Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft
File: PxyTi7IGo4ltBkwIUvqYhf8s69k.mft (raw, json)
Hash identifier: UEh0OcKZ7apqwGxb5H004Fe6Hf9oGR8hOYjezEC0WvU=
Subject key identifier: 08:9E:39:48:94:73:9E:20:99:86:CF:A3:F5:4E:9E:84:00:B7:B6:09
Authority key identifier: 3F:1C:93:8B:B2:06:A3:89:6D:06:4C:08:52:FA:98:85:FF:2C:EB:D9
Certificate issuer: /CN=3f1c938bb206a3896d064c0852fa9885ff2cebd9
Certificate serial: 01976EF508794932C29536D6CFFEF01829A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxyTi7IGo4ltBkwIUvqYhf8s69k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft
Manifest number: 02BF
Signing time: Sat 14 Jun 2025 15:00:41 +0000
Manifest this update: Sat 14 Jun 2025 15:00:41 +0000
Manifest next update: Sun 15 Jun 2025 15:00:41 +0000
Files and hashes: 1: PxyTi7IGo4ltBkwIUvqYhf8s69k.crl (hash: 37As6MzR2m+JgTxfoChXpwZTfeyx3B3/4c9GUt8iAsk=)
2: Qtry2kaoKZp9d0kAKEVlWC9a8yA.roa (hash: 4P/5LEPA+7GLBNpRQSC8l1dlaoBUTtizVxJtdSJCc5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxyTi7IGo4ltBkwIUvqYhf8s69k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f5:08:79:49:32:c2:95:36:d6:cf:fe:f0:18:29:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f1c938bb206a3896d064c0852fa9885ff2cebd9
Validity
Not Before: Jun 14 15:00:41 2025 GMT
Not After : Jun 15 15:00:41 2025 GMT
Subject: CN=089e394894739e209986cfa3f54e9e8400b7b609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:49:54:be:82:af:03:46:4f:22:8d:ca:a2:16:
f5:0a:1c:d7:2b:81:05:eb:62:24:0f:13:b6:27:9d:
8a:10:29:e9:ac:00:f0:80:c6:fd:e6:d8:eb:af:14:
9e:be:03:57:2d:f0:e4:e1:fb:26:c9:6d:4a:aa:e6:
84:a7:97:52:8d:87:64:ed:c6:54:92:6b:c9:98:e0:
8e:e6:75:a7:b9:52:00:f5:ac:e3:ce:9b:4b:30:ce:
2d:25:08:be:11:65:a4:2e:0b:4f:dc:b4:b0:36:47:
51:b9:00:79:f8:1c:06:a2:fb:45:51:a5:2f:57:41:
cd:64:46:f8:2f:08:8c:c2:8d:35:5a:3b:9f:33:08:
24:bb:dd:df:0d:4a:0f:45:1d:d1:7e:61:c8:c8:42:
10:94:ad:de:f9:f4:dd:20:2b:08:84:4a:6b:3a:d3:
eb:e0:61:60:64:f8:6b:99:da:e4:ad:c0:66:ce:b0:
71:c8:00:3f:eb:e7:e7:8d:e8:78:24:38:ba:c1:08:
30:cb:9c:e2:8e:52:09:f4:7a:80:18:ff:b2:b5:7c:
51:28:8a:1e:aa:d7:e3:99:d3:45:c1:db:5b:77:39:
67:10:6f:96:9f:38:a0:65:10:9f:c9:8d:85:c6:80:
01:65:f6:05:5e:cf:8c:80:86:62:5a:f7:d8:a3:27:
dd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9E:39:48:94:73:9E:20:99:86:CF:A3:F5:4E:9E:84:00:B7:B6:09
X509v3 Authority Key Identifier:
keyid:3F:1C:93:8B:B2:06:A3:89:6D:06:4C:08:52:FA:98:85:FF:2C:EB:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxyTi7IGo4ltBkwIUvqYhf8s69k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c5:f6:7d:14:b6:52:87:d3:38:26:63:7d:75:8b:1c:22:bd:
6a:b5:49:2b:e1:b3:49:50:54:ea:f3:86:53:be:77:2c:73:29:
60:88:5d:14:c2:a3:85:e6:b1:84:9c:98:ee:3b:88:b1:39:71:
c8:81:87:5c:81:6f:42:72:5b:5d:ee:3b:7c:43:32:4d:cc:d2:
eb:5c:70:6e:18:87:f9:eb:f1:ea:19:56:a5:12:3b:db:45:9d:
4c:29:6b:c3:aa:e2:5a:8c:6a:1f:0b:9f:26:58:09:38:ba:c3:
da:b2:c9:f4:9e:ae:06:f4:0f:ca:11:d3:61:11:be:c4:5b:6b:
bb:21:09:17:af:32:45:6c:09:62:16:51:1f:62:6b:19:96:07:
6f:96:c3:b7:22:4c:cf:6d:3b:e5:f1:4c:55:ad:8f:e2:f0:fa:
a4:c8:3e:a7:ab:a5:63:fe:27:63:55:20:c2:9f:4c:25:3a:5b:
f8:5d:f5:aa:0b:f5:29:6a:97:6e:f2:d0:69:71:20:83:aa:7e:
14:85:99:78:1e:39:8f:c0:4b:b7:80:60:2c:a4:4f:41:e3:4f:
24:a9:9d:2e:c3:46:e0:30:2d:41:52:2d:5c:2d:e6:57:fc:cd:
77:f4:12:aa:ef:18:ba:98:a0:b7:c0:8c:98:73:13:52:f0:0f:
0e:dd:92:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:48:53 2025 by rpki-client