Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
File: pQnoZXbAZeFL--6PZSq2wnnM3hI.mft (raw, json)
Hash identifier: fcVMdX+9JhCE+smLuNgoNHM2jdAr4CJzhKJ+NZJAIjY=
Subject key identifier: CB:61:D3:BE:1F:61:F3:B7:42:6A:87:42:53:C4:99:04:BE:67:1D:D0
Authority key identifier: A5:09:E8:65:76:C0:65:E1:4B:FB:EE:8F:65:2A:B6:C2:79:CC:DE:12
Certificate issuer: /CN=a509e86576c065e14bfbee8f652ab6c279ccde12
Certificate serial: 0196C04B322EC86787C4206CA8A207B6AD28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
Manifest number: 0E72
Signing time: Sun 11 May 2025 17:01:15 +0000
Manifest this update: Sun 11 May 2025 17:01:15 +0000
Manifest next update: Mon 12 May 2025 17:01:15 +0000
Files and hashes: 1: eoOnLGiO6CFkl49Rw92BKVWZ1YY.roa (hash: 5KK2WxAAZ4SHFL6JTNlCRgBRKCCitoVvyQFa3VeriMw=)
2: pQnoZXbAZeFL--6PZSq2wnnM3hI.crl (hash: ZAHnGnvrMEDMspf51vsLi3CV68Dn0cQ4FKEDQGxRjAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4b:32:2e:c8:67:87:c4:20:6c:a8:a2:07:b6:ad:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a509e86576c065e14bfbee8f652ab6c279ccde12
Validity
Not Before: May 11 17:01:15 2025 GMT
Not After : May 12 17:01:15 2025 GMT
Subject: CN=cb61d3be1f61f3b7426a874253c49904be671dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a6:87:cd:b9:3b:76:7f:8e:26:59:52:d8:49:
8d:24:fa:3d:78:56:5c:50:07:7f:51:cc:b7:dc:e1:
a3:f6:4c:98:90:e5:f7:64:5d:63:33:8b:ca:03:df:
54:cd:10:d2:03:24:5f:57:13:6a:0e:ac:e2:15:b0:
02:43:78:7d:06:50:db:06:cb:e3:24:02:2c:cd:f3:
48:7b:f2:89:1d:62:f5:11:24:21:2d:cf:fb:5a:20:
52:60:a5:7c:05:55:2c:a6:46:1d:13:d3:16:16:2c:
8f:4f:ac:e4:9e:0d:10:eb:06:98:3d:ae:36:82:c1:
1c:9c:0c:01:f0:80:0e:21:02:75:5f:ca:da:21:c2:
c5:e2:a4:12:af:7f:08:c5:b3:5d:cb:6e:e8:9a:74:
e4:00:f1:e4:e3:cf:4c:83:42:79:1e:31:e7:c9:35:
75:18:3e:a5:92:d3:c3:37:45:29:bb:bc:fe:6c:9e:
51:2c:01:5b:15:fb:a7:4c:3d:d8:3e:b3:79:81:40:
b7:7c:55:f4:62:76:25:67:ee:53:92:d4:4e:d6:3e:
22:79:43:04:05:39:fc:47:d0:30:d1:73:26:13:58:
3a:44:09:80:14:19:e1:cf:1c:c1:c2:6c:b7:57:7e:
4e:8f:c1:ae:b1:21:8a:e3:59:ec:77:9a:1f:f1:af:
9d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:61:D3:BE:1F:61:F3:B7:42:6A:87:42:53:C4:99:04:BE:67:1D:D0
X509v3 Authority Key Identifier:
keyid:A5:09:E8:65:76:C0:65:E1:4B:FB:EE:8F:65:2A:B6:C2:79:CC:DE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b3:ff:54:88:fe:a1:c0:e2:15:a7:fb:9f:3d:cd:d5:89:95:
e2:dc:d9:11:2f:fb:55:b8:1e:78:40:49:90:b1:d5:ed:3c:df:
f9:12:b6:0d:e7:ed:aa:24:e2:cd:c4:65:0c:4f:32:8a:6b:b6:
4c:b9:1b:69:67:ed:57:32:7e:11:c5:82:74:e0:0b:24:ea:b0:
f7:df:fa:f8:4b:84:8f:1c:ba:bc:dc:02:89:31:d6:71:3b:b6:
6f:50:eb:c4:0d:d9:1d:07:bb:c1:7d:fe:0d:dd:38:ef:aa:e2:
c5:05:0e:62:7b:1b:cf:8c:4d:5e:23:c9:99:a8:d7:81:a3:8a:
be:49:32:0d:60:65:2a:92:a7:4d:47:71:ed:44:87:20:45:98:
6f:fb:fb:62:43:44:c0:d7:4e:aa:fc:96:b4:9f:56:52:b8:80:
52:ec:34:ad:63:04:4b:dd:18:b8:82:5c:ce:05:7e:c2:8b:d8:
59:73:54:84:4c:34:52:93:df:7f:58:49:69:c4:f3:6b:ea:de:
98:97:f3:a3:9c:88:a6:f5:2b:c5:21:c6:ee:dd:d8:a6:c5:a2:
12:79:9f:00:b3:eb:9d:5f:95:5c:59:0d:5d:b5:94:78:97:d1:
04:b9:4d:ad:a6:5f:da:61:72:ac:fa:e0:72:3d:bf:7a:c7:69:
d5:40:36:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbASzIuyGeHxCBsqKIHtq0oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MDllODY1NzZjMDY1ZTE0YmZiZWU4ZjY1MmFiNmMyNzlj
Y2RlMTIwHhcNMjUwNTExMTcwMTE1WhcNMjUwNTEyMTcwMTE1WjAzMTEwLwYDVQQD
EyhjYjYxZDNiZTFmNjFmM2I3NDI2YTg3NDI1M2M0OTkwNGJlNjcxZGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqaHzbk7dn+OJllS2EmNJPo9eFZc
UAd/Ucy33OGj9kyYkOX3ZF1jM4vKA99UzRDSAyRfVxNqDqziFbACQ3h9BlDbBsvj
JAIszfNIe/KJHWL1ESQhLc/7WiBSYKV8BVUspkYdE9MWFiyPT6zkng0Q6waYPa42
gsEcnAwB8IAOIQJ1X8raIcLF4qQSr38IxbNdy27omnTkAPHk489Mg0J5HjHnyTV1
GD6lktPDN0Upu7z+bJ5RLAFbFfunTD3YPrN5gUC3fFX0YnYlZ+5TktRO1j4ieUME
BTn8R9Aw0XMmE1g6RAmAFBnhzxzBwmy3V35Oj8GusSGK41nsd5of8a+dQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMth074fYfO3QmqHQlPEmQS+Zx3QMB8GA1UdIwQY
MBaAFKUJ6GV2wGXhS/vuj2UqtsJ5zN4SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFFub1pYYkFaZUZMLS02UFpTcTJ3bm5NM2hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wMTQyNDUtODY4NS00YWYzLTkzODct
YTBmNTc0MmIxYjA0LzEvcFFub1pYYkFaZUZMLS02UFpTcTJ3bm5NM2hJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8wMTQyNDUtODY4NS00YWYzLTkzODctYTBmNTc0MmIxYjA0
LzEvcFFub1pYYkFaZUZMLS02UFpTcTJ3bm5NM2hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOrP/VIj+
ocDiFaf7nz3N1YmV4tzZES/7VbgeeEBJkLHV7Tzf+RK2DeftqiTizcRlDE8yimu2
TLkbaWftVzJ+EcWCdOALJOqw99/6+EuEjxy6vNwCiTHWcTu2b1DrxA3ZHQe7wX3+
Dd0476rixQUOYnsbz4xNXiPJmajXgaOKvkkyDWBlKpKnTUdx7USHIEWYb/v7YkNE
wNdOqvyWtJ9WUriAUuw0rWMES90YuIJczgV+wovYWXNUhEw0UpPff1hJacTza+re
mJfzo5yIpvUrxSHG7t3YpsWiEnmfALPrnV+VXFkNXbWUeJfRBLlNraZf2mFyrPrg
cj2/esdp1UA2ug==
-----END CERTIFICATE-----
Generated at Sun May 11 21:01:35 2025 by rpki-client