Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
File: PComfc4HIjjpwEUV5n65kmcuNRs.mft (raw, json)
Hash identifier: TDSNw6LhE2WNgM8SEKKVR10Vy1KbKnsfLEE0LVCPb2k=
Subject key identifier: 52:5C:B3:EF:1B:FE:F5:6C:F5:25:4A:82:8F:22:D0:E5:9E:2B:9F:0F
Authority key identifier: 3C:2A:26:7D:CE:07:22:38:E9:C0:45:15:E6:7E:B9:92:67:2E:35:1B
Certificate issuer: /CN=3c2a267dce072238e9c04515e67eb992672e351b
Certificate serial: 019849D33EDDEB7A4EAC7D669F392A199F2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 03:00:37 +0000
Manifest this update: Sun 27 Jul 2025 03:00:37 +0000
Manifest next update: Mon 28 Jul 2025 03:00:37 +0000
Files and hashes: 1: PComfc4HIjjpwEUV5n65kmcuNRs.crl (hash: kaXrcuwkpfpCyUf/mztz+KjIb/8u7BcoOqfOJJtqmYg=)
2: ZGY0lWkEYWemqocgFCB9t9qlPGA.roa (hash: fiVljxbXsWOkY42tbBEX2UBc5QCY0m1ysP8nQ4McSh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:3e:dd:eb:7a:4e:ac:7d:66:9f:39:2a:19:9f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c2a267dce072238e9c04515e67eb992672e351b
Validity
Not Before: Jul 27 03:00:37 2025 GMT
Not After : Jul 28 03:00:37 2025 GMT
Subject: CN=525cb3ef1bfef56cf5254a828f22d0e59e2b9f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bf:d6:5f:24:3f:1f:90:fc:86:2a:ec:a8:06:
9d:92:bb:31:d1:99:b9:aa:b5:1f:4b:3c:10:f5:8f:
8b:2a:cc:48:4f:a1:d5:6b:a9:1e:9e:1f:2f:63:1c:
74:f1:fe:0c:1d:2f:f0:89:c8:ec:f4:59:68:88:f8:
92:3f:e0:67:57:80:ab:9c:a3:19:2a:40:04:e0:b1:
ae:3b:9e:96:e3:92:32:92:2a:c9:0b:00:9a:47:1e:
8e:b7:87:9f:dd:fc:d4:02:e6:bb:88:5b:2e:28:76:
41:55:e8:16:df:a1:c7:7b:c6:77:08:d5:66:00:f1:
2f:b0:dd:38:e8:7b:3f:ff:90:34:21:0e:14:e0:bb:
88:06:29:75:e7:81:b5:a2:f9:22:5b:2d:2f:79:c8:
b3:d5:13:bc:b4:c0:59:8d:3a:a5:b5:82:b2:a6:a0:
81:b0:1b:da:04:10:ec:89:1f:2e:6a:43:5b:d9:b0:
4d:c7:ca:d2:70:36:d8:ed:d3:46:57:dc:11:7f:fb:
ef:49:b2:fe:a4:16:2d:8f:a6:7a:f4:84:fd:1a:05:
0a:48:b1:f0:3d:e2:97:37:4b:35:29:3f:b0:30:a2:
50:fb:8f:f2:f0:b4:4a:d6:fb:44:45:b5:04:4d:03:
8b:a1:92:50:29:2a:65:1b:88:dd:23:2d:ec:7b:ab:
55:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5C:B3:EF:1B:FE:F5:6C:F5:25:4A:82:8F:22:D0:E5:9E:2B:9F:0F
X509v3 Authority Key Identifier:
keyid:3C:2A:26:7D:CE:07:22:38:E9:C0:45:15:E6:7E:B9:92:67:2E:35:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ba:fe:ed:56:e4:3d:fe:60:6a:4c:0e:51:c2:22:84:75:67:
ac:05:7c:2d:9f:83:ee:87:7d:97:d6:b5:19:d7:6a:d8:d6:1a:
71:6b:bb:ad:49:d8:01:ca:7c:94:1f:39:3b:0f:a6:38:e2:43:
ca:fe:21:65:a9:a8:5e:aa:21:aa:38:e6:25:b8:4f:2c:21:df:
eb:50:fd:c1:4e:a1:0c:c9:a1:1f:c6:ec:05:1f:58:77:47:31:
3a:be:c3:cc:90:ac:48:5b:5f:dc:c0:49:6f:9d:1f:e2:67:bc:
1f:12:3a:d0:10:8f:ba:9f:13:09:62:5c:83:74:d1:6b:dc:46:
7b:e9:c3:8b:9d:3b:1d:e4:05:89:70:5a:d6:91:83:77:5f:d2:
99:c9:69:45:ca:c1:84:a9:de:2d:3a:94:10:c6:73:e1:52:d1:
7b:89:bb:c9:b4:da:8a:63:c8:39:69:c3:d0:f5:70:e0:f1:28:
88:d0:9f:51:5c:50:22:a7:d9:d9:d5:21:a0:ae:c9:1a:20:cc:
7f:63:4e:ea:e4:4b:51:75:27:ae:02:ca:fe:c4:22:fd:a5:f7:
da:fd:27:aa:eb:46:90:9b:43:f3:01:2f:a9:cd:56:b7:95:6a:
0c:a8:fb:eb:e6:c2:ff:00:f4:86:b6:14:2f:89:77:2d:67:bc:
4d:49:5c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:27:12 2025 by rpki-client