Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
File: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft (raw, json)
Hash identifier: 5yfz3CVUbUr1JyEgaqJ6y8qnCodA1KPm6W6RMIRC3J0=
Subject key identifier: 8E:95:D8:06:C9:7A:8D:2A:E3:3D:0A:1D:3F:70:88:88:76:55:32:D2
Authority key identifier: 3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4
Certificate issuer: /CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
Certificate serial: 01974968089CDEE429388302D931D4BE183D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
Manifest number: 0338
Signing time: Sat 07 Jun 2025 08:00:43 +0000
Manifest this update: Sat 07 Jun 2025 08:00:43 +0000
Manifest next update: Sun 08 Jun 2025 08:00:43 +0000
Files and hashes: 1: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl (hash: i02iPrJ701dkA5qTjdEtK1kPgalYn00Tq3hlWaVH5Uo=)
2: UTJEyA5eoUQbkVsnzE_qVEPp7QI.roa (hash: QLgDwiA3HQMhzQTCpM1sPvRtSa6KhJD7pUZz4AfYcjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:08:9c:de:e4:29:38:83:02:d9:31:d4:be:18:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
Validity
Not Before: Jun 7 08:00:43 2025 GMT
Not After : Jun 8 08:00:43 2025 GMT
Subject: CN=8e95d806c97a8d2ae33d0a1d3f708888765532d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:55:89:0f:29:14:70:96:e9:84:e6:7f:d0:86:
a9:a5:18:69:61:9d:0b:a2:79:d4:e1:94:ec:fa:78:
5f:6e:fb:b0:5b:8b:d4:45:78:e4:ef:9b:5e:f0:cb:
72:cd:b2:8c:40:2d:57:e1:cc:95:0a:19:c0:ce:36:
ae:e8:9f:61:16:24:0c:fb:f8:d7:d5:b9:cb:80:a2:
c9:4f:8f:e3:8f:90:20:33:d7:f4:43:12:ce:b9:80:
39:d3:43:a1:e2:8b:1d:1e:2e:d9:31:62:b2:b0:37:
f1:18:00:5f:13:9c:5c:34:8b:24:b0:13:19:0e:87:
13:41:87:87:5c:cd:76:7f:00:eb:08:c8:16:a1:d5:
e1:61:a8:7c:82:62:92:ff:fd:29:f9:d8:b8:f6:64:
63:c5:22:78:04:9d:c2:d9:e2:5b:bc:96:d2:26:5a:
ac:90:a3:3d:a7:2e:a1:c1:f3:22:3b:03:d2:06:66:
32:60:ac:f1:21:fb:51:f3:30:83:2c:9d:c5:97:9f:
71:ba:a3:85:45:05:c6:80:fe:ea:88:db:1b:59:72:
b2:26:68:c2:ab:de:ca:45:be:17:6c:9e:40:45:06:
c8:46:97:45:d3:0a:75:e6:0f:8e:74:55:bd:30:bd:
ed:09:2a:7c:70:de:33:67:2f:61:2c:d4:2e:05:88:
18:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:95:D8:06:C9:7A:8D:2A:E3:3D:0A:1D:3F:70:88:88:76:55:32:D2
X509v3 Authority Key Identifier:
keyid:3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:52:d0:d0:1b:64:64:85:ee:74:65:16:45:97:27:25:15:4d:
1b:12:fe:7e:f9:c6:83:0a:d9:60:ba:5c:52:30:24:9e:f8:c7:
78:75:ba:a2:7f:57:67:5a:84:d6:e4:e3:74:26:fe:28:46:38:
51:56:a0:80:8f:ac:1e:73:a0:ab:86:d3:c2:47:f7:be:f3:d4:
fc:80:cf:67:db:58:7a:94:57:09:31:ef:0c:5e:6f:7e:08:25:
5c:6d:90:4d:4e:a4:28:78:84:0d:b4:71:79:cb:34:ff:d6:c1:
3d:56:f1:e7:2b:68:24:00:7d:be:90:a8:16:bd:da:ba:fb:65:
dc:1a:f5:1f:58:76:d3:1c:4b:1b:67:bc:62:db:0d:c1:f7:8d:
3e:d3:2e:3d:15:7c:70:a2:48:3d:38:c4:27:72:03:88:b7:84:
ca:9b:6d:cd:08:09:47:21:94:c0:02:d2:94:8e:a5:ae:ab:82:
2b:2e:ec:c7:8f:96:08:29:1d:ba:76:44:62:c1:28:cf:74:33:
c0:df:56:42:d4:b1:0b:50:c9:25:4b:e5:2a:91:86:00:08:27:
06:9a:a7:60:cd:d6:9a:3b:5e:7f:3a:0b:87:b7:9d:1c:46:5d:
1c:fc:e0:09:de:c2:7b:e5:90:df:f2:85:39:4f:3d:c8:aa:04:
d6:e4:3d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:58:58 2025 by rpki-client