Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
File: Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft (raw, json)
Hash identifier: UXqCqUk9HE6tDYwrUsFyziaqLykyHo8bGIlt5Ka0Cx8=
Subject key identifier: 28:80:7D:E9:C5:DA:B1:26:3B:F2:B8:7F:A6:8C:AE:62:CC:1C:65:AB
Authority key identifier: 3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29
Certificate issuer: /CN=3ead19096b0ee080fe43810500b718a947fed229
Certificate serial: 0197B8FDB652897A67B35AD1621E7F36AD18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
Manifest number: 09DF
Signing time: Sun 29 Jun 2025 00:02:04 +0000
Manifest this update: Sun 29 Jun 2025 00:02:04 +0000
Manifest next update: Mon 30 Jun 2025 00:02:04 +0000
Files and hashes: 1: Bk8zYlSKqLYVsGMH3YEvHnLSsEU.roa (hash: LyRPaqVEcdiw5E3uBmgAAh9/7xweVS475crHOVmwvK8=)
2: Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl (hash: a72xPoIS9ZhXiZD7o5+iJDO898feK+c1kjjKSgjxmSM=)
3: gwj9P8ZuERM-SCTzjIoGfn0Rln0.roa (hash: 9JU5L0oKqu22gCI9ibec6Elcvk/4kJnQuHkzo4ps1r4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:b6:52:89:7a:67:b3:5a:d1:62:1e:7f:36:ad:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ead19096b0ee080fe43810500b718a947fed229
Validity
Not Before: Jun 29 00:02:04 2025 GMT
Not After : Jun 30 00:02:04 2025 GMT
Subject: CN=28807de9c5dab1263bf2b87fa68cae62cc1c65ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:07:3c:72:95:31:ec:16:e2:f0:89:ce:a5:0f:
72:37:79:49:6d:21:51:4f:51:42:25:48:40:be:e7:
26:77:86:a0:da:98:5d:e5:10:79:e4:2b:2e:2a:1d:
ae:92:25:22:91:b6:54:91:5e:a2:e1:5a:0f:b3:0c:
07:40:38:c2:4e:10:c5:66:e2:f7:ff:b6:71:de:3f:
12:98:65:71:b0:7f:1d:49:2a:35:73:d8:87:54:a6:
a7:b5:0c:97:cf:67:a2:c3:74:d0:9a:ba:3e:7d:eb:
a8:66:bf:7c:f9:bb:13:3f:2e:8b:3f:9a:b1:10:c7:
dd:e8:06:e0:3c:61:c1:38:2c:b6:1a:f5:12:f8:98:
80:19:15:e5:e1:4e:2f:4f:ff:a9:aa:31:51:a2:24:
c3:6b:7d:43:75:a7:9e:2b:40:1e:4f:56:de:14:e7:
66:c1:18:e6:00:55:96:45:6e:12:80:df:37:12:12:
a8:41:ec:45:e6:32:60:91:5c:86:c6:6e:60:9f:6a:
c7:9d:b8:bf:97:d0:2f:72:75:a4:0d:cd:05:82:99:
b2:4f:33:56:52:bd:4d:61:96:8d:a3:3b:74:bf:22:
8b:f0:21:64:d6:24:2b:20:75:ba:65:92:b8:00:8e:
0c:08:e2:7a:c1:08:4c:74:6c:62:f7:c5:b0:7b:4a:
ce:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:80:7D:E9:C5:DA:B1:26:3B:F2:B8:7F:A6:8C:AE:62:CC:1C:65:AB
X509v3 Authority Key Identifier:
keyid:3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:2a:02:a8:45:a4:87:07:6c:61:2c:87:ba:3e:6c:94:27:9e:
