Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
File: Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft (raw, json)
Hash identifier: h/eQOMIgENlfIc0ratOw/NsQ773bHyd7nlcPWx5INFM=
Subject key identifier: DE:6D:98:75:15:C3:68:D1:F9:56:27:6F:31:4B:45:7A:10:E3:35:34
Authority key identifier: 3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29
Certificate issuer: /CN=3ead19096b0ee080fe43810500b718a947fed229
Certificate serial: 019874501305EA869EFD66CC6A0D66C4F90E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
Manifest number: 0A40
Signing time: Mon 04 Aug 2025 09:01:01 +0000
Manifest this update: Mon 04 Aug 2025 09:01:01 +0000
Manifest next update: Tue 05 Aug 2025 09:01:01 +0000
Files and hashes: 1: Bk8zYlSKqLYVsGMH3YEvHnLSsEU.roa (hash: LyRPaqVEcdiw5E3uBmgAAh9/7xweVS475crHOVmwvK8=)
2: Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl (hash: bE1GmLSoImunuTAs3sS0owoCbxeHbI5pmMGU+TrFD/o=)
3: gwj9P8ZuERM-SCTzjIoGfn0Rln0.roa (hash: 9JU5L0oKqu22gCI9ibec6Elcvk/4kJnQuHkzo4ps1r4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:13:05:ea:86:9e:fd:66:cc:6a:0d:66:c4:f9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ead19096b0ee080fe43810500b718a947fed229
Validity
Not Before: Aug 4 09:01:01 2025 GMT
Not After : Aug 5 09:01:01 2025 GMT
Subject: CN=de6d987515c368d1f956276f314b457a10e33534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5b:3f:5a:ff:bd:b2:be:ec:b9:7a:5c:59:4b:
2e:b6:bf:71:6a:9f:2a:5a:47:19:c5:d7:dc:5e:9c:
e2:d0:29:64:04:86:9f:01:73:1d:f4:fb:d9:b6:e9:
8c:52:96:94:5a:ab:59:ae:40:c1:7f:fa:98:9b:11:
1c:be:c9:36:cd:97:a9:54:95:d4:d0:48:87:9e:c5:
16:ca:92:5b:f8:b0:3f:28:51:2e:75:a9:9f:07:ba:
9a:3f:0f:96:08:ca:6a:c8:60:d2:b6:bf:ba:cb:18:
c0:0c:56:ac:c7:23:f2:c0:8c:96:4b:10:3a:bb:df:
15:92:d5:26:c6:01:46:e8:63:65:f9:b0:3f:37:1b:
b8:a7:eb:75:dd:7b:c6:01:ed:f9:ca:f3:a0:a9:19:
91:b7:37:eb:af:c6:b5:f4:20:be:71:2e:77:dd:18:
1f:d7:e5:67:62:5b:ca:4b:e3:fe:46:80:17:ee:f8:
1d:d9:8a:25:fe:4e:84:99:3d:82:f9:f1:cb:b5:97:
cc:39:e2:a8:4f:d1:77:15:47:ef:d7:ed:a8:79:88:
44:a4:1a:08:67:7a:3a:4b:14:bf:5f:39:12:a4:c1:
a9:b5:b4:05:e0:fc:f2:52:80:ac:c5:ed:c8:bd:3a:
c7:24:f0:01:b4:09:4b:a2:cb:cd:43:fe:61:ca:e6:
47:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6D:98:75:15:C3:68:D1:F9:56:27:6F:31:4B:45:7A:10:E3:35:34
X509v3 Authority Key Identifier:
keyid:3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:be:e0:d5:c0:49:aa:b1:7f:84:d1:54:d4:bc:48:22:3a:59:
