Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
File: pqjzQ2_YPor2EPIWgImW6QrKx10.mft (raw, json)
Hash identifier: zIB7BeY7Dpm1kyExH/X1cTn4+5a9pT5LlzmibX52WGU=
Subject key identifier: 1C:E2:66:4B:C1:2B:FA:A3:B5:FC:35:7A:18:AC:BE:05:E1:1B:0E:A9
Authority key identifier: A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
Certificate issuer: /CN=a6a8f3436fd83e8af610f216808996e90acac75d
Certificate serial: 019771F6A136A9FFA87C2FC2BDC1F37B3257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
Manifest number: 014D
Signing time: Sun 15 Jun 2025 05:01:17 +0000
Manifest this update: Sun 15 Jun 2025 05:01:17 +0000
Manifest next update: Mon 16 Jun 2025 05:01:17 +0000
Files and hashes: 1: ZUpNPohL23tCs0p7RIJ5CSnq_nE.roa (hash: IdApViwu1d+gOIrjS2rsEi8/hl56lvmzjtXUhg292sQ=)
2: pqjzQ2_YPor2EPIWgImW6QrKx10.crl (hash: w0O+yPb1MG/Y9iDAbf4G5McJqyRJjN9gwa4KGhsG1t4=)
3: s_VH1RJUenuP8OvNJaH6yu7OYsg.roa (hash: vyeEoRPPlhaqhjAq4VATA3B5K5D/1bqk7r9/7EELRFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f6:a1:36:a9:ff:a8:7c:2f:c2:bd:c1:f3:7b:32:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a8f3436fd83e8af610f216808996e90acac75d
Validity
Not Before: Jun 15 05:01:17 2025 GMT
Not After : Jun 16 05:01:17 2025 GMT
Subject: CN=1ce2664bc12bfaa3b5fc357a18acbe05e11b0ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:63:0b:4a:12:0d:95:8d:67:17:c1:1a:f8:39:
df:c5:a6:3f:d7:9c:59:32:6e:88:04:3b:8d:07:4e:
3d:37:b0:e6:2d:1d:98:4a:32:6c:15:8f:69:9d:2b:
6a:d1:9b:ca:d3:ab:34:60:19:fe:e1:4f:a6:eb:e1:
2c:cf:0e:a7:b6:dd:cf:6f:d5:14:f8:e7:d6:ac:2a:
d8:50:63:75:e3:3b:03:1e:83:a7:26:9b:e2:0a:b4:
97:70:27:29:f4:b6:c1:c0:f7:f5:8c:16:fb:fd:73:
55:88:cb:9c:a8:3b:3c:13:ec:fc:37:ea:68:81:3b:
be:b1:bc:b0:bc:20:65:9a:ab:5e:ad:12:09:be:1a:
53:f3:83:5b:6f:1b:e4:39:08:d1:78:89:e3:86:33:
4d:e9:9c:fa:a7:3c:38:4b:0f:1d:b4:6a:0f:a3:c7:
f2:c7:2b:f7:af:18:16:7f:2f:e2:4f:a8:35:ec:4f:
f0:c8:2f:56:c5:05:8b:50:bf:92:12:c8:c6:b7:42:
b7:02:56:7f:1e:70:22:0f:15:4a:fa:e4:61:b0:87:
ca:19:a1:61:0f:a5:b7:74:f8:d9:10:01:6f:39:47:
3c:ee:54:57:8a:c1:8f:84:d5:01:96:a2:ab:a0:fe:
07:d0:10:0d:7a:1c:9f:8f:8e:06:30:d8:e9:91:4f:
2b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E2:66:4B:C1:2B:FA:A3:B5:FC:35:7A:18:AC:BE:05:E1:1B:0E:A9
X509v3 Authority Key Identifier:
keyid:A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ff:3f:e3:b2:0a:29:b1:e1:5e:e0:e3:3a:1c:e7:b1:46:7d:
