Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
File: PNJOCMV2B8rrzBnIVS6uLpNeguU.mft (raw, json)
Hash identifier: ZGhULCfzuJl3ZRCBkN8Pk9wsH4HmJqdDvx4XQLX2SNM=
Subject key identifier: E7:BD:CF:7C:4B:3E:BC:6C:65:C9:71:EE:50:18:2B:6C:A5:C1:72:98
Authority key identifier: 3C:D2:4E:08:C5:76:07:CA:EB:CC:19:C8:55:2E:AE:2E:93:5E:82:E5
Certificate issuer: /CN=3cd24e08c57607caebcc19c8552eae2e935e82e5
Certificate serial: 0199225510A87588E6199F951A6869863CAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
Manifest number: 0192
Signing time: Sun 07 Sep 2025 04:00:24 +0000
Manifest this update: Sun 07 Sep 2025 04:00:24 +0000
Manifest next update: Mon 08 Sep 2025 04:00:24 +0000
Files and hashes: 1: AYSLpwufRV-W_9lRsqnuQFR2IOQ.roa (hash: Q3fm8OZk/vOZ06gyMzMxpxsqxYSULclXWKZVcRfqEg0=)
2: PNJOCMV2B8rrzBnIVS6uLpNeguU.crl (hash: ksCvOBQBQZn06WBO80iar17zY0r/QJarLHmZQEo3Kxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:10:a8:75:88:e6:19:9f:95:1a:68:69:86:3c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd24e08c57607caebcc19c8552eae2e935e82e5
Validity
Not Before: Sep 7 04:00:24 2025 GMT
Not After : Sep 8 04:00:24 2025 GMT
Subject: CN=e7bdcf7c4b3ebc6c65c971ee50182b6ca5c17298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:54:e9:8b:ed:38:cb:ad:ce:6a:82:99:d9:13:
83:01:e4:b5:be:34:80:09:27:22:9e:bb:38:41:18:
6f:a1:7d:7d:96:a0:5a:d9:b4:06:18:72:73:ce:08:
08:d8:c6:25:03:41:d4:7c:ae:c9:06:4a:f6:f1:44:
07:64:36:a6:17:64:15:bf:d2:e6:87:cb:00:66:23:
be:79:69:89:eb:e4:ac:2b:31:d7:ac:cc:a8:96:6e:
77:0f:3e:dc:08:1c:ab:71:18:c2:b8:20:c9:7c:c2:
d5:21:d6:c2:50:97:36:7f:df:2c:17:a9:21:30:dc:
0d:d1:35:27:12:72:9c:4a:c3:06:7c:06:08:33:d4:
5f:0a:4c:79:50:cd:7f:63:e8:4d:a4:da:fc:6a:6f:
89:f3:ee:77:5c:f9:91:db:1b:e7:35:c0:4e:1d:91:
e4:5c:82:71:03:01:3b:97:9e:f6:44:4a:ae:dd:0a:
b9:54:12:e2:52:4f:c1:d0:46:b3:95:b0:82:58:18:
07:3d:03:c3:5f:1a:8f:2d:27:6a:27:f4:65:31:77:
27:85:c6:90:c8:b0:9d:03:4a:47:6d:e9:fa:52:77:
da:d4:10:f9:98:9f:90:ec:07:c1:7b:b1:ca:ee:37:
2b:ef:dd:82:c8:fd:90:8b:da:aa:23:28:9a:54:dc:
c7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:BD:CF:7C:4B:3E:BC:6C:65:C9:71:EE:50:18:2B:6C:A5:C1:72:98
X509v3 Authority Key Identifier:
keyid:3C:D2:4E:08:C5:76:07:CA:EB:CC:19:C8:55:2E:AE:2E:93:5E:82:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e4:1b:2a:c9:fb:f4:03:97:03:96:db:22:1e:ca:94:9b:11:
12:0f:7f:fc:b0:d0:6d:23:00:af:68:ab:62:71:1d:9d:01:33:
e8:2f:08:f0:73:7e:e1:37:bf:2c:5d:f6:e6:74:54:c2:e6:86:
00:f8:f8:88:05:50:49:fd:a3:38:34:2e:18:5b:80:33:c0:95:
02:ab:79:37:11:ab:ce:12:0c:10:49:ac:76:31:b3:e2:dc:23:
99:bb:0d:3d:53:aa:b5:13:87:45:35:d0:95:03:c4:9a:92:16:
68:71:e8:3d:4c:ad:24:bc:ea:d4:bc:75:65:61:cb:a1:2d:44:
7b:a4:e0:d7:2c:e4:a4:8d:e6:9d:ad:ee:59:49:42:3a:81:8e:
ab:0f:f0:4e:a7:8c:f9:76:ea:e5:d2:0d:9f:13:54:28:a0:0b:
2f:2f:cb:d3:03:e2:56:be:82:97:77:be:b4:9b:dd:dd:f3:10:
22:4f:07:48:92:0c:6b:96:5c:44:dc:20:d5:7a:74:62:71:17:
d2:23:18:8a:95:59:46:bf:82:7c:bb:bd:36:48:25:cf:db:a0:
ba:0d:fc:08:c4:11:a5:6f:60:72:4a:4e:9e:2d:13:40:eb:38:
00:94:ed:f5:c9:c0:aa:6c:fc:aa:48:d1:de:79:2c:fd:af:cb:
03:b2:47:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:31 2025 by rpki-client