Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft
File: PqlK-DEYyT_-izYnXtU0mU1not0.mft (raw, json)
Hash identifier: oirBxxCDH7u8mncxRRmXJd1V1pY3w8FpyvEH9ILN6ng=
Subject key identifier: BA:0E:C4:6D:8B:56:A0:25:D7:C7:2B:0E:15:46:B3:4F:1E:9E:4F:98
Authority key identifier: 3E:A9:4A:F8:31:18:C9:3F:FE:8B:36:27:5E:D5:34:99:4D:67:A2:DD
Certificate issuer: /CN=3ea94af83118c93ffe8b36275ed534994d67a2dd
Certificate serial: 0197C914E2198931D292B40040DDB03E673B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqlK-DEYyT_-izYnXtU0mU1not0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft
Manifest number: 11AF
Signing time: Wed 02 Jul 2025 03:01:18 +0000
Manifest this update: Wed 02 Jul 2025 03:01:18 +0000
Manifest next update: Thu 03 Jul 2025 03:01:18 +0000
Files and hashes: 1: PqlK-DEYyT_-izYnXtU0mU1not0.crl (hash: TG5tZTJxOMr2pOd6gTcFR4SSnFUfZAMQ8t9E0DHxN7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqlK-DEYyT_-izYnXtU0mU1not0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 03:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:14:e2:19:89:31:d2:92:b4:00:40:dd:b0:3e:67:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea94af83118c93ffe8b36275ed534994d67a2dd
Validity
Not Before: Jul 2 03:01:18 2025 GMT
Not After : Jul 3 03:01:18 2025 GMT
Subject: CN=ba0ec46d8b56a025d7c72b0e1546b34f1e9e4f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0d:91:cb:1d:19:97:35:a8:04:f9:ef:d7:03:
b7:25:86:15:5e:e2:e7:c2:86:41:b3:95:14:90:a9:
b8:10:a6:1a:8d:83:66:00:78:32:7a:f7:12:6a:9b:
31:4a:69:c8:35:8c:1e:90:21:5e:49:7c:ea:da:d5:
77:f7:59:f0:fa:b3:ca:c2:a4:9a:f3:e2:98:7e:5e:
7d:ff:eb:f9:59:00:8b:b0:b7:56:44:98:37:ae:55:
b8:12:51:8f:0b:cf:bf:56:c1:3c:23:0d:5f:f3:2c:
9a:fd:7b:63:a2:a3:4d:96:c0:2e:c7:d9:0b:ff:3b:
c1:8b:a0:c4:56:4d:d7:3a:0a:9e:97:87:c0:1e:5a:
fa:93:d4:19:ca:e9:d1:e8:6e:98:98:99:1f:2b:6c:
4d:b5:9c:f4:5b:61:9a:64:9c:a8:46:bc:85:9a:89:
7d:e1:4a:dd:94:10:67:b3:46:b7:82:1f:1b:41:4c:
d3:f9:6e:b8:f7:dd:b1:ef:d6:7b:fd:53:7a:be:09:
0b:de:55:c9:8c:5e:2d:79:5c:dc:80:c6:12:9b:81:
ba:05:bf:4a:a5:ea:65:29:1e:f4:7d:23:15:f9:2b:
3c:9e:eb:71:32:e9:d6:b6:ed:86:62:78:62:d2:df:
f7:63:bd:13:8f:38:f9:a3:98:f5:05:80:34:b2:44:
22:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0E:C4:6D:8B:56:A0:25:D7:C7:2B:0E:15:46:B3:4F:1E:9E:4F:98
X509v3 Authority Key Identifier:
keyid:3E:A9:4A:F8:31:18:C9:3F:FE:8B:36:27:5E:D5:34:99:4D:67:A2:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqlK-DEYyT_-izYnXtU0mU1not0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:38:6b:16:db:3e:62:14:11:97:cd:fb:c2:c0:c5:8e:af:b8:
