Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
File: PBHQXNKatxkq8DnPXz0AvpIVeTk.mft (raw, json)
Hash identifier: GjdFL+W0dKhikRFvea3bG3WIMSMhO5xxtShRFxqcKjM=
Subject key identifier: 83:8A:57:B6:A0:DF:4B:36:A3:4D:7B:D6:B5:B8:6B:AC:F7:77:91:C0
Authority key identifier: 3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39
Certificate issuer: /CN=3c11d05cd29ab7192af039cf5f3d00be92157939
Certificate serial: 0197B7459400CE1C10A8F24DF9DA6B9491F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
Manifest number: 0804
Signing time: Sat 28 Jun 2025 16:01:19 +0000
Manifest this update: Sat 28 Jun 2025 16:01:19 +0000
Manifest next update: Sun 29 Jun 2025 16:01:19 +0000
Files and hashes: 1: PBHQXNKatxkq8DnPXz0AvpIVeTk.crl (hash: 7OlWxlrLW1hbL8GAhpJuOCL8ApctzazC47z9Th0jmOA=)
2: uXWEOT5kLicjM9eRqYG2MPSav7U.roa (hash: WztCPaYNfJzy3qntVN7a2OFcCyo/yo2zpUp1jJXzcgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:94:00:ce:1c:10:a8:f2:4d:f9:da:6b:94:91:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c11d05cd29ab7192af039cf5f3d00be92157939
Validity
Not Before: Jun 28 16:01:19 2025 GMT
Not After : Jun 29 16:01:19 2025 GMT
Subject: CN=838a57b6a0df4b36a34d7bd6b5b86bacf77791c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fc:65:b6:8e:e1:b6:ca:dd:54:91:62:49:04:
98:4e:e1:02:b2:4e:40:38:bc:6d:e4:aa:2e:20:c4:
b1:26:f4:e3:a8:94:58:9c:a3:a8:bb:b0:b1:d5:84:
ab:f1:6e:44:e8:9d:1a:57:9a:03:d3:8a:c2:6f:8d:
69:fb:d5:2b:39:46:59:83:01:ba:12:d7:fe:30:5b:
29:02:90:6c:20:a4:b3:e6:35:ba:b2:2d:35:64:37:
6d:67:e3:73:49:6c:ee:94:85:b2:5b:fc:cd:04:2c:
40:b9:7c:92:37:a1:2c:f2:bf:c8:f2:c1:2d:01:49:
00:9c:8c:71:0d:dc:ba:a1:d7:74:fa:33:1f:84:7e:
60:b8:33:30:05:84:93:c7:3d:1f:8b:ac:c2:ef:bb:
88:e4:83:02:ce:7c:de:3d:51:f2:49:70:25:65:fa:
de:e9:8e:9d:b8:4b:51:58:69:73:86:f8:31:9a:79:
62:fc:a9:02:b8:5d:e8:68:4d:aa:43:76:86:5a:52:
07:de:2a:d8:2e:7c:fc:e3:04:03:e8:1e:42:99:e8:
ce:9b:05:92:fa:e1:a0:ab:92:07:d7:24:72:cd:87:
60:44:89:f5:a1:81:f3:3c:f2:61:cf:95:ca:5b:2c:
73:1e:ad:3c:2b:7f:1c:6e:fc:f3:a8:a7:d5:58:8f:
59:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8A:57:B6:A0:DF:4B:36:A3:4D:7B:D6:B5:B8:6B:AC:F7:77:91:C0
X509v3 Authority Key Identifier:
keyid:3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:97:90:7b:ea:7b:07:57:7b:17:65:63:27:bf:c7:78:c4:c5:
76:39:64:9b:a7:ae:d7:89:a6:06:ab:d3:19:8e:0d:0d:64:69:
05:b7:8f:02:14:db:f7:7e:7a:ff:8a:ed:c9:d0:5b:97:40:8f:
cc:bb:e4:79:5d:90:19:71:39:c3:d9:48:47:d8:46:07:e9:aa:
0c:39:d8:d9:3a:77:81:b0:86:91:3a:28:97:18:80:65:37:88:
90:f3:eb:01:5a:3d:8d:9c:27:e0:41:f6:63:1a:b9:2b:b6:0e:
8b:74:be:08:4f:4e:cf:32:ec:29:a7:03:88:a1:2f:f2:4f:44:
bd:db:c9:a3:bb:e9:34:64:4b:f9:86:78:0d:61:f0:60:0c:d8:
e4:06:93:c5:0d:a7:75:9a:15:df:07:88:99:01:a0:63:2c:8d:
e0:a8:bf:d2:36:9d:6e:36:f5:91:88:3b:cc:d2:aa:7e:b1:ff:
4e:f3:1e:62:16:5a:d6:dc:af:4c:e0:3c:ce:fc:b9:24:7f:dc:
71:e9:39:5f:67:06:d4:e2:54:2f:71:9e:ab:b1:9f:66:57:e5:
f2:0e:f0:7c:be:14:24:f9:65:6c:22:4e:21:68:c6:22:d4:3b:
82:69:f6:e3:44:8d:a5:a4:23:3d:fc:2b:a6:fc:9a:b3:15:1d:
14:42:e6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:52:57 2025 by rpki-client