Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
File: PNKqcak6qcEye3NTigR45PeC9vc.mft (raw, json)
Hash identifier: /s4aYE5eHX+G5bgqUXQUr4TaUgWJYBTSBHKXBSi/JxA=
Subject key identifier: 78:FE:3B:C4:3C:BA:16:A1:93:D1:F2:6B:68:7D:53:72:64:06:D2:6B
Authority key identifier: 3C:D2:AA:71:A9:3A:A9:C1:32:7B:73:53:8A:04:78:E4:F7:82:F6:F7
Certificate issuer: /CN=3cd2aa71a93aa9c1327b73538a0478e4f782f6f7
Certificate serial: 01965DCCE0291AD24CEF3EB875BB54DB7EEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
Manifest number: 0C7C
Signing time: Tue 22 Apr 2025 14:00:29 +0000
Manifest this update: Tue 22 Apr 2025 14:00:29 +0000
Manifest next update: Wed 23 Apr 2025 14:00:29 +0000
Files and hashes: 1: PNKqcak6qcEye3NTigR45PeC9vc.crl (hash: KxcVmGdtmx0YIYQZFxtw3yw7x4/ttP5UBX8RADtFKMs=)
2: mkUXmgygJpYBMQ2Igm9L-tv-j1s.roa (hash: 9Fpz5SGKImESLClWOjbnaFAMtUoqIoi74+/yK2yHMuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:cc:e0:29:1a:d2:4c:ef:3e:b8:75:bb:54:db:7e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd2aa71a93aa9c1327b73538a0478e4f782f6f7
Validity
Not Before: Apr 22 14:00:29 2025 GMT
Not After : Apr 23 14:00:29 2025 GMT
Subject: CN=78fe3bc43cba16a193d1f26b687d53726406d26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:55:65:01:11:6b:de:5d:33:89:4a:57:02:f2:
71:b1:0b:c4:22:02:4e:b0:7e:e5:98:05:80:76:04:
d4:b1:27:78:84:f6:97:38:5f:42:4b:a8:5a:6b:5c:
ca:00:b2:8d:df:7b:c0:63:d3:92:04:ad:44:bc:b8:
b1:4b:64:1c:f2:29:3c:3e:23:70:5e:d9:7a:af:32:
8a:e0:93:99:7c:74:a5:e8:f5:5d:61:fd:96:42:34:
24:3c:d4:7d:44:6b:63:d3:85:81:2e:ea:5a:e0:a6:
b5:3a:50:93:e1:91:72:15:fb:33:ed:32:67:05:20:
66:ab:c8:3b:1b:71:51:8b:ab:2c:8d:a2:91:78:f7:
29:7b:a8:95:b1:70:55:09:4e:43:e2:ba:0f:43:8f:
85:83:46:b1:19:3f:19:44:a3:44:78:0e:42:7d:5f:
00:56:f8:11:04:16:9e:4a:ce:da:fe:fd:f2:b2:ae:
7f:f0:fc:a5:f0:de:c6:9e:47:1e:34:47:a7:3b:0d:
28:01:1f:f7:8e:93:e7:db:cb:5d:28:b6:95:47:89:
b8:6b:8d:68:25:2a:b0:6e:3e:c9:59:e6:8b:e7:be:
ab:17:04:9a:e9:2b:b0:94:65:e3:db:5c:12:01:9d:
18:ec:2f:7e:4c:bc:b1:6f:b5:d0:e6:73:87:29:9f:
ca:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FE:3B:C4:3C:BA:16:A1:93:D1:F2:6B:68:7D:53:72:64:06:D2:6B
X509v3 Authority Key Identifier:
keyid:3C:D2:AA:71:A9:3A:A9:C1:32:7B:73:53:8A:04:78:E4:F7:82:F6:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:52:87:4d:3b:9e:3b:b8:69:cf:9f:6c:68:90:92:29:e5:7d:
