Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
File: PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft (raw, json)
Hash identifier: OooZncHKL7vZlABVw9QTUW6NkXjkcSNILiMojW8VPqc=
Subject key identifier: 7C:E5:23:99:B2:19:62:A8:40:1B:3E:2A:82:26:94:1D:C0:58:88:19
Authority key identifier: 3C:45:CE:40:85:F0:2E:B8:A0:ED:1A:FD:2B:79:91:A8:AA:99:83:34
Certificate issuer: /CN=3c45ce4085f02eb8a0ed1afd2b7991a8aa998334
Certificate serial: 019769CE8F4DBA998E122D6ACD6059CA855B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
Manifest number: 158F
Signing time: Fri 13 Jun 2025 15:00:34 +0000
Manifest this update: Fri 13 Jun 2025 15:00:34 +0000
Manifest next update: Sat 14 Jun 2025 15:00:34 +0000
Files and hashes: 1: B29MvHY6zeEvGzG4mIu0G_C1t3k.roa (hash: 2w6PM7Xh404gJeZoq9hPqo7jK8P7Uk4U1TIQbaY+1sM=)
2: PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl (hash: YC3A0jTTEhodeBk87d0odSsPNQdqL8DUGGrTUxPrJvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:8f:4d:ba:99:8e:12:2d:6a:cd:60:59:ca:85:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c45ce4085f02eb8a0ed1afd2b7991a8aa998334
Validity
Not Before: Jun 13 15:00:34 2025 GMT
Not After : Jun 14 15:00:34 2025 GMT
Subject: CN=7ce52399b21962a8401b3e2a8226941dc0588819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:68:ae:a0:8f:5e:b6:f1:09:e4:59:37:1a:42:
fb:b1:f5:9a:e0:b2:65:9f:80:14:79:dd:c5:b6:15:
c2:cb:d0:d6:a3:62:87:6f:3e:99:99:68:d5:c9:6e:
15:38:fc:b4:e2:e2:fd:1f:fc:2e:dc:20:0b:af:36:
6a:ea:9a:dd:9e:dd:ac:a1:53:fa:d8:42:cd:36:6c:
39:97:ea:ab:72:aa:28:3d:8c:4b:4e:21:65:4e:8a:
5b:48:88:8b:a6:ca:ad:f6:fc:cb:e2:28:b4:5e:c5:
c5:1d:ee:2a:c7:5c:80:dd:9a:e9:41:28:78:ba:fc:
7c:61:3b:3b:9e:a7:fb:ee:cf:8d:b3:9b:06:46:13:
81:fd:ee:8e:7a:db:be:9a:b8:04:d1:1c:b3:63:c3:
33:2c:08:34:61:12:36:31:7d:bc:af:c1:c9:33:5c:
c9:41:12:da:1d:dd:6d:66:af:e8:e7:53:2d:b2:3c:
48:2d:e0:49:b6:04:4f:01:22:f5:bc:e3:0b:c2:83:
af:de:fd:87:89:22:49:54:ca:fe:d5:d7:e4:14:a4:
70:61:39:08:5c:96:c7:f4:71:fa:ae:ef:ad:71:fb:
b6:d9:48:7c:d4:c8:87:d9:46:4d:24:b8:69:9c:35:
15:19:b8:13:0c:2d:6f:04:6c:c4:0b:58:0a:02:7e:
f7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E5:23:99:B2:19:62:A8:40:1B:3E:2A:82:26:94:1D:C0:58:88:19
X509v3 Authority Key Identifier:
keyid:3C:45:CE:40:85:F0:2E:B8:A0:ED:1A:FD:2B:79:91:A8:AA:99:83:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:8d:3f:fa:7a:14:f2:35:8c:f8:e5:e0:d5:cb:00:74:99:f7:
18:f3:1c:fd:c7:b7:65:81:c4:73:17:66:ee:82:de:79:08:f7:
17:60:ba:7d:21:2b:9d:c1:28:49:18:39:33:ea:fb:9a:c2:ad:
94:96:74:90:05:9a:b0:78:f2:78:e6:6e:78:f5:37:d8:86:93:
ac:85:52:5d:17:26:46:59:93:49:1b:86:a7:20:30:6d:61:19:
f0:2b:ee:8f:3c:1e:1c:18:3b:4e:1a:98:be:bc:12:9a:1c:48:
94:aa:e2:b7:17:1a:2e:0e:ac:a2:87:60:75:5e:6f:fa:06:67:
53:99:5c:22:8a:db:58:4e:b2:42:d9:57:b0:4b:9b:5a:02:d5:
28:12:d7:e9:d8:3b:b2:0d:69:38:91:7b:43:0f:0d:07:c5:16:
39:68:99:5b:3f:ae:43:d1:38:2c:2a:1b:7c:33:77:d6:a4:e4:
9c:86:73:5d:e6:fe:e2:05:80:92:d8:ae:12:d6:06:a1:65:cf:
d3:c6:91:42:ae:d6:12:12:db:6f:ea:43:00:2e:18:79:4b:b2:
5d:de:a5:a9:32:04:b7:c1:81:87:90:c0:55:70:b6:a2:ad:82:
49:d7:d5:e4:b5:b0:38:64:d7:d0:c9:72:c8:01:61:b1:12:91:
61:a6:8d:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpzo9NupmOEi1qzWBZyoVbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNDVjZTQwODVmMDJlYjhhMGVkMWFmZDJiNzk5MWE4YWE5
OTgzMzQwHhcNMjUwNjEzMTUwMDM0WhcNMjUwNjE0MTUwMDM0WjAzMTEwLwYDVQQD
Eyg3Y2U1MjM5OWIyMTk2MmE4NDAxYjNlMmE4MjI2OTQxZGMwNTg4ODE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WiuoI9etvEJ5Fk3GkL7sfWa4LJl
n4AUed3FthXCy9DWo2KHbz6ZmWjVyW4VOPy04uL9H/wu3CALrzZq6prdnt2soVP6
2ELNNmw5l+qrcqooPYxLTiFlTopbSIiLpsqt9vzL4ii0XsXFHe4qx1yA3ZrpQSh4
uvx8YTs7nqf77s+Ns5sGRhOB/e6Oetu+mrgE0RyzY8MzLAg0YRI2MX28r8HJM1zJ
QRLaHd1tZq/o51MtsjxILeBJtgRPASL1vOMLwoOv3v2HiSJJVMr+1dfkFKRwYTkI
XJbH9HH6ru+tcfu22Uh81MiH2UZNJLhpnDUVGbgTDC1vBGzEC1gKAn73bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHzlI5myGWKoQBs+KoImlB3AWIgZMB8GA1UdIwQY
MBaAFDxFzkCF8C64oO0a/St5kaiqmYM0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEVYT1FJWHdMcmlnN1JyOUszbVJxS3FaZ3pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85NzMzNGEtYzk3Zi00N2M0LTk5ODIt
ZDg2NzZhODBjZmM3LzEvUEVYT1FJWHdMcmlnN1JyOUszbVJxS3FaZ3pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS85NzMzNGEtYzk3Zi00N2M0LTk5ODItZDg2NzZhODBjZmM3
LzEvUEVYT1FJWHdMcmlnN1JyOUszbVJxS3FaZ3pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN40/+noU
8jWM+OXg1csAdJn3GPMc/ce3ZYHEcxdm7oLeeQj3F2C6fSErncEoSRg5M+r7msKt
lJZ0kAWasHjyeOZuePU32IaTrIVSXRcmRlmTSRuGpyAwbWEZ8CvujzweHBg7ThqY
vrwSmhxIlKritxcaLg6soodgdV5v+gZnU5lcIorbWE6yQtlXsEubWgLVKBLX6dg7
sg1pOJF7Qw8NB8UWOWiZWz+uQ9E4LCobfDN31qTknIZzXeb+4gWAktiuEtYGoWXP
08aRQq7WEhLbb+pDAC4YeUuyXd6lqTIEt8GBh5DAVXC2oq2CSdfV5LWwOGTX0Mly
yAFhsRKRYaaNKA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:04:08 2025 by rpki-client