c8:08:a3:77:46:d9:51:8f:de:ac:70:ab:2e:e5:0a:a9:ee:89:
1d:c9:52:e3:2d:b6:ef:9b:44:41:72:d8:5f:7c:0b:c1:57:69:
6c:c8:70:ae:a7:30:87:40:3b:0a:4a:8c:a7:20:b1:2f:d5:7c:
92:8f:fd:1b:64:ba:4f:01:78:9c:d8:de:90:b1:52:1a:33:94:
02:59:d1:77:e1:e5:f4:1d:82:34:88:6c:12:30:fb:a4:3e:14:
94:53:4e:45:4e:36:ab:dc:50:a0:c9:a5:c1:69:d2:c9:60:8c:
0f:70:3d:13:18:43:56:13:e1:49:d7:71:a0:48:48:4c:da:96:
f0:d3:1e:fa:15:de:2f:c5:e7:f3:4a:20:83:92:07:3f:5f:46:
70:5d:19:3b:73:0f:59:4c:af:37:66:9e:b8:9d:61:70:74:77:
ea:55:68:52:5e:f3:96:bf:d4:fa:cc:07:e6:32:3a:e6:20:64:
6f:21:27:06:52:5e:65:ae:cb:4d:c8:30:ea:fd:b9:23:d2:90:
10:43:03:80:38:03:30:a2:77:3d:e2:24:18:12:0a:09:b1:27:
d0:f2:e0:5c:ad:8a:aa:8f:18:7a:75:87:0b:60:d9:00:a1:9d:
4e:04:93:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UBMF6oae/WbMag1mxPkOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYWQxOTA5NmIwZWUwODBmZTQzODEwNTAwYjcxOGE5NDdm
ZWQyMjkwHhcNMjUwODA0MDkwMTAxWhcNMjUwODA1MDkwMTAxWjAzMTEwLwYDVQQD
EyhkZTZkOTg3NTE1YzM2OGQxZjk1NjI3NmYzMTRiNDU3YTEwZTMzNTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFs/Wv+9sr7suXpcWUsutr9xap8q
WkcZxdfcXpzi0ClkBIafAXMd9PvZtumMUpaUWqtZrkDBf/qYmxEcvsk2zZepVJXU
0EiHnsUWypJb+LA/KFEudamfB7qaPw+WCMpqyGDStr+6yxjADFasxyPywIyWSxA6
u98VktUmxgFG6GNl+bA/Nxu4p+t13XvGAe35yvOgqRmRtzfrr8a19CC+cS533Rgf
1+VnYlvKS+P+RoAX7vgd2Yol/k6EmT2C+fHLtZfMOeKoT9F3FUfv1+2oeYhEpBoI
Z3o6SxS/XzkSpMGptbQF4PzyUoCsxe3IvTrHJPABtAlLosvNQ/5hyuZHWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5tmHUVw2jR+VYnbzFLRXoQ4zU0MB8GA1UdIwQY
MBaAFD6tGQlrDuCA/kOBBQC3GKlH/tIpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHEwWkNXc080SUQtUTRFRkFMY1lxVWYtMGlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82M2JiNzktOTNiMC00OTlmLTk3OGQt
MTBmZTQ0NzI2OTA4LzEvUHEwWkNXc080SUQtUTRFRkFMY1lxVWYtMGlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy82M2JiNzktOTNiMC00OTlmLTk3OGQtMTBmZTQ0NzI2OTA4
LzEvUHEwWkNXc080SUQtUTRFRkFMY1lxVWYtMGlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArL7g1cBJ
qrF/hNFU1LxIIjpZyAijd0bZUY/erHCrLuUKqe6JHclS4y2275tEQXLYX3wLwVdp
bMhwrqcwh0A7CkqMpyCxL9V8ko/9G2S6TwF4nNjekLFSGjOUAlnRd+Hl9B2CNIhs
EjD7pD4UlFNORU42q9xQoMmlwWnSyWCMD3A9ExhDVhPhSddxoEhITNqW8NMe+hXe
L8Xn80ogg5IHP19GcF0ZO3MPWUyvN2aeuJ1hcHR36lVoUl7zlr/U+swH5jI65iBk
byEnBlJeZa7LTcgw6v25I9KQEEMDgDgDMKJ3PeIkGBIKCbEn0PLgXK2Kqo8YenWH
C2DZAKGdTgST2A==
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:56:57 2025 by rpki-client