Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
File: PcI-io7JOWsbVM_7JxxVdm2UkZk.mft (raw, json)
Hash identifier: Dmm+NxeDslhXMWvKNQM0acvS7Z+l4Rk7Csh7/Kuh7ck=
Subject key identifier: 8A:16:96:BE:B6:F8:CB:12:55:EB:3B:21:6E:F1:91:CA:39:DC:DB:8B
Authority key identifier: 3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99
Certificate issuer: /CN=3dc23e8a8ec9396b1b54cffb271c55766d949199
Certificate serial: 0197B5C4F08BEDBC910F631696CE9D3268A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
Manifest number: 111D
Signing time: Sat 28 Jun 2025 09:01:12 +0000
Manifest this update: Sat 28 Jun 2025 09:01:12 +0000
Manifest next update: Sun 29 Jun 2025 09:01:12 +0000
Files and hashes: 1: 1-dSijOlomtrsqkND-2jGvkzEh1s.roa (hash: vAMtZ2jKMP2IiV0cN+Yk3wrsh8M5v/wTw365APu16Sc=)
2: PcI-io7JOWsbVM_7JxxVdm2UkZk.crl (hash: P5pMcpsNjsnX7kKCIi+v2BK8KzN6u1CIGmBmH/pMexA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:f0:8b:ed:bc:91:0f:63:16:96:ce:9d:32:68:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc23e8a8ec9396b1b54cffb271c55766d949199
Validity
Not Before: Jun 28 09:01:12 2025 GMT
Not After : Jun 29 09:01:12 2025 GMT
Subject: CN=8a1696beb6f8cb1255eb3b216ef191ca39dcdb8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6f:85:b0:9f:57:7f:74:28:aa:8c:49:6a:ff:
0d:f1:0f:84:87:58:8b:17:f1:92:05:70:7d:4e:91:
d1:d4:05:79:16:ba:84:b6:73:22:6c:2f:c4:32:c4:
2e:2a:cc:a8:7e:d7:3e:30:f0:91:96:5a:3d:ca:e8:
a6:49:e7:ec:d2:69:65:10:59:5b:80:91:a2:ed:1d:
b1:ef:82:2f:e1:26:dc:93:2e:2f:d9:8a:8b:96:b8:
f4:1c:0a:67:3c:4a:ea:1b:46:03:af:48:cd:51:a5:
6a:37:c5:0a:d5:09:ef:ec:21:06:bd:76:05:27:f4:
a6:fd:31:0d:be:dd:6c:76:70:74:83:67:19:98:74:
51:ac:98:42:82:43:4a:f4:b7:48:f0:b0:06:2f:7d:
7c:a9:70:74:a5:ec:57:ef:ca:bb:a5:6f:b1:94:a6:
bd:12:40:41:f3:1d:e4:2b:0d:45:ef:c3:db:d0:70:
35:a9:dc:d3:6b:46:99:5a:a4:45:20:5e:96:a8:b6:
60:1f:30:21:52:19:0e:26:5d:79:69:b7:cf:37:d6:
a1:58:98:41:81:b1:0a:c0:f2:b8:69:c1:ec:13:c6:
a2:08:aa:0e:a9:6d:67:17:ee:13:a3:a8:b8:3e:a0:
c2:21:9a:ed:b9:da:fe:73:d9:d2:ca:f4:18:57:e4:
a9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:16:96:BE:B6:F8:CB:12:55:EB:3B:21:6E:F1:91:CA:39:DC:DB:8B
X509v3 Authority Key Identifier:
keyid:3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:3c:67:f0:2f:57:d3:08:a5:87:21:e6:56:89:f0:7b:6f:e6:
67:66:f7:9c:37:66:a8:12:79:01:06:70:1e:55:8f:0e:4e:50:
93:26:1e:89:72:24:df:fb:a3:d8:38:1d:22:62:8b:63:f7:d6:
e2:c4:f3:ec:60:01:17:86:d0:54:7e:b1:32:f7:eb:71:58:b9:
1c:19:49:dd:d5:2e:0d:d3:8a:58:96:b3:42:ab:18:89:2e:e5:
20:e6:26:a5:e2:8e:30:99:61:e8:30:0b:ca:f3:db:08:f9:4c:
bd:15:55:3a:af:ed:0e:1b:b3:32:11:23:c0:aa:0e:d2:74:c0:
9b:8e:0e:59:3c:69:4f:75:8d:4d:92:36:cc:a0:18:e9:f2:63:
80:a8:a9:4b:6b:13:b2:7c:a1:85:38:00:14:26:8e:5d:33:c3:
de:07:99:51:85:01:c5:03:00:a6:0e:22:25:6c:bd:dc:d7:bd:
b6:40:1b:a9:95:25:e7:a2:98:1c:29:5d:d9:bd:91:3b:5b:f9:
be:72:59:96:f2:ea:1a:d0:b4:19:ee:2a:39:95:a4:09:3c:2c:
8b:88:c5:5a:c3:06:31:fd:1f:b2:71:50:99:56:36:c4:58:44:
c4:dc:bd:58:b6:b5:bb:af:93:8d:f4:76:61:26:fa:da:21:32:
22:a2:b3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:20:17 2025 by rpki-client