Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
File: pfanGhgNz4sjDEFPCfe3G66peBw.mft (raw, json)
Hash identifier: 4cUkvlhMvNZpzF6KCcbe/PoRGd/5sPupZ+SOdTwcQpk=
Subject key identifier: C3:09:DA:F4:98:CC:52:8D:E5:3F:4E:0D:79:8D:BE:C9:7E:C4:CC:C4
Authority key identifier: A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C
Certificate issuer: /CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
Certificate serial: 0197B7EA3860794F7830BE80EC40B9C07B9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
Manifest number: 0281
Signing time: Sat 28 Jun 2025 19:01:09 +0000
Manifest this update: Sat 28 Jun 2025 19:01:09 +0000
Manifest next update: Sun 29 Jun 2025 19:01:09 +0000
Files and hashes: 1: 4ztGIasVEwEbakF0ec-7K0e5IU4.roa (hash: IY2hXYNDBxgugsXRkJWFvDBibE33L3+eqXYnL7k07xY=)
2: pfanGhgNz4sjDEFPCfe3G66peBw.crl (hash: iwj3fcab1tTLJ6ypCURKbxxpFTJmeUyUiMk8TBPMNqA=)
3: yQmkLUR6MH6h1RvFVHhe4DDu7QY.roa (hash: 7D7oyqrxVnp9P9+upqmUz5U0xALaurO7hGz+98jrtEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:38:60:79:4f:78:30:be:80:ec:40:b9:c0:7b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
Validity
Not Before: Jun 28 19:01:09 2025 GMT
Not After : Jun 29 19:01:09 2025 GMT
Subject: CN=c309daf498cc528de53f4e0d798dbec97ec4ccc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:75:31:70:5b:c2:ab:49:57:0b:05:14:6b:71:
1d:fa:78:fc:0d:4d:da:f3:d1:9b:54:3f:e5:65:42:
56:8f:ca:0e:e5:86:33:58:66:80:3b:2c:6a:8a:cf:
3d:1c:68:b8:40:d2:1b:a1:a2:50:d1:0f:89:30:ec:
5d:15:21:4d:ba:d0:0c:bd:12:3c:8e:91:92:c6:83:
13:b3:6d:82:b4:4a:55:01:7a:53:89:4f:96:84:d6:
95:3c:df:e2:aa:17:93:40:25:e3:75:aa:38:ce:6c:
75:74:0c:b9:7d:bb:1a:b2:eb:e0:1e:4a:0f:49:38:
93:46:95:06:12:31:98:45:5c:01:47:c8:41:3a:0a:
7c:4a:49:58:86:12:60:7c:b0:53:8d:f1:4b:65:2c:
40:a6:d7:e5:63:41:7f:d1:a5:53:67:bc:bf:f8:38:
f8:e2:0d:a2:77:74:72:01:3b:4f:0c:3e:7d:1a:23:
57:3a:57:90:75:93:d8:46:9d:d2:db:b1:8d:a7:7f:
9e:ea:1b:23:62:ea:e3:0f:8c:69:51:b2:4f:d8:22:
96:1a:ce:4c:9c:f9:37:3e:99:e5:89:9b:8e:20:32:
84:6f:a0:74:33:f3:b4:76:af:ad:7a:8f:37:ca:df:
4d:c6:7e:f3:3f:d3:43:54:04:85:b5:58:58:b6:59:
82:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:09:DA:F4:98:CC:52:8D:E5:3F:4E:0D:79:8D:BE:C9:7E:C4:CC:C4
X509v3 Authority Key Identifier:
keyid:A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:82:32:83:85:4e:21:eb:a5:33:0d:97:ed:af:25:74:47:f8:
ef:93:75:1b:e3:a1:4d:2b:b8:50:21:4d:c0:16:ff:23:76:fc:
b2:b6:4c:5d:76:8a:6a:16:7a:3b:78:1a:c6:7f:11:37:98:77:
66:f9:4b:bb:74:22:90:84:e6:11:fb:eb:d2:31:a9:f5:00:6a:
c3:dd:00:cf:7e:24:26:6b:f8:b4:67:34:73:32:78:b5:c7:07:
1d:26:42:81:92:bf:95:d2:2f:69:67:f3:2f:20:20:d7:96:74:
fe:81:63:11:37:36:27:34:c1:1f:6e:01:02:f1:a8:00:58:96:
b3:29:c0:e2:35:f4:80:bc:27:f0:53:27:02:e8:25:6d:b0:b4:
00:8b:99:da:4b:eb:bc:2e:f6:5e:d9:f0:b8:c6:98:63:40:62:
b6:f5:74:77:7f:84:fd:ea:6f:cc:20:a7:63:42:62:61:d4:1a:
8c:8f:bb:51:0f:2c:0a:bd:33:bf:b8:a6:16:2d:c5:5b:08:5b:
82:e8:2d:0f:90:e1:7e:f2:63:be:17:62:55:1d:98:e7:38:93:
c1:e7:c2:5b:ff:5b:6a:52:90:1b:77:51:d6:31:59:77:9c:2c:
ef:20:b4:e1:0f:50:a7:92:4f:f2:71:8f:9c:49:b1:06:f7:d4:
ef:3e:ac:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:37:59 2025 by rpki-client