Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.mft
File: pQzTuftkZJFa0NN2CTTAGCiJ8fs.mft (raw, json)
Hash identifier: fWzJ5SfeXElMPG5suqG/pNqd21D5xigsOlST++FMJ/s=
Subject key identifier: 79:DE:09:CC:FB:CC:6B:59:8B:58:DA:CF:21:D5:89:08:77:96:C4:5C
Authority key identifier: A5:0C:D3:B9:FB:64:64:91:5A:D0:D3:76:09:34:C0:18:28:89:F1:FB
Certificate issuer: /CN=a50cd3b9fb6464915ad0d3760934c0182889f1fb
Certificate serial: 01987675CB882D1680F96E709A63D7DCCF42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQzTuftkZJFa0NN2CTTAGCiJ8fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.mft
Manifest number: 0AAB
Signing time: Mon 04 Aug 2025 19:01:28 +0000
Manifest this update: Mon 04 Aug 2025 19:01:28 +0000
Manifest next update: Tue 05 Aug 2025 19:01:28 +0000
Files and hashes: 1: LPRtA19ISdoMAcOg5dTdVh6L9Jk.roa (hash: yfplS3KyTgY8se7AVlwzcVLsAsein115ckLeaHyCF6w=)
2: pQzTuftkZJFa0NN2CTTAGCiJ8fs.crl (hash: Yv6wxW6bm1rtyZq251re+Vcg1ma1DVpUWJLNpWiqr2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQzTuftkZJFa0NN2CTTAGCiJ8fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:76:75:cb:88:2d:16:80:f9:6e:70:9a:63:d7:dc:cf:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a50cd3b9fb6464915ad0d3760934c0182889f1fb
Validity
Not Before: Aug 4 19:01:28 2025 GMT
Not After : Aug 5 19:01:28 2025 GMT
Subject: CN=79de09ccfbcc6b598b58dacf21d589087796c45c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f5:5e:b9:22:86:84:fb:1b:17:36:8a:ad:42:
7a:8b:4f:c3:06:16:f0:87:f2:ae:db:57:3e:8a:4a:
65:4c:a3:62:f7:1d:40:28:5c:07:58:9a:4a:b0:81:
3a:be:07:91:6f:a2:11:f1:bf:3e:86:d1:d8:c1:85:
fa:62:7e:0c:87:59:20:5b:a1:45:51:9d:c8:19:6d:
ec:28:39:02:b6:e7:c9:0e:97:15:4d:fd:6e:64:12:
62:03:42:ce:a1:d3:fe:0a:c4:1c:89:c1:63:f5:fc:
e5:d9:a3:0f:8d:2d:a3:3a:ec:af:f0:b7:50:af:af:
ea:db:92:4c:ed:74:e3:91:b5:53:65:d9:f4:31:3e:
c8:3e:0f:92:df:81:80:1a:d1:a2:65:e6:ca:3e:85:
e0:9a:a3:4a:fd:9f:bc:de:4a:96:90:56:83:b9:cd:
cb:7f:b7:6e:0f:f0:10:e4:af:f9:71:2e:23:c1:e3:
77:39:25:fa:3e:c9:52:63:6a:5f:b3:5e:ef:b6:3c:
7c:3f:aa:b8:92:b6:a1:97:9a:fa:bd:ce:37:50:ac:
d4:4f:ff:a7:cb:73:df:b5:27:d8:37:80:2f:8c:b8:
e8:f9:80:33:d6:05:cf:8e:e3:f9:88:02:f4:86:5b:
7c:3d:4d:9d:d2:64:a6:4b:23:3c:a3:4d:a5:a1:5d:
fd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:DE:09:CC:FB:CC:6B:59:8B:58:DA:CF:21:D5:89:08:77:96:C4:5C
X509v3 Authority Key Identifier:
keyid:A5:0C:D3:B9:FB:64:64:91:5A:D0:D3:76:09:34:C0:18:28:89:F1:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQzTuftkZJFa0NN2CTTAGCiJ8fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:84:7b:3d:8f:3f:ee:4c:af:a0:d2:16:6a:e3:03:85:47:13:
