Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
File: PBHQXNKatxkq8DnPXz0AvpIVeTk.mft (raw, json)
Hash identifier: 3BjrawT4qKy0avY7OUHJY5yJ2ct2rha8cIgFmkGTUF0=
Subject key identifier: 42:76:88:98:89:AE:7C:59:1B:0B:7E:67:19:EA:E7:A7:B1:0F:F6:2B
Authority key identifier: 3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39
Certificate issuer: /CN=3c11d05cd29ab7192af039cf5f3d00be92157939
Certificate serial: 01974742DEE9EB692AFA32BFC138B2D2AA52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
Manifest number: 07CA
Signing time: Fri 06 Jun 2025 22:00:54 +0000
Manifest this update: Fri 06 Jun 2025 22:00:54 +0000
Manifest next update: Sat 07 Jun 2025 22:00:54 +0000
Files and hashes: 1: PBHQXNKatxkq8DnPXz0AvpIVeTk.crl (hash: e/OoOSEPunVMfVYqpInb2dcYHfZysrJ+Q3W4c1Wg+FI=)
2: uXWEOT5kLicjM9eRqYG2MPSav7U.roa (hash: WztCPaYNfJzy3qntVN7a2OFcCyo/yo2zpUp1jJXzcgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:de:e9:eb:69:2a:fa:32:bf:c1:38:b2:d2:aa:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c11d05cd29ab7192af039cf5f3d00be92157939
Validity
Not Before: Jun 6 22:00:54 2025 GMT
Not After : Jun 7 22:00:54 2025 GMT
Subject: CN=4276889889ae7c591b0b7e6719eae7a7b10ff62b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:36:81:f9:89:1d:49:8b:df:10:dc:b1:49:d4:
47:eb:cc:d0:31:04:b0:8a:89:70:98:85:bd:8c:8c:
6f:97:4d:78:8c:6a:e8:ba:2f:7c:64:ba:0e:96:b0:
15:46:98:42:4f:7d:d2:38:1c:75:2c:91:b7:94:14:
fa:43:d6:6f:5f:da:fd:df:b0:88:97:6d:b4:29:ec:
b0:82:1a:48:aa:c1:f9:f1:0f:8d:f1:33:ae:40:bc:
ec:2d:b8:8a:7a:39:04:c3:4e:85:a0:44:10:20:70:
35:0e:db:0f:cf:d2:bf:43:39:f6:30:a0:4e:5b:80:
12:45:02:c0:24:ae:5e:fa:b5:44:60:04:8c:a6:fb:
68:34:f5:c3:bf:93:e0:94:4e:ae:ed:65:aa:86:b4:
82:7e:b9:e6:f3:e0:b6:3f:8c:ff:fa:ce:ed:10:86:
34:e7:a3:25:ae:b1:3b:7f:36:ff:f0:65:6b:65:6f:
97:39:8f:2b:55:c2:a5:19:3b:c7:d3:01:33:b9:fa:
38:db:d0:63:d9:cc:68:64:a7:6c:d4:3f:93:42:b5:
09:70:4a:9d:f9:d5:a5:f4:1f:cc:d7:47:4c:45:6e:
b4:0d:ff:65:0a:34:e6:60:55:b4:ed:07:66:79:0e:
53:5b:98:5f:57:df:1e:17:0d:b8:3b:13:90:19:c3:
42:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:76:88:98:89:AE:7C:59:1B:0B:7E:67:19:EA:E7:A7:B1:0F:F6:2B
X509v3 Authority Key Identifier:
keyid:3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a6:a5:b3:ad:df:62:f0:42:46:0b:f5:78:ec:14:58:35:fb:
e1:57:c4:4f:ac:b1:1b:cb:b7:9f:61:95:b3:97:58:fe:48:23:
1a:95:83:db:64:69:68:ce:ff:b6:53:5f:f7:97:a1:52:96:b2:
99:0f:a4:44:9f:65:0c:93:89:ad:b8:fa:62:ab:b5:1b:36:fc:
25:d2:ab:cb:5a:74:84:e3:47:e3:b6:f6:72:c8:25:c0:c7:f7:
20:46:9b:3c:8f:94:f9:15:32:19:16:bf:a4:b3:5a:08:c0:8a:
91:da:a0:54:52:6d:b0:68:16:7d:c1:a7:7c:0e:58:9e:63:4b:
f2:3f:83:15:e8:7f:84:53:32:31:16:90:d8:75:02:04:fe:3c:
7e:2b:7f:6b:e3:66:8d:a8:da:c1:5c:41:86:f0:75:a7:dc:db:
f5:53:e9:67:39:c8:c7:91:e1:8f:c6:99:72:81:7f:4c:e0:e3:
ef:1c:89:c0:17:19:da:93:ed:c1:77:df:20:f2:61:9d:7e:69:
a4:85:82:04:a0:e8:5d:15:e3:54:6e:a4:48:6a:17:e0:65:3e:
e6:92:10:fd:1a:d4:63:7d:61:71:50:bb:47:cd:01:f1:60:b2:
da:71:dd:b5:79:2f:70:ce:e9:d7:fa:34:5d:d8:b7:b0:d5:21:
33:5f:b4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:15:26 2025 by rpki-client