Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft
File: PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft (raw, json)
Hash identifier: GOZ996PydValYU4YlWbkXBrLrN6HBwd0x6SdbUWfqJI=
Subject key identifier: 9B:44:0D:F1:D2:5D:B7:13:8A:B0:2F:1F:40:8C:C7:1B:DC:52:19:25
Authority key identifier: 3E:4C:81:30:CC:A3:0A:3F:F9:2C:9B:99:DB:54:38:DC:7F:3E:28:30
Certificate issuer: /CN=3e4c8130cca30a3ff92c9b99db5438dc7f3e2830
Certificate serial: 01976A734E6F91FC4174990D10436E3A3AF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkyBMMyjCj_5LJuZ21Q43H8-KDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft
Manifest number: 12A7
Signing time: Fri 13 Jun 2025 18:00:30 +0000
Manifest this update: Fri 13 Jun 2025 18:00:30 +0000
Manifest next update: Sat 14 Jun 2025 18:00:30 +0000
Files and hashes: 1: PkyBMMyjCj_5LJuZ21Q43H8-KDA.crl (hash: lsGfGInGcaN83EeUokK7T2Y8VVuBW7pCzLyTjfFZ/aM=)
2: WUGlCtJw6cpU2FG2Edk0WX6jTy8.roa (hash: JBmFXCHcBO6dIcBHrxlCuuoBtse/nvSs/yMZuy61tLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PkyBMMyjCj_5LJuZ21Q43H8-KDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:73:4e:6f:91:fc:41:74:99:0d:10:43:6e:3a:3a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e4c8130cca30a3ff92c9b99db5438dc7f3e2830
Validity
Not Before: Jun 13 18:00:30 2025 GMT
Not After : Jun 14 18:00:30 2025 GMT
Subject: CN=9b440df1d25db7138ab02f1f408cc71bdc521925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ff:1a:18:e3:b0:b1:61:cb:cc:16:ff:0b:75:
94:ee:8d:ff:e2:1c:51:10:dc:dc:50:90:50:28:b3:
4a:a0:04:b4:95:5a:6c:eb:aa:ae:19:92:2d:ec:10:
76:a3:ce:90:8f:1e:d9:ef:e7:4f:bf:2a:77:92:73:
f4:f4:53:1a:e0:b7:9a:b9:ec:aa:03:e0:c9:e6:6e:
8a:42:9a:34:61:46:1f:53:cd:e9:e1:fa:b0:a3:d8:
47:c4:11:a9:4a:23:87:98:03:86:6e:54:ca:0d:02:
10:b3:c3:9f:c0:6f:04:6b:26:e1:4d:23:f9:c5:f7:
7d:ba:5c:18:70:71:d5:15:20:1b:66:c3:cc:3c:68:
78:32:fe:31:90:40:72:8e:db:a5:90:63:7c:16:3f:
a7:36:bf:9f:23:6c:69:02:6c:66:64:3a:fb:e1:26:
59:29:14:dd:94:a5:e4:7d:32:dd:a4:68:7c:2e:52:
c7:87:0b:60:ea:55:94:81:96:9b:30:51:3b:16:c7:
6e:99:2c:41:6e:2a:42:0b:f5:5f:a0:41:88:cd:da:
04:05:83:4d:7f:2d:66:ee:14:14:ba:08:05:6e:b2:
79:02:ba:4a:06:b0:26:ab:0b:1c:19:f0:5c:57:ca:
eb:1d:33:14:af:c3:cd:74:0f:65:31:15:56:1f:3e:
28:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:44:0D:F1:D2:5D:B7:13:8A:B0:2F:1F:40:8C:C7:1B:DC:52:19:25
X509v3 Authority Key Identifier:
keyid:3E:4C:81:30:CC:A3:0A:3F:F9:2C:9B:99:DB:54:38:DC:7F:3E:28:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkyBMMyjCj_5LJuZ21Q43H8-KDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:39:83:e5:cb:6b:03:21:e1:b6:01:21:65:ef:30:4c:29:98:
a8:33:70:9e:46:29:2e:7f:b9:6a:53:a9:7e:df:00:10:6c:10:
2d:09:58:6e:eb:26:52:41:a1:25:00:83:72:af:2d:cb:4d:92:
67:08:31:22:de:ef:60:44:ef:3f:e4:a2:c0:e6:25:4a:71:3d:
a9:d5:b6:01:4f:87:8a:f7:60:a0:38:78:f0:cc:58:eb:b6:de:
5a:d3:b9:89:d3:a0:06:13:6f:3e:12:cc:5f:b9:f5:71:ba:0e:
71:19:ec:77:78:83:c2:4d:60:3c:3e:68:bd:ad:77:13:e5:7b:
8d:d0:69:19:7f:f3:d7:c7:ce:1a:39:70:3c:61:13:42:45:3f:
57:07:9c:08:4b:0d:1c:eb:fa:6b:a7:5c:30:e0:7a:8e:dc:da:
64:29:a0:bd:67:fa:fc:d3:42:df:1e:25:4b:ae:4a:c5:19:cb:
18:2a:2d:33:0b:f5:b5:76:a2:e6:41:a1:ab:37:24:75:c3:af:
79:35:05:65:fb:67:8a:0f:5a:82:4f:39:9a:39:00:79:67:2c:
42:84:6e:b6:8b:20:f1:c8:81:ac:a3:e6:ef:66:7c:2f:8e:5c:
08:ee:5c:7d:47:d6:88:6e:b0:18:dc:9d:f8:84:b5:4f:ae:44:
20:cf:07:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 23:27:43 2025 by rpki-client