66:69:fa:c2:f4:2d:92:db:18:41:b5:c9:93:52:a3:b6:68:15:
49:0c:d8:94:72:08:8d:52:3f:9c:5b:10:2d:28:e7:b4:21:37:
35:99:31:29:72:c2:3a:2a:47:b2:95:03:6e:c4:62:1b:4d:51:
de:7d:83:5b:42:11:da:56:05:1d:19:06:da:b2:03:fa:15:68:
c0:62:73:47:33:7d:44:62:a1:8e:95:ba:68:82:76:8a:13:d8:
e0:a9:fb:6d:0e:6e:a9:bf:52:21:2d:8c:56:14:b0:04:ac:fc:
0a:00:67:ac:5c:a7:e2:6b:1b:ca:65:7f:4f:ce:a3:85:1f:e7:
de:e6:74:d1:f0:87:87:12:fb:8d:8d:b2:1d:ab:2a:43:3e:bf:
79:20:2e:95:7c:d4:bb:9f:2e:21:a3:65:3d:81:7d:fa:f5:c7:
40:f0:91:88:c3:44:da:bb:f9:01:4e:b3:9d:eb:db:a8:46:80:
46:f0:cc:1a:01:da:d6:e2:6a:d3:99:de:fe:f0:c1:24:ec:19:
da:e0:ef:77:84:94:04:42:df:cc:3c:e0:34:e6:68:1a:ea:88:
95:6d:4f:be:f0:0d:ca:a1:a4:43:5f:9d:58:49:3a:14:89:d0:
6a:04:e0:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh2dcuILRaA+W5wmmPX3M9CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MGNkM2I5ZmI2NDY0OTE1YWQwZDM3NjA5MzRjMDE4Mjg4
OWYxZmIwHhcNMjUwODA0MTkwMTI4WhcNMjUwODA1MTkwMTI4WjAzMTEwLwYDVQQD
Eyg3OWRlMDljY2ZiY2M2YjU5OGI1OGRhY2YyMWQ1ODkwODc3OTZjNDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPVeuSKGhPsbFzaKrUJ6i0/DBhbw
h/Ku21c+ikplTKNi9x1AKFwHWJpKsIE6vgeRb6IR8b8+htHYwYX6Yn4Mh1kgW6FF
UZ3IGW3sKDkCtufJDpcVTf1uZBJiA0LOodP+CsQcicFj9fzl2aMPjS2jOuyv8LdQ
r6/q25JM7XTjkbVTZdn0MT7IPg+S34GAGtGiZebKPoXgmqNK/Z+83kqWkFaDuc3L
f7duD/AQ5K/5cS4jweN3OSX6PslSY2pfs17vtjx8P6q4krahl5r6vc43UKzUT/+n
y3PftSfYN4AvjLjo+YAz1gXPjuP5iAL0hlt8PU2d0mSmSyM8o02loV39BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHneCcz7zGtZi1jazyHViQh3lsRcMB8GA1UdIwQY
MBaAFKUM07n7ZGSRWtDTdgk0wBgoifH7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFF6VHVmdGtaSkZhME5OMkNUVEFHQ2lKOGZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8zYzkyZmEtYzNkNS00YTM2LTllMTct
MzdlOWU4NmE5Mjc5LzEvcFF6VHVmdGtaSkZhME5OMkNUVEFHQ2lKOGZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8zYzkyZmEtYzNkNS00YTM2LTllMTctMzdlOWU4NmE5Mjc5
LzEvcFF6VHVmdGtaSkZhME5OMkNUVEFHQ2lKOGZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJYR7PY8/
7kyvoNIWauMDhUcTZmn6wvQtktsYQbXJk1KjtmgVSQzYlHIIjVI/nFsQLSjntCE3
NZkxKXLCOipHspUDbsRiG01R3n2DW0IR2lYFHRkG2rID+hVowGJzRzN9RGKhjpW6
aIJ2ihPY4Kn7bQ5uqb9SIS2MVhSwBKz8CgBnrFyn4msbymV/T86jhR/n3uZ00fCH
hxL7jY2yHasqQz6/eSAulXzUu58uIaNlPYF9+vXHQPCRiMNE2rv5AU6znevbqEaA
RvDMGgHa1uJq05ne/vDBJOwZ2uDvd4SUBELfzDzgNOZoGuqIlW1PvvANyqGkQ1+d
WEk6FInQagTgfw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 22:16:00 2025 by rpki-client