Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
File: PNVhnbjXcXN5lW1Op1t22ybRwck.mft (raw, json)
Hash identifier: KsMdGMthwHWMNsV5v9J73Me4k5iCHSOgY9huFwU15P0=
Subject key identifier: B0:EF:5D:7E:79:DF:17:32:EC:E9:05:D0:D7:D5:3A:8A:23:56:1F:EA
Authority key identifier: 3C:D5:61:9D:B8:D7:71:73:79:95:6D:4E:A7:5B:76:DB:26:D1:C1:C9
Certificate issuer: /CN=3cd5619db8d7717379956d4ea75b76db26d1c1c9
Certificate serial: 01975C8115D58645524574BA8FE11A801A81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
Manifest number: 1586
Signing time: Wed 11 Jun 2025 01:00:52 +0000
Manifest this update: Wed 11 Jun 2025 01:00:52 +0000
Manifest next update: Thu 12 Jun 2025 01:00:52 +0000
Files and hashes: 1: 4prfTAA9HBYIWFQscXuDZvPOJfU.roa (hash: zMicpYmGFLFzW1lGiXS7QLLBWvT2YuAYQEgxuNA/2gA=)
2: PNVhnbjXcXN5lW1Op1t22ybRwck.crl (hash: vXuM1toFTmxy3nkES+BQ05FEbSSTXYV0Q2+V2FFNwIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:81:15:d5:86:45:52:45:74:ba:8f:e1:1a:80:1a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd5619db8d7717379956d4ea75b76db26d1c1c9
Validity
Not Before: Jun 11 01:00:52 2025 GMT
Not After : Jun 12 01:00:52 2025 GMT
Subject: CN=b0ef5d7e79df1732ece905d0d7d53a8a23561fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3a:13:3e:d6:47:84:26:4e:8b:34:86:e3:ae:
aa:14:7a:e5:57:2f:dd:ce:52:65:ea:1a:5c:36:7a:
9b:6a:95:8e:48:40:1d:7e:80:2c:e9:fa:bc:84:60:
04:84:67:80:9e:f2:ba:27:13:98:ce:a5:f3:c6:68:
73:38:3f:39:18:c1:87:17:d4:07:a1:a9:4d:45:b9:
49:15:1a:ae:11:1e:47:f3:9c:50:bd:a0:14:58:ca:
b9:6d:82:84:5f:d8:73:1f:41:3b:d5:58:23:25:bb:
5f:1c:4d:8f:b6:30:5d:ce:15:7f:d0:47:3d:53:a4:
fa:32:67:f6:89:89:77:e8:15:99:00:23:e0:a0:51:
54:9b:2b:65:f4:17:d4:6c:30:ec:40:5b:d4:85:b2:
fa:98:44:de:8c:8a:23:09:e5:e3:24:18:9a:db:64:
aa:43:e6:98:f0:38:64:fc:2f:17:f6:e7:b1:26:1e:
45:78:3e:31:0f:72:ef:83:be:0c:08:b1:86:f3:3b:
2b:7e:8f:9c:bc:f2:7a:2a:47:05:e3:96:ed:cd:ff:
2c:67:d2:3e:dc:c7:be:8c:31:f1:dd:61:0c:6e:47:
35:6c:b7:87:33:4e:49:87:33:12:28:80:34:54:df:
99:0f:24:e2:9c:13:66:85:60:62:0b:fe:20:8c:bf:
89:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EF:5D:7E:79:DF:17:32:EC:E9:05:D0:D7:D5:3A:8A:23:56:1F:EA
X509v3 Authority Key Identifier:
keyid:3C:D5:61:9D:B8:D7:71:73:79:95:6D:4E:A7:5B:76:DB:26:D1:C1:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:07:20:2c:66:f3:09:5b:07:51:cd:06:54:dc:47:b2:be:0d:
ca:50:46:99:24:51:e6:80:ad:e4:b0:41:dd:33:a0:dc:ff:e0:
5a:12:f4:d2:18:ce:ee:92:97:ef:6b:cb:85:79:ce:d1:b8:f9:
33:c8:9a:b8:89:64:8d:7a:59:b5:04:6c:28:03:46:1a:c7:10:
6d:4d:6e:1d:1a:7f:be:71:ee:02:b6:b9:a1:34:b7:12:8f:d8:
26:62:cb:24:b5:e2:21:b9:47:cf:9b:e1:9d:d0:37:a9:67:97:
8b:22:2b:2b:fe:ac:78:f0:e4:e6:3f:75:22:b5:58:78:c3:0c:
e5:a5:b5:ca:c5:84:75:73:15:4e:21:b5:4c:b1:62:dc:f8:f3:
aa:16:39:8c:c0:ab:b5:74:b1:52:38:08:b0:12:d5:f0:70:e2:
31:ec:8d:8b:f2:1e:62:ed:14:c8:62:e8:a6:77:ec:82:5f:76:
b8:3e:ce:5e:9a:f1:48:1e:84:8b:01:d3:89:8d:73:dd:cb:c5:
52:1f:a7:96:d5:a4:cf:0b:24:55:72:b4:e1:64:af:e1:d5:57:
1e:e8:80:92:a4:94:69:9d:04:ba:80:0b:72:26:08:b4:ed:a6:
91:bb:4d:b9:d1:42:b9:63:52:d1:6c:e3:0a:41:03:ef:6d:19:
ce:4f:60:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:30:54 2025 by rpki-client