Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft
File: PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft (raw, json)
Hash identifier: Q6prCnPMFGKF4S1p3PuPWmh/Qbz4SVI/0UVtiS1gwTM=
Subject key identifier: 9E:AF:7A:18:38:00:0B:58:E4:28:5A:71:5C:F6:80:18:69:6E:BF:9F
Authority key identifier: 3E:A9:9F:00:00:0B:EE:B9:F1:B2:85:4B:A5:0E:C7:B8:81:26:DB:A9
Certificate issuer: /CN=3ea99f00000beeb9f1b2854ba50ec7b88126dba9
Certificate serial: 0198741945DD0C9F00568502D2D870C86129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqmfAAAL7rnxsoVLpQ7HuIEm26k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft
Manifest number: 07AA
Signing time: Mon 04 Aug 2025 08:01:09 +0000
Manifest this update: Mon 04 Aug 2025 08:01:09 +0000
Manifest next update: Tue 05 Aug 2025 08:01:09 +0000
Files and hashes: 1: FNcoFmyMsrmKFW3pVuTLoiKb9Y0.roa (hash: L2M1ZIYqNE7da9VzHmMG0LiaV1K9e8NQgXmk4Xn6knE=)
2: PqmfAAAL7rnxsoVLpQ7HuIEm26k.crl (hash: 9a9duZ7h5gt2cJxE3XyRmBpXm2mQg4zCPTmsTHgrh38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqmfAAAL7rnxsoVLpQ7HuIEm26k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:45:dd:0c:9f:00:56:85:02:d2:d8:70:c8:61:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea99f00000beeb9f1b2854ba50ec7b88126dba9
Validity
Not Before: Aug 4 08:01:09 2025 GMT
Not After : Aug 5 08:01:09 2025 GMT
Subject: CN=9eaf7a1838000b58e4285a715cf68018696ebf9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cd:35:cb:e9:0e:a2:20:47:69:d4:d5:3a:1b:
38:01:5d:9c:22:98:3c:7a:cb:b4:ef:84:55:f5:61:
37:a6:db:14:70:21:af:71:a2:04:65:b8:0a:47:07:
8d:eb:5c:e3:37:85:b2:40:1c:2b:dc:36:33:38:c3:
50:f6:c8:d2:5a:3d:57:e6:c4:42:3b:cf:65:84:96:
bb:5a:b6:68:60:cb:4c:8e:fe:3f:34:03:96:71:ca:
ef:cf:99:c0:32:29:48:66:c4:a4:f1:43:8c:1c:26:
c3:ab:c9:23:95:29:bd:31:cd:7d:e5:81:bb:a1:1d:
1b:8d:3d:a6:8d:8d:7c:91:31:0a:7a:2c:88:0b:7e:
e7:4f:35:77:6c:11:07:81:8d:20:ce:ab:e8:1a:cb:
f7:30:70:75:cf:52:d1:ac:56:77:e7:17:ac:c8:34:
41:62:26:4c:fc:e9:10:f1:a7:0c:06:9b:d6:cf:62:
02:7d:25:2f:fd:f2:d5:34:07:97:27:7c:65:d6:63:
d6:dc:01:8c:30:75:62:5c:a3:f1:0c:95:63:f3:29:
19:b1:18:e4:fa:88:ab:44:bb:70:a4:a2:39:f1:9d:
e6:52:1e:36:12:49:c5:79:3b:ce:92:56:60:6d:c4:
e8:b0:7d:93:9e:73:65:b2:d4:e3:76:41:55:44:b7:
24:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AF:7A:18:38:00:0B:58:E4:28:5A:71:5C:F6:80:18:69:6E:BF:9F
X509v3 Authority Key Identifier:
keyid:3E:A9:9F:00:00:0B:EE:B9:F1:B2:85:4B:A5:0E:C7:B8:81:26:DB:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqmfAAAL7rnxsoVLpQ7HuIEm26k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:1b:88:d8:02:f5:5e:98:81:cd:49:ea:eb:70:c9:78:aa:0e:
c5:f0:9c:ee:fd:d7:31:aa:8e:9e:0d:28:56:44:71:d3:f9:aa:
56:65:65:c4:8a:44:7d:1a:21:84:e0:d0:22:1b:8b:84:8a:a7:
a8:34:a2:f5:4f:4c:0f:04:5a:19:3d:b4:f8:4b:f1:62:79:41:
c4:f9:27:1e:16:b5:a6:0b:e7:24:ac:af:54:ab:3d:6d:e5:d5:
ea:e0:b9:78:ef:36:13:bf:5e:c9:5a:a0:ab:05:cc:25:2b:84:
86:00:9d:ad:fa:13:8c:02:48:cf:92:c3:72:5d:9b:47:db:b4:
35:ae:18:4b:f0:7e:e9:ea:49:1e:60:a9:9e:b4:c8:31:87:8f:
f6:e3:14:77:79:0b:63:62:65:9b:85:52:6a:0c:d4:a9:56:9e:
04:84:bd:40:9b:fb:53:a7:3b:84:a3:77:fa:a3:04:7d:95:de:
ee:7b:ac:46:66:08:6f:8a:91:4c:00:fd:65:36:72:c7:20:3d:
cb:09:03:aa:06:d6:4a:53:05:14:2e:8c:19:f8:4e:e0:78:9c:
de:75:be:b5:ea:a3:c9:1e:43:d4:e4:17:5c:62:3a:d1:50:47:
55:72:ea:42:33:b1:3c:fa:dc:52:c9:87:96:b0:f5:ad:a6:c6:
d5:14:16:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GUXdDJ8AVoUC0thwyGEpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYTk5ZjAwMDAwYmVlYjlmMWIyODU0YmE1MGVjN2I4ODEy
NmRiYTkwHhcNMjUwODA0MDgwMTA5WhcNMjUwODA1MDgwMTA5WjAzMTEwLwYDVQQD
Eyg5ZWFmN2ExODM4MDAwYjU4ZTQyODVhNzE1Y2Y2ODAxODY5NmViZjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlc01y+kOoiBHadTVOhs4AV2cIpg8
esu074RV9WE3ptsUcCGvcaIEZbgKRweN61zjN4WyQBwr3DYzOMNQ9sjSWj1X5sRC
O89lhJa7WrZoYMtMjv4/NAOWccrvz5nAMilIZsSk8UOMHCbDq8kjlSm9Mc195YG7
oR0bjT2mjY18kTEKeiyIC37nTzV3bBEHgY0gzqvoGsv3MHB1z1LRrFZ35xesyDRB
YiZM/OkQ8acMBpvWz2ICfSUv/fLVNAeXJ3xl1mPW3AGMMHViXKPxDJVj8ykZsRjk
+oirRLtwpKI58Z3mUh42EknFeTvOklZgbcTosH2TnnNlstTjdkFVRLckDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ6vehg4AAtY5ChacVz2gBhpbr+fMB8GA1UdIwQY
MBaAFD6pnwAAC+658bKFS6UOx7iBJtupMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHFtZkFBQUw3cm54c29WTHBRN0h1SUVtMjZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS81ODFlNjgtNGQ0NS00MGViLTg5ZDkt
ODgxNmZiYThiZTEyLzEvUHFtZkFBQUw3cm54c29WTHBRN0h1SUVtMjZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS81ODFlNjgtNGQ0NS00MGViLTg5ZDktODgxNmZiYThiZTEy
LzEvUHFtZkFBQUw3cm54c29WTHBRN0h1SUVtMjZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoRuI2AL1
XpiBzUnq63DJeKoOxfCc7v3XMaqOng0oVkRx0/mqVmVlxIpEfRohhODQIhuLhIqn
qDSi9U9MDwRaGT20+EvxYnlBxPknHha1pgvnJKyvVKs9beXV6uC5eO82E79eyVqg
qwXMJSuEhgCdrfoTjAJIz5LDcl2bR9u0Na4YS/B+6epJHmCpnrTIMYeP9uMUd3kL
Y2Jlm4VSagzUqVaeBIS9QJv7U6c7hKN3+qMEfZXe7nusRmYIb4qRTAD9ZTZyxyA9
ywkDqgbWSlMFFC6MGfhO4Hic3nW+teqjyR5D1OQXXGI60VBHVXLqQjOxPPrcUsmH
lrD1rabG1RQWrw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:29 2025 by rpki-client