
b2:9f:6a:6f:55:2e:26:85:d2:91:25:5e:39:d7:bf:a0:0d:ac:
24:de:b1:85:6a:9d:e0:aa:45:f2:d7:66:72:51:6b:82:f0:fd:
c7:e8:36:1a:b3:bb:63:be:d8:00:3b:ae:fc:94:da:43:d6:c7:
08:fe:4b:78:fb:42:f1:49:fc:60:e2:fb:be:bc:f4:af:68:ef:
57:42:93:0c:3b:10:23:54:83:0d:bb:fe:f0:ce:a6:e9:7a:68:
e4:7f:97:74:51:a4:cf:13:b6:66:d2:ce:c4:0c:4a:9b:06:5e:
c6:1e:a7:43:6e:8d:35:60:8e:f5:19:80:92:74:f8:6b:4d:70:
64:16:bf:d2:66:26:44:4d:18:2d:88:cb:f9:65:37:69:1f:a2:
ee:4c:b3:b7:a3:2b:44:91:d7:76:fa:b2:52:74:fe:8a:1f:37:
da:fa:1b:eb:3e:79:06:93:bb:4c:27:0b:c8:8b:40:97:3e:aa:
12:7b:0a:cf:8e:35:73:dd:2a:d8:80:56:db:5d:68:0c:0f:e0:
76:b1:ab:d6:c7:5c:90:28:64:42:5e:b3:60:f0:83:bd:67:77:
1c:6c:90:ec:4b:78:81:af:3e:25:0a:31:21:d3:86:de:2a:2b:
48:1a:e0:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLVm12j1DAuC790B81KdEcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YThmMzQzNmZkODNlOGFmNjEwZjIxNjgwODk5NmU5MGFj
YWM3NWQwHhcNMjUwNjA3MTcwMDQ0WhcNMjUwNjA4MTcwMDQ0WjAzMTEwLwYDVQQD
EyhiZWM4NDJjNzk2MzgwYjJiY2FkZTgzMmJlNWE5YzEyMzBmMDYzMjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTWTgCSmfhiKOaENMmrLmhS6h7zn
b/kFXSa8QhjIGlPEtFACkuMlcIgO2Iyu2K/+FvucaMpOLsRKx9wqpquG0xwI3oZl
FSO3dY2eYskMbsTKKZhnMgRuThu/+3jhfoH4WEv0Wr9uqBZ6OOibrt3UbOy9iMXs
9szKq+/wl+VhIEeaAiizDog3F4/Nh+3zgXqmDdzHT/CwEzle1oQ1WIdeR5Qjj/gE
GVZMn+K1/pYfCw0y7cRaDowaaWbl8RLCQUN5FXKfaKmM2miBW03SZoZJQ8OExC0l
MHLulN+EkQtGJH8o+82Sz/gl1KEanvg24PPsFU90INEx8p15uywBqWGsAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7IQseWOAsryt6DK+WpwSMPBjKcMB8GA1UdIwQY
MBaAFKao80Nv2D6K9hDyFoCJlukKysddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHFqelEyX1lQb3IyRVBJV2dJbVc2UXJLeDEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi81YjE2NTctYWJmMC00ZDM2LWE4OTIt
YWJlNWM4ZTJiYWQ2LzEvcHFqelEyX1lQb3IyRVBJV2dJbVc2UXJLeDEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi81YjE2NTctYWJmMC00ZDM2LWE4OTItYWJlNWM4ZTJiYWQ2
LzEvcHFqelEyX1lQb3IyRVBJV2dJbVc2UXJLeDEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK8Y/SGvy
VFHYLM4Aq9ruNbo/sp9qb1UuJoXSkSVeOde/oA2sJN6xhWqd4KpF8tdmclFrgvD9
x+g2GrO7Y77YADuu/JTaQ9bHCP5LePtC8Un8YOL7vrz0r2jvV0KTDDsQI1SDDbv+
8M6m6Xpo5H+XdFGkzxO2ZtLOxAxKmwZexh6nQ26NNWCO9RmAknT4a01wZBa/0mYm
RE0YLYjL+WU3aR+i7kyzt6MrRJHXdvqyUnT+ih832vob6z55BpO7TCcLyItAlz6q
EnsKz441c90q2IBW211oDA/gdrGr1sdckChkQl6zYPCDvWd3HGyQ7Et4ga8+JQox
IdOG3iorSBrgSw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:33:58 2025 by rpki-client