Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft
File: PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft (raw, json)
Hash identifier: 1qx1trQ/KwL2zsm1zhP+w6wkjsjTAj20LBguzwUD64U=
Subject key identifier: 26:C6:F7:47:B7:A9:04:58:5A:05:14:6C:DE:2D:7C:E6:B3:74:41:7B
Authority key identifier: 3E:4C:81:30:CC:A3:0A:3F:F9:2C:9B:99:DB:54:38:DC:7F:3E:28:30
Certificate issuer: /CN=3e4c8130cca30a3ff92c9b99db5438dc7f3e2830
Certificate serial: 019922C37B210FB1A168AF9835E9A0CE8B48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkyBMMyjCj_5LJuZ21Q43H8-KDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft
Manifest number: 138B
Signing time: Sun 07 Sep 2025 06:01:00 +0000
Manifest this update: Sun 07 Sep 2025 06:01:00 +0000
Manifest next update: Mon 08 Sep 2025 06:01:00 +0000
Files and hashes: 1: PkyBMMyjCj_5LJuZ21Q43H8-KDA.crl (hash: +dtNuRf1GEBPIKD+b87LYP+wyocYbdmT4oReMunIre8=)
2: WUGlCtJw6cpU2FG2Edk0WX6jTy8.roa (hash: JBmFXCHcBO6dIcBHrxlCuuoBtse/nvSs/yMZuy61tLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PkyBMMyjCj_5LJuZ21Q43H8-KDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:7b:21:0f:b1:a1:68:af:98:35:e9:a0:ce:8b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e4c8130cca30a3ff92c9b99db5438dc7f3e2830
Validity
Not Before: Sep 7 06:01:00 2025 GMT
Not After : Sep 8 06:01:00 2025 GMT
Subject: CN=26c6f747b7a904585a05146cde2d7ce6b374417b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:17:cf:b0:ee:1d:58:a6:ca:0e:66:fd:c4:d4:
db:bd:2b:0c:d0:05:92:d4:e6:1f:c7:52:ef:97:24:
e5:c1:59:8c:88:08:62:1c:3f:03:71:0c:96:69:dc:
9a:80:51:ec:61:be:14:d1:03:e5:f4:09:16:f4:09:
e5:43:47:60:e1:26:76:64:dc:6e:89:5e:56:a9:23:
88:df:f3:e6:d2:e2:e1:ca:23:78:b2:99:5f:a8:b4:
5d:37:ef:f6:43:7a:7c:a3:f1:99:ab:76:3b:36:f3:
55:db:8a:52:79:32:05:23:7e:7d:63:71:7e:0c:39:
3c:9e:93:18:33:c0:b4:b1:c0:6c:23:54:d8:fe:45:
19:bc:3b:ad:56:3e:f6:34:4d:d3:7e:d9:bf:4b:2f:
d5:bc:43:c5:73:85:d2:4a:16:25:2e:a1:f5:1b:b1:
62:b6:7e:69:ce:5d:d8:82:09:9e:16:e6:7c:0b:c1:
b4:98:b0:60:d6:d9:1d:88:3d:a6:1c:a8:d0:89:ed:
ff:1d:16:9a:64:20:8e:54:ab:ff:aa:8f:f2:e8:ba:
be:e8:8a:f7:13:56:a4:31:d6:a4:19:d4:82:74:77:
76:de:e1:9a:72:4a:7d:30:f7:94:85:65:44:4e:ce:
f3:2e:1c:04:6a:9d:92:15:fc:06:55:88:73:79:12:
0f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C6:F7:47:B7:A9:04:58:5A:05:14:6C:DE:2D:7C:E6:B3:74:41:7B
X509v3 Authority Key Identifier:
keyid:3E:4C:81:30:CC:A3:0A:3F:F9:2C:9B:99:DB:54:38:DC:7F:3E:28:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkyBMMyjCj_5LJuZ21Q43H8-KDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c8:44:ba:84:02:17:54:57:21:88:75:a2:1f:c4:25:93:ec:
dc:56:3b:28:12:76:d6:8c:2e:6c:8f:7b:65:ab:61:7c:8d:af:
61:a1:d8:a6:e4:87:e3:2c:89:ce:ea:7d:97:c4:d8:c3:30:f2:
14:df:13:68:99:20:8a:3a:b0:6e:69:65:29:b9:be:67:4b:c6:
49:d0:1b:8c:6f:42:5c:18:59:06:f7:f9:23:61:ea:d7:1c:a0:
4e:6c:1b:9f:6e:d0:82:86:65:d3:2d:63:9e:4b:ee:f0:20:d9:
66:00:12:1e:32:1f:96:2f:3c:e5:db:b6:ad:b4:5e:9f:bf:b9:
2d:69:0c:d4:fd:3b:ba:dd:b9:f7:94:aa:f6:75:75:b6:32:99:
58:a1:3f:86:72:08:57:98:aa:db:1a:c9:dd:a5:b9:6a:f6:41:
15:fc:d3:a9:d5:b4:fc:6b:e5:f3:85:c7:25:0d:12:a7:66:4c:
ec:ca:56:0c:25:3b:7e:4f:21:17:3b:16:47:10:e7:3c:9a:b6:
04:98:0f:3d:b8:1a:80:83:63:d4:bb:2c:cf:2e:92:0e:37:0a:
ef:be:39:4a:b9:5d:e4:77:70:5e:8a:33:87:97:81:e5:9a:6e:
34:6b:85:1c:f6:62:6d:bf:d3:eb:11:fc:bc:81:fa:3b:96:2d:
af:c4:b1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:35 2025 by rpki-client