Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.mft
File: pQzTuftkZJFa0NN2CTTAGCiJ8fs.mft (raw, json)
Hash identifier: jMI/HyzqklBipkTEocqsqyVS8QTHxNNuoSNRYljsImw=
Subject key identifier: D4:B6:56:86:4B:FD:25:EA:E5:C4:99:D6:CD:EA:4A:C4:03:9D:0A:49
Authority key identifier: A5:0C:D3:B9:FB:64:64:91:5A:D0:D3:76:09:34:C0:18:28:89:F1:FB
Certificate issuer: /CN=a50cd3b9fb6464915ad0d3760934c0182889f1fb
Certificate serial: 0197493133FED8204ADF9484E1338C3BDDE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQzTuftkZJFa0NN2CTTAGCiJ8fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.mft
Manifest number: 0A0F
Signing time: Sat 07 Jun 2025 07:00:50 +0000
Manifest this update: Sat 07 Jun 2025 07:00:50 +0000
Manifest next update: Sun 08 Jun 2025 07:00:50 +0000
Files and hashes: 1: LPRtA19ISdoMAcOg5dTdVh6L9Jk.roa (hash: yfplS3KyTgY8se7AVlwzcVLsAsein115ckLeaHyCF6w=)
2: pQzTuftkZJFa0NN2CTTAGCiJ8fs.crl (hash: C+nfDUY7YDBt1VCzCwWTltW+jnxbhcC79t9rcqCX3B4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQzTuftkZJFa0NN2CTTAGCiJ8fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:33:fe:d8:20:4a:df:94:84:e1:33:8c:3b:dd:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a50cd3b9fb6464915ad0d3760934c0182889f1fb
Validity
Not Before: Jun 7 07:00:50 2025 GMT
Not After : Jun 8 07:00:50 2025 GMT
Subject: CN=d4b656864bfd25eae5c499d6cdea4ac4039d0a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8e:9f:a6:88:8c:5d:f1:d2:f1:cc:ee:80:29:
37:75:3c:cf:ed:be:90:64:a6:27:b1:8b:a4:3b:da:
a3:14:7b:91:85:03:41:d9:2e:c3:f3:4e:14:15:f1:
8a:69:54:12:b9:47:e4:90:cc:96:8a:03:53:19:99:
9a:e9:0f:8d:4b:b4:1c:9d:f2:25:bd:2d:8b:25:41:
db:56:a1:33:d8:fa:95:eb:87:67:d5:91:c7:b9:38:
a3:31:e9:94:87:af:75:b8:db:59:d7:98:06:c4:2e:
cd:39:dc:bd:b4:a4:93:8c:c2:94:a4:ec:5b:18:e4:
4b:28:b6:9f:5a:1f:dc:95:7b:f7:c4:fd:5f:e2:2d:
fe:8f:b4:66:d1:82:2e:c5:f6:4a:09:78:39:8e:66:
e0:9f:43:8a:1a:e8:ef:81:47:76:4a:0b:3b:e1:61:
a2:6c:01:d8:84:24:6e:f5:72:f8:94:f9:83:6c:8b:
63:e0:99:0c:de:5e:40:c4:94:54:0a:29:38:02:ae:
db:71:7f:6f:79:b2:90:71:ef:86:4e:2b:63:04:8e:
38:d8:18:49:8d:ea:28:68:26:fd:06:ff:8b:e8:46:
1e:ea:43:c5:a0:34:8d:81:0c:b6:56:23:d4:5a:c4:
0b:34:93:0b:86:77:ff:45:40:08:92:d1:89:a6:5b:
14:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B6:56:86:4B:FD:25:EA:E5:C4:99:D6:CD:EA:4A:C4:03:9D:0A:49
X509v3 Authority Key Identifier:
keyid:A5:0C:D3:B9:FB:64:64:91:5A:D0:D3:76:09:34:C0:18:28:89:F1:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQzTuftkZJFa0NN2CTTAGCiJ8fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c0:53:ea:a9:a4:ee:95:19:d2:2c:fe:c8:ac:39:38:a4:7d:
3f:f8:33:e2:f1:b4:f3:d9:0e:8c:b2:3d:0e:b1:a0:de:67:b4:
ab:d0:94:6b:69:72:17:12:95:3b:a2:d5:fc:14:cf:a1:e1:6f:
06:13:c3:37:11:10:3e:cc:17:4c:33:f8:b7:66:ef:08:e4:cf:
23:2a:9b:97:94:21:c6:d5:0d:ae:f2:6a:07:ad:6a:d6:b6:e5:
9e:25:36:ce:8e:a0:d4:db:46:cb:85:f0:0e:31:eb:3e:8f:2e:
01:e9:b0:6d:75:7b:3e:f0:e1:9e:16:dd:74:bb:cb:28:b9:0c:
8e:72:8c:d2:fb:64:d5:c2:99:87:c8:8e:d8:88:d7:01:35:c4:
35:8e:08:b5:a4:16:bd:1c:4f:f7:2d:35:13:55:84:e9:46:df:
16:3c:d5:ed:50:37:ee:59:1a:af:4f:6b:0c:9a:c7:49:a9:e8:
e6:61:57:ef:41:e6:2b:31:79:e9:48:de:4a:6a:3d:1c:b5:1e:
f1:f6:89:dc:d9:fd:b7:bc:a1:c8:ee:f4:67:14:d3:cb:3a:fd:
a6:ce:18:04:04:ad:b6:e1:c2:78:c8:bd:b9:69:d3:2c:6e:22:
4d:c0:de:ed:3e:f6:3e:dd:e5:2b:05:7d:14:cf:8c:2f:7a:39:
80:98:fd:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMTP+2CBK35SE4TOMO93gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MGNkM2I5ZmI2NDY0OTE1YWQwZDM3NjA5MzRjMDE4Mjg4
OWYxZmIwHhcNMjUwNjA3MDcwMDUwWhcNMjUwNjA4MDcwMDUwWjAzMTEwLwYDVQQD
EyhkNGI2NTY4NjRiZmQyNWVhZTVjNDk5ZDZjZGVhNGFjNDAzOWQwYTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnI6fpoiMXfHS8czugCk3dTzP7b6Q
ZKYnsYukO9qjFHuRhQNB2S7D804UFfGKaVQSuUfkkMyWigNTGZma6Q+NS7QcnfIl
vS2LJUHbVqEz2PqV64dn1ZHHuTijMemUh691uNtZ15gGxC7NOdy9tKSTjMKUpOxb
GORLKLafWh/clXv3xP1f4i3+j7Rm0YIuxfZKCXg5jmbgn0OKGujvgUd2Sgs74WGi
bAHYhCRu9XL4lPmDbItj4JkM3l5AxJRUCik4Aq7bcX9vebKQce+GTitjBI442BhJ
jeooaCb9Bv+L6EYe6kPFoDSNgQy2ViPUWsQLNJMLhnf/RUAIktGJplsUZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNS2VoZL/SXq5cSZ1s3qSsQDnQpJMB8GA1UdIwQY
MBaAFKUM07n7ZGSRWtDTdgk0wBgoifH7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFF6VHVmdGtaSkZhME5OMkNUVEFHQ2lKOGZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8zYzkyZmEtYzNkNS00YTM2LTllMTct
MzdlOWU4NmE5Mjc5LzEvcFF6VHVmdGtaSkZhME5OMkNUVEFHQ2lKOGZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8zYzkyZmEtYzNkNS00YTM2LTllMTctMzdlOWU4NmE5Mjc5
LzEvcFF6VHVmdGtaSkZhME5OMkNUVEFHQ2lKOGZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYcBT6qmk
7pUZ0iz+yKw5OKR9P/gz4vG089kOjLI9DrGg3me0q9CUa2lyFxKVO6LV/BTPoeFv
BhPDNxEQPswXTDP4t2bvCOTPIyqbl5QhxtUNrvJqB61q1rblniU2zo6g1NtGy4Xw
DjHrPo8uAemwbXV7PvDhnhbddLvLKLkMjnKM0vtk1cKZh8iO2IjXATXENY4ItaQW
vRxP9y01E1WE6UbfFjzV7VA37lkar09rDJrHSano5mFX70HmKzF56UjeSmo9HLUe
8faJ3Nn9t7yhyO70ZxTTyzr9ps4YBASttuHCeMi9uWnTLG4iTcDe7T72Pt3lKwV9
FM+ML3o5gJj9/A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:05:53 2025 by rpki-client