f5:9b:5a:d7:41:b3:e7:e4:07:ad:1a:67:36:e9:cb:e8:8f:c2:
27:7f:1d:f7:3c:3e:c0:53:63:35:e0:fb:48:90:f2:78:1d:be:
a7:bf:16:53:a1:99:06:91:50:dc:75:d2:65:56:2b:8b:90:6d:
4a:03:d6:33:e3:ef:26:e5:7b:96:25:a3:67:d8:ae:fb:b3:04:
e1:17:6d:0e:be:ee:06:0d:3b:d3:d1:ee:35:fb:3a:71:cd:9e:
16:1a:7a:a1:47:b9:92:ff:87:87:35:37:47:4a:39:cc:1f:a5:
cf:71:74:07:eb:d5:05:96:73:4f:d5:fb:22:7d:83:05:28:7b:
8a:8b:85:8a:76:4c:43:9a:6e:cf:34:71:89:ba:66:71:8d:5e:
14:e9:3e:c6:aa:1a:b6:17:1a:c2:7c:a0:a2:fc:19:27:89:33:
16:db:58:3f:7d:de:37:8f:05:8d:ea:c3:78:6d:c1:e5:25:2a:
4c:ae:e8:84:b3:1f:02:43:5a:6d:96:b7:ff:60:fc:67:ee:98:
06:c6:db:b5:87:49:45:1f:bb:0b:ff:c7:00:ec:65:23:b4:21:
c9:de:a4:6c:cc:24:6c:90:73:b1:bc:0b:77:21:01:ab:3c:a8:
c7:b6:76:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4/bZSiXpns1rRYh5/Nq0YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYWQxOTA5NmIwZWUwODBmZTQzODEwNTAwYjcxOGE5NDdm
ZWQyMjkwHhcNMjUwNjI5MDAwMjA0WhcNMjUwNjMwMDAwMjA0WjAzMTEwLwYDVQQD
EygyODgwN2RlOWM1ZGFiMTI2M2JmMmI4N2ZhNjhjYWU2MmNjMWM2NWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgc8cpUx7Bbi8InOpQ9yN3lJbSFR
T1FCJUhAvucmd4ag2phd5RB55CsuKh2ukiUikbZUkV6i4VoPswwHQDjCThDFZuL3
/7Zx3j8SmGVxsH8dSSo1c9iHVKantQyXz2eiw3TQmro+feuoZr98+bsTPy6LP5qx
EMfd6AbgPGHBOCy2GvUS+JiAGRXl4U4vT/+pqjFRoiTDa31DdaeeK0AeT1beFOdm
wRjmAFWWRW4SgN83EhKoQexF5jJgkVyGxm5gn2rHnbi/l9AvcnWkDc0FgpmyTzNW
Ur1NYZaNozt0vyKL8CFk1iQrIHW6ZZK4AI4MCOJ6wQhMdGxi98Wwe0rOLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCiAfenF2rEmO/K4f6aMrmLMHGWrMB8GA1UdIwQY
MBaAFD6tGQlrDuCA/kOBBQC3GKlH/tIpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHEwWkNXc080SUQtUTRFRkFMY1lxVWYtMGlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82M2JiNzktOTNiMC00OTlmLTk3OGQt
MTBmZTQ0NzI2OTA4LzEvUHEwWkNXc080SUQtUTRFRkFMY1lxVWYtMGlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy82M2JiNzktOTNiMC00OTlmLTk3OGQtMTBmZTQ0NzI2OTA4
LzEvUHEwWkNXc080SUQtUTRFRkFMY1lxVWYtMGlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKSoCqEWk
hwdsYSyHuj5slCee9Zta10Gz5+QHrRpnNunL6I/CJ38d9zw+wFNjNeD7SJDyeB2+
p78WU6GZBpFQ3HXSZVYri5BtSgPWM+PvJuV7liWjZ9iu+7ME4RdtDr7uBg0709Hu
Nfs6cc2eFhp6oUe5kv+HhzU3R0o5zB+lz3F0B+vVBZZzT9X7In2DBSh7iouFinZM
Q5puzzRxibpmcY1eFOk+xqoathcawnygovwZJ4kzFttYP33eN48FjerDeG3B5SUq
TK7ohLMfAkNabZa3/2D8Z+6YBsbbtYdJRR+7C//HAOxlI7Qhyd6kbMwkbJBzsbwL
dyEBqzyox7Z2nA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:21:50 2025 by rpki-client