Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
File: PJMfJlqEcdMs6ESdnhhvDccRSno.mft (raw, json)
Hash identifier: 8F/vZh45L6TUGiv8MB8PnelccU15uuxAeOPHM0F0Fbw=
Subject key identifier: C8:50:5A:3D:1E:1A:4E:59:A6:35:BE:88:13:B7:AC:1D:6D:4D:76:E2
Authority key identifier: 3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A
Certificate issuer: /CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a
Certificate serial: 0197B745179BEBE9818B5ACE97DB3CDE4138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
Manifest number: 12B3
Signing time: Sat 28 Jun 2025 16:00:47 +0000
Manifest this update: Sat 28 Jun 2025 16:00:47 +0000
Manifest next update: Sun 29 Jun 2025 16:00:47 +0000
Files and hashes: 1: PJMfJlqEcdMs6ESdnhhvDccRSno.crl (hash: zM2tS+FYpB0WBwLO45wF8839o68+tZDqhiLCy+0a38k=)
2: PkJhyt9pT1uGvNEkXULDRnIoKM8.roa (hash: GnXTwsBZIxIhJPycvbpoXf49+cV9ppIdazG5Z3GlNBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:17:9b:eb:e9:81:8b:5a:ce:97:db:3c:de:41:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a
Validity
Not Before: Jun 28 16:00:47 2025 GMT
Not After : Jun 29 16:00:47 2025 GMT
Subject: CN=c8505a3d1e1a4e59a635be8813b7ac1d6d4d76e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:01:14:47:9c:7f:5a:6f:a7:20:d5:22:e6:a8:
72:6c:2e:de:d9:85:5c:2e:74:a1:27:ca:e7:f7:8b:
87:eb:cd:cd:29:b3:f9:41:ce:5b:e3:93:c4:3e:fa:
89:c9:3e:36:2c:02:f6:77:6a:87:80:1c:a3:7e:13:
ce:35:a2:bc:7a:fa:26:ca:95:2c:7a:f6:af:07:a8:
55:f3:ac:30:21:75:ee:ed:7a:d3:eb:92:d5:f2:0a:
eb:01:82:f5:47:1c:ae:9a:be:e3:35:e6:15:f6:18:
8c:85:85:e6:c2:e4:95:31:ca:cd:d4:89:3e:86:9a:
e5:7d:e1:69:90:00:72:c0:b3:10:71:09:db:88:fb:
5d:d0:98:75:cb:2c:41:64:7d:a2:a6:41:30:75:66:
1f:29:85:33:64:76:d5:e0:b1:d5:d6:99:ba:15:20:
23:4f:2a:03:b7:19:54:ef:38:f8:88:ee:2f:bd:b4:
10:67:8c:a3:47:45:63:b0:96:d8:ea:1a:b5:51:78:
f1:fb:3e:8c:c8:40:3d:d0:c7:8c:eb:34:de:b9:b8:
05:cc:45:b7:02:65:94:79:4f:f4:ac:e5:7f:dd:79:
e3:b0:c4:01:05:c8:34:69:74:aa:30:08:1e:3d:ed:
41:f7:98:2d:1c:90:ac:7c:26:72:7c:be:78:d8:27:
c1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:50:5A:3D:1E:1A:4E:59:A6:35:BE:88:13:B7:AC:1D:6D:4D:76:E2
X509v3 Authority Key Identifier:
keyid:3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e5:00:87:65:94:3a:59:10:38:94:26:3b:f1:5a:91:0d:cc:
39:75:82:dc:ea:e3:8a:14:54:82:45:82:2d:b1:34:13:59:9f:
02:ca:6b:61:66:4e:02:58:35:01:3a:56:68:91:65:37:f7:07:
6f:62:a0:b4:f5:0f:5b:02:10:f5:d6:cf:88:77:f5:9b:a9:2a:
5d:22:d6:7c:8e:b3:fc:5d:b3:93:1d:dd:6b:de:56:22:c6:9f:
75:d9:72:9b:61:ba:de:4c:6f:38:9b:ad:c3:68:6a:48:df:12:
bf:c6:6c:91:8b:67:9c:8f:03:8a:e8:8b:23:77:3c:77:3d:13:
e2:23:54:22:8c:88:e2:55:89:48:90:16:1a:74:31:de:dd:96:
9a:03:74:aa:d1:f3:c7:3e:d4:7e:f2:6d:35:9d:61:a4:9e:95:
d1:a7:ec:a5:2a:e4:cc:f8:ab:f9:5b:cf:93:2a:cd:9c:b1:f7:
e5:b9:89:b8:84:aa:78:0d:46:3a:62:41:37:ef:59:a3:88:0a:
27:af:e6:ae:94:43:bb:8f:31:50:d6:95:3b:a4:9a:94:39:4c:
51:ec:78:ac:66:de:26:e2:b4:08:25:86:87:53:50:16:89:36:
91:1e:01:ac:db:d3:d8:be:a0:06:6c:20:66:b6:f9:e5:19:bf:
01:90:39:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:55:43 2025 by rpki-client