Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
File: paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft (raw, json)
Hash identifier: P7+A4aQmgSbyESE/tYA3Q9Q55B8OmxUlQIF8Htn4NmA=
Subject key identifier: 66:D4:81:27:61:71:66:9D:87:A9:8E:97:27:19:F8:0A:25:91:2E:E4
Authority key identifier: A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
Certificate issuer: /CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Certificate serial: 0197B96B0EEB30599567E51BEF0589C37C1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
Manifest number: 15B8
Signing time: Sun 29 Jun 2025 02:01:30 +0000
Manifest this update: Sun 29 Jun 2025 02:01:30 +0000
Manifest next update: Mon 30 Jun 2025 02:01:30 +0000
Files and hashes: 1: Ef4jdp4ch3bGe_Ka3GRq8dFNRyA.roa (hash: 0HcHv8IPsRtMKEw7Kx2nplJJT6BUJZOb81lct/uUUeg=)
2: Lqe5vcwgWue09k7p7ctNg9AlXcM.roa (hash: YaDYxTi/SH2+EMKhFcDi7OA2pSDfUeTirPWPAhdJeo0=)
3: paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl (hash: gm8hUjL/fRTiLBr/dUPDT/2DUqm5BMGIV2hFCUm1q7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6b:0e:eb:30:59:95:67:e5:1b:ef:05:89:c3:7c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Validity
Not Before: Jun 29 02:01:30 2025 GMT
Not After : Jun 30 02:01:30 2025 GMT
Subject: CN=66d481276171669d87a98e972719f80a25912ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:5c:6b:19:73:3a:33:b8:9d:56:b2:de:8a:b4:
b3:cf:bc:82:85:a0:7e:57:86:44:7f:b6:91:71:5e:
e3:c2:46:4c:34:5d:59:14:c0:72:e8:ea:a6:1f:6c:
4e:36:68:ac:36:26:42:7a:32:e6:5d:a7:94:e8:b9:
ae:57:ac:9b:f2:34:ed:e4:27:e4:38:18:9d:fa:f5:
ac:6f:fe:51:b0:b3:a8:b3:51:f7:37:f1:3e:ea:7d:
c9:89:c1:9a:48:4f:bf:91:89:49:35:2c:b2:81:57:
80:d7:03:6b:11:87:5c:b7:65:8a:4d:b6:5e:1d:75:
dd:c0:83:69:7a:b8:40:82:ad:88:8e:ef:bf:a2:5d:
6e:cf:b3:10:55:5d:e5:8c:12:3f:ea:15:48:91:3e:
bf:b6:9d:da:15:dc:59:7b:a8:72:e4:8b:a5:eb:a7:
3d:0e:43:5d:2c:bb:8a:2b:e0:46:1f:43:b6:f5:3b:
1d:22:93:f9:f2:58:07:c4:30:ec:66:9d:7e:6d:1f:
6a:62:31:d2:d4:45:6b:6f:ac:a8:9a:43:d8:2d:3d:
b3:02:b7:20:2b:66:61:fa:e7:d3:31:53:7f:d8:f3:
a8:19:d2:fc:0f:74:cc:16:87:0e:a4:73:0b:1c:e3:
48:88:7b:83:fe:fd:70:58:1d:2a:17:f7:dc:af:2a:
51:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D4:81:27:61:71:66:9D:87:A9:8E:97:27:19:F8:0A:25:91:2E:E4
X509v3 Authority Key Identifier:
keyid:A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:48:c4:4b:64:e6:7e:e2:c6:46:ba:c6:d4:3e:1a:5b:fe:65:
