Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
File: PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft (raw, json)
Hash identifier: w/yrDtdewuVWqA9qksDru5SDA+ecqFbhSHbuyfYs5SM=
Subject key identifier: 6E:C5:F6:C2:4D:33:D0:E5:04:72:74:FE:55:B8:A3:23:A1:84:BA:F5
Authority key identifier: 3E:A6:ED:31:F9:7F:37:C5:E5:C5:50:73:2F:85:D2:46:90:96:2C:EF
Certificate issuer: /CN=3ea6ed31f97f37c5e5c550732f85d24690962cef
Certificate serial: 019873E1EEA08CFAEC19563E446E52FDFE51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
Manifest number: 1612
Signing time: Mon 04 Aug 2025 07:00:43 +0000
Manifest this update: Mon 04 Aug 2025 07:00:43 +0000
Manifest next update: Tue 05 Aug 2025 07:00:43 +0000
Files and hashes: 1: PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl (hash: THhHhcGs3UAFkpNQUOhzSIIgHWGvU3S1MZb8705Fh+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:ee:a0:8c:fa:ec:19:56:3e:44:6e:52:fd:fe:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea6ed31f97f37c5e5c550732f85d24690962cef
Validity
Not Before: Aug 4 07:00:43 2025 GMT
Not After : Aug 5 07:00:43 2025 GMT
Subject: CN=6ec5f6c24d33d0e5047274fe55b8a323a184baf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:17:db:55:3c:5d:fa:bd:7c:6b:83:68:31:87:
a9:20:7e:b4:8f:c4:55:56:5d:05:ee:37:79:c6:02:
a4:09:6c:1b:3a:ae:c3:2b:71:84:32:cf:39:33:c0:
a1:93:59:be:76:fe:c2:8a:d7:ef:f0:96:c0:93:b0:
6c:66:ce:c2:26:d1:14:fd:86:3a:6c:87:70:26:cc:
1e:fe:a7:b3:1a:aa:c3:a8:33:f5:b0:22:68:f6:92:
af:49:6d:75:5a:a8:d4:2b:e1:b3:09:5f:45:0e:94:
0a:5f:ee:08:b1:20:e5:59:ba:8c:89:89:ad:be:dc:
01:ff:28:b2:8e:a0:ca:41:64:56:5d:c2:bf:ed:45:
d8:da:9f:97:4f:31:33:0d:ad:ff:2f:38:4e:37:07:
5f:c3:a8:6f:7a:c5:78:77:1a:c3:0d:60:6e:06:cd:
0a:0b:ed:3f:be:84:7d:b2:d3:fd:a6:9c:ed:d1:60:
ac:d0:c3:c4:bd:74:80:e3:d3:16:56:24:dd:18:b3:
7e:3c:4f:26:f5:58:20:f5:ac:24:86:d1:16:da:09:
bf:bb:10:23:0a:45:40:af:c0:04:04:7e:d8:43:35:
75:de:71:ba:0f:08:3c:31:9b:c4:39:f9:2b:63:e6:
1f:74:8f:02:f4:90:2d:d9:98:4d:3f:a9:09:53:07:
5b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C5:F6:C2:4D:33:D0:E5:04:72:74:FE:55:B8:A3:23:A1:84:BA:F5
X509v3 Authority Key Identifier:
keyid:3E:A6:ED:31:F9:7F:37:C5:E5:C5:50:73:2F:85:D2:46:90:96:2C:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:ed:9a:dd:e9:da:5d:44:69:c3:4e:ec:2e:b8:c7:09:00:8d:
6d:52:91:0d:f3:66:e5:a9:7c:74:89:d8:2d:d2:44:5a:44:a8:
2c:bc:d2:a8:0e:b3:c4:a9:5f:6c:7c:bf:f6:71:d5:73:4c:72:
fe:cd:17:51:23:ca:0b:7d:ff:f9:a7:31:bd:6c:fb:74:62:ca:
d4:16:9a:e7:c5:d3:8b:48:b2:d8:8b:85:12:8c:b9:fb:4f:3c:
1f:c8:51:60:26:09:44:89:aa:36:23:9f:48:56:2b:e7:81:fa:
9c:dc:fb:e3:74:48:94:03:05:4a:9c:f0:54:c3:ee:2f:40:c3:
88:01:80:6c:d7:0b:22:3e:7c:6c:ec:6f:b8:9b:fd:10:04:31:
a9:65:85:74:5e:7c:99:8b:7c:c7:c9:b5:16:c7:84:1d:80:37:
f9:39:02:3e:aa:ee:f9:6f:e3:8b:70:86:53:cc:09:38:03:d9:
09:12:e9:b9:10:98:d4:fa:f8:c7:7e:6c:62:7e:a2:e1:50:7c:
63:7c:7a:d1:c6:44:75:58:d1:52:29:94:75:50:c5:59:f9:40:
84:ca:e0:b4:54:d1:96:29:a0:9b:3a:37:2a:17:68:1d:56:72:
8f:fc:8b:38:ed:ed:96:99:ec:82:ce:62:4c:d2:fb:30:13:8a:
8f:4d:a8:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4e6gjPrsGVY+RG5S/f5RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYTZlZDMxZjk3ZjM3YzVlNWM1NTA3MzJmODVkMjQ2OTA5
NjJjZWYwHhcNMjUwODA0MDcwMDQzWhcNMjUwODA1MDcwMDQzWjAzMTEwLwYDVQQD
Eyg2ZWM1ZjZjMjRkMzNkMGU1MDQ3Mjc0ZmU1NWI4YTMyM2ExODRiYWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBfbVTxd+r18a4NoMYepIH60j8RV
Vl0F7jd5xgKkCWwbOq7DK3GEMs85M8Chk1m+dv7Citfv8JbAk7BsZs7CJtEU/YY6
bIdwJswe/qezGqrDqDP1sCJo9pKvSW11WqjUK+GzCV9FDpQKX+4IsSDlWbqMiYmt
vtwB/yiyjqDKQWRWXcK/7UXY2p+XTzEzDa3/LzhONwdfw6hvesV4dxrDDWBuBs0K
C+0/voR9stP9ppzt0WCs0MPEvXSA49MWViTdGLN+PE8m9Vgg9awkhtEW2gm/uxAj
CkVAr8AEBH7YQzV13nG6Dwg8MZvEOfkrY+YfdI8C9JAt2ZhNP6kJUwdbAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG7F9sJNM9DlBHJ0/lW4oyOhhLr1MB8GA1UdIwQY
MBaAFD6m7TH5fzfF5cVQcy+F0kaQlizvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHFidE1mbF9OOFhseFZCekw0WFNScENXTE84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zNWFkYjEtNjdlZC00OTJkLWJhODkt
MmU2NzkxNjk0YWViLzEvUHFidE1mbF9OOFhseFZCekw0WFNScENXTE84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8zNWFkYjEtNjdlZC00OTJkLWJhODktMmU2NzkxNjk0YWVi
LzEvUHFidE1mbF9OOFhseFZCekw0WFNScENXTE84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwe2a3ena
XURpw07sLrjHCQCNbVKRDfNm5al8dInYLdJEWkSoLLzSqA6zxKlfbHy/9nHVc0xy
/s0XUSPKC33/+acxvWz7dGLK1Baa58XTi0iy2IuFEoy5+088H8hRYCYJRImqNiOf
SFYr54H6nNz743RIlAMFSpzwVMPuL0DDiAGAbNcLIj58bOxvuJv9EAQxqWWFdF58
mYt8x8m1FseEHYA3+TkCPqru+W/ji3CGU8wJOAPZCRLpuRCY1Pr4x35sYn6i4VB8
Y3x60cZEdVjRUimUdVDFWflAhMrgtFTRlimgmzo3KhdoHVZyj/yLOO3tlpnsgs5i
TNL7MBOKj02o6Q==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:09:58 2025 by rpki-client