Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft
File: pnkWCgRJ6LUPwByF3PzlSyxim1E.mft (raw, json)
Hash identifier: tXZJsS8GK4kB5m8OeuqIIKrMzrKwiV7tgtFCkOHup90=
Subject key identifier: 54:C9:F8:CA:B5:B7:EA:3B:38:91:63:45:3A:35:AF:10:C9:BA:6B:EE
Authority key identifier: A6:79:16:0A:04:49:E8:B5:0F:C0:1C:85:DC:FC:E5:4B:2C:62:9B:51
Certificate issuer: /CN=a679160a0449e8b50fc01c85dcfce54b2c629b51
Certificate serial: 019923317BD549D903679773A731A39554D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnkWCgRJ6LUPwByF3PzlSyxim1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft
Manifest number: 1077
Signing time: Sun 07 Sep 2025 08:01:09 +0000
Manifest this update: Sun 07 Sep 2025 08:01:09 +0000
Manifest next update: Mon 08 Sep 2025 08:01:09 +0000
Files and hashes: 1: 6zgBCVzd-5kdX0sgGe0YDglrk04.roa (hash: mpYaeNHnIzoaHZnsNjSuZCAnd5S6WeK+VhnJsngc1QQ=)
2: pnkWCgRJ6LUPwByF3PzlSyxim1E.crl (hash: y4dOOrSkMLywgiHqtViMc/M9aa7H6mAbd2mcM2Gy40U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/pnkWCgRJ6LUPwByF3PzlSyxim1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:7b:d5:49:d9:03:67:97:73:a7:31:a3:95:54:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a679160a0449e8b50fc01c85dcfce54b2c629b51
Validity
Not Before: Sep 7 08:01:09 2025 GMT
Not After : Sep 8 08:01:09 2025 GMT
Subject: CN=54c9f8cab5b7ea3b389163453a35af10c9ba6bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:05:b3:4e:78:cc:26:e4:f1:e6:69:21:04:c9:
83:32:df:43:04:24:76:52:4f:4f:dd:86:fe:c1:f7:
dc:c3:fe:d8:eb:0f:21:3e:5a:6d:e3:eb:77:a5:a5:
8d:43:5e:7d:18:96:f9:5d:d4:bf:12:c1:cc:e4:88:
fd:07:54:a0:6d:f5:a1:32:d6:54:04:29:fc:6c:2e:
5b:5c:31:56:d4:1c:57:49:c4:c9:27:64:09:b5:69:
70:1f:c7:2d:77:a2:08:ef:5f:8d:4b:7e:2e:1c:59:
58:8e:b2:9b:27:2c:a9:33:72:bb:f8:fb:88:e0:a6:
3a:22:c0:3d:d5:90:1e:76:9f:03:7f:00:3f:bd:5f:
d0:2c:3e:e0:bd:54:ad:3f:34:35:ab:12:de:3d:05:
f3:1d:59:22:38:de:ed:bd:27:36:07:f6:45:b1:04:
e6:33:fe:74:35:51:50:75:6d:1c:ca:cb:f7:5d:01:
4c:eb:fb:e3:69:59:7b:05:0c:38:8d:ff:ae:00:94:
27:df:57:3e:80:cf:be:0c:a2:70:5e:e4:c1:5f:ab:
06:bd:c4:0f:96:76:91:6a:de:2f:d0:d2:dd:dd:cb:
e2:38:6a:32:25:47:8d:41:c5:5b:a0:4c:4e:9b:ce:
22:60:91:72:26:df:b2:a4:be:44:cc:88:29:42:11:
50:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C9:F8:CA:B5:B7:EA:3B:38:91:63:45:3A:35:AF:10:C9:BA:6B:EE
X509v3 Authority Key Identifier:
keyid:A6:79:16:0A:04:49:E8:B5:0F:C0:1C:85:DC:FC:E5:4B:2C:62:9B:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnkWCgRJ6LUPwByF3PzlSyxim1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:f5:1b:1a:7a:92:18:06:94:d7:46:67:40:f6:e5:c9:a3:5c:
20:dc:3d:66:1a:ea:92:c6:13:a6:d3:88:b6:09:fb:32:ec:d8:
90:ac:47:8f:53:1b:c7:46:25:b9:9c:cc:5d:02:98:66:91:68:
15:73:6c:b8:00:99:3a:f2:f4:8f:8d:04:43:ec:7c:7f:a3:34:
f5:75:f9:ce:31:ad:fd:37:1f:01:d5:63:ea:95:b8:4d:a7:1c:
f4:62:10:76:fd:53:95:39:85:2a:91:ee:6b:b4:8e:25:24:80:
18:45:bc:0d:9e:c9:d7:aa:a2:f4:4d:01:da:d1:7f:d6:d9:74:
3c:00:eb:af:ea:b0:7f:04:31:33:da:19:5e:93:e3:c6:0b:84:
cd:0e:61:ed:72:32:51:a6:28:d4:bf:1f:55:6a:67:6d:b6:dd:
b1:f7:8f:de:78:5c:76:03:e8:d1:8f:a5:75:1a:7b:75:a6:84:
04:d3:cc:95:2f:46:b3:a3:f9:9d:59:9c:cb:5b:bf:40:ad:66:
56:6b:fb:37:ee:3a:0f:92:ce:d7:33:50:fd:d6:25:c6:d4:67:
ba:13:ec:e4:fb:51:cc:7f:b7:10:86:39:14:be:aa:22:6c:5b:
b3:be:b4:46:31:13:ac:b9:cf:44:ca:ae:48:d1:3c:e9:b3:c5:
32:62:a7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:41:58 2025 by rpki-client