Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
File: PtQqBIdwVgYBXlow2h5w9Aflnpk.mft (raw, json)
Hash identifier: BwygO2kCOK8E0v9jIPDS2L4AjoS9GzfoxNZnto2oAK4=
Subject key identifier: 0E:21:3F:88:25:A6:99:58:C3:D8:3F:C1:B1:82:4C:F6:EA:CE:85:A2
Authority key identifier: 3E:D4:2A:04:87:70:56:06:01:5E:5A:30:DA:1E:70:F4:07:E5:9E:99
Certificate issuer: /CN=3ed42a0487705606015e5a30da1e70f407e59e99
Certificate serial: 0197B7EA8D1FAA223C309DED2B930283F391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 19:01:31 +0000
Manifest this update: Sat 28 Jun 2025 19:01:31 +0000
Manifest next update: Sun 29 Jun 2025 19:01:31 +0000
Files and hashes: 1: PtQqBIdwVgYBXlow2h5w9Aflnpk.crl (hash: rzR+QWCShZZcuU4E0/L0eGlpV17hdDZKEhwFnYcmTLk=)
2: Ygud2H3mQvpplx2m1ZwaXdOogYA.roa (hash: /wnaFbQu+otS41ERWGG+1dFZ6eGw9L5BsokLI2OTM5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:8d:1f:aa:22:3c:30:9d:ed:2b:93:02:83:f3:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ed42a0487705606015e5a30da1e70f407e59e99
Validity
Not Before: Jun 28 19:01:31 2025 GMT
Not After : Jun 29 19:01:31 2025 GMT
Subject: CN=0e213f8825a69958c3d83fc1b1824cf6eace85a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7e:55:71:3b:af:bf:5a:8b:fa:e0:2d:22:d4:
35:e2:c7:e2:c4:fc:48:96:7b:8f:13:3e:43:0d:01:
4d:67:06:d1:1b:3b:fb:44:c6:40:04:76:a6:4f:90:
5b:62:70:b0:c1:df:59:6f:ac:fb:db:92:49:dc:4f:
15:87:e5:88:4d:7d:34:62:3d:f6:57:11:fb:4e:b7:
e9:2b:db:5b:8c:37:70:17:b1:97:fb:2d:50:4e:4a:
2c:bd:0d:88:99:c4:b0:10:c8:90:a8:6e:c6:74:f8:
ce:68:fe:5a:51:bb:e8:0c:c8:c0:5e:01:35:29:ed:
93:d0:c0:c8:b8:8b:60:9a:47:88:1c:85:e9:a8:73:
c1:79:f3:85:f7:c7:55:5e:6d:b7:84:28:49:06:7c:
e3:ad:dd:cc:fa:9e:5b:c7:c5:80:1d:03:f4:d8:eb:
b4:9e:35:51:46:1f:39:e5:07:58:1a:42:1d:ad:1b:
2d:0f:b0:53:67:da:49:8a:ec:ec:0f:ae:0a:6a:6b:
6d:87:85:7b:f9:c5:54:db:9f:81:6f:35:26:17:9c:
cd:46:19:f0:b4:fc:24:4b:d2:9c:cb:4b:14:bf:94:
ab:87:b6:01:9d:09:8a:e2:18:d4:6f:ed:18:53:93:
63:e1:e5:df:f6:95:10:f3:64:f4:b0:7b:ca:10:44:
a3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:21:3F:88:25:A6:99:58:C3:D8:3F:C1:B1:82:4C:F6:EA:CE:85:A2
X509v3 Authority Key Identifier:
keyid:3E:D4:2A:04:87:70:56:06:01:5E:5A:30:DA:1E:70:F4:07:E5:9E:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:22:df:99:dd:ac:9a:70:53:c3:67:ef:28:85:32:73:bc:19:
66:4b:45:77:b2:fb:d8:42:b9:61:70:c5:51:f3:c5:dd:e7:64:
bf:51:31:1a:63:82:0d:8c:e7:00:d6:91:f6:25:3e:42:7c:3f:
89:18:5c:87:9a:3e:4b:72:57:36:8c:fc:23:a0:2e:fb:59:24:
8e:4e:bb:58:d1:e2:f0:70:26:64:19:5f:89:23:c5:77:95:5c:
9f:71:80:ad:0f:ef:b2:56:5e:ea:db:a7:7c:3d:13:e1:83:66:
4d:0e:ff:25:25:df:d5:c5:85:28:8a:14:46:47:62:8d:a1:0e:
72:0b:8b:36:25:e9:21:8c:c4:6f:a2:60:94:81:0b:63:77:5b:
2e:37:d3:08:aa:31:d2:c9:14:b7:98:f4:3d:8d:92:49:b0:27:
60:b5:50:f0:48:be:1b:54:d1:2b:a0:8b:76:e8:2e:61:ea:c4:
5d:e7:27:d9:3d:8a:1c:da:ea:bb:a6:6f:f4:a8:f3:40:3b:b5:
2c:1c:7d:c8:ca:7c:cc:d7:eb:21:ef:5e:4a:e8:58:a7:6e:5c:
16:59:3b:f9:92:10:20:5f:66:24:a7:7f:d7:b8:64:c9:62:03:
80:f5:4f:fc:7a:26:2e:88:f8:95:85:ee:71:24:ca:5f:b0:77:
8e:55:ee:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36o0fqiI8MJ3tK5MCg/ORMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZDQyYTA0ODc3MDU2MDYwMTVlNWEzMGRhMWU3MGY0MDdl
NTllOTkwHhcNMjUwNjI4MTkwMTMxWhcNMjUwNjI5MTkwMTMxWjAzMTEwLwYDVQQD
EygwZTIxM2Y4ODI1YTY5OTU4YzNkODNmYzFiMTgyNGNmNmVhY2U4NWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX5VcTuvv1qL+uAtItQ14sfixPxI
lnuPEz5DDQFNZwbRGzv7RMZABHamT5BbYnCwwd9Zb6z725JJ3E8Vh+WITX00Yj32
VxH7TrfpK9tbjDdwF7GX+y1QTkosvQ2ImcSwEMiQqG7GdPjOaP5aUbvoDMjAXgE1
Ke2T0MDIuItgmkeIHIXpqHPBefOF98dVXm23hChJBnzjrd3M+p5bx8WAHQP02Ou0
njVRRh855QdYGkIdrRstD7BTZ9pJiuzsD64Kamtth4V7+cVU25+BbzUmF5zNRhnw
tPwkS9Kcy0sUv5Srh7YBnQmK4hjUb+0YU5Nj4eXf9pUQ82T0sHvKEESjLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4hP4glpplYw9g/wbGCTPbqzoWiMB8GA1UdIwQY
MBaAFD7UKgSHcFYGAV5aMNoecPQH5Z6ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHRRcUJJZHdWZ1lCWGxvdzJoNXc5QWZsbnBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9mYzkzYjEtMDY0ZS00NGFiLTkwZGEt
ODI2MjUzOWRlNDZmLzEvUHRRcUJJZHdWZ1lCWGxvdzJoNXc5QWZsbnBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9mYzkzYjEtMDY0ZS00NGFiLTkwZGEtODI2MjUzOWRlNDZm
LzEvUHRRcUJJZHdWZ1lCWGxvdzJoNXc5QWZsbnBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZyLfmd2s
mnBTw2fvKIUyc7wZZktFd7L72EK5YXDFUfPF3edkv1ExGmOCDYznANaR9iU+Qnw/
iRhch5o+S3JXNoz8I6Au+1kkjk67WNHi8HAmZBlfiSPFd5Vcn3GArQ/vslZe6tun
fD0T4YNmTQ7/JSXf1cWFKIoURkdijaEOcguLNiXpIYzEb6JglIELY3dbLjfTCKox
0skUt5j0PY2SSbAnYLVQ8Ei+G1TRK6CLduguYerEXecn2T2KHNrqu6Zv9KjzQDu1
LBx9yMp8zNfrIe9eSuhYp25cFlk7+ZIQIF9mJKd/17hkyWIDgPVP/HomLoj4lYXu
cSTKX7B3jlXuHQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:37 2025 by rpki-client