Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.mft
File: PkJOJFpkMkpocx3SbzDGhbqopng.mft (raw, json)
Hash identifier: vNUjCTclcGdWA+fNanOoi54eQoyTIdHLvSMfp1o49cA=
Subject key identifier: FE:EE:08:9F:5E:D8:32:C3:6E:21:FB:8E:BD:03:E5:2A:C0:B4:A5:83
Authority key identifier: 3E:42:4E:24:5A:64:32:4A:68:73:1D:D2:6F:30:C6:85:BA:A8:A6:78
Certificate issuer: /CN=3e424e245a64324a68731dd26f30c685baa8a678
Certificate serial: 01974E8E1F0562E52DC1CCBE550CDD8B81F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkJOJFpkMkpocx3SbzDGhbqopng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 08:00:26 +0000
Manifest this update: Sun 08 Jun 2025 08:00:26 +0000
Manifest next update: Mon 09 Jun 2025 08:00:26 +0000
Files and hashes: 1: 9BKbZIRd9-X7DwnbmN0tiFBfwDk.roa (hash: sc6ZIVElHs/p3IrdFGLfeuXuK5hZseBYNoiFQsWbBIY=)
2: PkJOJFpkMkpocx3SbzDGhbqopng.crl (hash: OPX++sJC8vH61PFlUAM5/utJWecBfb/AFT5oM9rV9DQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.mft
rsync://rpki.ripe.net/repository/DEFAULT/PkJOJFpkMkpocx3SbzDGhbqopng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:1f:05:62:e5:2d:c1:cc:be:55:0c:dd:8b:81:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e424e245a64324a68731dd26f30c685baa8a678
Validity
Not Before: Jun 8 08:00:26 2025 GMT
Not After : Jun 9 08:00:26 2025 GMT
Subject: CN=feee089f5ed832c36e21fb8ebd03e52ac0b4a583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f5:f7:a1:c2:4d:cd:cb:2a:73:c8:ca:20:cb:
11:36:c4:29:0a:65:5c:9b:d8:35:64:ff:a9:d7:22:
2b:67:8f:da:c4:4f:04:61:ea:2e:51:f3:76:95:e1:
df:cc:f5:ed:a4:13:f6:d7:f2:c0:cb:55:ce:e2:01:
92:3f:e0:5a:5e:29:ef:61:fa:08:49:ef:16:5c:98:
7a:f8:12:d0:bd:82:53:32:31:e0:55:bd:59:89:97:
b4:a1:e4:7a:f3:eb:3a:83:cf:46:05:fe:d0:38:32:
27:7f:cc:9a:8f:3f:bb:74:b8:b6:c5:0c:b2:bc:ca:
ce:ed:34:98:d6:a9:ba:c0:38:9b:8b:42:6e:e0:7c:
fd:60:29:67:a6:e5:2d:bd:c7:37:a5:0f:03:9c:5d:
9a:9e:67:11:81:c6:8a:18:31:c1:6a:f9:1f:9f:62:
49:8d:3c:75:94:75:eb:28:13:f4:da:eb:5e:0d:13:
d7:48:6b:c3:3b:6b:53:eb:97:59:4a:c7:2e:18:0b:
72:32:c2:73:e8:f6:37:8f:43:fc:91:49:80:ee:a3:
1e:54:b4:4d:38:cd:1b:fc:25:46:3b:38:79:42:7e:
fc:46:ac:4f:ba:10:ef:a5:9e:34:b1:51:19:07:4c:
df:f3:d5:63:e3:09:b1:85:4b:95:52:c2:f0:85:13:
6d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EE:08:9F:5E:D8:32:C3:6E:21:FB:8E:BD:03:E5:2A:C0:B4:A5:83
X509v3 Authority Key Identifier:
keyid:3E:42:4E:24:5A:64:32:4A:68:73:1D:D2:6F:30:C6:85:BA:A8:A6:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkJOJFpkMkpocx3SbzDGhbqopng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e4:d7:00:a1:43:c8:94:a1:d6:dd:c7:1e:37:53:1b:de:a5:
19:5f:94:9d:83:62:1d:5b:58:0f:72:6c:f2:ca:e6:e2:b1:3d:
55:e4:a2:d8:b9:fd:49:07:ed:79:3f:42:68:92:c9:49:65:34:
fc:b6:5b:c5:9d:92:52:a1:25:e7:4f:c6:e5:81:92:68:3a:ed:
59:15:32:cc:cb:52:2d:98:02:e6:05:12:3f:28:f2:81:87:84:
23:2c:86:16:67:ef:f4:3e:92:1e:ce:9b:85:31:a6:eb:3a:3d:
0d:ff:93:8b:ef:19:3b:e0:8c:85:61:4b:11:31:e8:33:c6:d2:
85:0f:c3:67:b3:e9:05:69:10:f6:ef:89:33:77:a7:4b:ad:21:
b8:fb:35:d6:58:7f:b6:39:bd:eb:a5:85:ab:b5:2e:bd:4e:7d:
7a:2c:9f:d6:82:17:df:49:19:46:b3:60:c1:eb:86:a5:42:ee:
f6:f6:93:79:c1:eb:9f:49:47:f9:f0:cf:61:10:7b:4f:dc:7e:
af:8f:a2:d7:ac:4e:f3:e7:92:70:ea:2d:b6:8c:c0:87:84:09:
32:42:1d:60:1b:60:df:0d:4d:08:86:a2:02:8c:d6:30:bb:e5:
ac:01:2c:18:06:0a:c1:0d:d2:8e:4d:bc:f8:95:fe:e2:09:f6:
55:0b:f6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:24:11 2025 by rpki-client