Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
File: PNKqcak6qcEye3NTigR45PeC9vc.mft (raw, json)
Hash identifier: F0aZgY2xAoWzok1ebHX0Mup3KhC9OrxKUlw0jHt/21Y=
Subject key identifier: 9E:E6:33:D9:D7:BD:1E:0B:BA:DA:F1:48:36:4E:FF:0D:50:CB:7E:B9
Authority key identifier: 3C:D2:AA:71:A9:3A:A9:C1:32:7B:73:53:8A:04:78:E4:F7:82:F6:F7
Certificate issuer: /CN=3cd2aa71a93aa9c1327b73538a0478e4f782f6f7
Certificate serial: 0198D54E449B3312F144AF6858B3744A586D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
Manifest number: 0DC3
Signing time: Sat 23 Aug 2025 05:02:12 +0000
Manifest this update: Sat 23 Aug 2025 05:02:12 +0000
Manifest next update: Sun 24 Aug 2025 05:02:12 +0000
Files and hashes: 1: PNKqcak6qcEye3NTigR45PeC9vc.crl (hash: 4aETOewDbLoY+txFxENJUP+J1hTJhwccDBD0JIQVdV8=)
2: mkUXmgygJpYBMQ2Igm9L-tv-j1s.roa (hash: 9Fpz5SGKImESLClWOjbnaFAMtUoqIoi74+/yK2yHMuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:44:9b:33:12:f1:44:af:68:58:b3:74:4a:58:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd2aa71a93aa9c1327b73538a0478e4f782f6f7
Validity
Not Before: Aug 23 05:02:12 2025 GMT
Not After : Aug 24 05:02:12 2025 GMT
Subject: CN=9ee633d9d7bd1e0bbadaf148364eff0d50cb7eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a0:5e:6c:a6:e0:de:30:5f:c2:8d:c9:39:8a:
6a:49:ae:44:72:4a:7e:7c:4f:ff:55:e0:e5:40:c6:
e7:ce:14:7e:c6:18:23:d2:d2:b3:63:02:d0:b6:33:
e9:c2:9e:27:f7:71:2b:21:3e:45:e9:e1:d4:34:93:
a5:9d:27:a3:d8:02:b6:50:9c:04:65:19:5b:9a:69:
2c:7e:56:2f:a5:16:36:f9:63:c5:83:eb:0c:98:10:
9e:5f:9a:a4:38:c3:fe:9e:d4:96:10:53:31:ba:cf:
0a:7f:4c:66:f5:c2:90:da:db:ff:28:e1:a7:8d:e7:
0c:85:88:3d:07:37:68:f0:9b:0e:6b:67:64:22:7b:
fe:7c:f6:86:17:51:42:b4:bb:33:8c:a6:d5:3f:21:
f3:dd:72:d7:47:14:47:61:f3:f5:6f:af:24:b6:3a:
ba:62:28:19:82:a7:f8:40:29:7d:6c:10:50:85:23:
3a:64:c9:8f:50:93:a5:fe:a1:3b:22:5d:87:0b:8d:
4e:35:6f:98:37:7c:14:cd:43:d4:d7:8c:fb:eb:b5:
35:07:9e:9d:37:47:f1:f9:d0:cd:62:54:16:03:ca:
6e:86:9b:f2:82:24:e1:29:d8:53:96:01:c8:a2:7d:
86:9a:7a:58:aa:0a:7e:24:f0:a4:98:f3:4f:c7:fc:
5e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E6:33:D9:D7:BD:1E:0B:BA:DA:F1:48:36:4E:FF:0D:50:CB:7E:B9
X509v3 Authority Key Identifier:
keyid:3C:D2:AA:71:A9:3A:A9:C1:32:7B:73:53:8A:04:78:E4:F7:82:F6:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:58:54:59:7d:5e:25:42:0f:f2:44:00:e9:55:2f:97:0d:a5:
33:d2:5b:71:15:3b:9b:fb:c7:a4:67:1e:c3:25:18:a4:81:f8:
0a:b1:8d:39:ec:6e:7b:63:21:ce:00:df:b3:3a:4d:1f:f5:f2:
02:34:71:99:54:6c:02:e4:85:8d:46:7b:d1:3b:bd:b3:74:a0:
74:f5:86:1c:93:df:07:f3:ea:69:ef:13:c4:9c:e6:d6:0a:32:
f7:83:f0:92:95:e3:cf:ec:e7:25:2d:59:27:78:fe:7a:d0:14:
77:9f:75:d8:dd:47:59:c0:0d:6b:2e:8a:f0:83:c0:4a:07:57:
a8:0c:7f:a2:a9:45:b7:7e:e5:1e:15:91:ac:d2:79:e2:fa:1d:
93:ac:6c:fb:b6:3e:b3:0e:49:9a:29:e5:22:13:2b:22:4f:ef:
25:0f:b7:24:85:97:50:05:f6:4d:b1:6e:56:4c:42:38:64:9b:
23:9f:35:ff:e0:38:6e:00:62:fa:5a:92:d6:17:e0:17:34:45:
25:cb:1f:2e:1a:8d:9d:a7:35:b2:24:02:c3:ef:02:b3:a2:ed:
e3:5a:ca:cf:b1:d0:bf:00:6a:4b:f8:17:5e:ce:ed:bf:fa:87:
5a:d4:78:a1:cc:0b:af:fb:7e:ef:0b:9d:67:b6:8e:c5:4c:5c:
27:90:92:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:01 2025 by rpki-client