Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
File: PComfc4HIjjpwEUV5n65kmcuNRs.mft (raw, json)
Hash identifier: vvXPWVVRQKJRvZRCOlPN/77CvhT16F8i1ykZI0s0KR4=
Subject key identifier: 32:37:44:66:25:F1:11:D6:00:F9:35:0F:4C:3B:C8:9C:5D:9B:7F:B3
Authority key identifier: 3C:2A:26:7D:CE:07:22:38:E9:C0:45:15:E6:7E:B9:92:67:2E:35:1B
Certificate issuer: /CN=3c2a267dce072238e9c04515e67eb992672e351b
Certificate serial: 0197B70EBCBB47FD5BD6CE22A47713462226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 15:01:25 +0000
Manifest this update: Sat 28 Jun 2025 15:01:25 +0000
Manifest next update: Sun 29 Jun 2025 15:01:25 +0000
Files and hashes: 1: PComfc4HIjjpwEUV5n65kmcuNRs.crl (hash: W/dflW1smCw7XGV473tqU4r4jJxR1q00DFt4pZgG8LE=)
2: ZGY0lWkEYWemqocgFCB9t9qlPGA.roa (hash: fiVljxbXsWOkY42tbBEX2UBc5QCY0m1ysP8nQ4McSh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:bc:bb:47:fd:5b:d6:ce:22:a4:77:13:46:22:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c2a267dce072238e9c04515e67eb992672e351b
Validity
Not Before: Jun 28 15:01:25 2025 GMT
Not After : Jun 29 15:01:25 2025 GMT
Subject: CN=3237446625f111d600f9350f4c3bc89c5d9b7fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:46:05:95:a6:9e:de:a4:57:b9:87:70:61:9d:
dc:e6:5e:1b:9b:17:74:84:83:4a:1d:d6:72:ca:69:
f6:77:a5:cf:0f:b8:ed:e9:1a:62:ef:cb:09:ed:b4:
d4:bf:de:d5:30:d7:8e:67:46:e8:84:1e:f6:ae:8f:
69:cb:6d:81:cc:51:21:e8:59:e6:99:e7:3a:e3:8d:
ec:e2:85:55:e7:ea:83:bc:a9:3d:cd:47:34:f0:2f:
59:93:5d:9b:71:04:59:47:cb:57:3e:0b:65:7e:37:
49:85:f0:ad:13:fa:53:ce:00:46:ca:89:4f:18:e9:
f3:5b:92:c9:3b:84:7b:eb:42:07:66:49:d3:06:1c:
83:74:ac:42:74:d0:06:f4:42:da:9c:b0:8d:9d:13:
5a:c4:a6:f1:4b:33:3a:bc:5a:8c:82:13:f6:e3:55:
18:92:f1:5f:bd:05:07:9b:a0:30:47:6c:8e:34:77:
46:90:1a:64:2e:ab:f8:8c:dd:74:be:1d:c5:2a:da:
52:89:be:d4:1e:06:06:00:fd:a6:42:58:93:75:18:
1b:39:c2:19:a7:9f:6e:58:4b:34:a4:7f:9a:ec:37:
63:52:87:6c:df:a1:4b:12:e6:14:6f:2e:8d:d0:28:
45:e3:c6:3f:aa:35:0f:16:dd:77:97:5b:b5:65:0b:
45:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:37:44:66:25:F1:11:D6:00:F9:35:0F:4C:3B:C8:9C:5D:9B:7F:B3
X509v3 Authority Key Identifier:
keyid:3C:2A:26:7D:CE:07:22:38:E9:C0:45:15:E6:7E:B9:92:67:2E:35:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b4:8e:0d:94:06:4c:1e:52:3e:f6:7d:9f:66:b6:a9:62:60:
ce:a7:5e:a9:c0:a1:a0:e4:14:07:3f:71:e1:08:34:a3:f4:ec:
b6:7a:7d:c0:8d:e5:cf:75:ee:0b:66:4b:f9:61:3a:11:47:58:
ca:43:9f:c1:3b:87:96:d5:13:2d:59:9b:87:65:98:33:75:aa:
62:8a:17:64:f4:17:9e:d0:28:e9:dc:a7:5a:7d:8c:d2:64:bf:
b8:1c:7c:33:ff:f4:25:df:bc:2d:ab:54:93:78:57:ba:a9:33:
54:7f:68:c2:79:63:82:f5:aa:5c:56:01:87:aa:85:5f:49:23:
1d:ed:f8:ee:d0:aa:62:0c:ad:35:a0:4b:44:fd:a4:26:05:06:
07:13:e5:ac:30:11:d3:71:f7:9c:3b:77:8e:72:d2:66:4a:c2:
ba:fd:53:5b:1b:11:fd:94:7e:1c:ec:69:7a:be:c7:99:38:4a:
8b:ca:39:a6:30:f4:f2:b6:12:79:c6:86:e5:17:64:e4:67:67:
f7:d9:eb:d2:1e:db:af:ae:fd:d8:00:6b:e1:f7:84:64:f9:99:
4b:bd:1a:8e:8c:01:83:a5:2d:d6:c5:f2:aa:ab:be:f2:4e:4e:
ac:22:e5:9c:3a:a5:71:7a:46:63:b0:68:8b:30:aa:c3:e3:a3:
80:b0:44:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:27:47 2025 by rpki-client