Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.mft
File: PqFIQth34nvEBouYH-dK64vufnM.mft (raw, json)
Hash identifier: 2vwW/DdxiWthjpXY2spf08JYW4RcX337RCsXUQLQn/U=
Subject key identifier: 6A:F2:00:07:A4:F8:E4:07:3A:57:68:41:33:44:98:20:91:81:6D:35
Authority key identifier: 3E:A1:48:42:D8:77:E2:7B:C4:06:8B:98:1F:E7:4A:EB:8B:EE:7E:73
Certificate issuer: /CN=3ea14842d877e27bc4068b981fe74aeb8bee7e73
Certificate serial: 0198D472AEBABFA86BDF44390538F62372B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqFIQth34nvEBouYH-dK64vufnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 01:02:22 +0000
Manifest this update: Sat 23 Aug 2025 01:02:22 +0000
Manifest next update: Sun 24 Aug 2025 01:02:22 +0000
Files and hashes: 1: PqFIQth34nvEBouYH-dK64vufnM.crl (hash: dzXqvHyJWjv+DyRquo/s8Ms/xWWwOmeQQB2bjayIxc0=)
2: h5AoEy-X54Db83-jTlFH2Y1fCVw.roa (hash: HOh3C7TWeQ0O5hO+1P91yiEiZozSeSnp7F1/q290vZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqFIQth34nvEBouYH-dK64vufnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:ae:ba:bf:a8:6b:df:44:39:05:38:f6:23:72:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea14842d877e27bc4068b981fe74aeb8bee7e73
Validity
Not Before: Aug 23 01:02:22 2025 GMT
Not After : Aug 24 01:02:22 2025 GMT
Subject: CN=6af20007a4f8e4073a5768413344982091816d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fb:10:6f:cd:1d:3d:68:b7:72:ff:7b:1b:74:
04:27:80:2b:27:90:4a:76:d1:31:06:e0:80:50:03:
d9:72:55:e6:af:d1:03:d9:cb:9c:95:df:fd:88:ea:
cf:8c:05:e9:a1:e1:03:fa:79:5b:2b:1f:52:06:25:
e1:3e:81:ca:eb:5a:84:59:1d:47:c5:d6:4f:30:3c:
88:3a:e2:a1:ee:e1:76:5f:ef:80:3d:d9:89:7c:d6:
ab:c5:09:61:2c:b7:df:dc:51:07:27:a6:10:aa:7c:
bf:c1:3a:30:53:6d:d2:a7:5a:8a:14:33:60:2d:00:
0e:f3:3f:d6:9a:45:35:58:09:76:94:5b:db:3a:74:
09:23:d4:cc:ea:60:4b:72:b7:ee:f1:e3:e9:eb:1a:
2c:74:86:f1:d9:a4:7d:c2:8a:37:ec:9d:09:f8:df:
79:e1:57:f4:f6:e8:d4:c3:4b:21:5d:23:4f:2a:58:
76:86:55:da:c5:77:72:a8:43:94:9a:5a:b1:07:bb:
e2:1a:fc:0b:b4:11:66:f9:08:5a:16:d9:30:92:89:
b8:65:33:b3:d9:0a:21:e2:13:0d:d9:6f:e0:df:2d:
31:da:fd:22:d3:5d:b3:81:4d:6f:4a:da:29:29:41:
f0:1f:4a:7c:72:78:0b:8d:96:53:12:4f:8d:1a:89:
bb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F2:00:07:A4:F8:E4:07:3A:57:68:41:33:44:98:20:91:81:6D:35
X509v3 Authority Key Identifier:
keyid:3E:A1:48:42:D8:77:E2:7B:C4:06:8B:98:1F:E7:4A:EB:8B:EE:7E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqFIQth34nvEBouYH-dK64vufnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:cf:bf:93:fb:17:0d:a9:ce:29:5f:88:64:65:32:ba:82:cc:
