
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
File: pqqcrek75rp8irsyODGAdjF9YH0.mft (raw, json)
Hash identifier: jIOGFbSQn1nTBT1AsA6htXnIyk51rrWyUI8FXGG6ki8=
Subject key identifier: 26:D6:43:FD:B2:49:F9:F2:11:90:AC:37:3C:27:66:B1:3C:79:2E:42
Authority key identifier: A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
Certificate issuer: /CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Certificate serial: 0197B9D8CD38BF699497234A36C90B0BCDD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
Manifest number: 0CD0
Signing time: Sun 29 Jun 2025 04:01:22 +0000
Manifest this update: Sun 29 Jun 2025 04:01:22 +0000
Manifest next update: Mon 30 Jun 2025 04:01:22 +0000
Files and hashes: 1: S2CydqVU1Bg8JlGW4qN48rRbYzM.roa (hash: BGDB4Vnl+lNKwWJXdwvf53CCXNQUCVk3dMF/mpOaQyY=)
2: pqqcrek75rp8irsyODGAdjF9YH0.crl (hash: v7/rcIIVCSehCjwJWNF9NO3oNYeeiv89TPPp9i5o+gY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:cd:38:bf:69:94:97:23:4a:36:c9:0b:0b:cd:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Validity
Not Before: Jun 29 04:01:22 2025 GMT
Not After : Jun 30 04:01:22 2025 GMT
Subject: CN=26d643fdb249f9f21190ac373c2766b13c792e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:24:7d:98:0d:ed:8e:5a:8d:99:a7:58:5a:32:
2e:29:db:73:8d:22:00:87:19:c2:8a:40:39:37:c1:
7a:ae:06:ac:92:19:de:57:42:33:af:5d:f9:bf:9d:
e2:f6:53:74:cf:da:e9:58:a6:5a:ce:83:ba:b3:25:
2e:e2:8b:0a:9e:9d:13:bb:ad:dc:1d:7b:4f:d4:e3:
a3:aa:ed:b0:5f:29:3c:eb:f3:6d:3f:28:78:25:01:
c5:23:f0:3f:42:07:2f:02:b9:67:11:e4:fa:06:f3:
7f:ac:ab:32:43:07:d9:a9:b0:1d:10:62:b4:ae:f7:
15:7a:78:97:01:1c:4e:01:b3:08:e5:a9:b7:b6:3e:
47:52:ec:73:16:a6:8e:41:2a:d2:2b:b6:5d:46:ec:
bd:4c:ba:0a:60:a8:a7:d2:f0:7f:26:2c:5d:84:6a:
76:75:14:71:06:84:64:ce:b5:59:24:9a:17:64:ba:
a7:c8:10:74:88:22:7c:f6:da:e3:05:bf:14:45:3d:
13:c2:d7:df:14:41:0c:58:45:f2:4f:17:23:d0:0f:
01:7b:99:58:f9:fa:fd:51:62:2c:18:25:87:55:6f:
8d:e6:8d:75:d6:5f:b4:61:d0:d5:66:5f:cb:d4:a5:
7b:5f:95:af:6a:de:fa:fa:11:83:85:ae:c9:8e:c5:
21:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D6:43:FD:B2:49:F9:F2:11:90:AC:37:3C:27:66:B1:3C:79:2E:42
X509v3 Authority Key Identifier:
keyid:A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:22:80:5e:45:b4:4c:60:ba:a7:4f:59:d0:d8:06:f8:86:40:
0d:87:76:d8:4c:08:9c:93:69:7f:d6:2a:c5:8c:79:be:de:ef:
25:0e:8c:2c:f7:5c:41:fb:80:5e:1b:4f:a0:79:54:86:95:68:
f1:ed:1f:6e:9f:8d:d1:42:cc:9b:60:9b:bb:91:9d:36:b9:10:
93:c3:c8:b2:f1:78:47:0e:34:d3:79:6b:21:b3:de:62:e2:6d:
06:65:a0:07:98:0f:90:cd:31:be:e9:7f:dc:80:50:b6:fe:dc:
85:40:75:d1:04:f4:64:e1:70:d7:55:ff:4c:c6:fe:27:94:af:
78:18:22:b5:02:18:de:75:2c:0e:5f:b4:53:ef:56:37:99:3a:
36:e1:5e:11:2f:95:d8:aa:c6:43:c7:ee:22:e3:29:03:ab:70:
40:d8:8d:a0:c5:0e:04:fa:ca:3e:69:6a:c3:65:d9:49:64:5e:
b0:34:a8:87:5d:b4:81:a8:4a:b7:f5:1c:7b:df:76:8c:9d:58:
22:ed:d3:a7:bf:6d:ef:03:36:33:45:99:81:a0:37:66:08:01:
f1:0d:a8:7e:12:d1:1a:89:cc:e6:16:ae:98:a3:73:9d:7d:b6:
b7:c8:a2:c8:4b:21:2a:c9:7f:c6:c2:43:42:3e:c4:5d:0b:19:
cb:45:1f:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe52M04v2mUlyNKNskLC83YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YWE5Y2FkZTkzYmU2YmE3YzhhYmIzMjM4MzE4MDc2MzE3
ZDYwN2QwHhcNMjUwNjI5MDQwMTIyWhcNMjUwNjMwMDQwMTIyWjAzMTEwLwYDVQQD
EygyNmQ2NDNmZGIyNDlmOWYyMTE5MGFjMzczYzI3NjZiMTNjNzkyZTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniR9mA3tjlqNmadYWjIuKdtzjSIA
hxnCikA5N8F6rgaskhneV0Izr135v53i9lN0z9rpWKZazoO6syUu4osKnp0Tu63c
HXtP1OOjqu2wXyk86/NtPyh4JQHFI/A/QgcvArlnEeT6BvN/rKsyQwfZqbAdEGK0
rvcVeniXARxOAbMI5am3tj5HUuxzFqaOQSrSK7ZdRuy9TLoKYKin0vB/JixdhGp2
dRRxBoRkzrVZJJoXZLqnyBB0iCJ89trjBb8URT0TwtffFEEMWEXyTxcj0A8Be5lY
+fr9UWIsGCWHVW+N5o111l+0YdDVZl/L1KV7X5Wvat76+hGDha7JjsUh1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbWQ/2ySfnyEZCsNzwnZrE8eS5CMB8GA1UdIwQY
MBaAFKaqnK3pO+a6fIq7MjgxgHYxfWB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHFxY3Jlazc1cnA4aXJzeU9ER0FkakY5WUgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9hOTcwYzYtYzExOC00NTJlLWE1NmYt
ZWM0NjdmYTg2MzZlLzEvcHFxY3Jlazc1cnA4aXJzeU9ER0FkakY5WUgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9hOTcwYzYtYzExOC00NTJlLWE1NmYtZWM0NjdmYTg2MzZl
LzEvcHFxY3Jlazc1cnA4aXJzeU9ER0FkakY5WUgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQCKAXkW0
TGC6p09Z0NgG+IZADYd22EwInJNpf9YqxYx5vt7vJQ6MLPdcQfuAXhtPoHlUhpVo
8e0fbp+N0ULMm2Cbu5GdNrkQk8PIsvF4Rw4003lrIbPeYuJtBmWgB5gPkM0xvul/
3IBQtv7chUB10QT0ZOFw11X/TMb+J5SveBgitQIY3nUsDl+0U+9WN5k6NuFeES+V
2KrGQ8fuIuMpA6twQNiNoMUOBPrKPmlqw2XZSWResDSoh120gahKt/Uce992jJ1Y
Iu3Tp79t7wM2M0WZgaA3ZggB8Q2ofhLRGonM5haumKNznX22t8iiyEshKsl/xsJD
Qj7EXQsZy0Ufzg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:34:20 2025 by rpki-client