Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
File: PN4kcMhWOUlIej54dDxUTJnsimQ.mft (raw, json)
Hash identifier: lV+paPH6MH17FBW7itVous13BOehpwsdvm8e3XMj33A=
Subject key identifier: 70:20:05:C3:16:A6:D1:10:7B:EE:D1:05:13:92:8E:28:56:E9:A1:C5
Authority key identifier: 3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
Certificate issuer: /CN=3cde2470c8563949487a3e78743c544c99ec8a64
Certificate serial: 0197B7B361FE330FCE8A90BC66F15AC3FB6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
Manifest number: 0838
Signing time: Sat 28 Jun 2025 18:01:15 +0000
Manifest this update: Sat 28 Jun 2025 18:01:15 +0000
Manifest next update: Sun 29 Jun 2025 18:01:15 +0000
Files and hashes: 1: MR6yCa9ahiYB6kt7eFUEnhRZgj0.roa (hash: Q5fLGdiN5URjuSRi8W7fkSayIUiVGY1nf+0ovyfMZAw=)
2: PN4kcMhWOUlIej54dDxUTJnsimQ.crl (hash: zaUnjJBQa8CyOfhjAI1IgJoodTdezIn8C67gaCHoD8A=)
3: sFFOUDvWTzfSymlwSYpDyp4rZVo.roa (hash: hd1EPhU6XZRPUxka9ECqkCcKF9k2GizgSrw0eDBr9g4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:61:fe:33:0f:ce:8a:90:bc:66:f1:5a:c3:fb:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cde2470c8563949487a3e78743c544c99ec8a64
Validity
Not Before: Jun 28 18:01:15 2025 GMT
Not After : Jun 29 18:01:15 2025 GMT
Subject: CN=702005c316a6d1107beed10513928e2856e9a1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2c:e1:a2:2f:5e:44:c2:d3:15:b1:35:3a:df:
a1:50:89:db:eb:28:b3:51:6a:2a:8e:bf:06:a9:c5:
45:fc:9f:1c:3d:61:7d:2d:b2:26:a4:1f:a1:dc:44:
d2:7e:06:92:25:4f:80:8c:d2:93:8d:97:fa:8f:18:
b0:4b:c4:93:db:08:be:86:99:f6:37:89:0c:01:b2:
89:f3:65:7e:3a:32:bc:ab:81:34:b9:d2:71:86:9c:
62:db:a4:64:8a:76:76:2a:d0:56:0f:45:fc:e8:be:
cc:4b:9c:8e:4e:af:27:1e:68:40:ee:92:31:2b:f3:
dc:6a:c9:9a:f0:13:80:bf:9d:10:ec:72:7e:40:d3:
20:6e:7b:8f:ef:08:f5:10:a8:b3:c5:f0:01:a1:69:
d7:55:cd:df:f8:af:2b:7a:a2:17:e6:c6:3f:b2:76:
cc:25:97:df:50:e7:ba:d6:82:f1:d6:27:8f:07:4f:
36:87:d7:70:5a:90:af:b5:b5:45:5b:e3:96:ae:02:
a2:95:0b:b5:32:9e:b3:80:12:ec:94:03:f1:47:e2:
63:6f:1c:a1:3d:8a:88:97:d4:d9:63:32:1b:3e:ca:
fb:8c:9c:7a:dc:be:1c:b3:f5:36:91:1b:af:45:46:
37:52:8e:d6:69:74:b8:b5:d8:92:58:17:52:ee:19:
2d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:20:05:C3:16:A6:D1:10:7B:EE:D1:05:13:92:8E:28:56:E9:A1:C5
X509v3 Authority Key Identifier:
keyid:3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:47:15:fb:26:af:c6:cf:9a:65:19:a6:a6:d5:8f:48:99:89:
1c:5f:15:b8:06:05:95:cd:f1:31:a4:1f:24:32:bd:87:f2:7c:
83:50:c8:8f:b3:ca:0a:4b:dd:a7:cb:93:92:52:f8:34:6c:77:
41:17:af:ea:16:a0:54:d0:0c:e5:22:fb:52:8f:a3:b6:7d:a2:
d5:81:1a:e4:56:d4:0b:c9:67:e8:2c:8e:4c:dc:63:b9:fb:2f:
b8:f0:86:d5:80:cf:5b:c2:32:ad:66:37:fe:a9:5b:71:00:fd:
4d:65:59:84:71:ba:07:bb:0f:f0:c6:7d:4d:58:3b:0c:77:21:
28:67:46:88:fb:15:e5:ac:af:b8:37:d4:9e:7b:75:66:b1:d7:
de:3c:08:7a:c8:12:49:19:cc:a7:23:48:50:30:89:04:66:f5:
51:41:e2:4f:17:91:cf:93:ca:8f:50:01:66:78:bc:5a:c2:1d:
86:41:6c:b9:ce:78:92:b2:8a:71:b6:7d:32:1b:83:52:7d:26:
26:68:d5:41:83:fd:23:f5:2b:b3:b9:c5:ce:68:3f:bf:12:f4:
e9:66:c2:85:79:da:24:c9:46:47:8e:92:4b:6f:b2:e0:00:6b:
3a:bf:eb:f9:97:56:c0:59:67:ce:a4:1f:f4:d3:58:29:a2:5b:
8d:5d:55:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:54 2025 by rpki-client