Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
File: PQSDU4c3RT4vV_-1dJnDki6DY20.mft (raw, json)
Hash identifier: Ffa1DLEc37FFTJpKZi9fzX4ulEr1PgFtVSJxS+sNebQ=
Subject key identifier: 81:93:6F:FB:29:74:A8:C3:2E:4A:0E:EA:D1:7B:BF:83:A1:F0:76:03
Authority key identifier: 3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
Certificate issuer: /CN=3d0483538737453e2f57ffb57499c3922e83636d
Certificate serial: 01993424EFFB2B08108D891A384D5CF8E7F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
Manifest number: 15A8
Signing time: Wed 10 Sep 2025 15:00:59 +0000
Manifest this update: Wed 10 Sep 2025 15:00:59 +0000
Manifest next update: Thu 11 Sep 2025 15:00:59 +0000
Files and hashes: 1: 09rZaDf9P6R4diZdTpqbdJFmS5g.roa (hash: nJaLySku8ZYvCwVFCoV24PH4wOMxHH06lLCXG71Fdv0=)
2: 2kjnNcqey0OLGfySAKowHBG5Guo.roa (hash: 9jemYzIQoMUwDIBYN/+zDuFoechTYsBGwQpOaXYxFKk=)
3: 8jdJFfwz0f1bOSecP72_M36iRRI.roa (hash: 82Bf1Auf8nRCamjssfldTKSxot7XSbfVdi0kTqeYaRU=)
4: C4Wnra33s7vzTKpZqkw-dbYY55M.roa (hash: hVOornvwVn2Bg/Fh05dDWBnBXCHA01Bg7itlOVetmo0=)
5: OSXtgZFTRCqapZbj1Rss-9P6qbI.roa (hash: AUmjKUojOqL9JzPQrWExZ3cDw/gVJywbQJ3W19HFEWU=)
6: PQSDU4c3RT4vV_-1dJnDki6DY20.crl (hash: 30wB0yjYL52nDcofo7br8CxMsBxG4NwS4eYqcKg6QUY=)
7: _9T_S-kr42TO8YpZQ1p1cNkCs8k.roa (hash: DCwl+cJRNegCixrl6T1943uL08w3GonOBX/1cFtnPHo=)
8: pV07vwevm-8BJLnT3hJuAHpGkJ4.roa (hash: uUXRNFSfG2j7vXcwLg3l6DuZ/886vt2liizx+IzMA7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:24:ef:fb:2b:08:10:8d:89:1a:38:4d:5c:f8:e7:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0483538737453e2f57ffb57499c3922e83636d
Validity
Not Before: Sep 10 15:00:59 2025 GMT
Not After : Sep 11 15:00:59 2025 GMT
Subject: CN=81936ffb2974a8c32e4a0eead17bbf83a1f07603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a1:e4:b9:59:96:27:61:1d:e2:f6:65:5c:e6:
76:bf:36:33:b5:22:40:93:9f:35:28:18:60:41:78:
84:64:44:48:da:96:da:8b:71:f2:1b:4f:a2:ac:fd:
f9:c5:b0:89:14:97:2e:51:12:ef:00:c9:19:12:5a:
2e:93:3a:08:8b:8d:8b:33:55:93:00:41:b6:19:be:
b4:95:f7:16:d9:a5:d4:e3:ba:a2:36:58:cc:b3:09:
d3:6c:7f:d1:5c:99:43:3a:dd:d6:62:90:ff:1a:1a:
b6:50:12:4a:22:7a:0c:5f:9f:31:98:dc:a5:bf:32:
ab:5c:7d:75:e5:ec:d9:5d:b4:f4:b7:ea:f0:01:e0:
c1:ef:8e:e6:55:32:f6:a5:8a:93:8e:c9:9a:43:ca:
b4:23:92:ba:f4:e5:00:2d:fd:22:be:d3:12:ce:bb:
5f:ea:78:ac:10:75:cb:55:b4:72:16:c0:54:f8:27:
4c:4e:89:18:a0:31:e2:c5:52:b8:74:f1:7e:4a:d2:
29:78:b8:29:5e:c4:58:98:d7:aa:27:38:54:ce:54:
a6:3b:fe:05:89:de:ba:36:fb:3b:3e:74:1c:ba:ae:
2a:5e:9f:37:e4:8d:12:8c:3d:8f:d3:f0:1d:c7:aa:
2b:1f:51:71:fb:bc:1e:50:88:15:14:6d:d6:91:ea:
6d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:93:6F:FB:29:74:A8:C3:2E:4A:0E:EA:D1:7B:BF:83:A1:F0:76:03
X509v3 Authority Key Identifier:
keyid:3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ab:03:8a:83:39:fa:cf:0f:71:69:4c:a3:51:5b:5c:ce:9d:
df:d8:29:93:4c:f2:a3:ef:11:84:e0:bb:94:b9:48:12:e7:7f:
cf:74:1e:6f:cf:50:53:fc:d2:39:18:c5:f8:b5:ee:aa:2f:95:
34:25:07:b5:09:24:3d:29:4c:1f:10:5a:c4:ef:c2:42:bd:59:
79:5f:50:71:00:69:1d:f3:b2:f2:1b:35:ac:96:99:bb:da:55:
5d:be:47:77:20:b0:aa:70:4a:be:ff:7b:c5:ae:d1:d8:94:f2:
84:63:1a:ae:13:63:c2:b1:d7:4f:6a:fe:1f:1b:af:e3:c0:aa:
3b:44:c8:72:be:d1:91:66:9f:9c:00:98:b8:14:69:dd:bb:75:
1d:ca:ae:9c:bb:da:fd:3d:35:26:67:e7:87:98:22:a6:08:21:
95:8a:40:5b:59:ca:83:96:89:a3:be:15:4b:a6:50:91:12:92:
76:7b:06:4b:38:9b:b0:19:32:67:95:02:07:d5:cb:da:e1:ec:
ad:dd:3a:a4:39:ec:f8:1d:86:c7:19:15:3c:e4:f0:c6:f1:84:
dd:7b:55:89:1a:38:9d:32:c2:62:b1:f7:b8:a9:86:bf:7e:c3:
d9:11:0d:19:4b:34:98:95:90:f1:9b:26:96:a0:ee:a2:37:9e:
e5:21:a5:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk0JO/7KwgQjYkaOE1c+Of2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMDQ4MzUzODczNzQ1M2UyZjU3ZmZiNTc0OTljMzkyMmU4
MzYzNmQwHhcNMjUwOTEwMTUwMDU5WhcNMjUwOTExMTUwMDU5WjAzMTEwLwYDVQQD
Eyg4MTkzNmZmYjI5NzRhOGMzMmU0YTBlZWFkMTdiYmY4M2ExZjA3NjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06HkuVmWJ2Ed4vZlXOZ2vzYztSJA
k581KBhgQXiEZERI2pbai3HyG0+irP35xbCJFJcuURLvAMkZEloukzoIi42LM1WT
AEG2Gb60lfcW2aXU47qiNljMswnTbH/RXJlDOt3WYpD/Ghq2UBJKInoMX58xmNyl
vzKrXH115ezZXbT0t+rwAeDB747mVTL2pYqTjsmaQ8q0I5K69OUALf0ivtMSzrtf
6nisEHXLVbRyFsBU+CdMTokYoDHixVK4dPF+StIpeLgpXsRYmNeqJzhUzlSmO/4F
id66Nvs7PnQcuq4qXp835I0SjD2P0/Adx6orH1Fx+7weUIgVFG3WkeptJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGTb/spdKjDLkoO6tF7v4Oh8HYDMB8GA1UdIwQY
MBaAFD0Eg1OHN0U+L1f/tXSZw5Iug2NtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFFTRFU0YzNSVDR2Vl8tMWRKbkRraTZEWTIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9lMTA2YzMtMGIxZi00MDEwLTg2ZjEt
NjVhNDZjOGU0MWU5LzEvUFFTRFU0YzNSVDR2Vl8tMWRKbkRraTZEWTIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9lMTA2YzMtMGIxZi00MDEwLTg2ZjEtNjVhNDZjOGU0MWU5
LzEvUFFTRFU0YzNSVDR2Vl8tMWRKbkRraTZEWTIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM6sDioM5
+s8PcWlMo1FbXM6d39gpk0zyo+8RhOC7lLlIEud/z3Qeb89QU/zSORjF+LXuqi+V
NCUHtQkkPSlMHxBaxO/CQr1ZeV9QcQBpHfOy8hs1rJaZu9pVXb5HdyCwqnBKvv97
xa7R2JTyhGMarhNjwrHXT2r+Hxuv48CqO0TIcr7RkWafnACYuBRp3bt1HcqunLva
/T01Jmfnh5gipgghlYpAW1nKg5aJo74VS6ZQkRKSdnsGSzibsBkyZ5UCB9XL2uHs
rd06pDns+B2GxxkVPOTwxvGE3XtViRo4nTLCYrH3uKmGv37D2RENGUs0mJWQ8Zsm
lqDuojee5SGlLA==
-----END CERTIFICATE-----
Generated at Wed Sep 10 22:40:00 2025 by rpki-client