Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
File: PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft (raw, json)
Hash identifier: 5WxQ0dCaMZKd9XzzPu2fGaMQoMZRPmqFrk7athvR1Qg=
Subject key identifier: 09:ED:4C:B6:B1:EC:EC:C9:B8:25:1F:F7:75:59:47:FD:4C:F2:10:21
Authority key identifier: 3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
Certificate issuer: /CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Certificate serial: 01983871CF27A054F12C143DFBAD4777B7E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
Manifest number: 07AE
Signing time: Wed 23 Jul 2025 18:00:39 +0000
Manifest this update: Wed 23 Jul 2025 18:00:39 +0000
Manifest next update: Thu 24 Jul 2025 18:00:39 +0000
Files and hashes: 1: PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl (hash: 0bvR0OwkfAE75G5Gw8SLQMbEJHSgvIU2/ymTVVk28BU=)
2: WrzesfgAIkReChvkvHbeme9Obyo.roa (hash: sSRQkO+9/oNieGkByWGhrbGGDkaRr1cGKseQKtOM7es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 18:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:71:cf:27:a0:54:f1:2c:14:3d:fb:ad:47:77:b7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Validity
Not Before: Jul 23 18:00:39 2025 GMT
Not After : Jul 24 18:00:39 2025 GMT
Subject: CN=09ed4cb6b1ececc9b8251ff7755947fd4cf21021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:dd:ed:f3:88:fe:71:2d:a6:0c:cc:e6:82:81:
f6:fa:a5:0d:f3:d5:54:92:22:13:22:c9:28:ef:1c:
c1:d6:15:fe:97:e4:1d:dc:9e:4c:56:d4:9e:17:c0:
0f:a8:01:b1:64:8c:19:f5:09:04:42:ad:a2:a9:37:
8e:68:2c:67:fb:4a:95:94:60:b8:63:46:6c:00:b4:
ab:78:48:36:6f:8c:13:fa:bc:8d:b4:ef:61:68:93:
94:f2:91:26:00:13:7a:46:59:98:43:ce:a4:2e:75:
29:fd:76:d1:41:19:4b:5f:05:60:f1:1b:62:53:05:
1a:42:d3:28:20:72:a7:73:33:e1:bd:4a:2e:39:5b:
d3:5c:09:30:1a:bb:67:d7:a9:ae:4b:7e:f9:7c:9a:
f0:f5:0e:62:b0:55:68:71:53:b9:d8:8d:b7:9e:19:
45:c5:c6:e4:29:e8:86:4c:80:15:d5:e8:09:08:b2:
09:34:fc:b7:55:8c:50:38:49:cd:b2:c7:d7:09:1e:
bd:4a:f5:1c:4d:b8:80:03:b3:de:24:c4:e2:fe:db:
27:b1:b7:46:9f:8f:bb:67:4d:55:76:25:99:ea:78:
a2:a3:3a:e5:01:68:98:67:02:11:29:07:91:76:83:
fe:2f:b2:64:ae:82:da:c2:c2:8a:72:e5:1a:88:cc:
5a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:ED:4C:B6:B1:EC:EC:C9:B8:25:1F:F7:75:59:47:FD:4C:F2:10:21
X509v3 Authority Key Identifier:
keyid:3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:68:b9:3e:77:98:1d:9d:d8:37:d8:7a:9e:fe:e2:13:b4:ed:
81:50:7c:44:81:e2:25:54:13:be:1f:e3:2e:77:21:ae:d5:0e:
dc:41:1a:27:69:91:48:9d:1c:1d:5a:b3:ea:8b:c8:15:32:c8:
9d:95:a8:65:f0:0c:6c:a7:39:62:e5:03:0e:a1:63:bc:b4:63:
67:cd:8f:2b:db:f7:6f:d2:fb:b7:28:e0:e4:60:6e:09:23:b6:
76:13:5d:e4:9f:04:90:75:6d:f4:f2:cf:98:5b:e4:e4:4e:2d:
2a:2a:64:18:a3:d8:36:c0:02:da:54:10:b6:9c:2b:4c:6b:43:
36:03:ef:99:b3:23:a0:33:88:ca:8e:2b:01:80:42:8b:48:7b:
6f:63:9b:4b:c4:35:7a:ff:d0:97:b5:8d:9a:91:1c:62:3d:36:
18:cf:59:1a:2c:89:c4:83:c3:0b:03:6f:8a:fa:60:f8:13:0e:
17:ac:74:42:9e:f9:ee:76:40:7d:18:7a:a0:20:e8:d4:b2:f5:
94:3c:d0:81:cd:f9:dd:c0:fd:d8:3b:fd:9c:d1:52:47:03:aa:
df:88:3d:0b:cf:06:33:24:77:0e:4d:bd:8d:06:d9:54:21:4f:
1a:51:30:42:35:79:30:c6:72:1d:71:f0:c7:89:46:c9:99:f5:
a0:58:79:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 03:55:09 2025 by rpki-client