Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.mft
File: PqFIQth34nvEBouYH-dK64vufnM.mft (raw, json)
Hash identifier: ffe32YIo0nAjIMRYfrN9bChRuX1pKoxrBou/sc3M5og=
Subject key identifier: 8C:F6:95:93:E6:02:76:D9:CB:C3:24:35:B6:73:45:98:FF:79:7F:41
Authority key identifier: 3E:A1:48:42:D8:77:E2:7B:C4:06:8B:98:1F:E7:4A:EB:8B:EE:7E:73
Certificate issuer: /CN=3ea14842d877e27bc4068b981fe74aeb8bee7e73
Certificate serial: 0197B6A05F0DE1D333824401870D78A38E69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqFIQth34nvEBouYH-dK64vufnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:00:52 +0000
Manifest this update: Sat 28 Jun 2025 13:00:52 +0000
Manifest next update: Sun 29 Jun 2025 13:00:52 +0000
Files and hashes: 1: PqFIQth34nvEBouYH-dK64vufnM.crl (hash: ewfj1T1qOo+BTXD1Is8GWeczs+dM/Enty3FSan5NLlk=)
2: h5AoEy-X54Db83-jTlFH2Y1fCVw.roa (hash: HOh3C7TWeQ0O5hO+1P91yiEiZozSeSnp7F1/q290vZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqFIQth34nvEBouYH-dK64vufnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:5f:0d:e1:d3:33:82:44:01:87:0d:78:a3:8e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea14842d877e27bc4068b981fe74aeb8bee7e73
Validity
Not Before: Jun 28 13:00:52 2025 GMT
Not After : Jun 29 13:00:52 2025 GMT
Subject: CN=8cf69593e60276d9cbc32435b6734598ff797f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a6:49:f6:10:3f:c6:4b:54:1f:db:0a:41:50:
13:95:91:82:2e:e3:4b:13:71:17:50:73:4e:71:08:
d1:c9:53:04:18:6d:ab:23:b7:1a:96:aa:5a:88:72:
31:c7:f6:8d:58:4a:e5:4f:0f:8c:b7:a3:f6:96:18:
32:af:e1:b4:6f:71:3a:c3:e2:6a:c7:df:ba:f2:55:
bc:94:f4:9d:a0:5a:e9:d9:06:1a:88:ce:31:d8:54:
3c:2d:14:d0:80:5b:af:98:97:aa:ea:2c:92:13:0d:
63:67:1b:7e:85:8a:40:15:0a:75:0c:eb:ae:05:e2:
06:0f:7e:6f:13:8e:3c:29:3f:25:17:13:92:63:d3:
d5:da:fe:a7:6b:b3:01:b1:1f:96:64:eb:34:3d:da:
03:a8:7b:d6:af:0a:c6:f8:47:33:b4:c8:07:86:b1:
1e:8b:10:fa:a7:48:91:98:c4:7f:4d:1f:db:ef:4d:
e2:16:f2:86:3e:fd:59:d5:e0:7e:0c:cd:1e:47:a0:
06:5d:e0:9c:03:b0:4d:4f:ac:36:01:62:8f:7e:c2:
f6:e8:33:45:08:bc:83:0d:4b:5e:4f:18:bc:93:9b:
5b:2d:9c:2e:e3:b9:9a:bd:37:9c:d2:e8:5d:62:5d:
3f:50:81:9e:0d:5d:53:d7:1d:c0:7a:66:df:96:5f:
be:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F6:95:93:E6:02:76:D9:CB:C3:24:35:B6:73:45:98:FF:79:7F:41
X509v3 Authority Key Identifier:
keyid:3E:A1:48:42:D8:77:E2:7B:C4:06:8B:98:1F:E7:4A:EB:8B:EE:7E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqFIQth34nvEBouYH-dK64vufnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1e:fe:ac:d6:ca:7f:93:46:23:f6:a4:c9:9f:21:6e:9f:36:
01:4f:61:a2:68:aa:3a:fc:66:11:13:44:bf:fc:5b:34:00:0c:
6e:c1:d0:48:08:c1:a7:13:f2:1c:3f:c2:16:47:cc:00:e4:64:
fd:13:ad:b3:0b:b2:83:42:a4:ce:fc:3f:dd:c8:94:a6:3f:9d:
f6:23:0c:cd:bf:a8:78:4a:c6:17:e3:fe:fd:fc:5a:5d:51:b2:
3c:1c:26:a0:c4:3a:d5:84:cf:74:55:d0:5b:4d:b7:65:9f:29:
8b:cd:c1:d9:4d:df:b0:4c:43:a1:43:8e:bc:14:9c:b6:95:35:
31:d9:f8:ab:b8:2e:a2:e7:ec:0e:8f:72:95:55:ea:22:f5:aa:
4b:d6:03:59:0b:99:cf:e7:80:cf:a1:0a:8a:2c:66:54:96:e5:
d4:cc:83:30:5a:79:1c:e4:0e:25:8d:5a:cc:30:40:8b:38:26:
59:c4:78:9c:8c:ae:46:78:0c:c6:7b:8a:59:9f:81:73:06:31:
3d:70:b0:14:14:a8:a3:f5:94:0a:e7:d4:d8:ee:48:6d:ef:05:
04:8f:8a:55:03:ab:e7:40:32:39:a4:7f:c0:49:66:38:75:a2:
dc:4e:ed:0f:91:45:cf:c0:12:98:40:fa:b9:e3:52:22:ed:a7:
5b:cb:a0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:00:36 2025 by rpki-client