Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
File: PZQks8jnL3RqWesZlFWqNkajpFc.mft (raw, json)
Hash identifier: VnZWp2FsX1AhvwHBbq7s0VZmFBXd/ZzqluHp6lCd3/A=
Subject key identifier: D5:80:7E:36:AD:66:48:FE:B4:A0:1C:F3:D4:02:7D:C9:24:F3:F5:85
Authority key identifier: 3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
Certificate issuer: /CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Certificate serial: 0197B77C45C70992FC53C6626CAA4FE5F47B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 17:01:04 +0000
Manifest this update: Sat 28 Jun 2025 17:01:04 +0000
Manifest next update: Sun 29 Jun 2025 17:01:04 +0000
Files and hashes: 1: PZQks8jnL3RqWesZlFWqNkajpFc.crl (hash: 84UtTTB6QCYeynCIpqu28rrlgSuCG3ZC5DB/pI0Y+/Q=)
2: QIZ7oB864tCgRt_o70Ipdd0FOK0.roa (hash: m8Sbl87AQlvrLt/hOAausP00tdMD076gdUCeqvLuA8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:45:c7:09:92:fc:53:c6:62:6c:aa:4f:e5:f4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Validity
Not Before: Jun 28 17:01:04 2025 GMT
Not After : Jun 29 17:01:04 2025 GMT
Subject: CN=d5807e36ad6648feb4a01cf3d4027dc924f3f585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ff:ae:62:c3:36:b9:77:80:20:21:2e:5b:44:
52:cb:de:d1:ff:84:1f:15:5e:9e:e2:39:d6:0c:8f:
1c:0e:03:46:50:56:12:c4:b0:e3:2a:7d:2b:b4:e7:
89:9f:d6:cf:d7:bc:74:b9:f7:e9:43:a6:cf:9f:ca:
26:2d:18:b8:59:30:ff:4d:93:43:ff:06:b4:66:ad:
9a:08:a0:67:e4:5c:27:55:cd:48:08:ce:39:e1:b3:
83:f0:8b:3a:6f:67:43:f1:97:79:ab:df:cb:a9:9d:
48:16:ab:19:14:85:5b:c3:f9:22:de:72:a7:b8:a0:
17:f2:3f:1b:0e:cd:d7:ed:ea:35:75:50:57:3a:63:
f0:27:45:fc:e5:ba:0b:3c:48:74:c0:05:df:24:9e:
30:47:80:85:1b:19:48:b9:e5:71:84:49:2f:1d:18:
f8:0f:2d:50:89:8f:47:c7:62:a9:a4:77:c0:cc:c0:
44:39:24:32:01:ee:d2:7f:f8:74:eb:49:23:2b:89:
36:97:79:25:14:1f:cd:21:ef:34:97:a5:72:8b:71:
b1:54:59:86:78:11:a4:dc:b1:16:af:5e:fb:d0:7f:
20:46:dd:df:26:1d:51:74:95:d3:be:0a:96:34:ff:
87:b8:5e:c0:cc:d0:96:41:ed:a9:85:e5:e5:5a:20:
8d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:80:7E:36:AD:66:48:FE:B4:A0:1C:F3:D4:02:7D:C9:24:F3:F5:85
X509v3 Authority Key Identifier:
keyid:3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:33:5c:41:66:df:ef:5c:1a:f5:1f:1f:a0:66:bb:a9:c3:42:
ed:51:a4:8d:85:7a:73:8d:d4:e0:73:d7:b4:09:5e:ee:80:79:
26:aa:98:d9:03:bd:23:ab:b2:19:d9:87:8e:0d:4c:ad:0f:50:
cb:92:a9:88:5d:d7:f8:a2:bf:0b:c5:03:cc:7e:a0:a1:6b:54:
5e:b4:b7:27:13:66:28:dd:bf:51:6c:26:fa:c7:89:b6:c8:f3:
21:f9:5b:3f:3a:b6:1c:8b:3a:3e:62:6c:4a:5f:7c:3e:13:14:
20:11:92:9d:6d:29:fd:ab:0f:81:83:38:bb:a5:3f:cd:40:70:
02:b5:e4:08:92:27:c3:47:46:eb:1e:54:d3:60:ad:28:ff:0f:
59:18:ca:33:c3:38:c3:88:5d:c4:ae:c0:f3:2d:32:9e:80:88:
f5:10:86:7a:ca:bc:ec:29:89:ee:18:76:ab:a6:14:76:0c:74:
19:ca:f1:54:98:0c:15:ac:f9:16:b1:b9:2d:4e:68:cb:01:c2:
ea:2e:bc:57:ee:ac:48:72:09:fa:7f:fd:dc:5a:56:9b:7a:db:
92:32:e2:ce:16:c0:34:cf:43:3e:73:e8:78:50:03:97:0d:40:
24:ca:41:8c:54:4b:fd:5a:44:29:0a:73:f7:68:9a:d4:f8:e2:
b5:98:40:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fEXHCZL8U8ZibKpP5fR7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkOTQyNGIzYzhlNzJmNzQ2YTU5ZWIxOTk0NTVhYTM2NDZh
M2E0NTcwHhcNMjUwNjI4MTcwMTA0WhcNMjUwNjI5MTcwMTA0WjAzMTEwLwYDVQQD
EyhkNTgwN2UzNmFkNjY0OGZlYjRhMDFjZjNkNDAyN2RjOTI0ZjNmNTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyP+uYsM2uXeAICEuW0RSy97R/4Qf
FV6e4jnWDI8cDgNGUFYSxLDjKn0rtOeJn9bP17x0uffpQ6bPn8omLRi4WTD/TZND
/wa0Zq2aCKBn5FwnVc1ICM454bOD8Is6b2dD8Zd5q9/LqZ1IFqsZFIVbw/ki3nKn
uKAX8j8bDs3X7eo1dVBXOmPwJ0X85boLPEh0wAXfJJ4wR4CFGxlIueVxhEkvHRj4
Dy1QiY9Hx2KppHfAzMBEOSQyAe7Sf/h060kjK4k2l3klFB/NIe80l6Vyi3GxVFmG
eBGk3LEWr1770H8gRt3fJh1RdJXTvgqWNP+HuF7AzNCWQe2pheXlWiCNnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWAfjatZkj+tKAc89QCfckk8/WFMB8GA1UdIwQY
MBaAFD2UJLPI5y90alnrGZRVqjZGo6RXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFpRa3M4am5MM1JxV2VzWmxGV3FOa2FqcEZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kZjI5NDctY2QwNS00NDA1LTk0OWEt
NmE4MDMzZGNiZTFjLzEvUFpRa3M4am5MM1JxV2VzWmxGV3FOa2FqcEZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9kZjI5NDctY2QwNS00NDA1LTk0OWEtNmE4MDMzZGNiZTFj
LzEvUFpRa3M4am5MM1JxV2VzWmxGV3FOa2FqcEZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWTNcQWbf
71wa9R8foGa7qcNC7VGkjYV6c43U4HPXtAle7oB5JqqY2QO9I6uyGdmHjg1MrQ9Q
y5KpiF3X+KK/C8UDzH6goWtUXrS3JxNmKN2/UWwm+seJtsjzIflbPzq2HIs6PmJs
Sl98PhMUIBGSnW0p/asPgYM4u6U/zUBwArXkCJInw0dG6x5U02CtKP8PWRjKM8M4
w4hdxK7A8y0ynoCI9RCGesq87CmJ7hh2q6YUdgx0GcrxVJgMFaz5FrG5LU5oywHC
6i68V+6sSHIJ+n/93FpWm3rbkjLizhbANM9DPnPoeFADlw1AJMpBjFRL/VpEKQpz
92ia1PjitZhAUA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:31 2025 by rpki-client