Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft
File: PqGMkbK-KKB0uaOHSpC0RgE84b4.mft (raw, json)
Hash identifier: Yj5ZBg/F3fEmcRv2lGnlPNoMileoLO+5E5C4W+9VQlk=
Subject key identifier: 76:90:DF:02:0E:FA:16:0B:65:4F:66:71:2E:88:0C:CC:C9:C3:D2:EE
Authority key identifier: 3E:A1:8C:91:B2:BE:28:A0:74:B9:A3:87:4A:90:B4:46:01:3C:E1:BE
Certificate issuer: /CN=3ea18c91b2be28a074b9a3874a90b446013ce1be
Certificate serial: 01974A0CCB73E79A234F6973D449F5B7914C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqGMkbK-KKB0uaOHSpC0RgE84b4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft
Manifest number: 0312
Signing time: Sat 07 Jun 2025 11:00:41 +0000
Manifest this update: Sat 07 Jun 2025 11:00:41 +0000
Manifest next update: Sun 08 Jun 2025 11:00:41 +0000
Files and hashes: 1: PqGMkbK-KKB0uaOHSpC0RgE84b4.crl (hash: McFf/ydm681UatoqFMNzSwteqHDvuoQ7emmXNVvkOKo=)
2: w78-PkWjkmBWzXnYfu0GZ4j6LVI.roa (hash: BzBqUt4k6YCYPQ6Nn7PdPu+ICTIm/5kh0/Z+KfmEAhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqGMkbK-KKB0uaOHSpC0RgE84b4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:cb:73:e7:9a:23:4f:69:73:d4:49:f5:b7:91:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea18c91b2be28a074b9a3874a90b446013ce1be
Validity
Not Before: Jun 7 11:00:41 2025 GMT
Not After : Jun 8 11:00:41 2025 GMT
Subject: CN=7690df020efa160b654f66712e880cccc9c3d2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7a:24:62:c4:12:79:6d:19:d5:15:2d:f5:1b:
c8:13:9d:ec:ea:f4:0e:ae:20:7e:71:8d:51:f1:e8:
bf:c6:35:c6:06:99:64:28:f5:0e:3a:d1:ae:65:cb:
72:f7:c5:31:73:ee:b7:d5:60:0a:59:74:06:a9:08:
3b:9b:6f:93:4a:db:42:d5:e4:a4:0c:e9:eb:0a:73:
e5:fc:69:69:d5:32:35:da:27:f3:30:48:76:d6:c7:
10:4b:f4:33:67:11:d2:ba:14:61:48:5e:20:43:c4:
65:df:41:4d:58:4a:f9:07:b0:29:20:42:17:a6:9f:
81:28:cd:1e:49:fb:ef:4b:5b:d7:7b:fa:a4:d4:6f:
5f:dd:1a:a6:22:f1:25:e9:dd:f4:3e:7d:fe:c0:e5:
16:33:62:b3:0c:3b:ba:53:43:9b:71:d3:b5:a7:80:
b5:d7:fe:29:06:23:eb:09:a2:17:b1:4c:90:be:8a:
01:c2:df:40:3f:74:9a:bc:b1:e6:c9:a1:8f:c5:1a:
c2:97:fa:e3:5e:2a:2e:fe:17:6a:52:de:a5:cf:40:
40:fa:13:85:05:2a:60:a8:a8:cb:67:85:d5:6e:3a:
00:d6:57:b7:9d:f9:3a:de:9e:55:2c:ed:a9:12:4e:
dd:ad:91:7c:9c:65:bc:4d:6b:51:c1:26:8f:33:2b:
18:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:90:DF:02:0E:FA:16:0B:65:4F:66:71:2E:88:0C:CC:C9:C3:D2:EE
X509v3 Authority Key Identifier:
keyid:3E:A1:8C:91:B2:BE:28:A0:74:B9:A3:87:4A:90:B4:46:01:3C:E1:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqGMkbK-KKB0uaOHSpC0RgE84b4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:cd:17:4e:f0:aa:d9:b8:37:18:8b:f9:26:d6:3f:b1:bb:8f:
