Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft
File: PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft (raw, json)
Hash identifier: HtIt0ZXmPljeDfiA7MpELEd8RHIpH1ultmcQfwq4Rps=
Subject key identifier: 3A:3B:52:95:37:24:1F:B1:82:27:ED:D8:67:16:9E:A6:58:32:E9:E2
Authority key identifier: 3E:4C:81:30:CC:A3:0A:3F:F9:2C:9B:99:DB:54:38:DC:7F:3E:28:30
Certificate issuer: /CN=3e4c8130cca30a3ff92c9b99db5438dc7f3e2830
Certificate serial: 0198D583B316907C1E257574A053D37B69E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkyBMMyjCj_5LJuZ21Q43H8-KDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft
Manifest number: 1363
Signing time: Sat 23 Aug 2025 06:00:34 +0000
Manifest this update: Sat 23 Aug 2025 06:00:34 +0000
Manifest next update: Sun 24 Aug 2025 06:00:34 +0000
Files and hashes: 1: PkyBMMyjCj_5LJuZ21Q43H8-KDA.crl (hash: nVngGR/fBwwswz6HPl6HYitOXPn7hvOENWrlOOtgpKg=)
2: WUGlCtJw6cpU2FG2Edk0WX6jTy8.roa (hash: JBmFXCHcBO6dIcBHrxlCuuoBtse/nvSs/yMZuy61tLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PkyBMMyjCj_5LJuZ21Q43H8-KDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:b3:16:90:7c:1e:25:75:74:a0:53:d3:7b:69:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e4c8130cca30a3ff92c9b99db5438dc7f3e2830
Validity
Not Before: Aug 23 06:00:34 2025 GMT
Not After : Aug 24 06:00:34 2025 GMT
Subject: CN=3a3b529537241fb18227edd867169ea65832e9e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e0:20:51:92:3d:00:2e:81:2d:51:ef:d8:c9:
f4:70:42:57:40:29:f6:e5:d2:f5:39:66:e1:2c:74:
d2:9b:69:a8:4a:0d:34:6c:df:f3:e3:19:ce:68:ac:
09:62:89:de:98:8b:50:36:e5:2e:d9:9b:0b:32:6b:
2a:0b:29:df:a7:f2:30:93:6f:a2:0e:e8:c0:91:f0:
9b:ca:03:28:fd:c6:71:75:df:93:b8:97:15:cc:da:
9d:2e:ca:0a:d1:8e:a6:d5:14:e5:0a:c1:21:7d:24:
b4:0a:83:71:b0:00:31:b4:b1:39:43:0e:0e:81:ec:
3a:c3:2f:e1:46:63:f4:94:6d:4a:66:0a:cc:70:e8:
17:26:22:9c:6e:74:ce:28:23:fe:06:06:38:90:6f:
db:f5:37:d0:6e:29:3d:a4:63:d1:15:35:ee:33:fb:
96:20:ba:80:cb:66:b6:ba:e9:d6:8c:5f:bc:29:4d:
a1:b4:f8:47:63:6c:53:7c:f9:b4:16:1f:62:8a:de:
ad:f6:f6:48:7d:f1:01:72:e0:e2:77:54:9b:66:24:
8f:a0:59:9e:32:53:a7:7a:ca:cc:0a:05:54:12:55:
52:74:93:72:1b:15:45:c2:28:6c:9d:19:04:2e:39:
1d:47:c0:90:75:9c:47:1f:f7:5a:75:27:e7:f9:65:
07:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3B:52:95:37:24:1F:B1:82:27:ED:D8:67:16:9E:A6:58:32:E9:E2
X509v3 Authority Key Identifier:
keyid:3E:4C:81:30:CC:A3:0A:3F:F9:2C:9B:99:DB:54:38:DC:7F:3E:28:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkyBMMyjCj_5LJuZ21Q43H8-KDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:df:2f:b6:19:5d:2e:a0:83:6e:85:4b:f7:47:d1:24:66:f3:
21:a8:12:81:e7:f8:97:9b:fd:51:54:de:42:d3:9e:02:f0:c2:
c2:a8:95:1d:d0:e2:52:d5:cb:f6:af:75:11:08:bb:24:e8:d1:
71:df:73:a7:39:89:5b:22:e2:74:81:b7:af:ad:f1:f0:2a:da:
06:dd:77:05:c3:f0:86:4c:4a:30:1c:e5:69:d6:b5:f8:13:b8:
54:ec:0c:79:f7:c8:49:67:14:e7:e2:49:f3:d8:2f:88:4d:10:
bc:7f:cf:44:91:e5:17:87:77:f9:32:d9:50:e8:42:13:37:0f:
ca:0d:94:2b:e5:c2:4a:fc:33:dd:03:93:e8:78:f4:f9:b1:16:
00:1b:5c:2c:c4:2a:e5:ac:93:f1:54:7b:50:4d:36:a9:15:a3:
64:39:83:00:a0:26:b9:a3:9d:df:72:17:4f:b0:89:b3:5d:d1:
c6:b4:06:53:4d:d8:1e:85:6f:ef:f5:11:8f:25:b2:4d:ec:75:
02:3c:e8:dd:e7:9e:53:d7:71:22:53:5d:0f:ea:dc:30:d5:d3:
2f:ad:06:96:81:1d:6e:91:5f:ed:48:5c:87:72:76:82:6f:47:
64:51:f1:fa:92:0d:98:d6:05:3b:25:2d:c7:82:8c:89:55:04:
f5:92:73:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:32 2025 by rpki-client