Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
File: PnDBS_JvrwGY8eeyRynNcbM1GN4.mft (raw, json)
Hash identifier: Jpfyyl/5wZp5qznbYHgvZU74MuEIuQD43IAD8Pk3jvc=
Subject key identifier: CC:D2:39:1C:C2:2E:AB:04:1D:8B:D2:02:DD:2A:7E:48:A4:23:54:CB
Authority key identifier: 3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE
Certificate issuer: /CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
Certificate serial: 0197B6A048A33F33D7FA5E28E61A73663029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
Manifest number: 02AB
Signing time: Sat 28 Jun 2025 13:00:46 +0000
Manifest this update: Sat 28 Jun 2025 13:00:46 +0000
Manifest next update: Sun 29 Jun 2025 13:00:46 +0000
Files and hashes: 1: 4d9jncgFcD3LQEVJLbIB2I3M9lo.roa (hash: seBbCSSGlRgW36OWqyme1v3t3KHDAPOFROvpxV8jwzE=)
2: 4uaLh2b-bHV2NsxIJY_pK9e3698.roa (hash: sMeMy3i5FoQg0v9xzPREgO0rI8VqgJmcA0uZMgg0uts=)
3: PnDBS_JvrwGY8eeyRynNcbM1GN4.crl (hash: M3tIpoDQ7LU5fko9bEfunHuqeerH2fPijVFh00veDlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:48:a3:3f:33:d7:fa:5e:28:e6:1a:73:66:30:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
Validity
Not Before: Jun 28 13:00:46 2025 GMT
Not After : Jun 29 13:00:46 2025 GMT
Subject: CN=ccd2391cc22eab041d8bd202dd2a7e48a42354cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d7:cb:d7:7f:82:ed:d7:8e:9b:58:1b:6c:0b:
1f:90:6b:a4:12:be:4f:27:00:24:32:ee:14:df:61:
e0:89:0a:6b:29:50:74:21:73:c7:12:8d:82:6c:ad:
ec:e0:74:91:f2:01:ea:17:55:df:e4:52:5a:59:80:
3f:09:7d:8f:8d:2d:0a:44:5e:f6:92:a4:a3:55:ec:
65:15:87:df:ff:a3:93:07:50:80:a1:91:d4:e2:64:
40:2b:9a:13:0c:ca:40:7e:92:4b:95:98:1d:70:f1:
88:2d:cd:0c:f8:54:29:f8:a8:dc:a6:bf:01:2f:32:
d9:65:ba:89:23:58:29:f6:56:85:bf:c2:23:bf:85:
72:0b:f5:5c:2e:0b:e7:3f:bc:06:fc:33:f9:bc:dd:
48:ee:32:0b:c0:5c:01:14:cc:06:2f:74:dd:cd:97:
79:31:3d:cc:7f:94:72:b7:8f:89:44:4e:5f:65:44:
d7:4c:2a:70:78:d4:ef:c7:38:d8:85:e7:cc:ed:cc:
d7:36:c7:19:a9:f3:e4:c2:88:6f:bb:5a:14:3c:98:
fd:4a:4b:21:45:bb:7d:00:ea:f9:4a:93:0a:67:8d:
01:72:1c:78:b9:0e:31:ce:cd:cc:be:20:b2:07:1f:
c7:43:a8:37:59:ce:b5:4c:6f:5b:e2:36:0d:99:33:
96:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D2:39:1C:C2:2E:AB:04:1D:8B:D2:02:DD:2A:7E:48:A4:23:54:CB
X509v3 Authority Key Identifier:
keyid:3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:5c:7a:84:ba:a2:72:2b:c7:37:36:2d:67:8a:f1:ce:27:97:
68:74:20:32:d6:11:cf:80:f9:36:f4:67:15:06:f7:54:90:39:
42:26:5b:5e:9f:41:61:c6:84:76:26:08:c6:de:8b:56:b1:57:
51:03:fa:df:43:9d:39:86:e8:40:4f:d8:be:89:8b:82:94:61:
59:ed:44:c2:10:9a:04:83:85:c0:f5:9a:c4:a7:3e:8f:c8:a5:
ea:9a:cd:7e:9d:e5:d9:77:c6:00:21:f9:e9:92:24:34:25:96:
39:83:78:57:f1:43:1e:2f:4b:ec:6b:78:13:e1:36:a0:8a:69:
97:7c:26:a0:4e:26:78:d5:4e:a3:dd:22:a7:84:c9:71:84:18:
57:2f:63:cd:4e:84:94:ad:39:92:82:45:5c:cc:e7:0b:70:ce:
02:51:03:ac:94:2c:11:2f:ea:32:a7:83:59:f4:06:93:0a:73:
27:92:83:d4:42:2a:b4:99:0e:d4:d7:1d:b6:7d:0d:43:4b:04:
a8:77:31:36:20:0d:20:68:a7:73:83:58:a3:13:c3:4d:c6:27:
e9:24:aa:e2:8c:1c:d6:e3:8a:13:e7:bf:d8:a7:05:f4:85:03:
85:fb:06:05:c0:19:a0:c7:93:da:08:19:e4:58:65:89:ad:e4:
8a:0b:dc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:47 2025 by rpki-client