Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
File: pfanGhgNz4sjDEFPCfe3G66peBw.mft (raw, json)
Hash identifier: 8AWySDbvLkOnCwS7rIhJeRucNcQaGJAkAwlnd+HPKb0=
Subject key identifier: 92:E4:26:95:18:FA:2B:F5:C6:E1:71:73:A6:CD:24:05:E4:74:B5:8E
Authority key identifier: A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C
Certificate issuer: /CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
Certificate serial: 019917641497F6291F421B0CD43605D12504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
Manifest number: 0337
Signing time: Fri 05 Sep 2025 01:00:58 +0000
Manifest this update: Fri 05 Sep 2025 01:00:58 +0000
Manifest next update: Sat 06 Sep 2025 01:00:58 +0000
Files and hashes: 1: 4ztGIasVEwEbakF0ec-7K0e5IU4.roa (hash: IY2hXYNDBxgugsXRkJWFvDBibE33L3+eqXYnL7k07xY=)
2: pfanGhgNz4sjDEFPCfe3G66peBw.crl (hash: cSsgvqfzuh/QV9MpncMGWjbp3YFSUJGQ7gsl8GYhKgA=)
3: yQmkLUR6MH6h1RvFVHhe4DDu7QY.roa (hash: 7D7oyqrxVnp9P9+upqmUz5U0xALaurO7hGz+98jrtEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:64:14:97:f6:29:1f:42:1b:0c:d4:36:05:d1:25:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
Validity
Not Before: Sep 5 01:00:58 2025 GMT
Not After : Sep 6 01:00:58 2025 GMT
Subject: CN=92e4269518fa2bf5c6e17173a6cd2405e474b58e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b2:90:1a:3c:fb:c6:c8:72:9d:78:80:d5:27:
d5:d4:6d:e2:9f:f2:f7:8d:e8:63:0c:cc:9e:20:94:
95:28:46:2a:d7:2a:d1:cf:e6:d5:8b:5c:d7:2b:26:
00:e6:03:01:3b:44:5d:13:15:2f:73:01:12:e7:53:
24:40:33:01:fe:6e:a3:c7:21:08:80:fc:03:64:87:
19:d0:73:fb:8e:6a:77:c8:d4:55:6f:f0:ac:4a:b7:
1d:f8:aa:51:5c:94:cf:0b:4b:d1:f8:b1:e5:58:0b:
d3:1b:51:24:75:d8:4f:a1:03:81:b5:a0:f0:d4:eb:
d7:8b:4a:fd:92:31:93:f0:a7:f9:36:b8:6a:78:81:
76:a1:68:3a:0c:2b:f5:d8:69:96:dc:ef:f3:7d:2c:
38:cf:45:23:32:04:17:9d:5a:a2:16:09:b9:44:13:
70:23:5f:10:ab:7b:8e:94:50:ab:bf:3c:6f:75:eb:
3e:fa:d2:31:1b:d9:9c:1b:22:48:30:b6:9f:eb:06:
10:ba:a4:3a:3f:1b:30:40:30:3b:80:cc:6b:f3:b3:
00:50:e7:6a:93:76:03:2e:ad:9e:71:f6:f5:23:1a:
01:4d:97:f6:34:07:19:82:eb:e8:7b:09:76:37:91:
9e:b7:5d:cc:08:6b:ba:18:13:d1:fe:79:f0:5f:0f:
ad:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E4:26:95:18:FA:2B:F5:C6:E1:71:73:A6:CD:24:05:E4:74:B5:8E
X509v3 Authority Key Identifier:
keyid:A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:cb:80:88:31:f2:18:30:d1:dc:47:58:67:36:d6:94:4b:29:
7f:94:1d:83:50:86:91:f7:c4:18:2f:2f:73:5b:43:c6:ea:02:
15:fc:86:43:69:c6:d3:93:64:6a:89:2c:35:3e:a0:57:9f:5f:
ba:4d:e5:1b:3e:4d:c5:6c:ba:5b:8d:80:88:49:72:6f:86:8f:
cd:06:49:9a:df:74:c9:1a:a2:d1:95:a8:f9:f1:b1:2c:3a:3d:
18:5c:fb:51:f5:5b:74:08:fa:24:87:70:19:39:ae:01:a6:d5:
24:63:fd:46:7b:42:a4:03:44:31:1f:98:44:28:dd:0b:a7:8a:
c3:60:8e:d0:2e:28:4e:2b:28:74:30:50:7e:4b:f9:fe:38:fe:
87:26:60:f1:65:66:20:5b:4a:7e:f7:0a:5d:68:cd:7b:d0:6b:
15:cd:e5:80:dc:7a:00:e6:ba:df:a7:a2:c2:c8:73:c2:80:72:
f8:6c:10:97:88:9d:88:76:c5:58:7d:36:8c:99:4b:bf:25:cf:
8a:78:81:ab:97:ac:c3:a7:79:b4:a0:46:11:17:54:be:37:1f:
62:f5:42:5a:39:6d:9d:76:33:78:23:d2:97:4e:1e:cf:93:ad:
76:18:26:42:c7:87:18:ef:a6:a8:1d:d3:2a:a5:0c:25:b6:a7:
a4:e1:dc:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:54:53 2025 by rpki-client