Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
File: PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft (raw, json)
Hash identifier: r0QKIvOQxzMipNltS9gUiBHHKlllFbAm/G+t64Fx1Q0=
Subject key identifier: E5:38:13:E2:44:29:CB:4C:3F:39:30:5C:B6:A4:BB:23:B1:42:A2:97
Authority key identifier: 3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1
Certificate issuer: /CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
Certificate serial: 0198447669760C985D694405425E2C685DBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
Manifest number: 11D4
Signing time: Sat 26 Jul 2025 02:01:07 +0000
Manifest this update: Sat 26 Jul 2025 02:01:07 +0000
Manifest next update: Sun 27 Jul 2025 02:01:07 +0000
Files and hashes: 1: PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl (hash: Qz8K8+NP/ZgLtctLRHRQsR/LxHUMVIImpT3PdqUdwDw=)
2: W_v27Hupk3RRQBILYKusMtNhoAc.roa (hash: yWY4EAVlw3dwpD2kqQElXOLSvOEEYUa61TWmAID32CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:76:69:76:0c:98:5d:69:44:05:42:5e:2c:68:5d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
Validity
Not Before: Jul 26 02:01:07 2025 GMT
Not After : Jul 27 02:01:07 2025 GMT
Subject: CN=e53813e24429cb4c3f39305cb6a4bb23b142a297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:52:53:f7:2b:f1:5f:cd:03:fc:92:11:c3:cf:
15:f6:63:60:73:54:5b:c4:57:8e:5f:88:74:b1:5d:
fa:d9:4d:9b:27:e6:64:ee:c5:d4:54:bc:50:58:93:
a9:0a:42:a1:50:e5:48:47:10:7d:e9:d5:c1:cb:04:
87:ba:65:2b:65:f7:4d:fa:51:12:11:25:a8:21:a4:
74:a5:23:7a:eb:cd:57:28:25:8d:e5:4d:bc:c4:90:
0b:8a:3f:61:04:27:b1:55:dd:e4:fe:80:69:50:e1:
0f:73:c3:c2:fe:b8:0d:c1:9b:3d:6d:ce:dd:3a:0f:
dd:7f:cd:44:31:df:7d:f1:58:58:2e:79:47:24:6f:
d1:da:a6:18:ac:38:ab:ec:23:ac:7f:be:25:3d:52:
a7:bd:ba:eb:de:87:a7:0d:ac:14:7e:cf:11:31:ee:
0d:04:d1:27:03:22:2f:5b:79:d0:1c:b0:54:d0:03:
2f:93:23:11:04:0f:08:81:2d:ef:04:51:d4:bc:0e:
19:95:9a:a7:88:cc:8f:64:2a:e7:3d:e4:98:b5:60:
4c:3e:d7:5d:dd:64:9e:9e:48:e8:06:6e:a7:33:4e:
f3:d9:8c:23:9f:1c:34:8d:48:e4:82:27:ae:6b:3f:
45:dd:aa:a2:57:d4:ca:6c:89:a3:ed:6d:5d:69:69:
84:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:38:13:E2:44:29:CB:4C:3F:39:30:5C:B6:A4:BB:23:B1:42:A2:97
X509v3 Authority Key Identifier:
keyid:3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:24:f9:a0:64:c9:34:88:98:89:67:cd:67:59:9f:62:db:ac:
b6:34:15:e6:c2:47:53:b8:92:e3:e6:19:9a:ae:f5:9b:e6:42:
d6:fb:21:87:7c:b7:e6:b1:8f:3a:6f:ff:1e:78:85:56:a1:45:
8f:63:db:74:98:9a:43:dd:a2:e4:45:0e:80:9b:29:3e:a6:5d:
f0:4c:b2:d4:56:65:46:2b:ca:32:2b:54:93:35:76:8f:5e:2c:
bb:d3:a9:76:95:97:98:6d:7a:37:29:af:d1:2e:19:75:e4:fe:
94:a4:d7:3d:d5:d4:f4:dd:42:dd:33:53:64:de:ef:43:40:5f:
94:1e:e4:0c:c0:63:6b:2f:81:d2:3d:7a:ea:1d:33:68:e7:ee:
9b:69:2b:02:93:12:26:61:6c:f7:1e:ad:28:ab:50:ca:ee:37:
98:8d:67:f1:89:d5:fb:44:03:b6:31:a9:50:19:c0:cc:7e:1a:
66:a2:8e:74:ce:db:07:50:1c:12:08:87:4e:9c:14:e6:7e:e1:
4c:e1:dd:78:56:47:e9:48:6e:7c:f3:99:5d:a1:e3:10:22:05:
dd:63:7f:19:b5:3a:c5:6f:2c:17:af:a9:be:fa:b9:3f:3f:93:
f4:14:a8:61:92:fd:3f:37:92:68:0c:7e:e0:52:4b:da:37:33:
de:d2:9d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:54:54 2025 by rpki-client