Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
File: PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft (raw, json)
Hash identifier: XPgqrTu7wZ7YWFrUf8Eg4Q8F0JV+ZKQSCg6F6ojMdQo=
Subject key identifier: 5A:6D:95:2C:9C:76:38:16:6E:0E:74:AB:E1:6C:D6:B2:9A:03:12:35
Authority key identifier: 3C:8D:FE:10:9D:E8:31:D3:2F:D7:8A:58:CC:5C:1D:14:9A:45:53:D2
Certificate issuer: /CN=3c8dfe109de831d32fd78a58cc5c1d149a4553d2
Certificate serial: 01974E2064D51EA2E74EA6680745546F26BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
Manifest number: 0EFC
Signing time: Sun 08 Jun 2025 06:00:35 +0000
Manifest this update: Sun 08 Jun 2025 06:00:35 +0000
Manifest next update: Mon 09 Jun 2025 06:00:35 +0000
Files and hashes: 1: PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl (hash: i3jjIbyvQDI5Ul45Um4Bzq2KtYCf50pvp/TGnJnGLsc=)
2: lFB-3tPNMg7_ita4wpHXyFs1Wtg.roa (hash: 2vQA+DCbD+mwH0gGh6uSgSbBtdD3lkqqjcblNuRAAAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:64:d5:1e:a2:e7:4e:a6:68:07:45:54:6f:26:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8dfe109de831d32fd78a58cc5c1d149a4553d2
Validity
Not Before: Jun 8 06:00:35 2025 GMT
Not After : Jun 9 06:00:35 2025 GMT
Subject: CN=5a6d952c9c7638166e0e74abe16cd6b29a031235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:06:02:c6:f6:50:0b:93:e5:d9:7c:fe:f2:11:
a3:2e:d4:b6:91:67:cb:9d:08:2b:e3:b3:01:15:70:
f6:ca:7a:a7:43:63:fd:d5:ba:9e:92:a7:d4:eb:52:
ce:de:0a:1d:c9:d4:94:e7:a6:69:7b:34:86:ba:fa:
85:da:c1:ad:17:6d:b0:44:71:a0:bf:8e:39:3c:e2:
57:67:0a:32:2c:b6:20:9c:77:12:f9:60:c8:d4:f3:
07:0b:c1:c7:9d:7c:b2:fe:9f:ad:14:27:63:86:f3:
52:9f:e8:eb:b2:80:3e:8b:34:09:2b:dc:46:7c:ca:
35:5c:a3:d7:76:79:73:37:f4:6d:ff:30:db:34:d9:
f6:11:12:10:50:0f:c9:07:ea:66:78:2c:f4:6f:5c:
a0:07:80:50:56:5b:31:a5:15:a9:0a:a4:f3:09:7d:
a2:4b:9b:c0:7a:7f:fd:da:5a:af:cc:e1:bb:a8:0a:
90:d7:b5:1b:18:c2:17:79:d3:33:75:d2:b0:b2:c7:
c4:79:de:9e:fb:d1:2d:01:20:23:d4:9e:d8:06:cf:
54:ee:b2:d9:dc:3f:e8:50:9e:26:70:c7:28:de:b2:
8e:bd:aa:8d:a0:0a:46:61:e5:0e:56:1f:36:c4:20:
77:24:81:3c:be:1c:a0:96:4b:ad:df:0d:87:c1:82:
e3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6D:95:2C:9C:76:38:16:6E:0E:74:AB:E1:6C:D6:B2:9A:03:12:35
X509v3 Authority Key Identifier:
keyid:3C:8D:FE:10:9D:E8:31:D3:2F:D7:8A:58:CC:5C:1D:14:9A:45:53:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:cf:90:9f:26:a7:00:4a:63:a6:42:aa:01:ac:54:08:15:d0:
3e:fa:22:74:7e:82:20:5a:5c:2b:98:51:90:04:75:4a:69:cf:
60:f0:d5:df:71:9d:22:cb:e8:54:28:f9:d7:f3:73:d9:3d:27:
00:06:bf:23:cf:c3:2c:eb:4e:c6:f5:bb:35:f5:55:f3:76:3f:
9e:58:fc:d7:6d:ed:32:ff:14:e2:cb:8f:bc:18:c6:03:92:de:
af:ab:01:2a:bd:c2:b3:48:02:6a:55:00:8d:33:37:a7:aa:03:
4d:45:d8:d1:2f:63:b6:99:b7:bd:c3:a6:7f:ff:bf:78:be:ee:
48:24:85:ca:b7:11:3c:76:32:53:a3:76:51:f7:b3:a6:0c:91:
a6:eb:58:3d:a8:97:1a:65:5f:ea:56:99:4e:aa:c9:df:8b:9a:
f2:ef:e0:af:12:66:69:50:8b:09:13:f5:72:82:0b:ac:61:11:
83:24:cb:2d:9f:d4:61:74:b7:33:0d:bf:a8:4c:62:b9:fa:24:
8b:9c:20:6c:fc:2a:f4:af:47:54:85:cf:64:28:6a:7b:ec:38:
a4:12:7d:7a:55:29:b2:f4:c0:5c:b9:a6:ab:31:12:a5:9c:73:
cd:6c:db:62:96:78:bb:e9:90:1b:3b:66:46:d1:73:c4:b9:d8:
45:b1:4d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:15:55 2025 by rpki-client