Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
File: PNJOCMV2B8rrzBnIVS6uLpNeguU.mft (raw, json)
Hash identifier: ia6jDFnv0N0Mq3vHiSU0yuVxJ8Ic4C1SclpJF23puBE=
Subject key identifier: 73:2D:03:FA:3D:2A:46:6E:C4:A5:94:39:5E:E1:D4:D3:ED:FC:79:40
Authority key identifier: 3C:D2:4E:08:C5:76:07:CA:EB:CC:19:C8:55:2E:AE:2E:93:5E:82:E5
Certificate issuer: /CN=3cd24e08c57607caebcc19c8552eae2e935e82e5
Certificate serial: 0196C0141213E24CAB8596361B2DFD73BBFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
Manifest number: 56
Signing time: Sun 11 May 2025 16:01:02 +0000
Manifest this update: Sun 11 May 2025 16:01:02 +0000
Manifest next update: Mon 12 May 2025 16:01:02 +0000
Files and hashes: 1: AYSLpwufRV-W_9lRsqnuQFR2IOQ.roa (hash: Q3fm8OZk/vOZ06gyMzMxpxsqxYSULclXWKZVcRfqEg0=)
2: PNJOCMV2B8rrzBnIVS6uLpNeguU.crl (hash: qzKABYJJGaKWjlsIt0rfibxTaKFWx4vCr5WKqb5l9pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:14:12:13:e2:4c:ab:85:96:36:1b:2d:fd:73:bb:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd24e08c57607caebcc19c8552eae2e935e82e5
Validity
Not Before: May 11 16:01:02 2025 GMT
Not After : May 12 16:01:02 2025 GMT
Subject: CN=732d03fa3d2a466ec4a594395ee1d4d3edfc7940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:06:34:79:4a:ff:bb:6e:37:f8:93:2c:6d:ed:
c0:de:4c:ba:a9:39:5d:85:a0:27:8e:c9:24:7e:ab:
85:99:8b:33:ca:3d:ab:11:9d:ae:e1:d7:93:8a:1e:
38:14:76:2d:47:1a:f6:f5:61:18:73:d0:db:4a:72:
53:67:62:82:4f:ac:cb:c5:bb:f5:4b:2b:2f:ba:94:
06:76:00:bc:8c:50:16:e3:51:74:7a:cf:10:4c:e1:
a7:c1:ce:2d:a1:81:e1:a2:68:9f:d3:7e:8b:c7:55:
5d:85:bd:27:31:02:37:f9:a1:ec:35:aa:77:ce:0d:
88:43:b2:31:3e:37:91:dc:8d:ce:f0:a6:b4:b2:a8:
3f:9a:85:d8:a6:be:98:77:f7:b1:2d:b1:6d:e1:30:
e7:cc:26:02:d0:91:d6:5c:16:03:c4:37:17:44:86:
82:57:3d:d4:05:68:cd:86:ef:b7:cd:3c:7e:57:58:
34:0d:3f:dc:cd:59:70:b9:a9:b4:31:76:d9:30:34:
3e:1d:c0:b8:8c:06:77:22:79:ed:b0:06:e1:cc:89:
e4:a8:e6:7e:cb:62:83:7b:85:1d:93:3f:cd:40:65:
4e:c3:bd:ac:98:0c:3c:3d:f1:ab:09:a4:52:2a:7f:
6a:39:c0:bf:10:4e:17:e8:44:8b:ce:27:62:94:53:
d2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:2D:03:FA:3D:2A:46:6E:C4:A5:94:39:5E:E1:D4:D3:ED:FC:79:40
X509v3 Authority Key Identifier:
keyid:3C:D2:4E:08:C5:76:07:CA:EB:CC:19:C8:55:2E:AE:2E:93:5E:82:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:56:12:d1:ba:83:4f:40:58:1c:82:a4:20:a2:f9:91:2a:42:
a1:6d:b1:43:6b:42:d0:18:73:2b:cf:f2:bd:02:90:78:a8:1c:
25:e5:c6:5b:28:6b:e4:63:df:a3:ba:1e:8d:3b:8c:83:b9:1d:
4a:94:5a:f8:e2:15:b8:48:89:23:d0:5a:72:f4:7e:24:58:c7:
f5:7d:b8:0d:37:58:03:0b:2c:a2:e2:81:ca:f7:06:ca:f9:e1:
4c:58:c6:6b:61:3d:c1:9c:9a:0b:d3:70:5b:db:92:03:38:f2:
f2:63:08:28:da:7b:1c:3c:d9:d1:c8:17:6a:0b:90:7f:49:29:
d7:ed:46:f6:11:4b:31:ff:b1:99:66:1c:13:38:1b:8f:af:00:
c7:6c:64:51:ff:4c:c6:8f:02:8f:9d:e4:d9:1a:b5:d7:47:0a:
a1:79:87:d9:1b:a2:88:ad:22:f7:bb:55:b2:ad:10:d4:77:b9:
39:c6:11:fe:6f:60:98:ac:dd:74:41:26:f4:37:c1:cc:8f:ae:
19:cc:3d:3f:e6:6d:a1:55:45:2a:e8:16:cc:6d:9d:29:d2:bc:
8b:8b:03:68:51:11:11:82:43:a1:83:31:d5:89:84:ed:44:b8:
e2:a7:e3:03:58:96:d7:ab:6f:8a:49:4e:a4:5f:0b:11:60:69:
d5:77:f7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:20:57 2025 by rpki-client