Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
File: PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft (raw, json)
Hash identifier: jHH6kE8VOi+5gM6E7oIZrlsGcNXjJvIkltFQpC9Dc6I=
Subject key identifier: D8:07:6A:AC:69:12:15:3B:06:7E:D6:64:90:A1:95:16:64:36:A4:C8
Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
Certificate issuer: /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Certificate serial: 019853E918AA7B87F38292C772E31504CA66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
Manifest number: 1044
Signing time: Tue 29 Jul 2025 02:00:41 +0000
Manifest this update: Tue 29 Jul 2025 02:00:41 +0000
Manifest next update: Wed 30 Jul 2025 02:00:41 +0000
Files and hashes: 1: PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl (hash: 8cHFsGpyYo8dxw83cGdEGPwRuVgnfuR3WVezVrpPWOE=)
2: X4mIRbShCI_swD4AYibAfXumzPE.roa (hash: ZCD8FV34ZVGGbkTB2fH3uXc5W92QDu1a+e1QI3r0+es=)
3: k0e8XrkRjigLyVCK_c8tyoDjXqU.roa (hash: VlaMdbNDNwgFwQ8MfYZ/SEPVePx9cKrNfoX/5Qh79Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e9:18:aa:7b:87:f3:82:92:c7:72:e3:15:04:ca:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Validity
Not Before: Jul 29 02:00:41 2025 GMT
Not After : Jul 30 02:00:41 2025 GMT
Subject: CN=d8076aac6912153b067ed66490a195166436a4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ae:8f:cb:3d:c1:b5:92:c8:39:95:6e:40:7e:
1f:af:f6:00:c6:27:6d:38:7e:d2:6c:42:58:b8:5f:
15:51:0c:fb:5d:8f:05:83:9a:0d:4a:5a:0a:80:91:
3f:bd:cd:b7:16:09:5b:38:77:d0:f6:19:f9:94:97:
3e:27:0f:3d:95:c8:3c:83:35:6d:43:86:4b:4f:9a:
57:e7:47:52:4b:5a:40:03:dd:ea:72:7a:29:15:d3:
f1:d3:f7:83:c8:c1:af:6b:ce:df:e4:9f:d0:61:05:
ba:ff:b7:39:c5:4c:ea:2f:53:f2:60:d6:c4:94:07:
bf:e7:db:5d:d6:54:c5:b7:e5:11:ce:64:51:45:9c:
f9:69:b5:44:76:5b:95:44:f1:ed:89:d5:02:00:0d:
29:4e:11:c2:96:d7:e0:a0:23:c9:97:27:48:07:f0:
d1:73:8e:76:df:f4:75:cb:6c:24:5b:14:c6:12:60:
ed:7b:bf:e6:bc:b7:61:bd:d6:bf:b3:04:90:fa:93:
f4:2b:57:64:b2:04:38:5e:63:7b:e0:1e:16:e4:a0:
5a:8a:8f:e7:e1:40:38:ac:6e:60:3c:60:03:c6:64:
0e:03:e1:56:f6:b2:dc:aa:06:12:54:94:25:7e:58:
d0:00:9a:43:ee:80:96:b2:3a:9b:66:6a:19:57:c8:
9f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:07:6A:AC:69:12:15:3B:06:7E:D6:64:90:A1:95:16:64:36:A4:C8
X509v3 Authority Key Identifier:
keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d2:b4:42:56:e5:95:cc:2b:0c:e0:e9:7b:a5:27:32:53:74:
57:29:62:38:2b:13:ba:6c:3c:34:25:fc:d6:33:43:15:a1:48:
99:b5:1c:ce:87:5e:a2:78:8e:23:51:27:32:1c:ff:22:6b:ca:
9c:5c:79:76:1a:5d:ea:49:de:ee:eb:d8:e3:84:b3:db:85:88:
70:3e:38:6e:64:3c:f1:66:76:06:84:f2:99:06:33:79:4e:58:
b4:8b:c8:86:a4:30:2a:fc:0e:db:7c:f6:f1:12:89:f6:b7:46:
39:d4:64:d0:dc:f8:37:06:9e:ed:74:1d:19:6e:e2:4e:d5:74:
94:97:bf:90:8f:bb:4e:f2:85:5d:4b:98:cd:bc:b4:3f:04:e4:
13:42:ca:f8:ed:75:25:b2:c6:ee:3d:bc:9c:ff:5c:6b:1d:03:
31:73:d8:4e:fd:39:9d:a8:ee:63:91:63:a2:1e:6a:32:6e:c2:
87:3c:79:86:d4:4e:90:39:0b:66:49:3f:3e:54:09:7d:0e:64:
be:29:77:3a:fc:1b:57:dd:8e:b5:e2:2e:42:00:8a:29:cb:67:
4f:ed:d9:a4:60:7a:d8:18:e1:5c:73:8a:76:d6:30:0e:77:a2:
05:56:be:6b:8d:9e:09:23:a6:47:f7:1c:a2:7d:27:35:ec:52:
6d:60:76:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:41:01 2025 by rpki-client