Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
File: PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft (raw, json)
Hash identifier: XvAzt5z8wRl2TQkfsKSh9SQmgvzVKx3MxKQic/x3hzU=
Subject key identifier: 46:F0:FD:34:B6:7B:31:70:19:DF:75:78:D5:BF:89:88:18:2C:17:52
Authority key identifier: 3C:CA:84:9B:37:50:15:F4:33:E9:A2:40:EC:AB:F0:3C:F1:52:C7:81
Certificate issuer: /CN=3cca849b375015f433e9a240ecabf03cf152c781
Certificate serial: 01988E7D75C6FEE20EA0332268313DA117BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
Manifest number: 1622
Signing time: Sat 09 Aug 2025 11:00:43 +0000
Manifest this update: Sat 09 Aug 2025 11:00:43 +0000
Manifest next update: Sun 10 Aug 2025 11:00:43 +0000
Files and hashes: 1: PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl (hash: cSsQIiAThXeORbfcdh8pXIUDKVZz1HRh+vQqW2g+tCw=)
2: tJh122419FX7oJQGYtZtkXOvqn0.roa (hash: 80WcSAxcwtJA+++UZrQ3DpOoXBp5rklUr6m+pRMbNZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:7d:75:c6:fe:e2:0e:a0:33:22:68:31:3d:a1:17:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cca849b375015f433e9a240ecabf03cf152c781
Validity
Not Before: Aug 9 11:00:43 2025 GMT
Not After : Aug 10 11:00:43 2025 GMT
Subject: CN=46f0fd34b67b317019df7578d5bf8988182c1752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9a:6e:6a:a8:7e:70:b4:73:9b:98:df:f2:72:
9b:58:f1:bc:ed:9b:a5:f5:fa:59:85:75:03:5d:4d:
a0:2c:a3:34:01:fb:10:3a:06:33:8d:28:48:c8:9e:
ca:14:d0:92:af:63:71:d7:f7:a2:07:53:f1:5c:b3:
d9:53:e3:ac:51:28:87:2e:08:fd:36:73:7d:68:c0:
56:18:c7:7e:be:9d:f6:95:0c:3d:99:17:56:bd:6d:
59:c6:ec:41:e9:0a:14:fc:47:43:ac:97:76:7e:73:
9d:79:b2:9c:89:38:40:2f:84:b1:65:33:37:91:f3:
cb:92:a2:df:81:f5:38:c4:62:8b:ab:26:92:fe:4a:
bf:72:1a:df:03:45:8c:12:9d:95:df:da:f1:30:b0:
67:78:e2:5d:49:3e:e6:a4:7d:e3:4f:ae:f5:05:2d:
7e:17:ad:9c:97:32:89:6f:d7:fd:4d:98:10:3e:56:
0a:4a:14:55:11:fb:c5:71:16:b2:41:05:02:ad:e2:
44:11:93:c1:fa:3b:d3:09:ef:dc:75:0e:a9:4a:fc:
f0:60:b3:27:47:16:a9:8d:09:64:32:a5:a0:fe:39:
c4:23:bc:16:69:7c:35:84:75:ea:a5:14:5f:21:56:
57:4c:e8:f2:3d:dc:fe:7a:67:a3:4e:66:32:c6:25:
04:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F0:FD:34:B6:7B:31:70:19:DF:75:78:D5:BF:89:88:18:2C:17:52
X509v3 Authority Key Identifier:
keyid:3C:CA:84:9B:37:50:15:F4:33:E9:A2:40:EC:AB:F0:3C:F1:52:C7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:e4:77:30:47:44:69:b7:84:13:ba:73:8e:c2:95:06:c8:12:
