Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
File: PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft (raw, json)
Hash identifier: viu9zSImTUtQxUnnuZCK4FDK27m4ufoR/LXmupLpQQw=
Subject key identifier: 44:15:E9:40:A7:56:94:57:DC:9C:D4:1A:B9:33:3E:09:C4:82:D8:A3
Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
Certificate issuer: /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Certificate serial: 0197B77C1BCE058F8BFEF12AAF570503C209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
Manifest number: 0FF3
Signing time: Sat 28 Jun 2025 17:00:53 +0000
Manifest this update: Sat 28 Jun 2025 17:00:53 +0000
Manifest next update: Sun 29 Jun 2025 17:00:53 +0000
Files and hashes: 1: PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl (hash: OAE4IXvjBoMN66ay+nZpHG9+cpRRrhEuHt/wU7ruHdU=)
2: X4mIRbShCI_swD4AYibAfXumzPE.roa (hash: ZCD8FV34ZVGGbkTB2fH3uXc5W92QDu1a+e1QI3r0+es=)
3: k0e8XrkRjigLyVCK_c8tyoDjXqU.roa (hash: VlaMdbNDNwgFwQ8MfYZ/SEPVePx9cKrNfoX/5Qh79Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:1b:ce:05:8f:8b:fe:f1:2a:af:57:05:03:c2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Validity
Not Before: Jun 28 17:00:53 2025 GMT
Not After : Jun 29 17:00:53 2025 GMT
Subject: CN=4415e940a7569457dc9cd41ab9333e09c482d8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:07:64:28:a3:ff:8e:61:20:60:17:c5:28:dc:
cb:62:73:11:8b:8e:50:26:b6:4a:e9:df:1f:94:5a:
08:03:ce:86:7e:17:b8:c0:2c:da:5d:6b:08:30:c5:
99:f0:69:cc:7e:9f:2d:5f:99:af:89:f9:68:af:4c:
a3:91:47:81:74:67:c0:60:f8:ec:0d:1b:9b:3c:e9:
ea:0a:7e:90:c8:ee:4c:8a:a9:27:b8:ec:9a:db:e6:
5f:f2:62:4b:11:df:8f:b8:34:f6:87:e5:a0:e1:33:
ae:b2:a8:c0:2e:55:87:2f:2a:6e:a0:ac:40:0d:57:
37:a4:01:9f:f2:18:ac:0a:34:b3:91:28:be:34:8d:
5e:a6:b7:43:80:7b:76:cd:11:49:d3:15:4c:97:01:
c8:38:b7:1d:1b:48:4e:8e:9e:e6:fa:6c:45:5a:a1:
e0:b0:7b:d2:fd:09:02:9c:5a:4c:39:7e:ad:c6:95:
78:6d:ff:22:22:5d:14:15:b9:c9:90:0b:5d:20:b3:
53:b1:18:35:16:1b:d4:e4:c7:04:d6:59:8c:dc:c5:
f3:c7:d5:c4:56:87:fd:3a:78:43:c8:64:32:ca:ba:
77:2a:fa:d4:c8:4e:29:54:61:2c:c3:41:4f:b5:02:
95:17:93:c6:c8:00:f8:87:6f:96:6a:32:01:23:40:
df:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:15:E9:40:A7:56:94:57:DC:9C:D4:1A:B9:33:3E:09:C4:82:D8:A3
X509v3 Authority Key Identifier:
keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:c6:5d:10:6d:97:e3:52:10:7c:2d:92:b3:16:f2:6f:8c:27:
fb:7a:b2:e0:52:01:7a:23:c9:ba:a4:9a:76:c0:49:25:2d:9b:
d1:d8:19:72:01:fb:34:2d:2b:dc:a6:c1:9b:0e:36:a3:fe:9f:
31:31:03:2a:ae:8d:bf:6c:b0:42:85:3b:22:26:cb:77:a9:1f:
ae:1a:d5:c3:af:d4:78:fe:89:43:15:c3:14:7d:8f:c1:18:38:
28:66:2c:b3:e2:62:d4:ce:b0:b0:b9:5a:56:b6:61:84:69:4d:
0c:9f:e0:2e:72:cb:9f:09:30:83:7d:86:62:d1:46:b7:7c:c1:
9f:fc:da:65:35:f0:9c:8e:b3:ec:65:c4:dc:90:ef:14:17:2f:
b3:d9:f8:4f:d0:f1:db:eb:3b:aa:a8:31:fd:fe:49:53:6d:88:
8d:10:3b:b2:4f:4e:3d:73:15:77:9b:0f:65:7c:80:3f:15:d6:
37:c4:3c:d0:be:8f:23:e2:19:88:ad:3a:ed:01:6a:a7:fa:d7:
83:56:15:0d:75:5c:ca:c9:60:9f:e6:12:50:1c:99:11:1c:86:
f3:03:4f:e8:ed:0f:9e:77:81:9d:76:c9:79:49:ed:ab:02:a5:
5d:12:5b:6d:21:94:28:e3:af:20:98:91:97:40:62:37:8f:af:
1e:e5:69:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:08:32 2025 by rpki-client