Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.mft
File: pnQBXVCbXU85bqNjNp6ddP-tdZM.mft (raw, json)
Hash identifier: FjEkRo2UROUmBtyGrtrfqpQe1tzUU37n491HL0NrYBs=
Subject key identifier: 30:88:E5:B7:87:E9:FC:DD:6B:1B:61:06:50:BF:01:CF:C5:F8:80:17
Authority key identifier: A6:74:01:5D:50:9B:5D:4F:39:6E:A3:63:36:9E:9D:74:FF:AD:75:93
Certificate issuer: /CN=a674015d509b5d4f396ea363369e9d74ffad7593
Certificate serial: 0197470C2836D255EF4C99C073DAE0D5AC6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnQBXVCbXU85bqNjNp6ddP-tdZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.mft
Manifest number: 1414
Signing time: Fri 06 Jun 2025 21:01:08 +0000
Manifest this update: Fri 06 Jun 2025 21:01:08 +0000
Manifest next update: Sat 07 Jun 2025 21:01:08 +0000
Files and hashes: 1: pnQBXVCbXU85bqNjNp6ddP-tdZM.crl (hash: QXfmhVBwqbW/E1e4eV6cw3uxCQcuBEUVusEgGRPRoNw=)
2: ytlPgasGVjygeToAnL_7qGL6niY.roa (hash: 4pWkNfB/a5sc8sNCH66lYgOc8aQwiUY9Cf8vuGjBpFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pnQBXVCbXU85bqNjNp6ddP-tdZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:28:36:d2:55:ef:4c:99:c0:73:da:e0:d5:ac:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a674015d509b5d4f396ea363369e9d74ffad7593
Validity
Not Before: Jun 6 21:01:08 2025 GMT
Not After : Jun 7 21:01:08 2025 GMT
Subject: CN=3088e5b787e9fcdd6b1b610650bf01cfc5f88017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:89:45:be:aa:da:00:cf:03:8c:9f:91:01:3b:
ae:0f:64:cc:33:50:94:3a:84:c3:4c:6f:64:18:50:
93:32:21:da:21:91:c1:46:7c:ac:d4:ee:f0:7a:67:
5b:a7:67:6b:90:8f:6d:f5:08:2d:45:7f:61:40:b1:
54:21:a2:7c:89:dd:39:67:ee:ac:1f:9a:29:f1:db:
47:3a:d2:fa:0a:75:94:21:cb:43:c8:59:93:3f:49:
ab:87:96:64:74:ef:99:ab:19:e0:18:dd:3a:c2:f3:
75:94:51:00:80:6d:76:36:cd:8f:91:33:52:c3:97:
a0:ac:58:0b:07:0c:14:c4:03:b8:46:6c:6e:83:e3:
ad:a0:93:00:19:50:c3:74:d4:c3:58:cb:38:26:5a:
50:23:7c:e3:c4:b4:39:0e:17:6f:92:4d:a8:09:4e:
7f:83:b0:b5:1d:c4:7c:1c:ac:71:dd:c0:97:b2:37:
34:96:d0:fe:5a:fd:3d:7b:2b:69:15:64:50:40:c8:
c3:1a:cb:10:11:56:6c:c5:19:ce:0b:35:18:d6:13:
25:5d:c9:d5:70:87:7a:4a:ac:fe:7e:a5:2e:11:de:
03:1c:e9:53:e7:da:a6:7f:8d:ae:a1:cd:98:bf:d8:
39:0b:64:fe:59:83:b5:02:4c:b6:c3:51:b3:96:31:
b6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:88:E5:B7:87:E9:FC:DD:6B:1B:61:06:50:BF:01:CF:C5:F8:80:17
X509v3 Authority Key Identifier:
keyid:A6:74:01:5D:50:9B:5D:4F:39:6E:A3:63:36:9E:9D:74:FF:AD:75:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnQBXVCbXU85bqNjNp6ddP-tdZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:69:8f:69:54:42:02:4a:5a:3f:f9:24:9f:4c:d4:50:a6:bd:
b9:00:f6:80:3f:0e:00:5e:2d:36:ce:a6:d7:60:77:f0:8c:4d:
d4:81:ec:50:59:a6:c9:0f:15:1a:46:ec:a7:2c:d4:0d:c9:21:
1a:6f:47:7d:13:bc:01:58:91:8d:75:b1:db:da:a2:ac:ee:23:
65:1f:03:63:5e:c5:a0:65:81:a4:96:bc:b9:e6:76:b6:d3:82:
20:28:ba:a9:ed:54:4c:ac:e2:5c:8e:a4:3a:41:84:20:b6:4f:
cc:cb:d8:49:59:37:da:6e:8d:b1:a9:f5:57:48:ce:66:15:f0:
4a:cc:86:d1:bf:3a:cb:eb:ec:b5:5b:6d:16:be:d7:f9:d8:0e:
0a:db:48:a4:00:85:f3:4f:33:58:29:f9:13:45:64:40:52:56:
6d:25:5b:d4:67:f9:0d:3f:08:eb:6e:2a:f8:02:14:be:ef:a6:
ff:9a:b0:58:57:54:89:6e:7f:0c:45:0b:6a:d4:52:9f:0a:87:
5f:dc:b1:cf:5e:fe:5a:65:eb:61:30:0e:b3:a6:27:7f:a7:af:
28:a5:e9:26:16:e6:fb:0d:7c:f5:8f:61:d5:6e:3d:38:5f:10:
d0:19:f4:73:96:8e:5a:ea:cd:7c:6f:34:97:15:b9:e5:da:52:
15:95:e1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:16:34 2025 by rpki-client