Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.mft
File: PqFIQth34nvEBouYH-dK64vufnM.mft (raw, json)
Hash identifier: S3vtyW1CHwCLLrR6IEkBi287Hr5mIhIxwyPNOZ+zAd8=
Subject key identifier: 0E:99:DA:BF:15:C3:C4:1B:07:76:4B:6A:62:65:59:70:9B:13:13:B4
Authority key identifier: 3E:A1:48:42:D8:77:E2:7B:C4:06:8B:98:1F:E7:4A:EB:8B:EE:7E:73
Certificate issuer: /CN=3ea14842d877e27bc4068b981fe74aeb8bee7e73
Certificate serial: 01978244CC7B6108387046E165AB6F14A70E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqFIQth34nvEBouYH-dK64vufnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.mft
Manifest number: 159A
Signing time: Wed 18 Jun 2025 09:00:36 +0000
Manifest this update: Wed 18 Jun 2025 09:00:36 +0000
Manifest next update: Thu 19 Jun 2025 09:00:36 +0000
Files and hashes: 1: PqFIQth34nvEBouYH-dK64vufnM.crl (hash: bPIka0jPyjcvHUdxGHBy9X9U9RkdBkR5GXqGiUv1ns0=)
2: h5AoEy-X54Db83-jTlFH2Y1fCVw.roa (hash: HOh3C7TWeQ0O5hO+1P91yiEiZozSeSnp7F1/q290vZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqFIQth34nvEBouYH-dK64vufnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 09:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:44:cc:7b:61:08:38:70:46:e1:65:ab:6f:14:a7:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea14842d877e27bc4068b981fe74aeb8bee7e73
Validity
Not Before: Jun 18 09:00:36 2025 GMT
Not After : Jun 19 09:00:36 2025 GMT
Subject: CN=0e99dabf15c3c41b07764b6a626559709b1313b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c9:ea:64:50:e0:8c:2f:09:7a:11:8e:89:ec:
f7:a7:4b:87:bb:1b:19:f6:b1:c9:99:c9:b7:e6:47:
f7:4c:dd:ea:b2:2b:9d:2d:23:70:ed:a4:dd:53:21:
21:23:2d:ed:1a:30:1d:49:75:ab:35:a5:59:2e:84:
71:00:a4:13:13:03:1d:9b:e5:fe:e1:a1:1a:bc:3d:
18:d9:be:a2:4d:92:b0:26:10:dc:67:16:53:18:1c:
58:56:30:ce:ff:7e:f0:6e:2e:e9:1e:9f:28:c2:88:
50:4a:9d:e4:20:1a:ff:ea:28:45:ab:7b:63:f8:f7:
51:76:7d:6d:80:e0:ca:e8:a3:da:9f:b4:34:dc:98:
6e:7c:9a:2b:e1:2f:22:e9:1e:f6:6d:6a:30:0a:da:
05:cf:ec:49:f2:65:77:43:71:7e:11:6d:4c:ee:21:
8a:12:a2:bb:63:e4:3c:b8:84:85:31:0b:7f:5a:a8:
40:04:77:48:28:f5:4a:82:00:f2:11:c7:be:04:a5:
09:17:4d:78:c7:2d:0c:ee:9b:7b:82:5d:f6:25:f9:
53:3c:f0:69:6a:dc:00:3b:2b:c6:8a:ac:e9:cd:18:
4b:3a:c6:36:75:86:0c:33:53:db:55:8a:4c:b4:08:
b9:10:57:9b:07:44:03:38:b5:9a:b5:36:e6:58:fc:
78:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:99:DA:BF:15:C3:C4:1B:07:76:4B:6A:62:65:59:70:9B:13:13:B4
X509v3 Authority Key Identifier:
keyid:3E:A1:48:42:D8:77:E2:7B:C4:06:8B:98:1F:E7:4A:EB:8B:EE:7E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqFIQth34nvEBouYH-dK64vufnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ac:87:7d:a4:64:fc:ec:76:6b:af:2f:6f:c4:bc:55:92:8f:
c9:4a:59:28:7d:6e:c4:1b:86:53:51:09:f4:e5:0d:5e:15:1a:
46:e5:a7:03:fe:cd:ee:47:81:4b:1b:c4:04:db:41:85:4c:27:
31:cb:0b:37:7c:f5:a1:ab:35:13:14:7d:95:c0:5a:0a:22:c8:
0b:32:70:40:7f:07:4a:3b:47:34:c1:eb:a8:53:99:67:69:cb:
ab:76:52:d6:d2:ed:0f:50:42:29:18:09:12:f4:0c:d7:e6:d5:
3c:16:19:8f:f3:9e:ff:c2:1c:20:ad:98:db:d9:11:a4:56:7a:
fb:3b:51:d5:48:bb:75:1c:0d:53:12:80:1d:61:7e:d6:5f:96:
36:f1:51:04:c7:24:ab:7c:14:0f:46:41:25:2c:aa:1b:4b:8f:
9c:1f:f2:3a:1e:41:6f:51:13:8c:31:c6:cd:e5:9d:90:5f:df:
b3:da:c7:64:41:69:44:50:fc:df:99:ab:5c:0c:31:69:97:79:
a4:89:ff:01:78:02:af:13:ad:50:22:5f:a2:30:6e:19:b7:47:
06:e6:be:22:c9:71:f9:99:75:9d:7b:43:da:3c:0d:7f:d3:cb:
68:22:e1:62:b7:1e:cb:9f:47:3d:7e:3a:d8:6e:2a:3f:bf:b8:
a8:9f:f7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 19:46:01 2025 by rpki-client