Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft
File: PflufaVJi3Djuxe24YoxE3EtMrY.mft (raw, json)
Hash identifier: 5m5B9Jy9SRmTs39xxJIKzrCU8YpkliPmREQJuRGk1OM=
Subject key identifier: CD:1A:93:D0:D0:7F:B2:F4:8E:0A:BD:6D:9E:73:57:56:D0:15:B1:2C
Authority key identifier: 3D:F9:6E:7D:A5:49:8B:70:E3:BB:17:B6:E1:8A:31:13:71:2D:32:B6
Certificate issuer: /CN=3df96e7da5498b70e3bb17b6e18a3113712d32b6
Certificate serial: 01984AAEA51C3E043A2DDA6EB6D7A87EFD9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PflufaVJi3Djuxe24YoxE3EtMrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft
Manifest number: 0FE8
Signing time: Sun 27 Jul 2025 07:00:16 +0000
Manifest this update: Sun 27 Jul 2025 07:00:16 +0000
Manifest next update: Mon 28 Jul 2025 07:00:16 +0000
Files and hashes: 1: PflufaVJi3Djuxe24YoxE3EtMrY.crl (hash: rzEk1FC8WVFkUQujfxUxdGw75E9lljPHZI1wR+eKJDo=)
2: jH9C8p9nitrfAItNyA_YLJEP6ds.roa (hash: qAfQVpQ0k0QfJ2KTETvmr94XZk/rf+3SC4Qevdx1ZDY=)
3: tah1yfASreRchTqTj8AtcpkBGXY.roa (hash: 3mvJQGarrUT5b42icY1PPyWBBa9VfBbfud+/MFWuiN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PflufaVJi3Djuxe24YoxE3EtMrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 07:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:a5:1c:3e:04:3a:2d:da:6e:b6:d7:a8:7e:fd:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3df96e7da5498b70e3bb17b6e18a3113712d32b6
Validity
Not Before: Jul 27 07:00:16 2025 GMT
Not After : Jul 28 07:00:16 2025 GMT
Subject: CN=cd1a93d0d07fb2f48e0abd6d9e735756d015b12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:42:e6:e5:29:f3:c5:77:a2:46:ac:6e:5f:93:
34:a0:1c:d4:a1:80:99:46:65:0f:96:c8:33:67:54:
15:fe:cb:ff:84:f2:19:83:54:78:66:3c:99:49:83:
4a:ce:14:e9:f7:81:97:a5:69:7a:2f:9c:73:58:71:
3d:2a:50:b5:7c:d3:c3:c9:fb:ba:5b:cb:e4:56:ea:
88:3e:cf:84:55:e3:ae:ab:06:7a:86:4b:3b:4e:9f:
f2:6e:ea:fa:82:00:f8:6f:0f:bc:f4:f7:a1:89:cc:
d9:9d:9d:97:09:5a:47:cd:11:75:83:ae:a5:90:82:
4a:dc:2d:01:3a:09:f0:fe:73:d7:02:35:83:5d:79:
1c:2b:34:5c:cb:e7:4f:b6:8c:5f:14:a7:a7:e0:58:
00:13:ba:62:4e:25:76:f3:40:f5:8b:b0:a9:83:16:
c5:af:c6:50:b1:2c:0f:72:8e:f6:3c:3c:cb:47:3f:
b5:9b:ea:72:c9:fe:af:3d:8f:0a:ed:f6:1d:c0:dd:
d9:8b:93:fc:7a:c9:a5:96:f3:04:f2:93:c3:44:0b:
c9:11:21:d4:93:ad:8d:52:e8:60:a1:40:72:d8:22:
bb:c3:53:6c:c0:ab:53:cb:44:d5:0d:64:4f:c4:24:
5e:48:0c:09:c4:a4:02:12:9b:38:10:8d:ae:e4:0c:
2d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1A:93:D0:D0:7F:B2:F4:8E:0A:BD:6D:9E:73:57:56:D0:15:B1:2C
X509v3 Authority Key Identifier:
keyid:3D:F9:6E:7D:A5:49:8B:70:E3:BB:17:B6:E1:8A:31:13:71:2D:32:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PflufaVJi3Djuxe24YoxE3EtMrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:47:06:65:32:e4:8a:f8:05:05:7f:20:a9:a8:11:f6:6b:64:
ae:c5:c2:3a:e9:57:b5:9b:c3:e1:87:96:65:de:8a:73:c4:93:
fd:b3:c1:2f:41:30:09:b1:1a:e9:8f:10:ca:80:93:66:88:e0:
e7:1f:d3:7d:f3:7b:1e:d6:aa:e6:bf:2c:02:ca:17:36:95:bb:
74:c5:8e:a7:3d:81:65:ea:98:be:ab:68:c6:d5:f3:aa:6f:38:
1d:93:fd:95:db:17:27:5b:7b:20:fa:51:5b:77:8f:b5:09:4f:
7d:a1:4c:49:59:a4:b1:40:21:9e:13:4d:3f:80:d8:0f:64:32:
a4:fd:c6:10:28:d5:b6:10:59:cc:62:9e:b6:00:bf:fd:07:ac:
4f:e4:51:d7:45:4f:2d:a5:0e:15:ba:17:e2:60:13:11:70:5c:
d6:cc:76:24:9c:eb:d2:e6:4f:e7:bd:06:39:09:63:65:08:b4:
2a:4a:7d:d0:ea:12:d3:7a:4d:7e:02:d4:a7:f7:35:8e:ee:28:
06:f5:21:95:77:34:9a:28:51:be:2a:dc:df:c1:5d:2c:bf:13:
29:5b:e8:96:30:12:40:1c:2d:1c:02:be:54:73:4a:9e:d0:eb:
d1:2b:be:0b:dc:14:84:ef:b3:74:12:e8:bc:ff:20:4d:d6:5c:
8c:4c:f2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:40:46 2025 by rpki-client