Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
File: PQSDU4c3RT4vV_-1dJnDki6DY20.mft (raw, json)
Hash identifier: FQ+2KLiAHzx+agnop4VkP4oKm00TQqmI6Q99vE1wwqE=
Subject key identifier: 15:24:22:A6:6A:A6:97:4F:20:57:AD:3F:F8:46:6E:66:E6:12:BA:2E
Authority key identifier: 3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
Certificate issuer: /CN=3d0483538737453e2f57ffb57499c3922e83636d
Certificate serial: 0197488C6D740BC577DA75C2329F7DC33C63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
Manifest number: 14A8
Signing time: Sat 07 Jun 2025 04:00:52 +0000
Manifest this update: Sat 07 Jun 2025 04:00:52 +0000
Manifest next update: Sun 08 Jun 2025 04:00:52 +0000
Files and hashes: 1: 2kjnNcqey0OLGfySAKowHBG5Guo.roa (hash: 9jemYzIQoMUwDIBYN/+zDuFoechTYsBGwQpOaXYxFKk=)
2: 8jdJFfwz0f1bOSecP72_M36iRRI.roa (hash: 82Bf1Auf8nRCamjssfldTKSxot7XSbfVdi0kTqeYaRU=)
3: DYfn4v-d9LSJeRa5vvT-XfYyk70.roa (hash: 8mWNIGwTXO4I48gUsi1UHbc5uoPvj6DJfzAi/IGU5v8=)
4: PQSDU4c3RT4vV_-1dJnDki6DY20.crl (hash: sFfN26H6VBNjKfAv/RjsF5UvBzhM8IpwrVZu7DMN/rY=)
5: lSP4K3mfoxcgowofKtKedL6Fcrk.roa (hash: ejPoRQTQJw87tbzyuSoPJnPZJPT0D2gWvsWUm5z3CsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:6d:74:0b:c5:77:da:75:c2:32:9f:7d:c3:3c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0483538737453e2f57ffb57499c3922e83636d
Validity
Not Before: Jun 7 04:00:52 2025 GMT
Not After : Jun 8 04:00:52 2025 GMT
Subject: CN=152422a66aa6974f2057ad3ff8466e66e612ba2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8a:71:8b:ce:a1:b8:61:a6:f6:b8:bf:a2:f6:
c6:66:8f:b7:cf:60:42:28:c6:6c:cc:d0:31:99:99:
1e:e9:03:26:5e:ac:de:c4:df:f0:11:ed:3c:10:75:
4c:e7:83:ce:b9:e5:d0:56:4e:e7:21:93:8d:4c:8e:
db:c6:25:bb:cf:bf:d4:65:26:9e:0c:ab:37:b7:ed:
84:e8:fa:d0:98:e0:1b:a7:31:1e:ee:b0:42:1f:c9:
a9:b0:87:a6:e9:9c:da:cf:ca:3f:9e:3a:c7:ec:f0:
48:ff:72:f5:b1:f0:bf:7f:fd:db:b8:c0:0a:71:14:
cf:f7:d3:75:05:49:31:c3:9d:ec:83:15:06:e8:43:
eb:e3:70:36:8f:85:65:22:5c:89:56:e3:96:f5:1e:
06:99:b1:31:0b:9f:df:14:9e:c3:20:bb:58:01:b2:
22:31:81:61:fb:3e:f1:71:b8:a4:02:23:ab:b9:f4:
9a:2b:a9:c1:bb:c6:58:97:81:27:25:2b:c0:88:19:
81:6a:1d:88:a6:b5:5a:1a:86:6e:93:02:d0:9b:20:
a4:0c:0d:61:89:26:9f:89:82:8e:24:0f:c2:26:46:
20:8f:af:d0:f9:ee:d3:41:1e:3b:2c:a1:76:e3:3f:
81:f4:f6:99:28:8f:3a:66:b6:84:eb:19:03:a1:dd:
60:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:24:22:A6:6A:A6:97:4F:20:57:AD:3F:F8:46:6E:66:E6:12:BA:2E
X509v3 Authority Key Identifier:
