Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
File: PbNCBiV3FppjWX6eOmQl_N5sFmE.mft (raw, json)
Hash identifier: G91CZzvurS/W9aY/UZmCQ0Jvm6g86d6qSIUDyCKrqUo=
Subject key identifier: 36:EA:FF:CA:F3:FC:65:CA:68:37:1C:9A:FE:02:51:EE:7D:05:67:73
Authority key identifier: 3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61
Certificate issuer: /CN=3db342062577169a63597e9e3a6425fcde6c1661
Certificate serial: 0197B6A1C07534407C57B1D2968C98F948CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
Manifest number: 09AE
Signing time: Sat 28 Jun 2025 13:02:23 +0000
Manifest this update: Sat 28 Jun 2025 13:02:23 +0000
Manifest next update: Sun 29 Jun 2025 13:02:23 +0000
Files and hashes: 1: 4XfsdEdHX1kDpX0ZLU7CoiedwkE.roa (hash: E0vTS5o3+h35/sl1eIPy8wBqph3C9G+ZoO/00bLGlrw=)
2: PbNCBiV3FppjWX6eOmQl_N5sFmE.crl (hash: RL6TwtcCZAatCLEpEfm5Uy4vkEaFMaeJIy+5cjT9RlQ=)
3: Zq7eQ3eZsYsNNl6x7QgRl2tG0cY.roa (hash: 2PLYNC5TQEo40dtz6r8G2q2NVhdYFgS71ZBpW7mlx1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:c0:75:34:40:7c:57:b1:d2:96:8c:98:f9:48:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db342062577169a63597e9e3a6425fcde6c1661
Validity
Not Before: Jun 28 13:02:23 2025 GMT
Not After : Jun 29 13:02:23 2025 GMT
Subject: CN=36eaffcaf3fc65ca68371c9afe0251ee7d056773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4a:53:46:7e:8a:53:93:5d:79:71:96:f9:9d:
0c:d1:a3:70:45:11:86:3a:ff:de:ec:e9:0a:78:4c:
58:79:35:3c:52:51:94:a0:47:21:c0:94:13:6c:1e:
4d:8a:3a:43:bf:14:f6:6e:28:f4:40:d1:92:ae:ee:
a1:16:e4:41:1d:74:13:3d:2a:f9:f2:e0:f9:8f:23:
f1:69:37:41:14:69:2f:56:d9:5a:09:08:6f:7d:f1:
14:b6:6a:25:b8:b5:fd:c0:43:da:df:b1:78:43:0a:
25:c6:b7:a9:e9:11:6a:10:77:44:7d:8a:d7:45:ba:
25:aa:ec:7f:e2:4c:be:0f:b6:b9:9b:0f:4c:7e:ea:
1c:ba:9e:32:88:b1:12:6c:90:83:6f:b4:02:20:68:
2e:ff:60:f0:cb:3f:2a:51:02:2d:41:76:9e:ef:ad:
1a:41:71:0f:ac:30:2a:af:bf:cf:54:45:77:f4:17:
f8:cc:f9:d5:ed:17:ae:0e:76:c6:b7:3f:90:47:7a:
5f:74:46:81:a7:db:2d:2a:32:2a:83:1c:80:1e:af:
8e:87:03:a3:b7:e6:3e:37:fb:81:4a:3a:8a:9a:6e:
f9:69:a6:c8:c9:d7:be:af:5b:f6:06:80:4a:8b:2e:
2f:f7:3a:40:49:56:01:75:f8:5d:f7:ad:43:da:a9:
af:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:EA:FF:CA:F3:FC:65:CA:68:37:1C:9A:FE:02:51:EE:7D:05:67:73
X509v3 Authority Key Identifier:
keyid:3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:17:32:32:db:25:70:68:1b:d6:47:9a:c7:8e:53:49:ee:45:
94:11:51:5b:09:c2:51:e3:c3:73:51:7f:d7:49:ef:3c:d3:b6:
15:00:eb:5a:86:09:63:ef:1f:18:96:b5:72:b6:d9:2c:93:bf:
d2:36:56:f6:1d:7a:dc:38:72:4d:71:88:8c:ef:d8:2b:0d:14:
32:4f:b6:ff:e1:dc:17:de:1a:bc:59:d0:f3:74:5d:ba:34:c5:
81:b1:6e:60:93:f3:91:40:0e:a1:b8:86:5c:bb:e0:1a:46:25:
c6:27:86:c2:f2:c6:5b:23:96:50:c7:bd:d4:75:4d:ad:b4:f5:
4b:45:b8:2f:dc:39:b1:50:aa:6d:65:f4:3b:6b:3b:d9:ef:de:
a8:8f:64:af:17:56:09:e3:16:a1:e6:28:2d:29:20:e4:50:ac:
d1:aa:48:db:66:f3:b3:5e:48:90:ac:68:83:03:18:30:3e:67:
9a:d8:dd:a0:2e:8e:73:5f:76:06:5a:a1:5d:49:88:0a:41:dd:
44:8f:31:69:e6:c4:ad:6e:75:be:1a:50:97:5c:1c:9c:4c:2f:
e7:11:f6:1f:30:79:1e:b0:dc:bb:8e:e9:56:a4:39:85:c4:db:
0a:b7:ee:2c:9c:54:91:5b:f4:19:f6:5b:e6:15:cb:90:40:90:
2f:b2:3f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:57:25 2025 by rpki-client