Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
File: PgiDSzspc5CcCq9btdNUscDlyj4.mft (raw, json)
Hash identifier: PJ5M2iL6R10zMCZE2Vx5+5E7US0rCdUhH05W3LCDB3g=
Subject key identifier: E8:26:92:87:92:7D:22:2D:57:40:A4:24:0C:EC:E0:7A:CA:82:F6:85
Authority key identifier: 3E:08:83:4B:3B:29:73:90:9C:0A:AF:5B:B5:D3:54:B1:C0:E5:CA:3E
Certificate issuer: /CN=3e08834b3b2973909c0aaf5bb5d354b1c0e5ca3e
Certificate serial: 01974BFB8F927A6B9C9FAD485052DF0E5980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
Manifest number: 045F
Signing time: Sat 07 Jun 2025 20:01:06 +0000
Manifest this update: Sat 07 Jun 2025 20:01:06 +0000
Manifest next update: Sun 08 Jun 2025 20:01:06 +0000
Files and hashes: 1: MtWTrnrND6EP3cM9Z5OSCIGl4vA.roa (hash: pbxVZVZ80DN49b7VnIcQNiVRM2BUbkPepC2i0a2pNpo=)
2: PgiDSzspc5CcCq9btdNUscDlyj4.crl (hash: VZ5OQ1nxxDrc1iI4gKgQt9ATbHEbLMqecZKWJwidVQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:8f:92:7a:6b:9c:9f:ad:48:50:52:df:0e:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e08834b3b2973909c0aaf5bb5d354b1c0e5ca3e
Validity
Not Before: Jun 7 20:01:06 2025 GMT
Not After : Jun 8 20:01:06 2025 GMT
Subject: CN=e8269287927d222d5740a4240cece07aca82f685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:50:17:22:76:89:94:61:33:1d:4e:66:0b:5d:
e7:a4:af:23:a0:da:2e:8c:51:90:dd:b6:42:ce:fe:
2c:ec:8c:bf:29:e9:8f:80:92:3e:c9:29:9f:27:61:
38:b0:a8:e0:6b:1a:54:8c:14:2a:56:64:fe:1e:34:
d3:ec:87:d3:e1:f1:be:d2:59:db:8a:6f:3f:60:c2:
65:67:7a:cf:95:25:75:4d:e8:9f:e4:77:cc:3e:fb:
03:ca:bf:20:d9:d2:04:6e:a1:90:81:6a:e9:f9:75:
7c:f1:7c:54:e4:b8:e7:ab:42:81:e0:50:43:ff:3a:
34:e2:96:c9:4a:08:54:46:69:3d:2f:44:14:9d:7c:
c0:ca:16:c3:2e:ee:3c:64:03:29:8d:62:bf:04:2c:
01:28:4f:69:3b:bf:b0:e8:3f:73:2b:19:48:20:60:
8c:75:26:de:01:88:91:88:9b:fa:04:d4:f1:1e:29:
1e:6a:14:2b:c6:91:28:f6:43:84:94:35:37:f9:29:
59:ca:3b:fc:be:b7:7d:7d:9a:87:14:3e:99:7b:93:
8d:ec:25:22:da:e3:15:88:8f:54:b2:e8:72:a5:85:
93:12:14:b7:c9:7e:9a:d4:2e:1f:44:f8:b3:2e:25:
f2:e6:7c:9f:82:97:e5:0f:39:a3:1f:b7:2c:68:f2:
79:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:26:92:87:92:7D:22:2D:57:40:A4:24:0C:EC:E0:7A:CA:82:F6:85
X509v3 Authority Key Identifier:
keyid:3E:08:83:4B:3B:29:73:90:9C:0A:AF:5B:B5:D3:54:B1:C0:E5:CA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:7a:45:a3:55:6b:d5:fa:62:dc:3c:21:d8:b1:3d:6a:72:1c:
49:33:92:67:89:55:01:44:f3:08:ed:25:b1:dc:15:ae:bf:c2:
49:7f:44:8a:f7:4c:fc:04:a2:e2:39:6f:2b:f1:a3:cf:df:c1:
80:1e:49:fa:d7:47:27:21:bb:bc:a4:15:06:02:fc:f1:13:d0:
a1:c3:9f:9f:ac:f4:2f:80:81:16:59:a0:64:14:ef:e7:41:3e:
fb:0e:34:51:96:5e:c6:f2:63:e9:97:14:8e:27:b8:d7:57:f2:
3f:86:4a:0d:ed:fa:03:f1:e6:d4:3f:86:c3:45:5a:43:bb:06:
b4:c8:ac:08:1c:d6:51:01:ef:48:fa:0c:e0:36:cd:40:0b:2c:
98:db:2b:cb:98:5f:6a:96:0d:fc:79:fc:78:df:61:61:0a:e6:
dd:9c:cc:43:83:5e:9f:a1:6a:c3:53:42:0b:d1:90:00:79:fa:
ed:ac:63:28:80:8e:28:6a:b4:28:d6:51:b9:12:5b:cf:96:e7:
e9:83:d3:00:8b:01:dc:11:6d:d0:0e:2d:f6:56:c4:a0:b0:de:
ff:e8:62:ba:0e:6d:2e:f5:66:17:d0:9b:1d:33:74:96:5e:6b:
e7:d7:e0:4e:9f:76:00:0a:37:36:44:dd:12:83:51:9e:6e:5d:
7e:db:e7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:01:34 2025 by rpki-client