93:63:2a:0d:af:15:3b:fd:90:dc:7a:54:57:9a:a0:16:0e:88:
c8:07:a9:a3:90:cb:57:74:b0:ec:98:43:f2:f5:08:f8:71:d9:
c9:d4:15:72:c2:56:c5:1a:cb:20:79:6f:11:6b:96:7d:5d:60:
08:8c:81:7b:89:b9:45:10:2c:01:2d:26:b6:81:85:35:ce:63:
8a:0c:9d:04:73:9b:3d:37:00:96:2f:e7:80:55:36:30:03:63:
9e:6e:e4:eb:5a:3f:92:ac:25:db:75:34:8a:e0:3d:c1:1b:73:
17:61:b7:e4:64:a7:ca:28:07:ae:7b:52:4c:58:81:90:46:59:
a0:46:cd:4d:47:0c:97:5c:b2:d2:cb:18:5a:d5:b9:78:d9:33:
cb:79:f4:bc:8c:4e:ce:c6:fc:61:e6:c2:66:94:72:e3:c3:d6:
18:b6:4a:9e:d1:04:7e:19:3f:ba:05:f2:9b:f8:22:0b:86:57:
0b:cb:6a:22:a8:81:5e:ba:e9:d1:e0:d0:22:8c:7e:8f:a2:d8:
bd:a4:2f:eb:21:26:1f:e4:a1:15:c9:99:a8:2d:05:8b:c8:cb:
c3:79:3e:92:3f:94:50:4e:bc:ef:f4:48:53:e4:39:57:ab:5b:
bd:62:66:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKDMtz55ojT2lz1En1t5FMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYTE4YzkxYjJiZTI4YTA3NGI5YTM4NzRhOTBiNDQ2MDEz
Y2UxYmUwHhcNMjUwNjA3MTEwMDQxWhcNMjUwNjA4MTEwMDQxWjAzMTEwLwYDVQQD
Eyg3NjkwZGYwMjBlZmExNjBiNjU0ZjY2NzEyZTg4MGNjY2M5YzNkMmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XokYsQSeW0Z1RUt9RvIE53s6vQO
riB+cY1R8ei/xjXGBplkKPUOOtGuZcty98Uxc+631WAKWXQGqQg7m2+TSttC1eSk
DOnrCnPl/Glp1TI12ifzMEh21scQS/QzZxHSuhRhSF4gQ8Rl30FNWEr5B7ApIEIX
pp+BKM0eSfvvS1vXe/qk1G9f3RqmIvEl6d30Pn3+wOUWM2KzDDu6U0ObcdO1p4C1
1/4pBiPrCaIXsUyQvooBwt9AP3SavLHmyaGPxRrCl/rjXiou/hdqUt6lz0BA+hOF
BSpgqKjLZ4XVbjoA1le3nfk63p5VLO2pEk7drZF8nGW8TWtRwSaPMysYLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHaQ3wIO+hYLZU9mcS6IDMzJw9LuMB8GA1UdIwQY
MBaAFD6hjJGyviigdLmjh0qQtEYBPOG+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHFHTWtiSy1LS0IwdWFPSFNwQzBSZ0U4NGI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9jYTM2NDktYzI5Zi00ZTkwLTg4MjIt
YmM2NWVmNmIyN2I2LzEvUHFHTWtiSy1LS0IwdWFPSFNwQzBSZ0U4NGI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9jYTM2NDktYzI5Zi00ZTkwLTg4MjItYmM2NWVmNmIyN2I2
LzEvUHFHTWtiSy1LS0IwdWFPSFNwQzBSZ0U4NGI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAac0XTvCq
2bg3GIv5JtY/sbuPk2MqDa8VO/2Q3HpUV5qgFg6IyAepo5DLV3Sw7JhD8vUI+HHZ
ydQVcsJWxRrLIHlvEWuWfV1gCIyBe4m5RRAsAS0mtoGFNc5jigydBHObPTcAli/n
gFU2MANjnm7k61o/kqwl23U0iuA9wRtzF2G35GSnyigHrntSTFiBkEZZoEbNTUcM
l1yy0ssYWtW5eNkzy3n0vIxOzsb8YebCZpRy48PWGLZKntEEfhk/ugXym/giC4ZX
C8tqIqiBXrrp0eDQIox+j6LYvaQv6yEmH+ShFcmZqC0Fi8jLw3k+kj+UUE687/RI
U+Q5V6tbvWJmJw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:53:36 2025 by rpki-client