ff:66:e3:5c:40:bd:8b:2b:1d:87:3f:c8:f1:0a:e1:a3:39:95:
7a:5c:f9:e1:99:95:4f:83:cb:b0:3a:e2:65:dd:86:c3:8c:7e:
46:f7:f2:4b:13:ad:fb:c5:00:03:4f:76:af:2d:20:1c:02:16:
15:b0:83:1f:27:ac:e1:fb:2c:fa:fd:5a:3f:17:f7:bd:12:ab:
d3:af:3a:9d:8b:e2:9d:09:7b:84:37:85:d9:2c:ae:a8:0a:52:
a7:e2:be:43:c5:d0:51:d2:05:dd:e2:e6:18:39:32:93:ac:fe:
ca:63:6e:e8:d9:4c:b9:a9:28:ff:9a:01:b1:f1:5a:a9:73:1a:
97:f3:dc:78:d8:97:37:eb:61:2c:6b:59:a4:e5:6a:0f:d1:bc:
3b:1d:80:a7:9e:26:0b:6a:51:ba:7a:79:18:22:de:71:e1:67:
9c:ff:72:81:2d:a2:2f:af:de:bd:96:da:a9:40:a2:79:1d:c6:
35:50:18:10:c0:75:18:94:f5:f5:7b:b6:db:e5:cf:53:a5:e0:
0d:60:59:f1:e0:36:ed:83:78:34:90:2c:68:17:dd:71:7c:e9:
25:43:50:c0:35:eb:22:09:1f:aa:38:70:99:fa:e6:86:00:59:
5f:6f:75:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5aw7rMFmVZ+Ub7wWJw3wfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YTQyZDI2MGQ1ZWNkYzJmYTJiMGI1ZGJmNjAzYjkwZDcx
NTQ0NGQwHhcNMjUwNjI5MDIwMTMwWhcNMjUwNjMwMDIwMTMwWjAzMTEwLwYDVQQD
Eyg2NmQ0ODEyNzYxNzE2NjlkODdhOThlOTcyNzE5ZjgwYTI1OTEyZWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA81xrGXM6M7idVrLeirSzz7yChaB+
V4ZEf7aRcV7jwkZMNF1ZFMBy6OqmH2xONmisNiZCejLmXaeU6LmuV6yb8jTt5Cfk
OBid+vWsb/5RsLOos1H3N/E+6n3JicGaSE+/kYlJNSyygVeA1wNrEYdct2WKTbZe
HXXdwINperhAgq2Iju+/ol1uz7MQVV3ljBI/6hVIkT6/tp3aFdxZe6hy5Iul66c9
DkNdLLuKK+BGH0O29TsdIpP58lgHxDDsZp1+bR9qYjHS1EVrb6yomkPYLT2zArcg
K2Zh+ufTMVN/2POoGdL8D3TMFocOpHMLHONIiHuD/v1wWB0qF/fcrypRFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbUgSdhcWadh6mOlycZ+AolkS7kMB8GA1UdIwQY
MBaAFKWkLSYNXs3C+isLXb9gO5DXFURNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGFRdEpnMWV6Y0w2S3d0ZHYyQTdrTmNWUkUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9jMzkyZDctMGE5OS00MWM5LWEyY2Qt
ZjBkMmI5NDNjYjUzLzEvcGFRdEpnMWV6Y0w2S3d0ZHYyQTdrTmNWUkUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9jMzkyZDctMGE5OS00MWM5LWEyY2QtZjBkMmI5NDNjYjUz
LzEvcGFRdEpnMWV6Y0w2S3d0ZHYyQTdrTmNWUkUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO0jES2Tm
fuLGRrrG1D4aW/5l/2bjXEC9iysdhz/I8QrhozmVelz54ZmVT4PLsDriZd2Gw4x+
RvfySxOt+8UAA092ry0gHAIWFbCDHyes4fss+v1aPxf3vRKr0686nYvinQl7hDeF
2SyuqApSp+K+Q8XQUdIF3eLmGDkyk6z+ymNu6NlMuako/5oBsfFaqXMal/PceNiX
N+thLGtZpOVqD9G8Ox2Ap54mC2pRunp5GCLeceFnnP9ygS2iL6/evZbaqUCieR3G
NVAYEMB1GJT19Xu22+XPU6XgDWBZ8eA27YN4NJAsaBfdcXzpJUNQwDXrIgkfqjhw
mfrmhgBZX291fQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 11:32:52 2025 by rpki-client