Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
File: pqjzQ2_YPor2EPIWgImW6QrKx10.mft (raw, json)
Hash identifier: Rql0Qz/+4+NRo4TabqpR1ao1KXhlGRR44kEABNfvaeo=
Subject key identifier: 0A:4A:71:EF:15:E4:86:40:D7:AB:66:17:C6:A3:40:89:2F:EC:7F:64
Authority key identifier: A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
Certificate issuer: /CN=a6a8f3436fd83e8af610f216808996e90acac75d
Certificate serial: 01992E234F5389995B30B68AD80630893E26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
Manifest number: 0233
Signing time: Tue 09 Sep 2025 11:01:29 +0000
Manifest this update: Tue 09 Sep 2025 11:01:29 +0000
Manifest next update: Wed 10 Sep 2025 11:01:29 +0000
Files and hashes: 1: ZUpNPohL23tCs0p7RIJ5CSnq_nE.roa (hash: IdApViwu1d+gOIrjS2rsEi8/hl56lvmzjtXUhg292sQ=)
2: pqjzQ2_YPor2EPIWgImW6QrKx10.crl (hash: +SetHyfEsC5AtFZBf/LpkrJoVF+12yYht+u8UfgheYs=)
3: s_VH1RJUenuP8OvNJaH6yu7OYsg.roa (hash: vyeEoRPPlhaqhjAq4VATA3B5K5D/1bqk7r9/7EELRFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 11:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:23:4f:53:89:99:5b:30:b6:8a:d8:06:30:89:3e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a8f3436fd83e8af610f216808996e90acac75d
Validity
Not Before: Sep 9 11:01:29 2025 GMT
Not After : Sep 10 11:01:29 2025 GMT
Subject: CN=0a4a71ef15e48640d7ab6617c6a340892fec7f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cd:45:d8:6a:db:a6:f3:f0:3a:f7:7b:b6:f2:
e2:7e:78:ba:1b:bc:50:91:0b:e4:53:cd:ac:b3:f4:
c4:eb:20:1e:f8:a8:4d:b3:78:97:93:14:45:1f:61:
2c:0e:98:53:15:79:31:e3:fb:45:ed:b1:62:cc:95:
f8:81:cb:4e:8f:4b:90:4e:2e:4d:92:c1:b3:3f:7a:
88:01:d2:37:fb:24:ad:51:b9:82:a4:2e:3a:b8:39:
a6:4c:39:f0:ea:ef:90:78:7f:f5:a3:ba:47:77:8d:
04:72:e7:60:47:50:7a:b0:7d:00:e6:11:7c:c0:fc:
01:71:93:31:61:ea:62:19:57:9e:56:eb:25:fa:b7:
ed:d3:4d:ca:00:56:36:4d:a0:96:52:03:54:2b:54:
1b:8f:8f:de:32:3a:b5:2a:21:45:f4:2e:54:8c:15:
cd:02:cc:1a:06:6e:ec:66:0f:3c:2a:69:d9:86:8a:
61:15:57:a8:47:c6:73:db:b8:78:92:e5:0a:9f:b1:
7c:de:fa:34:d2:f6:2b:25:9b:67:fd:ce:48:ce:87:
34:00:76:46:68:f3:70:82:22:de:b8:e6:bc:da:84:
1f:52:73:53:b1:b7:0f:ed:87:be:4c:a6:5d:6b:21:
42:25:91:2d:af:bc:11:8b:0f:a0:41:df:8d:f4:77:
51:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4A:71:EF:15:E4:86:40:D7:AB:66:17:C6:A3:40:89:2F:EC:7F:64
X509v3 Authority Key Identifier:
keyid:A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:7f:ea:df:f5:d6:0d:e2:fc:8c:a4:23:e8:26:77:a1:c6:dd:
3c:42:b0:94:1a:22:b2:fc:f6:bc:c6:19:68:e9:a4:9a:37:ee:
7d:34:03:e3:37:e5:38:6c:4d:1a:4b:c8:67:41:f7:42:90:76:
57:0c:f2:62:d2:d8:45:25:fe:a1:7c:35:47:e6:e8:df:7b:b4:
dc:65:5a:2b:12:56:a2:6e:5c:7d:5b:a0:e6:69:b9:4f:ff:82:
fd:42:1e:31:4a:43:67:d6:36:df:4c:fd:a2:c0:90:6d:73:ee:
ee:b2:a2:ac:bd:ce:9f:e3:50:ce:e7:5c:ae:72:26:0e:c7:24:
15:57:1b:ac:79:e0:d3:45:72:d9:87:f5:4c:04:7f:4a:14:b6:
c9:b3:db:f6:6c:d3:84:18:36:92:79:f7:84:cd:88:a2:d0:9e:
f7:2c:40:cf:fd:a2:20:29:45:f8:2c:44:ca:a8:6c:b5:4c:e4:
bd:63:b6:b9:74:ff:e3:96:d6:ae:87:4c:47:b1:43:5c:a4:b9:
90:7e:f0:0d:d6:de:6e:69:ed:84:92:eb:67:24:b3:d5:8f:82:
dd:09:18:54:bc:26:ae:d0:75:ee:5d:e0:92:fd:71:6a:cb:c9:
75:3e:d0:8c:9d:2b:4b:89:d3:e8:00:a5:b0:2e:fa:35:96:09:
c9:26:a9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 20:04:33 2025 by rpki-client