Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
File: Pv3irXEjs6hgCAWIBbsQFva3P7A.mft (raw, json)
Hash identifier: ELsG37ImaWkYTWmqOBITmfUjPb5AQF4paDI+PNOpB2E=
Subject key identifier: 80:50:DC:FA:88:FA:C6:72:99:CE:18:32:B9:C6:FB:31:30:E8:0A:0C
Authority key identifier: 3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0
Certificate issuer: /CN=3efde2ad7123b3a86008058805bb1016f6b73fb0
Certificate serial: 019748FA1E16985C36EE2A4323239F422844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
Manifest number: 1105
Signing time: Sat 07 Jun 2025 06:00:40 +0000
Manifest this update: Sat 07 Jun 2025 06:00:40 +0000
Manifest next update: Sun 08 Jun 2025 06:00:40 +0000
Files and hashes: 1: CaL9jYSTc-IdChBXaiMWMez9mXg.roa (hash: KSdlQjcVUmbuNppz/t/DKjZyc/L+OBaFoRGPDIpwznQ=)
2: Pv3irXEjs6hgCAWIBbsQFva3P7A.crl (hash: uQELjxZ7XUfIV01Zrzm1Avtjv8Vc8NUCyHIznIeZevk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:1e:16:98:5c:36:ee:2a:43:23:23:9f:42:28:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3efde2ad7123b3a86008058805bb1016f6b73fb0
Validity
Not Before: Jun 7 06:00:40 2025 GMT
Not After : Jun 8 06:00:40 2025 GMT
Subject: CN=8050dcfa88fac67299ce1832b9c6fb3130e80a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:af:ae:d0:f6:7a:90:f2:c1:90:52:02:73:07:
d3:bd:08:eb:34:3e:8b:95:b0:fd:1e:70:0a:b6:df:
0d:7e:e9:1b:7a:0f:e9:34:18:83:e3:ee:a6:2c:c3:
e8:35:0f:73:7f:79:e4:c1:25:33:64:57:c9:cb:e6:
ed:2b:6b:9c:31:9d:41:dc:21:ae:06:50:b8:51:e2:
0e:a9:a9:67:32:9d:4b:b6:7d:ee:73:8a:7e:0c:80:
6a:b8:0a:29:e5:92:15:3c:c8:0e:2e:5b:02:32:52:
7e:15:05:da:55:b9:fe:63:54:9c:85:c7:c9:c7:af:
70:16:a0:3b:f0:bb:82:1a:4c:a4:e1:ee:c0:4b:e2:
f2:93:0d:ed:7b:fb:0a:ac:d6:57:2a:7f:70:1c:d2:
53:89:9f:b7:44:65:f5:39:35:a4:fd:21:ef:46:a5:
1f:17:f3:1a:33:39:c0:7b:c6:34:9c:28:c1:d2:2c:
90:da:a0:81:77:73:9d:8a:d4:42:94:49:4b:11:c8:
f8:1b:51:f6:56:59:e1:80:5a:a1:45:13:50:b1:c0:
b2:2a:8d:00:42:66:02:b1:6f:73:95:c6:72:1c:51:
de:bd:42:33:f8:29:c1:a7:e4:18:3c:af:97:cf:55:
a8:8d:dd:3b:30:c7:33:e8:7d:d3:2d:c8:34:30:2a:
8a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:50:DC:FA:88:FA:C6:72:99:CE:18:32:B9:C6:FB:31:30:E8:0A:0C
X509v3 Authority Key Identifier:
keyid:3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:6f:62:91:28:c5:86:70:2e:78:9b:aa:b2:7b:8f:63:13:a2:
56:03:8b:00:86:31:eb:d7:16:20:f5:4c:31:75:9b:d9:e9:43:
09:0f:c4:bc:53:84:56:87:26:11:40:a2:82:23:bb:77:d0:04:
8e:34:7b:e7:63:5b:fc:7a:0f:f2:21:5c:e7:ef:99:0f:29:f6:
d4:58:c8:b9:bb:de:3d:ea:58:90:ae:fc:61:76:26:d6:3a:41:
4f:bd:87:35:5a:a7:bb:8b:ec:2c:fd:6d:ba:20:d7:8a:98:80:
0e:4f:ad:d3:e0:63:87:76:b9:62:80:8f:f3:e7:01:a0:26:03:
b1:2c:b6:46:4f:5d:d4:1d:0d:5d:61:20:d3:43:61:68:64:5a:
58:d4:0b:de:16:48:7b:6e:8f:89:54:fe:e9:fc:b4:ef:49:1a:
89:f6:67:18:7d:06:00:be:43:87:e9:77:9d:52:82:2b:f4:21:
fe:e2:01:11:16:fb:61:17:95:1e:6e:47:b4:a4:8f:3b:cd:c6:
59:ad:a1:3e:8e:42:eb:e4:5e:3a:a0:ce:e9:52:5d:cb:5e:bb:
a3:04:9a:a7:e5:cd:20:c2:0e:ae:30:ed:19:62:a7:cc:19:0c:
5e:ce:41:3e:6f:59:7d:af:86:b4:1a:3e:8c:49:b3:de:0a:8b:
02:1b:89:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:00:09 2025 by rpki-client