47:cc:17:c6:1c:ea:77:80:1e:bd:0f:3a:75:6a:84:ed:90:93:
21:d9:84:f7:88:60:6c:82:02:54:e0:b2:bc:d2:fc:60:4d:bd:
07:86:0b:82:28:bb:ef:5b:60:a7:c6:ea:d0:b2:00:1e:b2:c8:
33:2e:e6:75:3f:0b:f7:90:70:28:21:7f:6a:0f:af:b3:92:33:
fe:64:eb:85:c2:79:c0:3e:89:a2:6c:24:c1:88:3a:db:20:d1:
40:e2:a1:3b:6e:86:ed:78:93:41:7e:9d:d8:ea:a0:73:0e:8c:
a5:ff:0a:45:c6:af:7c:31:44:db:a1:d8:d7:98:cc:a3:5b:72:
c5:92:67:12:7a:0d:eb:79:27:c4:4a:92:76:3d:b6:e0:fe:82:
51:13:4b:92:ba:7b:ca:6a:f5:c5:25:3a:2e:3b:ab:a8:26:a8:
a7:3b:6b:00:63:c0:68:dc:f6:13:1e:b9:e0:9f:a2:72:d8:29:
94:c0:23:77:92:9c:a3:c2:4d:82:2b:fd:74:1d:b6:2d:00:4d:
c9:e7:ae:dc:f0:15:b7:65:fa:b8:6e:20:16:2d:c6:e1:e0:5a:
b4:28:32:8e:36:74:bb:62:03:51:84:70:56:2e:7d:db:ab:d6:
5f:1c:63:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZdzOApGtJM7z64dbtU237rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZDJhYTcxYTkzYWE5YzEzMjdiNzM1MzhhMDQ3OGU0Zjc4
MmY2ZjcwHhcNMjUwNDIyMTQwMDI5WhcNMjUwNDIzMTQwMDI5WjAzMTEwLwYDVQQD
Eyg3OGZlM2JjNDNjYmExNmExOTNkMWYyNmI2ODdkNTM3MjY0MDZkMjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFVlARFr3l0ziUpXAvJxsQvEIgJO
sH7lmAWAdgTUsSd4hPaXOF9CS6haa1zKALKN33vAY9OSBK1EvLixS2Qc8ik8PiNw
Xtl6rzKK4JOZfHSl6PVdYf2WQjQkPNR9RGtj04WBLupa4Ka1OlCT4ZFyFfsz7TJn
BSBmq8g7G3FRi6ssjaKRePcpe6iVsXBVCU5D4roPQ4+Fg0axGT8ZRKNEeA5CfV8A
VvgRBBaeSs7a/v3ysq5/8Pyl8N7GnkceNEenOw0oAR/3jpPn28tdKLaVR4m4a41o
JSqwbj7JWeaL576rFwSa6SuwlGXj21wSAZ0Y7C9+TLyxb7XQ5nOHKZ/K8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHj+O8Q8uhahk9Hya2h9U3JkBtJrMB8GA1UdIwQY
MBaAFDzSqnGpOqnBMntzU4oEeOT3gvb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE5LcWNhazZxY0V5ZTNOVGlnUjQ1UGVDOXZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83NTdmMmItNGYwMS00ZTcwLWIzZDUt
NGZkYmE4NjdlNDdhLzEvUE5LcWNhazZxY0V5ZTNOVGlnUjQ1UGVDOXZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83NTdmMmItNGYwMS00ZTcwLWIzZDUtNGZkYmE4NjdlNDdh
LzEvUE5LcWNhazZxY0V5ZTNOVGlnUjQ1UGVDOXZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA1KHTTue
O7hpz59saJCSKeV9R8wXxhzqd4AevQ86dWqE7ZCTIdmE94hgbIICVOCyvNL8YE29
B4YLgii771tgp8bq0LIAHrLIMy7mdT8L95BwKCF/ag+vs5Iz/mTrhcJ5wD6Jomwk
wYg62yDRQOKhO26G7XiTQX6d2Oqgcw6Mpf8KRcavfDFE26HY15jMo1tyxZJnEnoN
63knxEqSdj224P6CURNLkrp7ymr1xSU6LjurqCaopztrAGPAaNz2Ex654J+ictgp
lMAjd5Kco8JNgiv9dB22LQBNyeeu3PAVt2X6uG4gFi3G4eBatCgyjjZ0u2IDUYRw
Vi5926vWXxxjwg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 18:01:38 2025 by rpki-client