Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
File: PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft (raw, json)
Hash identifier: RRiUb95nUZ4ecHeeS0j5S/pCoqfw4Tx3lEjCu/m9RMI=
Subject key identifier: 1F:AB:38:F2:98:C0:38:94:98:D6:B3:C7:D6:C0:A8:60:8E:6B:95:FB
Authority key identifier: 3E:A6:ED:31:F9:7F:37:C5:E5:C5:50:73:2F:85:D2:46:90:96:2C:EF
Certificate issuer: /CN=3ea6ed31f97f37c5e5c550732f85d24690962cef
Certificate serial: 0198D474760B135249424A488C4135439BEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
Manifest number: 1644
Signing time: Sat 23 Aug 2025 01:04:18 +0000
Manifest this update: Sat 23 Aug 2025 01:04:18 +0000
Manifest next update: Sun 24 Aug 2025 01:04:18 +0000
Files and hashes: 1: PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl (hash: KbRr/20ZFUkwtp7xLdiytUE0n7FL+VlRwpNmKz9i5h0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:76:0b:13:52:49:42:4a:48:8c:41:35:43:9b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea6ed31f97f37c5e5c550732f85d24690962cef
Validity
Not Before: Aug 23 01:04:18 2025 GMT
Not After : Aug 24 01:04:18 2025 GMT
Subject: CN=1fab38f298c0389498d6b3c7d6c0a8608e6b95fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f9:e2:89:de:e1:9c:c4:51:1b:2f:21:1b:6d:
b2:45:fd:18:46:9c:67:ae:32:29:89:a3:f9:33:2b:
d6:97:5e:57:88:ac:d8:65:92:45:00:f2:3d:36:74:
ab:c5:6f:36:d2:63:f1:6d:7e:80:b1:17:3d:4c:69:
2c:66:e0:5e:23:b6:c0:f9:45:61:c2:e1:81:24:c2:
7c:62:d3:c6:88:a0:26:e8:9a:70:91:98:4c:1d:ed:
50:e2:a2:1c:31:14:26:1d:c6:38:be:1f:ae:24:4d:
bc:25:19:a1:5c:62:69:da:1c:ca:27:88:2a:46:b7:
25:82:e5:f3:ba:20:db:bf:1c:80:12:cc:0f:0b:6e:
80:9a:b1:2c:b4:c8:cf:7a:a1:b3:5e:4e:f4:79:1a:
0b:4a:a4:3d:ee:43:94:be:9c:85:eb:70:47:ab:b3:
6c:1b:f5:f1:32:15:42:28:0e:ca:bb:c0:b9:7b:d3:
48:ba:69:3e:fe:a1:2a:6b:84:f1:f5:35:8c:39:64:
1a:cc:ce:cb:0a:8a:91:b5:28:0c:a6:16:c7:31:98:
36:a0:74:7c:12:68:e8:d0:e3:b7:ba:c1:c3:a4:7c:
89:f7:96:0d:f7:85:f6:01:87:58:ea:05:b2:51:dc:
59:aa:9a:21:47:35:e1:28:32:73:90:d0:73:68:16:
a0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AB:38:F2:98:C0:38:94:98:D6:B3:C7:D6:C0:A8:60:8E:6B:95:FB
X509v3 Authority Key Identifier:
keyid:3E:A6:ED:31:F9:7F:37:C5:E5:C5:50:73:2F:85:D2:46:90:96:2C:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:3c:0f:ec:fe:f8:69:16:5a:26:2b:2e:1e:90:a0:72:ff:b9:
e1:c3:fe:02:2d:3b:3b:05:ce:9e:eb:e4:e9:94:49:a0:bf:b7:
fc:59:4a:c2:3e:51:41:5c:7f:f6:ac:14:7b:19:f9:f6:0f:24:
08:20:1b:49:96:13:0f:23:7f:2b:f2:72:a6:91:b5:de:43:f3:
09:a4:6c:e6:26:4c:72:59:3f:44:e8:6a:e9:c0:74:56:08:32:
2b:92:cf:3c:0f:99:09:29:58:da:95:2a:6e:7a:46:89:57:3c:
3c:25:72:75:66:2b:d0:03:4f:ad:0d:6f:a7:08:68:5e:70:79:
d6:4b:27:05:53:48:79:b2:82:b5:d9:f8:99:41:24:aa:8a:f5:
e4:83:3b:c0:50:f3:00:ec:f4:53:75:a4:20:b7:20:f8:97:0e:
63:0f:84:0b:94:2e:1d:4a:31:b3:6a:8e:69:31:2f:d6:4f:c9:
48:4a:bc:bf:21:ce:99:42:e1:0d:95:17:14:99:38:59:31:64:
59:ab:60:69:d4:e3:84:c9:26:30:07:f9:a5:8b:02:f0:9a:06:
61:e7:13:90:39:1f:a6:25:61:72:f0:90:6e:4f:fa:40:ec:d7:
ca:db:98:1e:6b:43:9b:0f:8d:a3:11:6f:8e:53:05:57:26:97:
67:63:7e:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUdHYLE1JJQkpIjEE1Q5vuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYTZlZDMxZjk3ZjM3YzVlNWM1NTA3MzJmODVkMjQ2OTA5
NjJjZWYwHhcNMjUwODIzMDEwNDE4WhcNMjUwODI0MDEwNDE4WjAzMTEwLwYDVQQD
EygxZmFiMzhmMjk4YzAzODk0OThkNmIzYzdkNmMwYTg2MDhlNmI5NWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvniid7hnMRRGy8hG22yRf0YRpxn
rjIpiaP5MyvWl15XiKzYZZJFAPI9NnSrxW820mPxbX6AsRc9TGksZuBeI7bA+UVh
wuGBJMJ8YtPGiKAm6JpwkZhMHe1Q4qIcMRQmHcY4vh+uJE28JRmhXGJp2hzKJ4gq
RrclguXzuiDbvxyAEswPC26AmrEstMjPeqGzXk70eRoLSqQ97kOUvpyF63BHq7Ns
G/XxMhVCKA7Ku8C5e9NIumk+/qEqa4Tx9TWMOWQazM7LCoqRtSgMphbHMZg2oHR8
Emjo0OO3usHDpHyJ95YN94X2AYdY6gWyUdxZqpohRzXhKDJzkNBzaBagiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+rOPKYwDiUmNazx9bAqGCOa5X7MB8GA1UdIwQY
MBaAFD6m7TH5fzfF5cVQcy+F0kaQlizvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHFidE1mbF9OOFhseFZCekw0WFNScENXTE84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zNWFkYjEtNjdlZC00OTJkLWJhODkt
MmU2NzkxNjk0YWViLzEvUHFidE1mbF9OOFhseFZCekw0WFNScENXTE84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8zNWFkYjEtNjdlZC00OTJkLWJhODktMmU2NzkxNjk0YWVi
LzEvUHFidE1mbF9OOFhseFZCekw0WFNScENXTE84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxjwP7P74
aRZaJisuHpCgcv+54cP+Ai07OwXOnuvk6ZRJoL+3/FlKwj5RQVx/9qwUexn59g8k
CCAbSZYTDyN/K/JyppG13kPzCaRs5iZMclk/ROhq6cB0VggyK5LPPA+ZCSlY2pUq
bnpGiVc8PCVydWYr0ANPrQ1vpwhoXnB51ksnBVNIebKCtdn4mUEkqor15IM7wFDz
AOz0U3WkILcg+JcOYw+EC5QuHUoxs2qOaTEv1k/JSEq8vyHOmULhDZUXFJk4WTFk
WatgadTjhMkmMAf5pYsC8JoGYecTkDkfpiVhcvCQbk/6QOzXytuYHmtDmw+NoxFv
jlMFVyaXZ2N+aw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:42:05 2025 by rpki-client