Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
File: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft (raw, json)
Hash identifier: 4bEWAL7dU99+4VTUS8d8pDusYVFuEA+TLGYY+fKbu8M=
Subject key identifier: 66:F7:C5:57:07:FE:90:1B:80:11:6E:11:52:46:AC:AD:D2:D9:2A:0A
Authority key identifier: 3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
Certificate issuer: /CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Certificate serial: 019895C96D5348D670BBF0732EDA4E645646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
Manifest number: 0FC4
Signing time: Sun 10 Aug 2025 21:01:02 +0000
Manifest this update: Sun 10 Aug 2025 21:01:02 +0000
Manifest next update: Mon 11 Aug 2025 21:01:02 +0000
Files and hashes: 1: 9fywOGNsk6OIfuzuy-reOW9V4kc.roa (hash: b/vhaQiKQhhebnkpqZc4spciDDH3KeMp+AUrKHHSWv4=)
2: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl (hash: tZLbivsK384KvR6LTHDM5ZEK87Nta+GbcRTm5ZiwWdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:c9:6d:53:48:d6:70:bb:f0:73:2e:da:4e:64:56:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Validity
Not Before: Aug 10 21:01:02 2025 GMT
Not After : Aug 11 21:01:02 2025 GMT
Subject: CN=66f7c55707fe901b80116e115246acadd2d92a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c2:fc:e9:95:cb:a8:6c:85:ec:87:4c:0e:87:
56:4a:60:b9:66:64:ea:5d:1e:1c:03:34:0b:79:c7:
bd:c8:d0:6a:2f:68:29:d5:2e:e1:09:61:8e:10:90:
e4:c9:5d:f2:5d:a2:93:4b:c2:87:6a:fa:a7:9e:8e:
e9:c7:26:4f:9b:bf:90:7d:4f:4c:b3:d6:49:37:e5:
34:3d:fd:37:30:64:c4:b0:d9:38:04:55:1f:9b:ec:
7c:b2:30:5d:7f:76:3e:ce:15:91:ba:04:06:99:7b:
36:44:03:35:ce:94:17:f3:ea:97:18:c9:a5:06:13:
1b:d3:e0:5b:30:99:6e:f8:04:05:49:b0:88:01:e6:
22:0c:03:93:40:eb:6b:ae:dd:55:c0:5d:a7:13:a0:
a8:18:07:b1:27:9c:37:3a:ec:2b:1e:f9:b9:c2:e9:
9c:e2:94:3b:92:12:4d:d6:0d:9c:67:e7:f9:58:cf:
eb:73:39:0a:c7:2b:98:86:69:fc:54:f5:d9:aa:6c:
cb:85:04:d1:2b:e9:d7:cc:f1:85:ca:8d:85:6f:2f:
3c:c4:c9:de:f7:9d:20:3a:c4:1b:27:0e:47:1a:60:
d7:37:be:58:df:50:21:42:bf:c7:71:ec:ce:12:6b:
8c:66:83:ef:75:4c:98:2d:e0:57:32:b7:a5:96:8b:
b9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F7:C5:57:07:FE:90:1B:80:11:6E:11:52:46:AC:AD:D2:D9:2A:0A
X509v3 Authority Key Identifier:
keyid:3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:16:9e:08:7c:9d:32:28:8f:f0:23:ad:48:f8:e7:a9:85:c0:
43:88:57:cf:89:45:39:1d:89:b9:e6:d0:6c:ce:2e:c0:22:74:
