Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
File: PnFWq-5roji5BzFd-cVShlrc2ug.mft (raw, json)
Hash identifier: 3QX6kRw4Us6weTWbk/cBnwWzsD8jPWmZWUoDXn1SWAo=
Subject key identifier: 29:80:69:BC:FD:70:E5:04:BF:03:16:5D:9F:3F:9E:71:F0:D3:42:1D
Authority key identifier: 3E:71:56:AB:EE:6B:A2:38:B9:07:31:5D:F9:C5:52:86:5A:DC:DA:E8
Certificate issuer: /CN=3e7156abee6ba238b907315df9c552865adcdae8
Certificate serial: 01974DB31FD14B4D07A5F1EF5921EA2AB585
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
Manifest number: 07F0
Signing time: Sun 08 Jun 2025 04:01:14 +0000
Manifest this update: Sun 08 Jun 2025 04:01:14 +0000
Manifest next update: Mon 09 Jun 2025 04:01:14 +0000
Files and hashes: 1: PnFWq-5roji5BzFd-cVShlrc2ug.crl (hash: sdsuAPgXDz9eYGQkVXlj5ZdOLNxVzU4tyt9dZhpbORc=)
2: QWM4nrBr-pa9JzWD2Zz8wHHbmCU.roa (hash: VKweVNYicugh0mCYY3yIR2LnHnKsWIZPY+G4TQfXJ6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b3:1f:d1:4b:4d:07:a5:f1:ef:59:21:ea:2a:b5:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e7156abee6ba238b907315df9c552865adcdae8
Validity
Not Before: Jun 8 04:01:14 2025 GMT
Not After : Jun 9 04:01:14 2025 GMT
Subject: CN=298069bcfd70e504bf03165d9f3f9e71f0d3421d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:53:7a:ff:22:c1:b2:48:c7:b5:45:6c:5b:15:
2c:9a:90:1b:d4:c4:60:9c:05:3f:a2:5d:20:c7:e7:
17:fe:d8:4d:4b:32:bc:27:b2:36:63:15:a4:c9:ae:
53:f6:1b:f3:d0:fd:4d:5c:0a:ad:ab:4c:f0:ec:78:
f2:22:e2:d7:f8:b5:28:cf:9d:82:e5:5a:8e:9e:b0:
be:89:e8:5b:24:c9:c4:ee:6e:a1:95:92:d5:d5:36:
7d:dc:6a:83:44:af:60:e4:c6:1a:89:74:32:f0:c3:
5b:d7:f1:2a:75:fe:bd:03:a0:b9:fa:2c:fe:82:81:
d5:5b:15:59:32:42:35:4f:34:f0:e4:41:49:8a:7b:
99:12:a0:6e:03:94:10:d6:9c:74:a5:14:f4:b6:97:
60:b7:e6:28:35:4b:db:59:14:5c:11:cb:0a:70:5e:
f2:b8:3a:36:56:44:17:3e:80:ab:11:46:88:1c:fc:
25:6e:64:67:35:87:42:fa:0b:7c:55:ef:12:49:3d:
28:dd:7b:91:ed:53:f9:d9:eb:50:8e:50:da:67:44:
ae:65:01:1a:53:54:1a:ec:bf:80:77:b3:08:6f:69:
f4:75:1a:08:4d:bb:8d:91:cc:5d:e1:c6:4a:bd:c1:
18:6c:74:cb:58:bb:95:33:69:90:db:58:b6:67:b3:
df:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:80:69:BC:FD:70:E5:04:BF:03:16:5D:9F:3F:9E:71:F0:D3:42:1D
X509v3 Authority Key Identifier:
keyid:3E:71:56:AB:EE:6B:A2:38:B9:07:31:5D:F9:C5:52:86:5A:DC:DA:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:9b:dd:1a:03:0c:6b:4f:76:55:17:19:5c:c2:71:06:51:93:
66:2d:0d:21:a9:67:28:d3:1a:4a:fe:84:5b:a0:2b:49:5b:f2:
4b:9b:a7:21:c7:9e:b6:a6:83:a9:6e:d6:f6:41:63:0a:3a:39:
6f:c2:e1:db:54:5b:fe:22:de:e8:aa:77:1a:fc:79:4d:bf:1e:
68:a1:f3:c9:bf:ab:72:35:60:6b:44:d1:08:9b:61:33:63:42:
d2:a7:87:c1:d8:00:d7:e4:15:d8:05:eb:43:96:e6:bb:4d:f8:
96:b1:64:5a:57:3b:46:3e:b4:0c:de:11:31:9e:bb:40:4f:37:
ae:7a:4c:b9:5a:c1:1b:4d:2a:ca:2d:dc:8a:bd:8c:f1:6b:de:
80:b5:3e:ea:66:64:09:43:cf:af:ec:96:54:11:bf:09:b9:ab:
84:76:e1:ec:31:5e:81:5b:56:55:e2:f8:c6:82:a9:0c:75:c4:
3a:43:52:42:bb:32:6b:25:80:9f:7e:59:45:e2:3c:a0:de:84:
9a:a6:72:0e:4c:0a:cb:30:58:20:08:29:bb:0f:ea:07:39:fe:
ce:b2:f6:1d:77:b9:68:81:66:7a:ea:1c:a1:52:6d:fd:74:42:
b4:d2:63:a1:15:99:1b:63:cb:4a:b6:36:7d:0e:d9:8f:53:bb:
85:5d:8f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:26:40 2025 by rpki-client