
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
File: PQSDU4c3RT4vV_-1dJnDki6DY20.mft (raw, json)
Hash identifier: C9JK1sn2n3x2zBZLkpbeCNencAr5i84/1jPGdbtaZJg=
Subject key identifier: A9:FE:B8:12:F6:2A:10:05:BD:1D:10:EF:DC:2C:0C:62:D1:98:B5:BA
Authority key identifier: 3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
Certificate issuer: /CN=3d0483538737453e2f57ffb57499c3922e83636d
Certificate serial: 019874F48E7F8FAB5E178D2D23F8BAE3BBEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
Manifest number: 1545
Signing time: Mon 04 Aug 2025 12:00:40 +0000
Manifest this update: Mon 04 Aug 2025 12:00:40 +0000
Manifest next update: Tue 05 Aug 2025 12:00:40 +0000
Files and hashes: 1: 09rZaDf9P6R4diZdTpqbdJFmS5g.roa (hash: nJaLySku8ZYvCwVFCoV24PH4wOMxHH06lLCXG71Fdv0=)
2: 2kjnNcqey0OLGfySAKowHBG5Guo.roa (hash: 9jemYzIQoMUwDIBYN/+zDuFoechTYsBGwQpOaXYxFKk=)
3: 8jdJFfwz0f1bOSecP72_M36iRRI.roa (hash: 82Bf1Auf8nRCamjssfldTKSxot7XSbfVdi0kTqeYaRU=)
4: C4Wnra33s7vzTKpZqkw-dbYY55M.roa (hash: hVOornvwVn2Bg/Fh05dDWBnBXCHA01Bg7itlOVetmo0=)
5: OSXtgZFTRCqapZbj1Rss-9P6qbI.roa (hash: AUmjKUojOqL9JzPQrWExZ3cDw/gVJywbQJ3W19HFEWU=)
6: PQSDU4c3RT4vV_-1dJnDki6DY20.crl (hash: 4dY9zXaZgW84zSW1+kfRp3N/0sRuHe7aCxBtIuZBv0I=)
7: _9T_S-kr42TO8YpZQ1p1cNkCs8k.roa (hash: DCwl+cJRNegCixrl6T1943uL08w3GonOBX/1cFtnPHo=)
8: pV07vwevm-8BJLnT3hJuAHpGkJ4.roa (hash: uUXRNFSfG2j7vXcwLg3l6DuZ/886vt2liizx+IzMA7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:8e:7f:8f:ab:5e:17:8d:2d:23:f8:ba:e3:bb:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0483538737453e2f57ffb57499c3922e83636d
Validity
Not Before: Aug 4 12:00:40 2025 GMT
Not After : Aug 5 12:00:40 2025 GMT
Subject: CN=a9feb812f62a1005bd1d10efdc2c0c62d198b5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c8:da:2a:90:15:36:b2:c9:59:eb:a4:2a:3a:
aa:eb:87:46:d6:61:7a:c0:cc:1c:af:0a:1d:30:87:
cf:6f:f2:1c:bb:62:b0:0d:dd:fd:6c:99:40:6b:20:
a2:e5:06:81:4b:22:b9:d4:e8:98:0a:bc:8e:4e:db:
68:19:8d:12:b7:e1:1d:31:f9:af:cf:2a:fb:74:ae:
3b:0d:62:61:5a:cb:04:38:b5:5f:38:2c:a5:3d:fc:
5a:dc:8c:c1:d9:8a:2a:14:10:db:8c:66:b5:aa:6a:
50:5e:3f:22:dd:a4:55:58:31:78:30:8f:4e:ef:5b:
be:f1:41:2e:9b:36:4f:56:b8:c2:ca:b0:63:d2:ae:
61:67:1f:26:dd:20:66:c6:1e:34:82:23:a5:c5:15:
56:3e:aa:5e:0a:35:0c:eb:4d:54:d9:94:e6:32:df:
bf:13:d4:89:03:aa:b7:99:81:cb:3d:b8:da:fe:4f:
32:c7:f0:57:0d:cf:ac:5b:f0:06:9a:2c:59:89:73:
78:43:3a:9e:38:cd:21:65:1c:95:df:7f:4d:f0:96:
05:35:34:92:4c:a6:8c:6c:51:0a:3a:21:d8:b5:0e:
b4:52:c5:b0:be:4c:41:aa:81:73:a6:80:3b:e6:ef:
3f:7f:9a:1e:dd:13:18:fb:1e:5e:45:2e:84:f2:cc:
e2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FE:B8:12:F6:2A:10:05:BD:1D:10:EF:DC:2C:0C:62:D1:98:B5:BA
X509v3 Authority Key Identifier:
keyid:3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:11:69:d0:92:8c:07:9b:e0:65:20:81:57:db:46:12:e5:93:
20:2d:68:8b:8e:a3:49:58:f0:dd:0f:56:e5:5a:9f:e0:3e:27:
38:1d:6f:65:ea:80:5b:1e:7c:e3:07:0a:d7:a4:b8:f6:b3:fe:
cd:b2:52:42:8a:87:31:39:64:12:a3:1a:7f:1b:46:8f:b6:e9:
b4:c9:5b:bf:93:23:06:5e:9b:10:5e:20:5d:c1:5c:94:7a:63:
ce:38:8b:2f:67:64:7e:87:23:92:8b:31:7d:5f:48:b0:75:01:
d1:48:17:ab:ea:d4:4d:e2:5e:8e:27:57:a8:b9:49:38:3e:55:
26:57:0d:70:8c:79:01:1e:39:dc:61:67:98:c2:a8:98:04:6c:
03:23:e1:1e:bd:7b:46:f1:e6:19:dd:a9:c3:e9:cf:25:55:a2:
62:a5:1b:1b:24:34:61:49:51:76:e8:d8:4b:c6:f1:ce:22:07:
02:59:14:3f:2c:b3:8e:a9:8c:4c:3a:3e:b6:07:e1:3b:e1:8b:
91:ff:60:09:f3:e7:8a:a7:bc:00:a3:83:09:bc:db:e0:3a:c5:
ea:e5:e2:f2:a0:3e:6c:57:89:cb:f2:41:a5:5a:e5:20:ac:01:
60:d5:88:dd:57:2a:77:37:9a:31:73:c0:67:16:d6:06:75:6e:
a5:34:e2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:15:51 2025 by rpki-client