Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft
File: Pls0eWfOpnu2K2nSWazeS4-elBc.mft (raw, json)
Hash identifier: KdEf6+HKIMA2Egh8+LZ5IiCvDdpaf3JooIUfTjOzrfY=
Subject key identifier: 03:DB:0D:75:33:2F:08:52:09:7D:68:52:31:9A:6D:B6:D0:12:02:30
Authority key identifier: 3E:5B:34:79:67:CE:A6:7B:B6:2B:69:D2:59:AC:DE:4B:8F:9E:94:17
Certificate issuer: /CN=3e5b347967cea67bb62b69d259acde4b8f9e9417
Certificate serial: 0197B6A03F0BCA777768550757ED9015EE72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft
Manifest number: 0ACC
Signing time: Sat 28 Jun 2025 13:00:44 +0000
Manifest this update: Sat 28 Jun 2025 13:00:44 +0000
Manifest next update: Sun 29 Jun 2025 13:00:44 +0000
Files and hashes: 1: Pls0eWfOpnu2K2nSWazeS4-elBc.crl (hash: FelxB1xWsfKQqPIj+8rq5Xe+82STFhhjGLUKBdv6bjM=)
2: yeykCTxRfXSLEqjo1MZ7zObmrks.roa (hash: 1vVWF5KJNfMy/yYL5Sp0YWKLB5R7wsPTTiR6VRMJgCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:3f:0b:ca:77:77:68:55:07:57:ed:90:15:ee:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e5b347967cea67bb62b69d259acde4b8f9e9417
Validity
Not Before: Jun 28 13:00:44 2025 GMT
Not After : Jun 29 13:00:44 2025 GMT
Subject: CN=03db0d75332f0852097d6852319a6db6d0120230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ed:da:7d:1b:d2:75:5d:f4:42:ff:4e:66:a7:
0a:89:84:6e:d8:4d:69:fb:c0:ad:81:b7:0f:82:e0:
29:9c:37:fc:fb:05:d6:69:c0:80:3f:da:68:2b:6c:
26:73:c4:23:f1:1e:45:ee:03:05:d0:3f:e7:d1:95:
ed:b6:92:52:d2:c4:ca:8e:56:bd:ee:21:de:3e:64:
19:ca:b3:78:71:2a:49:bb:51:a2:24:dc:9e:5c:45:
b1:4b:8c:82:9f:ab:6b:39:01:5a:68:01:17:d5:4e:
f9:67:06:25:10:29:fc:64:db:01:b9:82:60:1e:bb:
1d:f4:52:6e:bd:0f:0d:40:5c:37:61:e4:7d:33:b6:
ea:a9:eb:e2:25:48:96:70:ca:55:8d:6e:a5:3b:c4:
4b:37:9c:99:92:19:92:39:98:45:38:79:6b:18:91:
17:cd:44:cd:92:ed:53:24:ef:03:5c:78:d6:cc:07:
32:f9:dc:c0:d7:3f:c2:5a:98:68:bf:f2:79:64:0b:
c7:9e:18:fb:ce:85:4b:37:01:07:6a:55:bd:8e:9c:
dc:da:3e:0c:97:b0:df:6c:25:38:e5:d0:c6:43:32:
1a:d3:da:23:c1:6e:0c:32:a4:86:70:52:38:d5:92:
42:35:35:21:cc:be:13:71:65:92:fb:91:15:c6:eb:
f0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DB:0D:75:33:2F:08:52:09:7D:68:52:31:9A:6D:B6:D0:12:02:30
X509v3 Authority Key Identifier:
keyid:3E:5B:34:79:67:CE:A6:7B:B6:2B:69:D2:59:AC:DE:4B:8F:9E:94:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:7a:64:17:93:64:3a:5d:bc:d9:6d:a8:bc:45:8d:5a:f8:a5:
0e:3f:1d:0a:6d:fa:f6:93:88:8a:24:96:16:52:0d:47:36:3e:
3d:c4:f7:85:72:4b:9c:7a:aa:45:e3:cb:4c:26:6e:9d:d7:45:
9f:bb:52:22:ad:ac:91:0e:48:2c:e3:a5:5b:c8:59:5f:61:d6:
2f:9b:9a:ad:79:4f:f3:e8:30:0c:ae:85:3b:a8:78:c9:e9:94:
7a:b9:83:f5:33:d1:fd:0d:0a:c5:94:df:a1:c6:94:86:34:69:
55:67:df:6a:ca:e9:b6:e8:24:39:9c:8a:18:22:59:b7:8f:9c:
e9:0c:bd:65:95:4e:06:f3:c2:1c:b7:a2:c4:3e:80:ea:a7:b6:
34:f0:c9:a9:93:57:34:16:95:46:ba:d0:9c:16:56:9b:99:e7:
81:d0:bb:8b:1e:00:0d:43:86:cf:f9:98:84:bf:d5:ba:14:a7:
a9:5e:05:98:8b:9e:ed:40:85:35:c3:fb:19:33:14:48:8c:0b:
dd:cc:25:a0:8f:20:90:3a:0e:f9:50:59:ea:c4:10:13:e4:9a:
0b:3a:c9:9f:be:49:ba:22:59:3e:ff:9a:94:91:7e:03:7c:50:
b5:78:a4:73:8b:fb:71:45:26:a9:a2:17:24:16:c1:09:e9:98:
07:49:4b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:08:29 2025 by rpki-client