c2:91:80:b5:f7:ba:a5:6d:0d:68:8f:4e:c6:21:28:42:74:f3:
60:94:80:4e:1b:d4:db:1e:aa:39:ff:f4:33:8d:9c:4f:6f:36:
86:2a:30:33:21:4d:07:2b:95:7a:77:3a:3d:e9:99:71:b0:fd:
ff:b1:64:1c:13:56:45:5b:ef:15:58:31:31:9e:75:36:25:ba:
62:36:1d:7a:ac:0e:07:2b:74:7c:23:94:e4:e5:10:37:ae:97:
fa:1d:63:b2:61:a4:15:6d:4d:9c:02:e9:29:f2:e7:e9:6a:be:
b8:89:15:76:b8:f7:45:22:09:69:0e:28:c7:7c:07:6f:84:4b:
fb:a2:2b:85:e7:e1:ff:71:4f:00:94:59:0f:c6:88:94:bc:e6:
25:6e:d9:ff:fa:05:5c:9d:17:bc:7e:d4:b0:31:ca:10:00:74:
f8:5c:05:0b:e2:e3:2e:e3:08:93:25:fa:4a:65:32:15:a2:0b:
c1:35:73:e8:84:a3:0a:f0:42:c3:fd:79:21:9e:39:cd:36:5a:
38:2c:7a:0e:5a:ec:f7:2f:62:a3:77:14:20:31:f7:eb:0a:06:
83:16:eb:38:da:bd:b5:48:a8:c5:bd:77:90:3e:2e:33:ed:aa:
19:3b:69:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiOfXXG/uIOoDMiaDE9oRe8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjY2E4NDliMzc1MDE1ZjQzM2U5YTI0MGVjYWJmMDNjZjE1
MmM3ODEwHhcNMjUwODA5MTEwMDQzWhcNMjUwODEwMTEwMDQzWjAzMTEwLwYDVQQD
Eyg0NmYwZmQzNGI2N2IzMTcwMTlkZjc1NzhkNWJmODk4ODE4MmMxNzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJpuaqh+cLRzm5jf8nKbWPG87Zul
9fpZhXUDXU2gLKM0AfsQOgYzjShIyJ7KFNCSr2Nx1/eiB1PxXLPZU+OsUSiHLgj9
NnN9aMBWGMd+vp32lQw9mRdWvW1ZxuxB6QoU/EdDrJd2fnOdebKciThAL4SxZTM3
kfPLkqLfgfU4xGKLqyaS/kq/chrfA0WMEp2V39rxMLBneOJdST7mpH3jT671BS1+
F62clzKJb9f9TZgQPlYKShRVEfvFcRayQQUCreJEEZPB+jvTCe/cdQ6pSvzwYLMn
RxapjQlkMqWg/jnEI7wWaXw1hHXqpRRfIVZXTOjyPdz+emejTmYyxiUEzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbw/TS2ezFwGd91eNW/iYgYLBdSMB8GA1UdIwQY
MBaAFDzKhJs3UBX0M+miQOyr8DzxUseBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE1xRW16ZFFGZlF6NmFKQTdLdndQUEZTeDRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yNzU2MzYtZmUzZi00NTI4LWJkN2Ut
ZDYyNTVmMjUyN2RhLzEvUE1xRW16ZFFGZlF6NmFKQTdLdndQUEZTeDRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8yNzU2MzYtZmUzZi00NTI4LWJkN2UtZDYyNTVmMjUyN2Rh
LzEvUE1xRW16ZFFGZlF6NmFKQTdLdndQUEZTeDRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk+R3MEdE
abeEE7pzjsKVBsgSwpGAtfe6pW0NaI9OxiEoQnTzYJSAThvU2x6qOf/0M42cT282
hiowMyFNByuVenc6PemZcbD9/7FkHBNWRVvvFVgxMZ51NiW6YjYdeqwOByt0fCOU
5OUQN66X+h1jsmGkFW1NnALpKfLn6Wq+uIkVdrj3RSIJaQ4ox3wHb4RL+6Irhefh
/3FPAJRZD8aIlLzmJW7Z//oFXJ0XvH7UsDHKEAB0+FwFC+LjLuMIkyX6SmUyFaIL
wTVz6ISjCvBCw/15IZ45zTZaOCx6Dlrs9y9io3cUIDH36woGgxbrONq9tUioxb13
kD4uM+2qGTtpXg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 15:17:13 2025 by rpki-client