Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft
File: pnkWCgRJ6LUPwByF3PzlSyxim1E.mft (raw, json)
Hash identifier: zOAFgE46C4PCqpDia3xlEQS+uOC9bHePjavBJL6jv30=
Subject key identifier: 3E:47:CF:88:61:26:A5:1A:C3:9A:DA:6C:39:1B:EB:25:D2:69:80:29
Authority key identifier: A6:79:16:0A:04:49:E8:B5:0F:C0:1C:85:DC:FC:E5:4B:2C:62:9B:51
Certificate issuer: /CN=a679160a0449e8b50fc01c85dcfce54b2c629b51
Certificate serial: 01975F4AA92D8922D5DC5F45F4EB829E521C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnkWCgRJ6LUPwByF3PzlSyxim1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft
Manifest number: 0F8D
Signing time: Wed 11 Jun 2025 14:00:17 +0000
Manifest this update: Wed 11 Jun 2025 14:00:17 +0000
Manifest next update: Thu 12 Jun 2025 14:00:17 +0000
Files and hashes: 1: 6zgBCVzd-5kdX0sgGe0YDglrk04.roa (hash: mpYaeNHnIzoaHZnsNjSuZCAnd5S6WeK+VhnJsngc1QQ=)
2: pnkWCgRJ6LUPwByF3PzlSyxim1E.crl (hash: IVSB7hBXT0IvtVZGHSWSsGYH3ARtEctbo5s5DSB44v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/pnkWCgRJ6LUPwByF3PzlSyxim1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 14:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:4a:a9:2d:89:22:d5:dc:5f:45:f4:eb:82:9e:52:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a679160a0449e8b50fc01c85dcfce54b2c629b51
Validity
Not Before: Jun 11 14:00:17 2025 GMT
Not After : Jun 12 14:00:17 2025 GMT
Subject: CN=3e47cf886126a51ac39ada6c391beb25d2698029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:42:94:cc:fb:ad:8b:45:ed:c5:ff:f6:1a:59:
eb:2a:58:b5:20:26:08:ac:f1:76:17:05:14:98:a2:
db:43:fb:1b:85:a6:ac:01:91:82:05:c3:5f:5c:c9:
fb:76:9c:14:7b:ea:64:8b:d7:95:53:48:67:0e:b0:
a9:a7:8c:01:9b:cc:d6:03:01:a8:28:21:27:77:c0:
d0:ed:e1:29:a3:09:79:8f:4a:ac:84:c5:0e:81:b5:
6a:da:2a:7d:40:a8:61:e8:64:4b:8a:05:aa:74:9c:
83:d4:4e:bc:f5:e0:45:58:b1:90:94:7e:de:5e:c9:
b7:cf:43:f0:04:d0:96:cb:d4:1c:67:ff:6f:03:1e:
95:65:65:d8:6b:3c:4d:1a:03:ca:15:8e:6f:5b:88:
de:96:7b:17:21:ee:5a:ad:60:b4:ad:fe:a2:cf:c0:
98:51:b2:9c:5a:65:c9:55:7e:97:c2:4e:91:24:8e:
c2:34:f6:5b:b7:87:dd:da:8a:90:3f:4b:09:51:2c:
55:b2:e8:d5:52:e7:90:01:b3:7a:b7:b7:85:62:71:
2e:3b:f5:73:d9:21:a2:68:37:6d:80:1f:ea:bf:90:
81:40:77:15:8f:9f:d2:d2:66:7e:b2:50:56:6d:fb:
c1:2c:2a:a5:2b:6d:6c:c1:59:5e:90:e5:f0:36:75:
f0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:47:CF:88:61:26:A5:1A:C3:9A:DA:6C:39:1B:EB:25:D2:69:80:29
X509v3 Authority Key Identifier:
keyid:A6:79:16:0A:04:49:E8:B5:0F:C0:1C:85:DC:FC:E5:4B:2C:62:9B:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnkWCgRJ6LUPwByF3PzlSyxim1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:66:a4:10:d1:92:b0:33:69:a7:33:be:dd:fd:01:09:49:d1:
3d:12:fa:c8:28:9c:5a:fc:11:d6:55:15:62:79:87:e5:6e:fb:
1d:02:9f:cc:47:82:38:be:9a:43:6e:cc:e2:ab:01:11:33:0c:
63:cd:29:e6:68:71:0c:72:51:1b:be:eb:34:28:5d:b9:ea:4d:
41:3e:9f:e8:d7:a3:a2:16:7b:ed:c5:fb:92:dd:dd:03:85:93:
2e:cd:31:09:29:3d:ed:ac:95:8c:23:96:0e:16:f2:d4:dc:4e:
ee:11:a3:5d:2c:77:df:b9:e4:f4:6c:53:e9:c7:d9:eb:05:0d:
e7:d5:89:8f:8e:ed:d3:b2:f7:e4:99:1f:ca:27:0e:47:ad:2b:
9f:ae:7a:73:b8:57:1c:5c:2b:7a:85:bb:30:bc:30:b0:5a:93:
cc:e5:7c:9c:bb:f3:5b:49:51:9d:2e:82:f6:90:0d:c4:6c:80:
d4:b0:04:1b:ab:17:30:80:76:67:b8:fd:18:58:6b:51:71:21:
ec:5a:e7:ef:8c:d2:44:a2:c3:05:f7:49:20:fc:4d:83:3a:b2:
9f:6c:dd:86:e6:37:e3:5c:9e:f4:fc:60:f9:46:7f:e2:a6:69:
e1:84:29:fa:05:71:fd:e7:59:8c:f1:f4:5f:dc:40:e1:3a:96:
b1:c6:6b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:26:00 2025 by rpki-client