Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
File: PNKqcak6qcEye3NTigR45PeC9vc.mft (raw, json)
Hash identifier: IMmEFMuSWLQex6T/iLbTi6yqmFI9Ijmn8IIjwMPNBgU=
Subject key identifier: C9:2D:15:E1:03:A4:9B:AA:73:FB:61:39:74:76:D0:C7:96:24:54:D5
Authority key identifier: 3C:D2:AA:71:A9:3A:A9:C1:32:7B:73:53:8A:04:78:E4:F7:82:F6:F7
Certificate issuer: /CN=3cd2aa71a93aa9c1327b73538a0478e4f782f6f7
Certificate serial: 0197CCBAA35FC684F7EF5C8A7C9F95A6309A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
Manifest number: 0D3A
Signing time: Wed 02 Jul 2025 20:01:12 +0000
Manifest this update: Wed 02 Jul 2025 20:01:12 +0000
Manifest next update: Thu 03 Jul 2025 20:01:12 +0000
Files and hashes: 1: PNKqcak6qcEye3NTigR45PeC9vc.crl (hash: haWzkZABcgLOnXAWubjFPQbJBPhX6V/cZEad6NRi7gU=)
2: mkUXmgygJpYBMQ2Igm9L-tv-j1s.roa (hash: 9Fpz5SGKImESLClWOjbnaFAMtUoqIoi74+/yK2yHMuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:ba:a3:5f:c6:84:f7:ef:5c:8a:7c:9f:95:a6:30:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd2aa71a93aa9c1327b73538a0478e4f782f6f7
Validity
Not Before: Jul 2 20:01:12 2025 GMT
Not After : Jul 3 20:01:12 2025 GMT
Subject: CN=c92d15e103a49baa73fb61397476d0c7962454d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:58:ac:70:90:43:3b:8c:e0:dd:d1:0c:b7:1e:
c8:2e:01:b2:60:98:64:cb:99:7c:af:87:90:86:07:
ac:23:ba:28:51:cd:42:5c:56:61:3f:fc:cb:c2:09:
a8:75:a0:6c:d0:f6:87:81:00:8d:d3:b2:eb:a0:35:
5a:86:bb:77:27:01:16:4d:a2:11:14:dd:ac:f5:bb:
7d:c9:56:0e:99:a3:86:a2:99:25:a5:a6:ec:3b:a6:
cd:94:91:6a:44:c2:38:e9:b9:b5:19:60:e0:98:02:
41:11:5f:d3:01:81:43:6d:11:dd:37:ef:12:eb:4e:
f5:cd:2a:de:54:28:fd:70:4f:d1:27:82:1d:69:aa:
64:3e:40:c9:54:2c:05:a2:d3:23:5e:e4:d9:ee:a5:
40:c9:24:b3:97:0c:1e:93:38:1c:23:21:d8:5f:af:
23:6c:d5:e4:04:64:36:82:99:ec:da:e3:64:3a:fb:
47:c4:af:c6:54:8c:ae:a8:fb:2b:9d:48:93:9f:06:
f6:1c:0f:4f:8c:c2:5e:32:0b:84:0e:40:d9:57:41:
eb:b6:68:7f:07:c0:7c:96:97:c9:04:80:35:26:7b:
be:73:75:7c:af:c6:2f:8c:ea:77:61:b4:13:b8:f3:
29:25:bd:57:ec:89:ba:75:fc:64:55:76:9a:2f:d8:
4e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2D:15:E1:03:A4:9B:AA:73:FB:61:39:74:76:D0:C7:96:24:54:D5
X509v3 Authority Key Identifier:
keyid:3C:D2:AA:71:A9:3A:A9:C1:32:7B:73:53:8A:04:78:E4:F7:82:F6:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:38:0b:fc:f0:e5:f4:99:21:bf:de:c0:9b:c2:47:52:fc:db:
96:b9:bb:7e:b4:ee:34:23:ed:99:e4:81:a8:6c:f9:6b:76:e4:
8d:c7:33:4c:66:70:cd:af:a9:ba:fc:bc:03:56:99:82:eb:24:
d9:ed:15:62:60:45:1c:32:8c:86:e1:34:4f:81:87:69:b1:42:
ee:27:8a:47:40:50:e1:38:9e:d0:65:17:0b:95:a5:3e:7f:d4:
72:48:a1:dd:9d:e5:f2:3f:33:25:cd:00:48:b1:e1:17:1b:78:
09:7d:67:9a:0f:13:05:97:c2:9a:10:54:ea:a4:1e:79:e7:33:
ed:d1:39:98:98:84:1e:4e:3d:f3:6f:c1:12:43:c5:43:ab:42:
47:62:30:bf:bf:2e:a2:d3:73:17:02:d7:76:88:80:75:7f:d2:
d5:16:62:89:a0:c1:65:0f:4b:8f:86:7b:63:de:7e:82:3d:bd:
cf:50:10:70:ff:6b:d1:2a:27:3b:fd:67:f9:39:08:c5:89:0f:
ab:45:e4:25:6c:13:d8:c5:88:f1:20:4e:52:2c:13:2d:37:10:
d4:db:07:9e:58:4c:2d:4e:00:fc:46:4f:99:25:b1:ab:c4:d9:
c7:bc:eb:28:1f:8d:37:2b:ba:d2:22:e9:8d:1a:48:00:48:f5:
43:06:95:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 03:44:08 2025 by rpki-client