Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
File: pQnoZXbAZeFL--6PZSq2wnnM3hI.mft (raw, json)
Hash identifier: OBCFnKcwiuLRu2qaSw+BLzQr4UR3LyzsoVTux2B9tzg=
Subject key identifier: 31:9B:E9:DB:B3:53:DC:4A:85:E6:81:E8:DE:BC:8E:90:3C:85:1B:A1
Authority key identifier: A5:09:E8:65:76:C0:65:E1:4B:FB:EE:8F:65:2A:B6:C2:79:CC:DE:12
Certificate issuer: /CN=a509e86576c065e14bfbee8f652ab6c279ccde12
Certificate serial: 01987C7764A5BDB51C0E5C28D75E30C74BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
Manifest number: 0F58
Signing time: Tue 05 Aug 2025 23:00:56 +0000
Manifest this update: Tue 05 Aug 2025 23:00:56 +0000
Manifest next update: Wed 06 Aug 2025 23:00:56 +0000
Files and hashes: 1: eoOnLGiO6CFkl49Rw92BKVWZ1YY.roa (hash: 5KK2WxAAZ4SHFL6JTNlCRgBRKCCitoVvyQFa3VeriMw=)
2: pQnoZXbAZeFL--6PZSq2wnnM3hI.crl (hash: G89iDlElqK+cTqx1FCHoCqm5v4suxTMJ8MRojSark5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:64:a5:bd:b5:1c:0e:5c:28:d7:5e:30:c7:4b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a509e86576c065e14bfbee8f652ab6c279ccde12
Validity
Not Before: Aug 5 23:00:56 2025 GMT
Not After : Aug 6 23:00:56 2025 GMT
Subject: CN=319be9dbb353dc4a85e681e8debc8e903c851ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d4:94:e9:65:8b:1e:57:de:38:a6:8e:8a:6d:
3d:bd:4e:2a:8a:13:71:7c:c8:91:02:39:78:31:72:
02:4a:ef:a2:e3:f5:08:b2:ea:7f:ad:13:d9:fd:91:
46:f5:52:5e:d0:9e:fe:c3:3a:c2:60:4a:9d:20:e9:
d0:ac:a6:2d:a8:5d:fa:a6:ce:45:e4:aa:c4:69:b4:
6f:12:bc:45:38:3c:61:cc:1e:4c:3f:7f:67:aa:ac:
e0:0a:ed:bd:69:7b:78:41:3b:e6:c8:ef:35:a4:2f:
fa:37:8c:27:d9:fc:79:66:a3:5c:26:ed:9f:f0:24:
3c:15:a2:97:cd:95:ce:cd:46:a2:d5:81:ae:98:18:
1d:3b:1f:5c:70:0e:e1:60:08:ad:f5:2a:85:15:9a:
44:90:7e:6c:7e:d9:38:8c:4f:16:6d:f9:b3:73:8e:
94:17:07:76:7e:b1:8c:1c:b2:df:28:32:91:ed:2e:
9f:9d:42:52:73:5f:e8:17:12:92:a6:a8:e9:03:ca:
0a:2b:86:42:28:f0:c0:30:ae:f7:71:52:7e:fb:d2:
65:44:50:6c:c9:24:ef:83:40:29:14:37:91:d5:ef:
91:53:c0:45:3e:e7:ab:27:d8:20:5a:a7:38:04:cb:
6e:cc:e8:af:77:9c:8b:70:81:11:3e:71:2d:1c:6d:
a4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9B:E9:DB:B3:53:DC:4A:85:E6:81:E8:DE:BC:8E:90:3C:85:1B:A1
X509v3 Authority Key Identifier:
keyid:A5:09:E8:65:76:C0:65:E1:4B:FB:EE:8F:65:2A:B6:C2:79:CC:DE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:55:cc:6b:a2:d1:51:93:74:10:9e:15:a2:58:14:9f:49:0b:
f7:eb:78:48:7e:f0:18:24:a1:9a:1c:a5:8c:c3:af:71:0a:c6:
02:01:4a:20:3e:31:fe:8a:81:20:01:d2:dd:23:70:ae:e1:0d:
76:60:c1:bc:7a:65:5f:c7:d8:e2:04:15:82:88:a8:99:6b:de:
d4:9a:2e:8b:bb:a1:fb:55:43:b2:51:b9:be:5c:92:53:0f:68:
8b:e0:00:50:07:b6:3d:68:dc:84:5a:a6:87:f2:19:07:42:a3:
7f:ed:86:ea:f8:91:c4:3f:3e:0d:7d:0a:15:51:c6:e4:6d:b8:
3b:61:c9:b1:22:6d:95:97:a0:84:3d:a5:19:d8:7f:70:cb:5a:
c5:a3:ba:17:ae:f7:40:6a:b7:0b:04:46:d2:8a:d5:ea:90:ae:
c6:1b:5c:03:87:22:46:a0:43:bc:dd:55:cd:c7:b7:25:a3:7b:
e4:d0:24:9d:b2:a4:02:6a:2e:c9:a4:50:08:0b:ac:c7:1d:5a:
34:ed:6f:c9:37:27:06:3f:a4:1c:e7:9b:04:54:c6:be:29:86:
51:63:57:68:e5:e1:d0:b9:a9:4c:3d:0f:7b:4d:df:dc:58:17:
48:e4:57:aa:f8:7c:1a:31:b6:c6:a1:54:e3:f8:df:5e:b3:34:
15:b6:35:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:03:05 2025 by rpki-client