Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft
File: PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft (raw, json)
Hash identifier: 52TGdy26OOp6v6gNWw4+Amu1iDtwjGMRhm5d3T7Szw8=
Subject key identifier: 05:09:68:C8:B2:BC:C9:B6:68:F2:3F:D7:A3:47:89:C0:AD:F5:75:4A
Authority key identifier: 3C:AB:C3:DD:E8:F1:6C:F6:D9:18:A4:0F:16:82:CA:41:BE:4D:0A:41
Certificate issuer: /CN=3cabc3dde8f16cf6d918a40f1682ca41be4d0a41
Certificate serial: 01976FD0B290C9CBFF228CAC0938053C93FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKvD3ejxbPbZGKQPFoLKQb5NCkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft
Manifest number: 0CBA
Signing time: Sat 14 Jun 2025 19:00:37 +0000
Manifest this update: Sat 14 Jun 2025 19:00:37 +0000
Manifest next update: Sun 15 Jun 2025 19:00:37 +0000
Files and hashes: 1: AuOuUKhz7LbWM9xXAFqUFIS1KQI.roa (hash: yQUlcBfkC7CQTeK1Wv3DBode7pqw+A1kJYyGEQOXp9g=)
2: PKvD3ejxbPbZGKQPFoLKQb5NCkE.crl (hash: Jr0F36/aphpuvrSlZRrpajj2fPL9U2T74Zcm1JVl37M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PKvD3ejxbPbZGKQPFoLKQb5NCkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:b2:90:c9:cb:ff:22:8c:ac:09:38:05:3c:93:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cabc3dde8f16cf6d918a40f1682ca41be4d0a41
Validity
Not Before: Jun 14 19:00:37 2025 GMT
Not After : Jun 15 19:00:37 2025 GMT
Subject: CN=050968c8b2bcc9b668f23fd7a34789c0adf5754a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:10:77:85:03:80:2a:4e:ac:75:62:06:67:a7:
f8:fd:6c:27:cc:f9:0a:be:6b:6d:0c:dd:37:f4:0e:
f1:f9:6a:e8:77:b7:1f:0b:ab:cf:ad:31:56:f6:83:
7c:dd:be:2c:7e:50:3b:02:1f:25:9f:8f:b3:3e:9b:
76:b2:0c:91:b5:5e:f8:e4:1a:7d:06:a0:16:5a:42:
27:69:d0:3b:a3:03:f5:eb:63:f1:3d:66:20:56:5c:
c5:47:15:27:2e:0e:97:39:d1:f4:e7:d6:9d:12:da:
3e:57:68:07:41:06:81:64:24:9b:2e:34:0c:13:db:
4b:a0:23:09:53:ea:57:d1:41:e4:c7:ac:a1:7b:71:
ca:3a:9e:fa:74:3b:a7:ef:0f:98:ef:60:59:b2:1b:
04:e8:24:4a:bb:a9:31:10:5c:2b:9e:ae:60:db:1a:
ca:54:b9:8c:57:76:ed:f2:b4:26:16:ad:f3:c5:0c:
3e:fd:ca:d4:6b:9b:48:8a:56:d1:ab:0f:c3:d3:dd:
0f:a3:e6:a0:9a:08:c4:93:3b:76:dc:3c:f9:a4:b9:
57:66:47:d4:ae:1c:b1:2c:dd:d1:ac:77:73:2b:81:
d2:8a:91:10:db:54:eb:8f:d8:a5:1f:ef:c2:72:bc:
9f:43:a0:c0:9b:3a:b1:ef:53:b3:2c:a6:7f:c5:16:
ed:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:09:68:C8:B2:BC:C9:B6:68:F2:3F:D7:A3:47:89:C0:AD:F5:75:4A
X509v3 Authority Key Identifier:
keyid:3C:AB:C3:DD:E8:F1:6C:F6:D9:18:A4:0F:16:82:CA:41:BE:4D:0A:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKvD3ejxbPbZGKQPFoLKQb5NCkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:af:f0:ba:91:4d:7f:f7:71:a2:29:11:f7:8b:ff:2d:93:17:
6e:fb:32:31:fc:42:13:9b:8f:ec:7b:7c:ed:ab:49:a2:8c:69:
6f:72:c0:4b:0c:d1:6b:b4:7d:9e:11:c2:83:5c:0f:b1:7f:4e:
3f:6b:91:60:95:ab:0f:5e:48:f6:f3:f4:df:94:1a:8e:fe:e2:
83:b3:db:e8:ff:03:8c:1f:08:37:cb:a2:b0:cd:8c:e5:d1:dc:
74:a0:71:a5:99:e8:a3:ba:32:d4:0e:c9:d1:c7:ca:f6:b4:4e:
ec:48:31:d5:d1:ac:46:9f:c2:da:2e:a0:5e:2c:40:99:f2:0b:
4e:92:5a:73:1b:9a:db:6d:eb:60:e9:5b:d2:4e:a5:2d:09:18:
0f:70:a1:d9:6f:a6:ff:1f:04:4f:41:18:54:7e:5a:cf:31:f8:
3d:ea:6c:3e:e1:53:e6:c7:97:45:cf:b1:01:5f:c6:0c:4b:a6:
cc:b9:c0:b8:58:78:0c:d4:6f:5b:a1:7f:d1:5e:ae:80:2a:a1:
dd:91:96:ca:74:0c:01:28:6d:9f:27:1b:4c:ae:56:a1:16:1b:
91:97:32:af:ce:71:bd:8f:0a:5e:76:4d:17:bb:75:b0:46:6e:
7d:7b:04:61:37:49:26:d3:e0:18:eb:f3:ed:a0:e7:bf:67:df:
77:91:0a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:43:46 2025 by rpki-client