Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
File: PNKqcak6qcEye3NTigR45PeC9vc.mft (raw, json)
Hash identifier: E4NSPS5lxJNhzqaZpb0JCM059D42iUEEvrpFVERMp6A=
Subject key identifier: FA:8A:A1:7E:F3:CD:4D:B0:09:17:66:80:39:F4:2E:CC:65:98:75:7B
Authority key identifier: 3C:D2:AA:71:A9:3A:A9:C1:32:7B:73:53:8A:04:78:E4:F7:82:F6:F7
Certificate issuer: /CN=3cd2aa71a93aa9c1327b73538a0478e4f782f6f7
Certificate serial: 01984A41A5D55E320A58B1F492E6DC5C325B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
Manifest number: 0D7B
Signing time: Sun 27 Jul 2025 05:01:12 +0000
Manifest this update: Sun 27 Jul 2025 05:01:12 +0000
Manifest next update: Mon 28 Jul 2025 05:01:12 +0000
Files and hashes: 1: PNKqcak6qcEye3NTigR45PeC9vc.crl (hash: +s58U4qQck7li8V68qrI4V4CQjAYQq04t/ETjJtkjzA=)
2: mkUXmgygJpYBMQ2Igm9L-tv-j1s.roa (hash: 9Fpz5SGKImESLClWOjbnaFAMtUoqIoi74+/yK2yHMuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:a5:d5:5e:32:0a:58:b1:f4:92:e6:dc:5c:32:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd2aa71a93aa9c1327b73538a0478e4f782f6f7
Validity
Not Before: Jul 27 05:01:12 2025 GMT
Not After : Jul 28 05:01:12 2025 GMT
Subject: CN=fa8aa17ef3cd4db00917668039f42ecc6598757b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:32:23:58:1d:46:4c:65:05:e1:ab:4e:50:f6:
95:6d:8e:1c:d0:79:9f:76:62:1d:48:b2:4f:31:1c:
2f:69:ea:e3:23:ef:21:5f:b9:d2:25:ea:ca:8e:12:
43:32:ea:65:b0:cb:fa:52:6d:88:8d:79:d6:dc:43:
cc:5b:76:c6:1e:42:35:2f:d3:96:44:ba:59:a8:ae:
79:7d:59:dc:6f:b3:d7:6b:57:70:ab:b8:2c:0b:d5:
54:3a:2a:0b:cf:30:7a:3a:99:e1:e3:3f:13:ee:12:
63:ee:87:90:9f:75:67:2f:b6:af:46:c8:be:23:3f:
ec:0b:3e:f3:d4:ab:76:2a:c1:c5:8c:37:99:d8:ce:
a4:ac:38:98:88:f5:5f:f5:a5:ac:de:39:7c:da:e4:
1c:5d:cd:4e:a6:0d:ac:55:52:fd:79:8b:5d:93:49:
c4:82:8b:f6:90:1c:11:8c:97:25:87:45:56:18:f5:
2f:90:26:b7:70:c9:74:46:e8:ab:60:9e:98:94:64:
bd:ff:0c:d6:2d:ae:2b:63:9b:09:9d:eb:83:b9:10:
8c:1d:94:9a:3e:06:78:8e:c6:85:a7:4d:ed:bd:a9:
c7:3f:ed:bb:0f:70:de:fa:25:fd:73:ac:0a:ba:49:
ad:99:6b:81:3c:88:55:a0:c3:04:fb:17:3f:b2:ba:
5d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8A:A1:7E:F3:CD:4D:B0:09:17:66:80:39:F4:2E:CC:65:98:75:7B
X509v3 Authority Key Identifier:
keyid:3C:D2:AA:71:A9:3A:A9:C1:32:7B:73:53:8A:04:78:E4:F7:82:F6:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:5d:61:42:6d:7c:cc:74:84:a3:dc:49:ff:37:8a:93:6a:28:
52:8c:1b:03:6d:a8:7d:38:80:7c:58:b5:73:66:11:58:35:b0:
c8:73:53:7b:7a:eb:20:80:1c:9e:55:63:ba:a3:02:c5:16:06:
64:6c:2c:ae:c9:46:7b:b5:95:d2:b4:97:72:64:4b:d4:43:77:
5f:56:00:f7:73:70:c4:36:c0:ca:90:e3:d4:bc:90:d9:72:56:
36:6c:38:64:41:b3:e2:57:e3:8e:4e:9f:4f:3a:9b:46:b0:8c:
29:7b:8d:91:9f:20:0a:24:5b:79:22:17:5b:b9:ad:54:dd:72:
d0:1b:27:73:4c:50:79:39:ea:b2:5e:b7:bc:2c:33:25:3e:a8:
45:0d:c0:25:4a:0b:3d:43:37:de:77:9e:c0:ba:13:41:79:7c:
4a:4a:62:14:71:ec:33:1b:51:2c:15:a7:0c:6f:7e:16:e2:10:
81:a8:d5:e3:e2:53:07:8d:91:6d:57:99:7f:91:4c:4f:1a:0d:
3d:84:8e:38:b7:d9:19:0a:f8:f7:95:e6:02:0b:0a:d5:73:cf:
b2:5f:35:61:4d:f5:05:42:06:15:dd:af:45:f9:32:9d:a1:f0:
e3:b7:61:59:aa:63:cd:1e:a5:62:83:d7:99:94:ef:76:15:9d:
3e:64:f6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:13:50 2025 by rpki-client