keyid:3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:4a:ea:e1:30:c2:50:74:3e:a4:19:d5:3a:ba:8a:81:14:83:
52:fb:ac:df:ea:29:5b:d0:aa:2c:cc:42:8b:46:81:87:f7:03:
5f:dc:a9:45:3a:b0:55:c9:23:e6:82:9b:e9:87:43:dd:a7:fc:
4d:0a:ef:56:c5:37:6f:d0:8f:49:cd:98:d4:81:75:7f:9f:df:
74:5f:1a:21:17:5a:df:cf:f6:15:7d:40:34:c0:d3:81:f2:2c:
e3:7b:cf:68:82:66:c6:1e:8f:47:b7:dc:a6:fa:1a:95:c9:a1:
26:81:c5:7e:3e:f3:b0:90:71:2e:23:07:fb:66:a4:16:31:2e:
4c:22:f0:43:ce:77:19:cb:e4:dd:b5:01:0b:b3:d1:2f:4c:f3:
70:b5:6b:77:26:11:00:06:7f:ee:13:e1:2a:ba:e6:7e:2c:c1:
06:3a:4f:d9:90:36:c2:c6:49:d8:35:a0:5a:14:d7:92:8f:01:
aa:78:66:71:9c:49:74:9e:67:4d:08:c8:94:dc:55:fa:37:e9:
5b:a8:58:47:d1:cd:26:e0:dc:b1:e8:93:61:c0:df:81:58:c1:
1c:79:19:fd:d1:64:af:f3:86:1d:80:ff:13:0f:39:16:82:ee:
ed:13:b4:1f:53:95:a7:9f:42:d1:74:05:70:b9:b1:2f:f2:a2:
d3:72:86:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjG10C8V32nXCMp99wzxjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMDQ4MzUzODczNzQ1M2UyZjU3ZmZiNTc0OTljMzkyMmU4
MzYzNmQwHhcNMjUwNjA3MDQwMDUyWhcNMjUwNjA4MDQwMDUyWjAzMTEwLwYDVQQD
EygxNTI0MjJhNjZhYTY5NzRmMjA1N2FkM2ZmODQ2NmU2NmU2MTJiYTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4pxi86huGGm9ri/ovbGZo+3z2BC
KMZszNAxmZke6QMmXqzexN/wEe08EHVM54POueXQVk7nIZONTI7bxiW7z7/UZSae
DKs3t+2E6PrQmOAbpzEe7rBCH8mpsIem6Zzaz8o/njrH7PBI/3L1sfC/f/3buMAK
cRTP99N1BUkxw53sgxUG6EPr43A2j4VlIlyJVuOW9R4GmbExC5/fFJ7DILtYAbIi
MYFh+z7xcbikAiOrufSaK6nBu8ZYl4EnJSvAiBmBah2IprVaGoZukwLQmyCkDA1h
iSafiYKOJA/CJkYgj6/Q+e7TQR47LKF24z+B9PaZKI86ZraE6xkDod1gqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUkIqZqppdPIFetP/hGbmbmErouMB8GA1UdIwQY
MBaAFD0Eg1OHN0U+L1f/tXSZw5Iug2NtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFFTRFU0YzNSVDR2Vl8tMWRKbkRraTZEWTIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9lMTA2YzMtMGIxZi00MDEwLTg2ZjEt
NjVhNDZjOGU0MWU5LzEvUFFTRFU0YzNSVDR2Vl8tMWRKbkRraTZEWTIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9lMTA2YzMtMGIxZi00MDEwLTg2ZjEtNjVhNDZjOGU0MWU5
LzEvUFFTRFU0YzNSVDR2Vl8tMWRKbkRraTZEWTIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAkrq4TDC
UHQ+pBnVOrqKgRSDUvus3+opW9CqLMxCi0aBh/cDX9ypRTqwVckj5oKb6YdD3af8
TQrvVsU3b9CPSc2Y1IF1f5/fdF8aIRda38/2FX1ANMDTgfIs43vPaIJmxh6PR7fc
pvoalcmhJoHFfj7zsJBxLiMH+2akFjEuTCLwQ853Gcvk3bUBC7PRL0zzcLVrdyYR
AAZ/7hPhKrrmfizBBjpP2ZA2wsZJ2DWgWhTXko8BqnhmcZxJdJ5nTQjIlNxV+jfp
W6hYR9HNJuDcseiTYcDfgVjBHHkZ/dFkr/OGHYD/Ew85FoLu7RO0H1OVp59C0XQF
cLmxL/Ki03KGAw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:12:54 2025 by rpki-client