Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
File: PComfc4HIjjpwEUV5n65kmcuNRs.mft (raw, json)
Hash identifier: Jif64FLDqDfc+t8Ea9lZxeQ4eu8I6KsJalO0meu27O0=
Subject key identifier: 6C:27:93:8E:53:E5:03:76:6D:8D:13:79:17:CB:C7:90:81:A7:CF:A2
Authority key identifier: 3C:2A:26:7D:CE:07:22:38:E9:C0:45:15:E6:7E:B9:92:67:2E:35:1B
Certificate issuer: /CN=3c2a267dce072238e9c04515e67eb992672e351b
Certificate serial: 0198D4E0638F1CE2CBACFE4DCA8087A44155
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 03:02:11 +0000
Manifest this update: Sat 23 Aug 2025 03:02:11 +0000
Manifest next update: Sun 24 Aug 2025 03:02:11 +0000
Files and hashes: 1: PComfc4HIjjpwEUV5n65kmcuNRs.crl (hash: YggdNl9LVECtzNzUc2X9dy3arenNyAfTJZ/QOEzGHQ4=)
2: ZGY0lWkEYWemqocgFCB9t9qlPGA.roa (hash: fiVljxbXsWOkY42tbBEX2UBc5QCY0m1ysP8nQ4McSh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:63:8f:1c:e2:cb:ac:fe:4d:ca:80:87:a4:41:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c2a267dce072238e9c04515e67eb992672e351b
Validity
Not Before: Aug 23 03:02:11 2025 GMT
Not After : Aug 24 03:02:11 2025 GMT
Subject: CN=6c27938e53e503766d8d137917cbc79081a7cfa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0a:df:d3:3a:2b:20:2d:38:6c:63:27:f7:06:
9d:b2:9c:5d:77:55:e5:de:b4:69:4f:9e:ec:d7:ea:
65:48:60:97:a9:ce:b4:28:55:6a:ef:2e:b1:f1:03:
57:2c:3b:61:9f:24:14:f7:79:8c:f6:a3:da:24:b1:
c9:d6:d7:b2:99:c7:69:a4:0d:5b:01:9c:7c:2c:ad:
21:aa:0d:de:0c:41:cf:9f:85:a2:bb:36:6b:ec:a4:
80:59:e0:fd:c3:78:52:3b:e9:57:46:05:2a:87:1b:
df:cb:f3:81:30:77:f9:6b:5c:52:7d:68:f2:fc:5b:
68:a3:85:ee:6a:fe:8a:69:c9:be:d9:ad:8b:ee:1f:
e1:0f:43:6f:ef:2b:a3:25:24:b0:46:85:c5:e8:9e:
25:26:bf:37:df:d0:f3:35:ca:aa:55:1f:31:22:18:
f5:65:ee:de:33:65:5b:f1:b6:3a:da:bc:99:38:10:
fb:24:39:15:74:b2:4a:95:57:9f:02:b2:17:c0:f3:
09:a4:95:7e:c4:ee:49:9c:25:70:cb:cd:98:c9:68:
0d:bd:f2:c8:d5:82:11:4c:06:26:20:35:81:be:e1:
d7:52:db:06:24:31:03:f3:c5:ae:8b:3a:61:fb:5a:
07:d5:e1:10:2e:21:5c:2c:d9:fc:fd:5a:6f:48:96:
07:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:27:93:8E:53:E5:03:76:6D:8D:13:79:17:CB:C7:90:81:A7:CF:A2
X509v3 Authority Key Identifier:
keyid:3C:2A:26:7D:CE:07:22:38:E9:C0:45:15:E6:7E:B9:92:67:2E:35:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:61:1f:46:05:1d:35:ec:0b:6c:76:e5:3e:a2:8d:8c:cb:05:
f6:1f:39:bc:49:fc:c1:19:72:5d:58:38:fc:af:ab:41:9d:ab:
d2:49:50:1e:b1:44:23:02:0c:d0:25:2a:80:b4:7a:59:24:fa:
d9:60:8c:08:64:28:49:ac:26:21:54:bd:7f:d7:ad:51:2f:90:
e7:c7:4d:7e:b6:d9:f5:d7:20:48:b9:3d:86:f6:9a:a7:33:36:
cc:45:b6:80:ee:bd:02:b2:b6:5f:85:78:a4:02:6e:b0:39:28:
c1:cf:4f:e2:96:30:ee:7c:c1:5a:76:66:09:16:cf:77:bb:ad:
3d:42:f5:d5:46:3c:64:d6:32:0d:07:08:69:39:fc:ec:77:8a:
9e:bf:f7:3a:cf:91:56:6d:0a:74:87:91:53:79:fb:10:5a:a1:
46:c8:3c:52:2a:8d:63:e6:6c:11:8e:33:20:22:81:83:dc:35:
ab:de:c3:2e:02:3a:a0:8b:cd:a3:79:e4:fc:d6:4b:55:2b:79:
08:da:c9:c1:02:cb:3f:ed:1b:33:8f:c7:a2:4b:1e:ef:34:28:
35:3b:d3:52:0e:04:bb:57:f9:97:18:ed:a3:cc:da:a4:9e:ed:
bd:43:63:36:39:54:bd:5d:af:d8:0a:e2:08:67:b9:f0:90:b4:
84:38:db:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:38:14 2025 by rpki-client