76:6b:fc:fa:98:dc:c6:d0:b6:b1:77:4e:92:00:cc:3a:53:13:
3d:ae:90:a1:9d:5f:61:ac:8f:1b:e3:b4:8e:f5:91:e0:a1:a1:
d1:66:16:b5:00:61:ee:62:12:c3:43:71:3e:07:50:c3:d8:c1:
49:c4:f2:1c:5c:5a:98:0f:2a:06:4b:f7:1c:cb:c6:91:e3:e1:
20:00:01:35:ea:3d:db:91:80:7b:65:c4:2a:71:16:13:26:48:
ee:36:45:d9:e8:93:6c:a5:bf:55:1c:31:fa:c8:d0:f5:09:7b:
c5:63:a6:8b:a3:eb:00:a5:07:d7:bf:ae:dc:8e:51:e9:2f:af:
9d:9f:0a:d1:19:67:85:99:76:ee:a5:53:a3:c2:83:c1:fc:53:
98:24:03:b3:c3:4d:e1:12:d7:dc:97:d3:65:51:71:bd:4a:88:
29:b5:97:55:b9:9a:7a:2e:37:6b:b3:04:54:52:74:a2:9e:af:
f4:67:fa:76:9d:f4:98:f3:69:f9:ed:4e:c6:0f:60:19:bc:57:
5d:fc:c9:56:b7:7d:1a:2e:ba:d8:b5:9f:5e:0b:07:52:a3:50:
cc:fa:16:23:49:c0:48:4e:2b:43:c8:35:90:7f:d0:10:90:2a:
6d:2f:d0:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdx9qE2qf+ofC/CvcHzezJXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YThmMzQzNmZkODNlOGFmNjEwZjIxNjgwODk5NmU5MGFj
YWM3NWQwHhcNMjUwNjE1MDUwMTE3WhcNMjUwNjE2MDUwMTE3WjAzMTEwLwYDVQQD
EygxY2UyNjY0YmMxMmJmYWEzYjVmYzM1N2ExOGFjYmUwNWUxMWIwZWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymMLShINlY1nF8Ea+DnfxaY/15xZ
Mm6IBDuNB049N7DmLR2YSjJsFY9pnStq0ZvK06s0YBn+4U+m6+Eszw6ntt3Pb9UU
+OfWrCrYUGN14zsDHoOnJpviCrSXcCcp9LbBwPf1jBb7/XNViMucqDs8E+z8N+po
gTu+sbywvCBlmqterRIJvhpT84NbbxvkOQjReInjhjNN6Zz6pzw4Sw8dtGoPo8fy
xyv3rxgWfy/iT6g17E/wyC9WxQWLUL+SEsjGt0K3AlZ/HnAiDxVK+uRhsIfKGaFh
D6W3dPjZEAFvOUc87lRXisGPhNUBlqKroP4H0BANehyfj44GMNjpkU8rjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBziZkvBK/qjtfw1ehisvgXhGw6pMB8GA1UdIwQY
MBaAFKao80Nv2D6K9hDyFoCJlukKysddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHFqelEyX1lQb3IyRVBJV2dJbVc2UXJLeDEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi81YjE2NTctYWJmMC00ZDM2LWE4OTIt
YWJlNWM4ZTJiYWQ2LzEvcHFqelEyX1lQb3IyRVBJV2dJbVc2UXJLeDEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi81YjE2NTctYWJmMC00ZDM2LWE4OTItYWJlNWM4ZTJiYWQ2
LzEvcHFqelEyX1lQb3IyRVBJV2dJbVc2UXJLeDEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVf8/47IK
KbHhXuDjOhznsUZ9dmv8+pjcxtC2sXdOkgDMOlMTPa6QoZ1fYayPG+O0jvWR4KGh
0WYWtQBh7mISw0NxPgdQw9jBScTyHFxamA8qBkv3HMvGkePhIAABNeo925GAe2XE
KnEWEyZI7jZF2eiTbKW/VRwx+sjQ9Ql7xWOmi6PrAKUH17+u3I5R6S+vnZ8K0Rln
hZl27qVTo8KDwfxTmCQDs8NN4RLX3JfTZVFxvUqIKbWXVbmaei43a7MEVFJ0op6v
9Gf6dp30mPNp+e1Oxg9gGbxXXfzJVrd9Gi662LWfXgsHUqNQzPoWI0nASE4rQ8g1
kH/QEJAqbS/QNA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:35:14 2025 by rpki-client