Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
File: pfanGhgNz4sjDEFPCfe3G66peBw.mft (raw, json)
Hash identifier: cvRcIqhxranPOOSBw2ETetihwOwKFxC96TTlRH4+lNQ=
Subject key identifier: 86:B0:6B:19:52:E5:E5:A7:D0:6F:8C:9C:06:65:54:9A:12:5C:F3:66
Authority key identifier: A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C
Certificate issuer: /CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
Certificate serial: 019747E7427147512E2C9D22EC0E40B23292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
Manifest number: 0247
Signing time: Sat 07 Jun 2025 01:00:27 +0000
Manifest this update: Sat 07 Jun 2025 01:00:27 +0000
Manifest next update: Sun 08 Jun 2025 01:00:27 +0000
Files and hashes: 1: 4ztGIasVEwEbakF0ec-7K0e5IU4.roa (hash: IY2hXYNDBxgugsXRkJWFvDBibE33L3+eqXYnL7k07xY=)
2: pfanGhgNz4sjDEFPCfe3G66peBw.crl (hash: APs3XV5OAnXb8ZGjNkt1pbBr+lQfxBg4/vZWu4l0Zgk=)
3: yQmkLUR6MH6h1RvFVHhe4DDu7QY.roa (hash: 7D7oyqrxVnp9P9+upqmUz5U0xALaurO7hGz+98jrtEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:42:71:47:51:2e:2c:9d:22:ec:0e:40:b2:32:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
Validity
Not Before: Jun 7 01:00:27 2025 GMT
Not After : Jun 8 01:00:27 2025 GMT
Subject: CN=86b06b1952e5e5a7d06f8c9c0665549a125cf366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1d:e5:c1:f2:ca:36:b8:9c:b9:57:6e:ea:52:
72:ba:1f:23:2c:11:23:d8:1b:81:32:b7:c9:9b:1e:
86:44:32:bc:b4:fe:fc:cb:02:17:5e:70:43:ce:93:
8b:16:85:a4:0b:18:8a:58:42:13:ec:91:53:6e:53:
13:e3:e7:c3:79:fb:c3:73:f7:4b:46:05:85:c8:2c:
ad:ad:05:bb:26:87:43:51:99:6c:7e:b6:15:8d:2e:
26:27:7b:e0:97:c9:7b:78:35:44:45:5c:95:88:9c:
1c:26:eb:59:fb:77:8d:d0:dd:f5:37:99:67:a0:00:
27:63:92:e8:76:e4:d8:24:0e:64:df:17:5c:ed:cf:
c0:1c:24:60:23:89:4f:c6:3a:f5:47:3a:7a:a9:71:
6b:61:81:57:8b:de:35:0a:46:44:1b:44:36:25:77:
ec:c2:a1:8b:1e:5d:1c:24:35:d8:ef:55:d4:7d:41:
b0:91:f7:0d:82:1d:85:41:1c:e7:7d:27:07:51:73:
bb:88:5e:3a:e7:37:89:65:31:c0:37:fa:c1:c5:85:
52:99:97:20:c7:f5:1d:c3:12:c4:90:80:63:c7:48:
a2:15:18:7b:fd:72:9b:a9:2c:0c:6e:4d:a6:42:5d:
5f:da:c3:d2:e0:1a:b0:ee:21:31:45:bc:14:80:c3:
63:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B0:6B:19:52:E5:E5:A7:D0:6F:8C:9C:06:65:54:9A:12:5C:F3:66
X509v3 Authority Key Identifier:
keyid:A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:57:fe:3d:d9:b1:6a:26:e5:9c:4c:ea:7b:87:f3:df:45:f4:
2d:b0:8d:b0:a9:e9:d2:df:53:a6:67:2f:c9:2b:27:66:b0:6d:
9a:e4:c3:95:3f:bf:b2:d4:88:22:d9:16:0f:43:a1:4e:44:19:
3a:3d:f0:16:f8:51:2d:76:8a:db:83:a7:37:33:c1:ca:2d:75:
fe:06:79:a1:ac:70:cf:2a:5e:2d:eb:90:e4:a0:e0:27:7c:91:
12:12:fc:04:78:10:96:ad:64:8c:a8:47:10:ab:8d:a0:dc:e1:
0a:b7:ef:86:26:72:3a:75:0e:9f:34:5b:58:a6:c3:77:a8:69:
21:9d:71:81:f5:a3:0c:02:20:f3:95:e6:49:8d:8b:f1:03:3a:
5c:d1:dc:3f:00:b3:7e:df:39:e0:8a:2e:42:d3:66:0e:91:2b:
d6:76:51:36:d4:38:87:f0:1c:a0:fb:28:46:cc:a2:d9:b9:75:
9c:35:d5:fe:67:c6:c0:4d:15:25:cc:88:c6:f3:5c:ad:8e:50:
07:75:b4:3e:57:ad:f6:2b:f5:59:ca:9a:cb:3d:d2:43:f2:f1:
ca:2a:6a:98:8f:5d:8c:30:5d:38:d1:c5:8d:25:6f:02:b5:ad:
9a:c6:47:40:00:85:40:eb:05:85:9c:4c:99:73:10:9e:81:e2:
77:5a:dc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:16:23 2025 by rpki-client