Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
File: PNJOCMV2B8rrzBnIVS6uLpNeguU.mft (raw, json)
Hash identifier: LXJ6dKoU+8ofgreNSdmcjGRVO+W+4T6c3wb2pxYGclQ=
Subject key identifier: 49:8E:FD:14:86:95:07:D5:34:BA:8A:D4:E1:3A:78:76:9E:30:38:29
Authority key identifier: 3C:D2:4E:08:C5:76:07:CA:EB:CC:19:C8:55:2E:AE:2E:93:5E:82:E5
Certificate issuer: /CN=3cd24e08c57607caebcc19c8552eae2e935e82e5
Certificate serial: 0197B745498F50BFD20AF7B0A6AC5FA5EE9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
Manifest number: D6
Signing time: Sat 28 Jun 2025 16:01:00 +0000
Manifest this update: Sat 28 Jun 2025 16:01:00 +0000
Manifest next update: Sun 29 Jun 2025 16:01:00 +0000
Files and hashes: 1: AYSLpwufRV-W_9lRsqnuQFR2IOQ.roa (hash: Q3fm8OZk/vOZ06gyMzMxpxsqxYSULclXWKZVcRfqEg0=)
2: PNJOCMV2B8rrzBnIVS6uLpNeguU.crl (hash: Nr5fbkBy3EQ13YurE36JNr8wxQXJsg6O11ttx6pE7T0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:49:8f:50:bf:d2:0a:f7:b0:a6:ac:5f:a5:ee:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd24e08c57607caebcc19c8552eae2e935e82e5
Validity
Not Before: Jun 28 16:01:00 2025 GMT
Not After : Jun 29 16:01:00 2025 GMT
Subject: CN=498efd14869507d534ba8ad4e13a78769e303829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:85:86:b2:f2:20:b6:6f:b6:86:e7:7b:94:a5:
9b:3a:fa:82:51:79:aa:1c:cf:b6:ed:37:59:57:24:
fd:1c:6d:04:a3:f4:12:62:c4:62:58:a9:19:d5:87:
0d:8b:0c:0f:ed:49:6b:4b:b0:7d:4a:f9:c6:ff:41:
3d:12:ec:11:4b:3f:10:df:7d:56:18:bc:42:f6:26:
0b:e9:c5:62:0c:bd:c0:8b:50:f9:ab:67:dd:c8:06:
9a:f5:3f:37:e5:7a:e3:a4:dd:78:a9:0c:2c:93:52:
d2:21:73:5f:fe:1e:57:9e:9c:92:d0:f2:01:64:3c:
71:f1:fb:db:2d:59:d8:03:19:71:08:b7:68:7d:7a:
3e:0a:c7:be:21:a4:10:5f:14:64:8e:54:c0:6d:47:
a7:a2:f6:a4:99:06:a8:12:93:d8:4b:37:77:f7:52:
c6:db:14:0c:86:90:3a:e5:69:1e:08:15:9f:e0:ac:
8c:9c:12:04:55:c9:5a:20:92:eb:9b:a5:0c:4e:32:
e6:32:1a:ce:e6:25:0c:92:dd:c2:65:37:b0:a1:10:
2b:2a:07:ce:42:ff:ff:15:18:e9:74:59:46:ef:73:
ed:d2:3b:8b:78:84:94:44:3c:a2:c1:b0:a4:5c:d3:
3e:df:8a:77:8a:4d:f1:d4:a1:71:bf:6c:e2:8b:76:
92:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8E:FD:14:86:95:07:D5:34:BA:8A:D4:E1:3A:78:76:9E:30:38:29
X509v3 Authority Key Identifier:
keyid:3C:D2:4E:08:C5:76:07:CA:EB:CC:19:C8:55:2E:AE:2E:93:5E:82:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:cd:c2:c4:3d:d2:88:40:b6:00:4d:ce:ed:ed:4f:af:b7:64:
26:d8:bd:52:79:2c:0e:b3:de:89:84:e0:ed:d2:84:b0:c6:d4:
11:a9:46:5a:2a:e0:c3:1a:94:f5:79:e8:4c:23:7e:0b:c6:c5:
22:53:91:15:10:f8:bb:52:12:61:1c:52:f5:0d:02:75:84:e8:
4b:d1:50:8d:91:8b:ad:7e:1f:d1:3f:f4:80:0f:d1:b3:e2:d4:
bb:ff:aa:63:db:a7:b1:7c:ac:f9:4c:ec:80:c4:71:bd:8c:59:
e6:42:8a:7b:b2:8d:36:78:c1:54:89:50:9c:69:b8:b8:1a:a5:
3a:f3:5e:4b:e7:f4:61:1d:cd:03:96:cc:fa:7c:d4:f4:dd:79:
5d:2a:cb:dc:46:f4:ae:7b:6f:4c:4c:ff:dd:43:29:8c:9c:e9:
9c:1d:5e:4f:73:cc:a1:48:59:99:b7:56:dc:ba:db:8b:0d:63:
5f:65:b7:1f:c2:45:b3:b1:3f:7a:aa:52:af:73:a4:19:04:3e:
43:fb:4a:f0:a4:3f:a4:bb:10:75:72:1d:08:c0:e0:93:fc:0d:
4d:40:58:4b:91:a2:b2:50:62:02:9c:26:07:73:30:c6:e6:12:
c8:d0:ee:4a:65:f8:c9:91:c1:4b:55:e0:7b:91:8b:17:ab:94:
30:d9:89:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:19 2025 by rpki-client