Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
File: PNKqcak6qcEye3NTigR45PeC9vc.mft (raw, json)
Hash identifier: TdhvmgTW1toqMEqgMehW1B/ThkbfbFpUbEIzYJMQcTk=
Subject key identifier: ED:0A:A4:B7:5C:D5:64:B5:28:6F:99:77:B9:9D:90:33:16:CE:D1:89
Authority key identifier: 3C:D2:AA:71:A9:3A:A9:C1:32:7B:73:53:8A:04:78:E4:F7:82:F6:F7
Certificate issuer: /CN=3cd2aa71a93aa9c1327b73538a0478e4f782f6f7
Certificate serial: 0196BE5CC4C5038998E49B5CE932FB304F58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
Manifest number: 0CAE
Signing time: Sun 11 May 2025 08:01:12 +0000
Manifest this update: Sun 11 May 2025 08:01:12 +0000
Manifest next update: Mon 12 May 2025 08:01:12 +0000
Files and hashes: 1: PNKqcak6qcEye3NTigR45PeC9vc.crl (hash: DixrPazMa/Aq35vSOJKwye0Iw7VQOYBDkJYxMR3J5VQ=)
2: mkUXmgygJpYBMQ2Igm9L-tv-j1s.roa (hash: 9Fpz5SGKImESLClWOjbnaFAMtUoqIoi74+/yK2yHMuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:c4:c5:03:89:98:e4:9b:5c:e9:32:fb:30:4f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd2aa71a93aa9c1327b73538a0478e4f782f6f7
Validity
Not Before: May 11 08:01:12 2025 GMT
Not After : May 12 08:01:12 2025 GMT
Subject: CN=ed0aa4b75cd564b5286f9977b99d903316ced189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:60:35:b9:9a:71:35:ff:3d:d6:9f:f2:59:2c:
97:45:15:ef:a3:c0:9e:f9:94:2f:53:88:2a:9b:89:
60:8f:d4:f8:04:b6:d6:15:d1:c4:c5:8e:90:d4:01:
82:19:d6:8e:90:44:a0:61:b7:23:8f:5a:30:de:53:
b7:fb:ab:19:e2:eb:64:58:2a:8b:f6:71:71:ce:ff:
b7:07:b9:55:75:fe:29:a4:e8:bc:0a:9d:0c:f1:28:
47:ae:2b:ba:a6:6f:87:c2:13:16:18:b3:a8:2f:7c:
19:b8:56:7c:21:1f:76:67:20:63:05:b2:e6:2d:25:
0f:a3:5f:1e:f9:fb:6e:1e:b1:87:cf:b9:63:1b:fc:
b6:50:1d:7b:0d:b5:b6:06:4c:36:64:66:00:65:2a:
36:ca:af:2b:86:5b:b0:83:46:0b:ab:36:3d:0f:b1:
81:b7:61:84:ea:1a:b9:07:50:04:5b:e6:cb:59:6c:
b7:28:7b:eb:3b:43:1f:2d:ba:c3:87:11:01:7b:66:
6c:ab:ab:bb:ec:92:a1:c3:d0:2a:8c:e4:fd:a0:7f:
f7:62:79:eb:2d:7e:f8:6e:dc:18:2d:6d:ae:94:27:
fb:c9:23:39:cb:0c:2b:a8:4f:d4:21:02:e0:59:70:
44:80:03:94:8f:8b:40:3d:46:26:14:46:9a:ad:6b:
7a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0A:A4:B7:5C:D5:64:B5:28:6F:99:77:B9:9D:90:33:16:CE:D1:89
X509v3 Authority Key Identifier:
keyid:3C:D2:AA:71:A9:3A:A9:C1:32:7B:73:53:8A:04:78:E4:F7:82:F6:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:56:a9:c7:ad:6e:8c:bf:07:e1:2a:da:62:89:4e:19:f8:a8:
29:70:e6:89:b8:c5:40:37:a0:d6:4a:df:4f:c3:0e:c2:19:c5:
27:21:a1:92:a0:f6:0d:f2:ba:a7:0b:0f:d3:96:c9:09:93:75:
34:c8:75:1f:37:9a:29:dc:4a:34:24:40:45:08:a6:d4:d3:9e:
c7:15:de:93:ca:80:ae:4e:27:f0:dc:c1:67:0c:ec:8e:fa:6a:
4d:b1:ad:0e:3f:e2:d0:de:e2:ec:0c:71:62:b3:91:25:d9:b8:
55:86:8d:23:f2:6c:cf:af:29:2a:e0:41:e8:e0:1d:9f:41:7a:
e2:08:c5:55:ba:c1:f7:cd:8f:a2:79:b8:65:3c:2a:ef:db:22:
ed:d7:ad:3c:22:da:a2:c8:2e:cd:58:af:f4:ca:f3:c2:46:91:
2b:38:3b:4f:18:11:d8:ec:ae:c8:e9:83:53:69:7b:40:fa:e3:
1f:85:5c:a2:82:f4:55:71:31:e6:dd:d9:55:04:a1:a5:95:f6:
14:de:33:29:d6:9a:a2:3f:94:6f:fb:ad:9b:85:ba:74:95:ad:
74:dd:6e:09:0b:83:dc:3e:ae:39:03:99:57:ec:2f:d3:58:6d:
b0:14:09:7e:1c:1c:ba:24:cc:4a:65:00:be:80:6a:f2:75:27:
4d:bd:79:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:46:20 2025 by rpki-client