Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft
File: pnkWCgRJ6LUPwByF3PzlSyxim1E.mft (raw, json)
Hash identifier: I1hC3C6coaNxCMxCsiECOzx3MfHJVALKZuy5Qakxg5c=
Subject key identifier: 5C:1C:18:B5:30:69:82:8F:EB:F4:8C:53:93:DD:30:42:D3:C0:28:7B
Authority key identifier: A6:79:16:0A:04:49:E8:B5:0F:C0:1C:85:DC:FC:E5:4B:2C:62:9B:51
Certificate issuer: /CN=a679160a0449e8b50fc01c85dcfce54b2c629b51
Certificate serial: 019755A2C95245BF4248D697957C58F6D142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnkWCgRJ6LUPwByF3PzlSyxim1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft
Manifest number: 0F88
Signing time: Mon 09 Jun 2025 17:00:21 +0000
Manifest this update: Mon 09 Jun 2025 17:00:21 +0000
Manifest next update: Tue 10 Jun 2025 17:00:21 +0000
Files and hashes: 1: 6zgBCVzd-5kdX0sgGe0YDglrk04.roa (hash: mpYaeNHnIzoaHZnsNjSuZCAnd5S6WeK+VhnJsngc1QQ=)
2: pnkWCgRJ6LUPwByF3PzlSyxim1E.crl (hash: 1zMIu0z4CrUjArv8Wo1WdIbyjEM9B8MI9tom2w7VsC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/pnkWCgRJ6LUPwByF3PzlSyxim1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:a2:c9:52:45:bf:42:48:d6:97:95:7c:58:f6:d1:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a679160a0449e8b50fc01c85dcfce54b2c629b51
Validity
Not Before: Jun 9 17:00:21 2025 GMT
Not After : Jun 10 17:00:21 2025 GMT
Subject: CN=5c1c18b53069828febf48c5393dd3042d3c0287b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ac:87:1f:ae:5f:5d:57:65:8f:4a:8f:db:a0:
2d:02:d8:e5:37:c4:03:2b:3b:90:83:8a:db:5c:83:
b8:14:12:0c:70:3b:d5:d7:a5:01:29:6c:9d:8c:bf:
e3:ec:33:85:bc:81:77:14:79:48:60:29:7a:47:72:
f5:b5:2f:79:cd:38:a2:b7:12:5e:e4:42:88:d0:b9:
88:98:95:d6:88:0e:6e:d2:37:f0:21:df:70:ab:e8:
9f:3a:e2:68:65:98:90:ae:e2:72:7d:8f:e3:6f:fb:
c3:82:cf:ea:ad:05:17:6b:55:87:ff:7b:39:69:d2:
57:20:27:4a:01:ca:1f:2a:94:49:c4:dc:73:75:db:
83:14:dc:14:16:ad:c1:77:43:b9:6f:d7:db:64:61:
b6:00:13:bd:74:10:f7:bc:a0:3d:e6:d1:e5:4f:0c:
09:d4:68:f3:48:2f:bf:30:5c:aa:ea:27:3e:8e:40:
68:6a:8c:cf:59:db:a5:99:2a:13:d9:8f:f2:0b:11:
98:a7:f1:08:f7:63:49:bd:ef:c6:ec:59:e7:4c:ac:
c5:09:8f:23:b9:d3:ff:ff:f2:56:70:65:ff:14:86:
70:76:28:92:63:af:15:66:a5:5b:fa:db:0f:97:32:
20:5b:39:76:2c:b0:65:c7:20:26:03:b8:3d:5f:ce:
ab:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1C:18:B5:30:69:82:8F:EB:F4:8C:53:93:DD:30:42:D3:C0:28:7B
X509v3 Authority Key Identifier:
keyid:A6:79:16:0A:04:49:E8:B5:0F:C0:1C:85:DC:FC:E5:4B:2C:62:9B:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnkWCgRJ6LUPwByF3PzlSyxim1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:04:38:0d:e5:ae:c0:f4:bd:a3:ca:36:66:c7:70:9a:57:01:
6b:9e:3e:a5:9e:0a:18:cc:dd:c6:0c:65:51:c9:23:25:dd:0d:
62:ac:aa:e2:e8:46:94:e1:df:ae:0f:5f:69:0c:00:ff:e4:96:
1b:a3:0f:b6:3e:85:14:91:79:d5:1e:d6:d4:8e:30:b9:ca:26:
b9:2e:a7:d8:cd:33:6e:4e:13:2f:08:e1:a1:15:8d:26:58:6d:
0d:4c:7c:c1:c0:e2:ea:42:2c:dc:49:2b:7f:7b:c4:44:51:d7:
48:bf:94:58:99:24:1d:4a:20:63:61:4a:7b:f0:f0:a7:93:92:
16:85:f0:b2:3e:a6:f4:fe:39:8c:0d:18:71:b6:e1:52:ff:ad:
64:60:bd:8e:fd:65:76:c1:e5:cd:cf:5e:3b:9a:67:4c:0b:94:
fc:02:25:d4:58:0d:83:ac:d0:35:82:e5:8c:9d:aa:45:e0:d5:
51:4b:03:c0:c5:a5:09:16:2d:b0:90:a7:2f:b3:53:21:c3:df:
e3:6b:c4:ae:80:8a:a8:e5:21:af:ea:d3:72:a3:36:0b:76:fd:
ca:c1:6a:fe:77:f5:06:d2:94:cb:e0:9d:30:5e:70:b8:ce:44:
43:96:18:8f:2b:d6:e3:f4:03:fd:30:fa:6d:eb:49:f8:6d:e1:
9d:4c:d7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 18:58:37 2025 by rpki-client