72:ab:2b:20:28:21:63:27:2a:05:18:05:fb:8d:e4:e5:66:3a:
59:51:a4:43:22:cd:7d:7b:fa:d4:33:3d:7e:13:90:32:58:4b:
c0:7e:91:8d:19:31:ae:eb:e3:99:ac:08:cf:5e:6b:f6:70:83:
a7:ce:e0:3f:94:1f:d1:29:a3:ee:67:e0:ce:5e:34:a4:b6:19:
61:b0:a9:c5:6c:b2:e6:9c:92:49:f1:e2:9a:21:6f:cc:08:a6:
4c:c7:a6:d2:45:d1:ea:0d:18:00:c9:9d:5d:ec:32:7d:c4:0d:
eb:40:d3:13:67:2b:83:e7:2e:06:f7:94:dc:5d:be:d0:c5:ba:
15:23:c9:6e:08:ac:7e:49:63:76:c5:43:24:88:3c:1f:46:d4:
43:0e:bf:4f:51:81:ad:8a:52:58:1f:1d:af:9b:9c:8a:7c:74:
31:db:56:da:c3:a4:a4:34:f7:b2:80:b2:9e:b0:7e:37:77:cd:
f9:93:90:78:3e:34:84:d5:ef:e0:d2:bf:3a:77:c8:a1:13:c6:
a2:1f:9a:a8:c1:ef:a3:7b:a2:bd:fa:8e:d4:ae:af:9c:94:5d:
93:83:bb:23:29:a5:c2:d1:7d:05:85:20:75:56:af:5f:71:af:
c3:dc:36:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfJFOIZiTHSkrQAQN2wPmc7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYTk0YWY4MzExOGM5M2ZmZThiMzYyNzVlZDUzNDk5NGQ2
N2EyZGQwHhcNMjUwNzAyMDMwMTE4WhcNMjUwNzAzMDMwMTE4WjAzMTEwLwYDVQQD
EyhiYTBlYzQ2ZDhiNTZhMDI1ZDdjNzJiMGUxNTQ2YjM0ZjFlOWU0Zjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlA2Ryx0ZlzWoBPnv1wO3JYYVXuLn
woZBs5UUkKm4EKYajYNmAHgyevcSapsxSmnINYwekCFeSXzq2tV391nw+rPKwqSa
8+KYfl59/+v5WQCLsLdWRJg3rlW4ElGPC8+/VsE8Iw1f8yya/XtjoqNNlsAux9kL
/zvBi6DEVk3XOgqel4fAHlr6k9QZyunR6G6YmJkfK2xNtZz0W2GaZJyoRryFmol9
4UrdlBBns0a3gh8bQUzT+W64992x79Z7/VN6vgkL3lXJjF4teVzcgMYSm4G6Bb9K
peplKR70fSMV+Ss8nutxMunWtu2GYnhi0t/3Y70Tjzj5o5j1BYA0skQidwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLoOxG2LVqAl18crDhVGs08enk+YMB8GA1UdIwQY
MBaAFD6pSvgxGMk//os2J17VNJlNZ6LdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHFsSy1ERVl5VF8taXpZblh0VTBtVTFub3QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mZjQxOTEtYjlmMy00MzgyLWJlZTEt
Mjk1N2FmYjE0Nzk0LzEvUHFsSy1ERVl5VF8taXpZblh0VTBtVTFub3QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9mZjQxOTEtYjlmMy00MzgyLWJlZTEtMjk1N2FmYjE0Nzk0
LzEvUHFsSy1ERVl5VF8taXpZblh0VTBtVTFub3QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuDhrFts+
YhQRl837wsDFjq+4cqsrICghYycqBRgF+43k5WY6WVGkQyLNfXv61DM9fhOQMlhL
wH6RjRkxruvjmawIz15r9nCDp87gP5Qf0Smj7mfgzl40pLYZYbCpxWyy5pySSfHi
miFvzAimTMem0kXR6g0YAMmdXewyfcQN60DTE2crg+cuBveU3F2+0MW6FSPJbgis
fkljdsVDJIg8H0bUQw6/T1GBrYpSWB8dr5ucinx0MdtW2sOkpDT3soCynrB+N3fN
+ZOQeD40hNXv4NK/OnfIoRPGoh+aqMHvo3uivfqO1K6vnJRdk4O7IymlwtF9BYUg
dVavX3Gvw9w2ow==
-----END CERTIFICATE-----
Generated at Wed Jul 2 13:15:36 2025 by rpki-client