13:e8:2d:c1:32:fd:76:64:61:31:1c:dd:1d:f9:7f:73:7d:b3:
09:1f:cf:11:43:b2:07:01:9d:01:35:b5:96:e2:08:af:95:b1:
e6:dd:be:d4:e2:03:ad:33:e2:c8:80:52:68:a5:5b:5d:e3:89:
c0:74:6a:89:9b:28:0d:1a:4c:0c:c1:99:91:f7:62:c9:20:f0:
52:7a:76:f5:e7:1e:f0:9a:fb:cb:f8:89:b4:34:e2:5b:63:7e:
fe:80:19:cd:a1:e4:18:65:e3:9d:65:c5:ee:27:7f:24:6c:c1:
b3:7b:27:f5:8b:54:e7:e7:8e:c9:1b:08:ca:3b:cf:58:3e:af:
01:48:24:50:b3:d9:ea:9c:6d:71:80:59:0a:96:9a:87:13:63:
00:0d:cb:2b:3e:10:f3:cd:4c:57:b3:92:de:77:b5:9d:c5:10:
d2:4d:8e:c0:a6:58:5f:02:25:19:72:b3:ab:d7:d7:15:a6:d6:
03:b9:3b:f3:54:3d:74:fb:be:df:70:0a:33:0e:22:82:38:a0:
05:0e:57:99:02:62:82:10:ed:2d:22:79:5b:e3:9a:d2:00:65:
4d:cd:62:06:14:d5:24:50:d5:fb:0f:3a:38:27:76:ed:f2:a2:
1c:dd:78:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcq66v6hr30Q5BTj2I3K4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYTE0ODQyZDg3N2UyN2JjNDA2OGI5ODFmZTc0YWViOGJl
ZTdlNzMwHhcNMjUwODIzMDEwMjIyWhcNMjUwODI0MDEwMjIyWjAzMTEwLwYDVQQD
Eyg2YWYyMDAwN2E0ZjhlNDA3M2E1NzY4NDEzMzQ0OTgyMDkxODE2ZDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvsQb80dPWi3cv97G3QEJ4ArJ5BK
dtExBuCAUAPZclXmr9ED2cucld/9iOrPjAXpoeED+nlbKx9SBiXhPoHK61qEWR1H
xdZPMDyIOuKh7uF2X++APdmJfNarxQlhLLff3FEHJ6YQqny/wTowU23Sp1qKFDNg
LQAO8z/WmkU1WAl2lFvbOnQJI9TM6mBLcrfu8ePp6xosdIbx2aR9woo37J0J+N95
4Vf09ujUw0shXSNPKlh2hlXaxXdyqEOUmlqxB7viGvwLtBFm+QhaFtkwkom4ZTOz
2Qoh4hMN2W/g3y0x2v0i012zgU1vStopKUHwH0p8cngLjZZTEk+NGom7rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGryAAek+OQHOldoQTNEmCCRgW01MB8GA1UdIwQY
MBaAFD6hSELYd+J7xAaLmB/nSuuL7n5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHFGSVF0aDM0bnZFQm91WUgtZEs2NHZ1Zm5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC83OTcwNTctMjc4YS00ZjczLTgwYTEt
NGRjZTRmM2VhMTNlLzEvUHFGSVF0aDM0bnZFQm91WUgtZEs2NHZ1Zm5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC83OTcwNTctMjc4YS00ZjczLTgwYTEtNGRjZTRmM2VhMTNl
LzEvUHFGSVF0aDM0bnZFQm91WUgtZEs2NHZ1Zm5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIc+/k/sX
DanOKV+IZGUyuoLME+gtwTL9dmRhMRzdHfl/c32zCR/PEUOyBwGdATW1luIIr5Wx
5t2+1OIDrTPiyIBSaKVbXeOJwHRqiZsoDRpMDMGZkfdiySDwUnp29ece8Jr7y/iJ
tDTiW2N+/oAZzaHkGGXjnWXF7id/JGzBs3sn9YtU5+eOyRsIyjvPWD6vAUgkULPZ
6pxtcYBZCpaahxNjAA3LKz4Q881MV7OS3ne1ncUQ0k2OwKZYXwIlGXKzq9fXFabW
A7k781Q9dPu+33AKMw4igjigBQ5XmQJighDtLSJ5W+Oa0gBlTc1iBhTVJFDV+w86
OCd27fKiHN14Dw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:30 2025 by rpki-client