Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft
File: PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft (raw, json)
Hash identifier: 297yOu7sYjt1Y8hNvtSePOLePXiCEFx+vpRzm0dm1qE=
Subject key identifier: BF:89:E1:E2:B6:85:EF:C3:49:95:81:64:4F:2F:E8:81:4D:14:D1:63
Authority key identifier: 3E:4C:81:30:CC:A3:0A:3F:F9:2C:9B:99:DB:54:38:DC:7F:3E:28:30
Certificate issuer: /CN=3e4c8130cca30a3ff92c9b99db5438dc7f3e2830
Certificate serial: 01975EDD60776CC9D1416C0C86A75DABDF9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkyBMMyjCj_5LJuZ21Q43H8-KDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft
Manifest number: 12A1
Signing time: Wed 11 Jun 2025 12:00:55 +0000
Manifest this update: Wed 11 Jun 2025 12:00:55 +0000
Manifest next update: Thu 12 Jun 2025 12:00:55 +0000
Files and hashes: 1: PkyBMMyjCj_5LJuZ21Q43H8-KDA.crl (hash: Eqqa2NcFuK1SWQN0m+xVs3yjJp25P48U27c5lzPADwM=)
2: WUGlCtJw6cpU2FG2Edk0WX6jTy8.roa (hash: JBmFXCHcBO6dIcBHrxlCuuoBtse/nvSs/yMZuy61tLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PkyBMMyjCj_5LJuZ21Q43H8-KDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:dd:60:77:6c:c9:d1:41:6c:0c:86:a7:5d:ab:df:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e4c8130cca30a3ff92c9b99db5438dc7f3e2830
Validity
Not Before: Jun 11 12:00:55 2025 GMT
Not After : Jun 12 12:00:55 2025 GMT
Subject: CN=bf89e1e2b685efc3499581644f2fe8814d14d163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:27:d6:6e:00:64:c7:f0:4e:e6:98:f3:12:02:
f8:9a:7b:36:c4:32:96:5a:13:d6:52:49:df:9e:ca:
59:ed:04:32:ae:25:59:aa:a7:dc:96:f1:c4:89:57:
6b:e2:64:52:4b:dd:f1:27:95:0d:b8:37:a7:c1:4a:
bc:4a:b4:f7:62:25:61:0f:3c:91:be:5b:51:05:bd:
f9:c5:85:7b:df:aa:50:d0:76:1b:a5:af:e4:90:e7:
a2:a1:57:a0:a2:28:38:b3:5e:e5:e5:15:c5:39:95:
ba:84:06:68:dd:79:06:43:a6:dc:b0:e1:5e:49:b2:
3f:87:0d:4b:04:e0:ec:c4:6b:ca:5a:a9:53:50:60:
4b:58:75:74:95:19:0b:f7:4a:e7:92:af:bb:89:7d:
38:4f:51:25:7f:10:6d:a4:1a:73:a5:1a:c4:6a:97:
e5:56:34:29:ba:2b:a0:8a:07:10:ab:33:b6:49:c5:
63:df:89:73:87:e3:76:93:eb:c2:77:fb:35:a5:3a:
49:55:da:77:00:9b:b1:08:76:81:37:f4:15:9b:62:
15:24:71:f6:f1:33:5a:a1:55:59:35:64:60:2a:a2:
b7:4c:f1:f3:1d:e7:51:c3:2a:1d:12:df:60:43:85:
dc:c4:34:4b:82:f8:ae:5c:d4:f1:a3:10:ec:16:39:
58:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:89:E1:E2:B6:85:EF:C3:49:95:81:64:4F:2F:E8:81:4D:14:D1:63
X509v3 Authority Key Identifier:
keyid:3E:4C:81:30:CC:A3:0A:3F:F9:2C:9B:99:DB:54:38:DC:7F:3E:28:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkyBMMyjCj_5LJuZ21Q43H8-KDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b8:fd:cc:17:51:2b:1a:7c:f6:43:e1:46:d8:75:b3:b7:5f:
de:f5:63:ea:00:80:9e:51:36:7e:5d:27:83:01:aa:e3:77:f9:
c8:9b:1c:07:fc:33:37:bd:e6:6f:71:8f:b8:84:5f:4f:5e:2c:
91:e7:a0:f1:35:35:94:38:f8:66:ce:b7:69:e8:fd:f9:71:b7:
a0:a0:cd:16:50:c4:74:0f:23:61:a5:32:0d:cd:ca:ab:83:5a:
eb:c5:81:e7:de:be:06:cf:eb:26:83:18:19:57:57:3a:f7:9b:
8f:76:6d:74:cf:67:b0:80:f0:56:d3:d4:88:6a:1f:32:1c:fa:
24:1e:c9:6d:ee:e5:8c:0e:99:74:af:ae:69:28:80:97:35:e9:
99:b9:9b:57:06:93:80:bf:42:68:d9:53:10:68:b6:a6:b7:da:
cc:b1:84:a6:db:c5:1e:d8:fb:1d:06:af:04:17:1a:92:69:ff:
6f:fd:f9:34:7b:c2:ea:ee:05:f1:94:03:29:39:4c:b7:7d:32:
e5:b7:55:18:ee:1b:5c:e4:4f:1c:a7:5f:d2:a7:2b:34:3c:0c:
7d:57:61:a8:5c:63:1e:ff:48:0d:cc:86:9f:c1:8d:b3:f9:27:
6b:62:73:c1:59:1d:9a:62:68:a6:f5:ff:a2:2a:04:57:ab:73:
c1:36:48:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 22:14:18 2025 by rpki-client