Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
File: PbNCBiV3FppjWX6eOmQl_N5sFmE.mft (raw, json)
Hash identifier: f601Wo/eiiykwHwGI9xwZLvzmzesScdnLrp/+fXP6Uw=
Subject key identifier: 46:E6:2D:77:49:AC:26:C4:39:99:F5:7A:93:CF:5C:59:5C:C6:6F:3C
Authority key identifier: 3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61
Certificate issuer: /CN=3db342062577169a63597e9e3a6425fcde6c1661
Certificate serial: 0197488CFB5FCF3CD0F0BD3B58047100BCFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
Manifest number: 0975
Signing time: Sat 07 Jun 2025 04:01:28 +0000
Manifest this update: Sat 07 Jun 2025 04:01:28 +0000
Manifest next update: Sun 08 Jun 2025 04:01:28 +0000
Files and hashes: 1: 4XfsdEdHX1kDpX0ZLU7CoiedwkE.roa (hash: E0vTS5o3+h35/sl1eIPy8wBqph3C9G+ZoO/00bLGlrw=)
2: PbNCBiV3FppjWX6eOmQl_N5sFmE.crl (hash: /o+Kw9rBIgfs+Gf9S1bYKQoU4kfXr/2VTShDU/Ehatg=)
3: Zq7eQ3eZsYsNNl6x7QgRl2tG0cY.roa (hash: 2PLYNC5TQEo40dtz6r8G2q2NVhdYFgS71ZBpW7mlx1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:fb:5f:cf:3c:d0:f0:bd:3b:58:04:71:00:bc:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db342062577169a63597e9e3a6425fcde6c1661
Validity
Not Before: Jun 7 04:01:28 2025 GMT
Not After : Jun 8 04:01:28 2025 GMT
Subject: CN=46e62d7749ac26c43999f57a93cf5c595cc66f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bd:33:ab:7a:ed:23:aa:bc:7e:88:65:63:fc:
9d:a8:e9:03:18:25:e5:00:e2:b3:88:26:24:cd:42:
88:79:62:73:2d:81:c0:67:4b:33:75:4b:15:12:48:
c5:58:f3:27:bb:f5:86:fe:77:5f:94:b5:b8:2d:db:
bb:3c:02:a2:2e:b6:74:e5:c2:81:d0:7e:a4:59:a6:
27:d0:0d:bc:da:86:78:55:1b:c6:5f:90:f0:80:c3:
1f:99:1c:e1:0a:43:9f:85:11:37:97:14:0a:28:df:
e7:cc:76:54:eb:fc:15:6e:6b:23:4e:0e:79:e8:fe:
0e:60:6f:b5:d9:e6:df:41:d1:a7:6c:3e:8b:14:63:
2d:2e:49:a7:75:ec:31:b6:b0:ac:14:4b:4a:74:11:
40:22:ef:5f:a3:e7:7c:ca:db:76:84:96:0d:eb:e4:
b3:1a:b7:38:e1:4d:65:63:b8:2c:fa:9a:14:17:6d:
b6:8b:8c:b7:36:6d:fa:c7:26:97:4d:45:1a:3f:36:
b6:d2:f0:48:5f:63:a5:42:06:00:ea:e0:74:31:4e:
b7:58:04:76:2e:21:7e:bc:f0:73:29:ad:8a:01:43:
b6:ca:5d:4f:55:74:a8:fd:16:8b:06:3b:f6:4c:1b:
47:6b:17:ee:99:bc:83:4d:e1:de:59:cb:49:e7:45:
c3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E6:2D:77:49:AC:26:C4:39:99:F5:7A:93:CF:5C:59:5C:C6:6F:3C
X509v3 Authority Key Identifier:
keyid:3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ff:7b:32:60:d8:69:cd:3c:44:5e:94:64:bd:87:f9:65:50:
50:14:c8:23:24:cf:31:8f:34:b1:0f:35:19:8d:bb:82:e5:cd:
0f:5c:1d:b2:bc:96:4c:56:77:fa:29:70:d4:06:17:69:8b:75:
1c:68:21:f9:4b:ca:bd:51:39:68:6e:a0:e9:06:d0:a9:8f:ab:
36:56:6f:5d:ce:73:03:89:fc:39:8d:7c:ac:f8:04:50:5f:b5:
3f:4e:1e:e2:68:e3:a7:fd:e0:b5:21:a3:38:5d:d6:7a:5f:aa:
92:ec:c4:98:a3:45:05:da:27:f5:41:3e:cd:9e:45:cb:32:b7:
cc:da:5f:88:43:4d:cf:92:7d:20:15:f8:7e:27:30:75:99:99:
ff:79:fb:d7:ea:43:c5:0b:6b:8c:63:76:f4:2d:85:e5:b3:c2:
22:fe:50:cd:92:41:91:e1:11:37:f2:46:5a:1e:6e:25:f2:03:
f5:28:cc:46:47:73:d6:2c:e3:9e:ef:92:04:0b:f4:d9:60:cc:
40:50:87:30:b0:c1:63:53:99:54:2f:7f:43:51:dd:30:7a:12:
6e:d4:6e:b1:3f:39:ef:05:6d:23:69:f1:c7:f9:fc:5f:d8:68:
e5:13:eb:07:64:4b:4d:b2:b9:d4:8f:34:94:9a:7c:e7:42:69:
22:90:2c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:43:07 2025 by rpki-client