Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
File: PnDBS_JvrwGY8eeyRynNcbM1GN4.mft (raw, json)
Hash identifier: rM9gt4eFha8+8j8kgBOU6CAyQBfcWNV2swBtBfHK8SQ=
Subject key identifier: 03:50:AF:94:3E:1C:B5:BD:26:CE:96:2D:8D:C5:4C:32:D4:80:90:88
Authority key identifier: 3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE
Certificate issuer: /CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
Certificate serial: 0196B590040DB48607670C29A3BADD4F1585
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
Manifest number: 0226
Signing time: Fri 09 May 2025 15:00:36 +0000
Manifest this update: Fri 09 May 2025 15:00:36 +0000
Manifest next update: Sat 10 May 2025 15:00:36 +0000
Files and hashes: 1: 4d9jncgFcD3LQEVJLbIB2I3M9lo.roa (hash: seBbCSSGlRgW36OWqyme1v3t3KHDAPOFROvpxV8jwzE=)
2: 4uaLh2b-bHV2NsxIJY_pK9e3698.roa (hash: sMeMy3i5FoQg0v9xzPREgO0rI8VqgJmcA0uZMgg0uts=)
3: PnDBS_JvrwGY8eeyRynNcbM1GN4.crl (hash: c0Gjmynr1GIbpmKxQvDIBc4TiU/OZkxe5wHd07GsVso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:90:04:0d:b4:86:07:67:0c:29:a3:ba:dd:4f:15:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
Validity
Not Before: May 9 15:00:36 2025 GMT
Not After : May 10 15:00:36 2025 GMT
Subject: CN=0350af943e1cb5bd26ce962d8dc54c32d4809088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ef:b5:98:f0:65:0b:78:f6:ed:eb:2e:21:9f:
f5:4d:1a:77:80:ea:70:77:d3:d5:3b:18:a4:1f:7f:
da:a5:36:eb:57:7f:54:ff:c5:cd:25:cc:e7:f8:57:
b3:25:e2:f7:69:85:f2:48:03:51:a9:b5:03:f9:8c:
42:99:c9:39:70:dc:c4:84:44:7f:3e:79:2a:1b:40:
84:b9:0e:30:1d:2e:b6:ae:e4:af:47:e5:0d:7c:99:
e9:b2:8e:5d:01:18:a7:11:53:77:b5:6b:0f:d2:21:
0e:ca:a8:0b:e1:3b:d7:cf:d9:a3:15:f2:b2:e4:a3:
ff:d6:d4:86:d5:6f:dd:3c:31:e2:1a:98:c0:a9:3d:
9d:4d:2b:f6:e1:34:e6:67:e8:0b:e5:31:01:e5:12:
73:2e:7b:a3:cc:86:77:e3:43:e7:f5:a7:ac:fb:11:
57:7f:33:dd:da:0f:cd:ca:f2:59:15:5a:c8:79:f0:
b4:71:92:8d:6b:f8:fe:db:14:ab:1d:94:62:07:64:
4a:ef:bd:81:36:78:0b:0d:20:6e:8f:9b:fe:b8:cf:
a2:47:63:08:5c:4b:08:59:d0:fd:59:27:c2:11:70:
f4:24:48:ef:e9:cd:54:9c:46:42:4b:96:cf:5a:b7:
83:5d:7d:46:23:e8:b4:eb:61:3c:76:13:5e:a4:0c:
9f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:50:AF:94:3E:1C:B5:BD:26:CE:96:2D:8D:C5:4C:32:D4:80:90:88
X509v3 Authority Key Identifier:
keyid:3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:53:af:97:88:34:a7:2a:ab:02:fc:8e:a7:b1:bf:5f:6e:4a:
58:77:1c:47:54:8f:33:d7:20:70:5d:57:60:05:26:0c:8a:96:
1b:57:6a:9e:51:8e:86:42:9c:f8:da:77:be:51:b3:00:de:86:
bb:82:93:ea:8f:aa:ee:48:6d:35:2d:80:7a:86:3b:db:d3:1f:
92:42:4c:2e:4f:5b:2b:4c:71:e8:f3:18:00:b8:b1:db:7f:bf:
49:f0:dc:c1:39:27:e0:aa:48:59:20:22:fc:c7:9b:02:2f:9c:
a2:e1:0e:63:89:65:0c:f4:71:67:97:98:fe:a0:57:79:cf:9a:
31:11:b0:88:9a:23:bc:a4:1d:2f:5c:10:b1:7f:e9:e1:3a:06:
9f:30:78:e1:be:96:b7:f6:ec:6e:fe:e8:18:f7:b1:5d:d0:db:
b2:13:79:cc:11:6e:97:74:c5:77:11:f6:48:4e:57:e2:21:32:
fe:6a:53:59:c2:a2:df:c7:5c:ad:7e:a2:15:63:0a:02:89:ad:
2d:78:e3:8b:8b:f1:18:0a:15:15:c1:d3:20:1c:69:3c:4b:d7:
8e:6c:5e:91:5f:0f:27:f0:e8:15:f3:e1:81:35:d4:9f:09:f8:
55:f5:71:49:fe:3b:2e:41:2f:a7:43:ec:5c:04:cf:85:26:a6:
29:82:3e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 16:44:00 2025 by rpki-client