Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
File: PNJOCMV2B8rrzBnIVS6uLpNeguU.mft (raw, json)
Hash identifier: tR05ShNaHDkdm9oSqTXwiDAIPkPVeCmCB2iSlBAi86w=
Subject key identifier: CF:60:56:25:14:D5:37:14:6E:96:25:26:02:67:64:EC:81:1C:C8:2D
Authority key identifier: 3C:D2:4E:08:C5:76:07:CA:EB:CC:19:C8:55:2E:AE:2E:93:5E:82:E5
Certificate issuer: /CN=3cd24e08c57607caebcc19c8552eae2e935e82e5
Certificate serial: 0198D515AB78924B64411B25232EDBE2F413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
Manifest number: 016A
Signing time: Sat 23 Aug 2025 04:00:23 +0000
Manifest this update: Sat 23 Aug 2025 04:00:23 +0000
Manifest next update: Sun 24 Aug 2025 04:00:23 +0000
Files and hashes: 1: AYSLpwufRV-W_9lRsqnuQFR2IOQ.roa (hash: Q3fm8OZk/vOZ06gyMzMxpxsqxYSULclXWKZVcRfqEg0=)
2: PNJOCMV2B8rrzBnIVS6uLpNeguU.crl (hash: Gtywg2Lo1Kozh2ccBW0lpwMsZSkgEeFtZ60cBsoSAdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:ab:78:92:4b:64:41:1b:25:23:2e:db:e2:f4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd24e08c57607caebcc19c8552eae2e935e82e5
Validity
Not Before: Aug 23 04:00:23 2025 GMT
Not After : Aug 24 04:00:23 2025 GMT
Subject: CN=cf60562514d537146e962526026764ec811cc82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ab:b2:a1:d3:e6:e0:fa:dd:08:e2:88:5e:2f:
7e:9d:2d:84:71:68:70:d0:cc:c6:52:d8:51:a9:21:
f3:a5:54:41:e5:13:f4:4d:e9:fd:35:58:7f:ed:3a:
41:dd:64:b3:27:3a:6e:4f:63:c2:66:3b:45:f6:aa:
ed:db:a1:0a:ea:23:4c:40:95:44:d6:7d:a8:eb:d3:
ea:c9:7e:d2:4c:02:a1:49:71:a2:9b:03:6d:87:dd:
8c:80:bf:68:b9:6f:7a:c6:01:e6:3f:9a:91:cd:da:
20:1f:22:43:75:6d:5e:50:60:9a:8c:0a:bc:db:d0:
83:e9:98:9b:c7:82:ee:b8:5e:bd:4d:74:1e:07:52:
f6:2f:d4:f2:68:f8:60:b5:a2:7d:74:f9:df:d8:62:
b6:a7:7e:59:39:29:ec:d6:d6:cd:d0:0c:93:e0:4c:
8a:5c:93:5c:65:03:5e:51:52:fa:3b:f4:94:3c:1e:
39:c2:e8:89:38:7b:a6:4a:1d:51:f7:c0:82:61:b8:
fd:2b:bb:02:b0:86:7f:7b:00:79:68:3a:aa:92:57:
d0:42:04:82:a3:19:da:a6:f9:6e:62:44:fa:5a:65:
29:27:86:f6:92:f2:66:02:5f:03:48:94:8b:d8:3c:
39:f5:43:22:5b:de:cc:cf:fc:0f:a7:f5:2c:6f:6f:
32:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:60:56:25:14:D5:37:14:6E:96:25:26:02:67:64:EC:81:1C:C8:2D
X509v3 Authority Key Identifier:
keyid:3C:D2:4E:08:C5:76:07:CA:EB:CC:19:C8:55:2E:AE:2E:93:5E:82:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e4:fb:48:33:ff:9e:a2:c3:e2:d7:f6:ef:ca:83:a6:e9:01:
20:35:10:f3:f9:f0:dd:66:8d:6d:a8:a6:45:6c:0b:ca:33:6f:
0c:89:d5:51:b5:e4:2e:cb:88:8c:a2:d6:0e:7e:ef:8f:12:e6:
16:1c:76:25:e6:9c:3e:92:b8:c8:6b:8a:da:e1:27:28:3f:74:
1e:10:07:cb:aa:92:4b:ae:0d:98:47:56:8a:0b:10:0b:84:25:
de:ea:a2:f8:e0:0e:2d:6b:7e:21:57:7b:7e:e9:9f:ba:af:8b:
be:a0:28:45:2b:7c:56:67:6a:aa:b1:8b:9d:29:88:03:aa:7d:
9f:23:57:f7:40:07:ef:63:9b:38:f3:8d:fd:72:6b:77:4a:12:
bb:fd:b6:69:12:c1:6c:f3:f0:91:11:08:f9:9e:21:a6:2d:1b:
45:77:e2:50:78:c7:65:fa:88:56:d4:00:fe:4c:bd:96:27:45:
96:28:19:ab:1f:b2:3b:a5:dc:66:dd:cd:43:9a:7b:d2:32:10:
49:f6:5a:2e:1d:56:79:a1:83:b4:04:34:67:db:88:40:90:27:
33:f5:a8:29:cb:d2:62:ed:d0:1d:4a:0f:82:c9:5c:6b:f5:c0:
9c:22:be:9d:3b:7b:a2:dd:06:e5:ea:8b:99:7d:c9:9e:65:7e:
3b:90:21:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:29:07 2025 by rpki-client