58:19:6f:1d:77:db:15:cd:11:b2:b2:7e:93:22:d3:4b:be:39:
63:28:a1:37:4c:dc:0e:c1:3b:0e:8f:02:1a:3c:d1:ae:39:ba:
d0:a7:1f:37:22:2b:65:d1:b2:68:39:b0:5c:6f:f5:44:a2:2e:
e4:ba:d9:f3:ff:2f:ef:ca:95:b6:00:94:e7:17:5b:d0:a9:32:
00:c8:7f:26:fd:c3:51:e7:c8:c5:12:46:9f:38:af:ca:66:cd:
5c:8d:20:d4:ea:4c:b4:e5:99:f4:84:2c:08:82:cb:dd:9b:d0:
5c:a5:b4:94:72:a7:a6:9f:83:07:eb:f8:b1:18:6f:dc:62:e5:
ce:7b:1d:07:26:b9:fb:f6:4c:20:06:e6:82:e4:14:27:c3:24:
d4:e9:78:0d:fa:17:31:b7:30:0b:e0:79:1c:0f:c0:8b:00:55:
95:9c:c9:01:05:fc:d2:39:ae:cd:c8:e6:16:5f:0a:56:83:9d:
e9:45:50:ea:20:34:f3:d5:f2:bc:a1:0a:b6:8c:60:b5:91:d7:
f1:20:cb:46:dc:2e:f0:76:5a:d7:42:0f:0f:c6:54:93:86:8e:
57:7b:a9:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiVyW1TSNZwu/BzLtpOZFZGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYTU1NDA5OGM3YTg4YWEzNDI2NGI5MmQ4YmYyMjU3ZWMw
YmNkYTQwHhcNMjUwODEwMjEwMTAyWhcNMjUwODExMjEwMTAyWjAzMTEwLwYDVQQD
Eyg2NmY3YzU1NzA3ZmU5MDFiODAxMTZlMTE1MjQ2YWNhZGQyZDkyYTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscL86ZXLqGyF7IdMDodWSmC5ZmTq
XR4cAzQLece9yNBqL2gp1S7hCWGOEJDkyV3yXaKTS8KHavqnno7pxyZPm7+QfU9M
s9ZJN+U0Pf03MGTEsNk4BFUfm+x8sjBdf3Y+zhWRugQGmXs2RAM1zpQX8+qXGMml
BhMb0+BbMJlu+AQFSbCIAeYiDAOTQOtrrt1VwF2nE6CoGAexJ5w3OuwrHvm5wumc
4pQ7khJN1g2cZ+f5WM/rczkKxyuYhmn8VPXZqmzLhQTRK+nXzPGFyo2Fby88xMne
950gOsQbJw5HGmDXN75Y31AhQr/HcezOEmuMZoPvdUyYLeBXMrellou5DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGb3xVcH/pAbgBFuEVJGrK3S2SoKMB8GA1UdIwQY
MBaAFD6lVAmMeoiqNCZLkti/IlfsC82kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHFWVUNZeDZpS28wSmt1UzJMOGlWLXdMemFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80NzY3Y2UtNDQ0OC00MzZiLWE5MTAt
NjZkZTk4NjVkYmFjLzEvUHFWVUNZeDZpS28wSmt1UzJMOGlWLXdMemFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy80NzY3Y2UtNDQ0OC00MzZiLWE5MTAtNjZkZTk4NjVkYmFj
LzEvUHFWVUNZeDZpS28wSmt1UzJMOGlWLXdMemFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQBaeCHyd
MiiP8COtSPjnqYXAQ4hXz4lFOR2JuebQbM4uwCJ0WBlvHXfbFc0RsrJ+kyLTS745
YyihN0zcDsE7Do8CGjzRrjm60KcfNyIrZdGyaDmwXG/1RKIu5LrZ8/8v78qVtgCU
5xdb0KkyAMh/Jv3DUefIxRJGnzivymbNXI0g1OpMtOWZ9IQsCILL3ZvQXKW0lHKn
pp+DB+v4sRhv3GLlznsdBya5+/ZMIAbmguQUJ8Mk1Ol4DfoXMbcwC+B5HA/AiwBV
lZzJAQX80jmuzcjmFl8KVoOd6UVQ6iA089XyvKEKtoxgtZHX8SDLRtwu8HZa10IP
D8ZUk4aOV3upmw==
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:12:04 2025 by rpki-client