Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
File: PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft (raw, json)
Hash identifier: G6ApD7KNo3G2JT5c6LBXxqoFJzW9O66XTLnFUOMb5ic=
Subject key identifier: 28:4C:42:4E:6C:E4:51:F9:F4:9B:C6:CB:BF:0C:34:83:0F:3A:19:F3
Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
Certificate issuer: /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Certificate serial: 0197477994CAC5E182BDBA93711255311A37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
Manifest number: 0FB9
Signing time: Fri 06 Jun 2025 23:00:39 +0000
Manifest this update: Fri 06 Jun 2025 23:00:39 +0000
Manifest next update: Sat 07 Jun 2025 23:00:39 +0000
Files and hashes: 1: PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl (hash: T/kA1/AMzyRT8kfOQofSEtvVUYJOrn5PHKVaj0q8ao0=)
2: X4mIRbShCI_swD4AYibAfXumzPE.roa (hash: ZCD8FV34ZVGGbkTB2fH3uXc5W92QDu1a+e1QI3r0+es=)
3: k0e8XrkRjigLyVCK_c8tyoDjXqU.roa (hash: VlaMdbNDNwgFwQ8MfYZ/SEPVePx9cKrNfoX/5Qh79Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:94:ca:c5:e1:82:bd:ba:93:71:12:55:31:1a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Validity
Not Before: Jun 6 23:00:39 2025 GMT
Not After : Jun 7 23:00:39 2025 GMT
Subject: CN=284c424e6ce451f9f49bc6cbbf0c34830f3a19f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3d:14:c8:e1:8c:08:49:01:80:b3:9d:8b:e2:
9e:43:a0:df:15:4d:e2:11:4c:af:be:ce:bc:18:10:
18:ce:79:f1:d0:a3:75:63:2d:e6:45:9d:61:db:d2:
9e:5c:ad:47:44:d9:01:1a:7a:e2:cd:ac:5e:8d:66:
68:43:4d:5b:1b:a5:66:16:ef:8f:55:d8:bc:56:22:
d1:13:1a:ed:43:4d:33:0e:32:4b:12:60:c4:3e:56:
48:98:2e:69:90:b2:e6:db:70:26:f6:99:bc:b3:5f:
56:d3:fb:f0:dc:27:c9:ac:10:6d:ce:73:13:dc:48:
c1:fb:32:32:3b:46:50:c1:65:5f:b8:e6:4f:db:aa:
d0:d1:0c:ad:7f:13:53:d4:fb:56:71:9a:72:dc:75:
4e:90:8d:c3:2a:c5:b6:d8:5a:5c:8e:fc:3a:2b:69:
4c:60:64:47:1d:1a:bb:17:37:13:28:90:ab:2d:4d:
ed:ac:bd:71:0b:da:2a:b6:dd:8f:9f:94:ab:1a:03:
5d:03:71:96:17:3e:7b:ed:16:57:65:d8:99:28:be:
02:5c:e7:75:2d:22:b9:e7:60:37:73:00:39:b2:77:
d2:d8:03:44:14:91:7d:15:66:f4:76:3f:12:d5:80:
09:e6:c6:4b:c0:d1:48:51:40:8c:db:60:9b:9c:9d:
e5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4C:42:4E:6C:E4:51:F9:F4:9B:C6:CB:BF:0C:34:83:0F:3A:19:F3
X509v3 Authority Key Identifier:
keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:4d:0e:ee:5f:cd:20:a7:81:03:a2:64:e1:5a:8f:a9:f6:b9:
01:81:02:23:cb:e4:3c:2e:29:4c:03:d6:e4:82:a2:c0:90:ae:
88:64:46:fa:2b:06:7e:d2:c2:93:87:77:ea:8f:51:ba:c5:34:
41:d6:5d:7f:b1:ff:55:9f:9e:b4:d8:f3:86:97:88:2b:14:ec:
3d:59:4a:86:3b:2a:10:39:e4:2c:c3:36:5c:66:fd:f3:5d:5c:
f2:d7:3e:68:28:99:6f:1b:56:90:c1:2f:a5:66:2a:4a:a2:b8:
a4:85:0e:7b:a0:85:d4:7c:1a:01:ea:eb:9e:33:0b:cf:8d:a0:
4f:0a:a5:3e:c2:7c:9c:d5:be:fc:17:dc:17:6d:0f:9e:d9:92:
c8:b3:df:7a:05:a1:5e:fa:cb:97:62:e6:92:da:a4:5b:2e:5c:
4b:bb:40:91:6c:a9:03:a0:af:e7:24:bb:93:5d:3d:97:3f:5d:
f8:41:74:74:4a:85:93:48:57:e4:e2:c9:25:6c:13:c3:0e:c3:
b4:aa:04:64:a8:fe:a8:75:b6:09:98:aa:e2:1d:ab:ae:06:1d:
87:a7:b8:b1:6f:b6:9e:19:db:44:97:81:af:1a:58:13:38:55:
d8:c4:8c:10:72:f9:30:2b:e1:b9:dd:e9:37:74:f9:50:d0:db:
85:2f:49:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:14:59 2025 by rpki-client