Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
File: PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft (raw, json)
Hash identifier: G87JUNZ686hm1kwDM6LGmKm0bE2wuN8D3M6znwsSNSk=
Subject key identifier: 77:FE:FA:F7:0E:66:BC:11:0D:11:05:86:11:F7:2F:EA:9D:AD:B7:39
Authority key identifier: 3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1
Certificate issuer: /CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
Certificate serial: 0197DA3F2BDB74B6399D52024EFAB40CB578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
Manifest number: 119D
Signing time: Sat 05 Jul 2025 11:01:02 +0000
Manifest this update: Sat 05 Jul 2025 11:01:02 +0000
Manifest next update: Sun 06 Jul 2025 11:01:02 +0000
Files and hashes: 1: PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl (hash: SNVUfJKd7cFYg5fm/1G1YTW6KTTUu6xLybnofizT4nA=)
2: W_v27Hupk3RRQBILYKusMtNhoAc.roa (hash: yWY4EAVlw3dwpD2kqQElXOLSvOEEYUa61TWmAID32CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:da:3f:2b:db:74:b6:39:9d:52:02:4e:fa:b4:0c:b5:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
Validity
Not Before: Jul 5 11:01:02 2025 GMT
Not After : Jul 6 11:01:02 2025 GMT
Subject: CN=77fefaf70e66bc110d11058611f72fea9dadb739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:32:3a:4f:f5:5a:12:cb:5f:46:ce:ea:64:36:
0e:76:86:3e:09:3d:53:5a:00:11:9a:f9:8f:a9:04:
da:f2:43:85:08:e9:37:72:95:a9:31:1c:dd:4a:2a:
c6:99:e7:d7:3f:36:6c:97:1e:1e:45:e5:7d:b2:48:
71:c1:14:79:cb:e3:a7:69:35:80:44:bd:96:ae:df:
51:c0:1b:24:cd:f9:21:59:cf:31:da:53:ac:3c:f5:
9e:73:bb:db:8f:19:95:5f:72:56:92:e5:75:5f:70:
01:16:e3:72:38:d9:6c:59:05:54:75:0d:e0:7a:c3:
65:42:f7:6c:b6:dc:41:3c:9e:b2:90:7a:1b:c1:8b:
05:bd:55:87:f6:8a:f5:bf:c4:8b:69:fb:5b:7e:ec:
d9:64:74:d9:4c:bb:83:de:f7:a5:df:d2:a8:7f:3d:
30:b3:04:8c:dd:d6:48:2d:f5:e2:55:19:ed:0b:3c:
e4:38:e4:9d:ca:b8:ba:2e:2a:17:ab:af:f9:24:aa:
50:67:00:6b:61:a0:0e:17:88:83:22:56:7c:30:ce:
79:03:d7:3b:3e:09:8c:a1:44:9b:69:4b:2b:95:eb:
c8:b6:e1:1c:02:30:bc:dc:58:3b:3a:83:7d:82:d7:
44:3f:a9:86:00:30:bd:7b:5b:e9:4e:2c:17:c1:ca:
86:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FE:FA:F7:0E:66:BC:11:0D:11:05:86:11:F7:2F:EA:9D:AD:B7:39
X509v3 Authority Key Identifier:
keyid:3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:52:b1:f2:74:78:4b:68:54:84:e1:01:12:78:85:29:89:32:
31:bc:b6:b2:19:56:90:0e:bf:92:fd:f9:48:4e:0b:a3:e5:3f:
10:a4:d0:b7:c2:99:8c:31:e8:cc:7f:e0:50:bd:ca:e0:30:24:
79:29:53:1e:04:d5:ca:67:1f:b5:d9:e8:c4:c8:a2:d7:0c:2d:
17:80:9a:6c:7f:d9:00:40:e0:81:5e:28:2d:48:51:da:e7:10:
99:3d:6f:d5:f8:bd:fe:f9:4f:66:bd:2c:29:0a:3e:33:a4:08:
ed:f7:83:c2:f6:12:e4:30:f6:37:ab:62:01:a7:81:54:74:fb:
1b:4e:4a:ed:03:d7:22:9e:df:4b:1d:01:f2:51:8a:d4:c4:d9:
49:6f:32:d1:9f:08:ff:dd:b6:bc:57:35:bd:4e:c2:13:a4:22:
39:5b:f4:10:c2:10:64:71:93:23:61:55:a3:56:96:90:b4:41:
a3:16:ab:8e:0a:7c:71:05:6a:66:0b:aa:5b:04:d0:59:82:7e:
d7:c2:ab:e2:d8:af:65:b8:f9:42:85:51:83:28:29:b5:9e:e5:
04:ff:19:7e:19:3c:d4:e0:84:61:01:0a:c6:24:7c:e8:22:6f:
cc:20:dc:6d:ab:ba:2a:ec:57:e7:96:32:f6:60:11:d2:90:a0:
2e:79:5e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 21:05:05 2025 by rpki-client