Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
File: PComfc4HIjjpwEUV5n65kmcuNRs.mft (raw, json)
Hash identifier: RQBi6zCdsfohw1N2LSfrfrQ3mMAyhge57fRN1OR0PRc=
Subject key identifier: 19:54:75:2A:42:A0:57:2E:42:8C:0D:2C:CF:43:6B:BC:DB:54:E6:68
Authority key identifier: 3C:2A:26:7D:CE:07:22:38:E9:C0:45:15:E6:7E:B9:92:67:2E:35:1B
Certificate issuer: /CN=3c2a267dce072238e9c04515e67eb992672e351b
Certificate serial: 01987DF7EB1327CF8B686489E6187D41EF19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 06:00:56 +0000
Manifest this update: Wed 06 Aug 2025 06:00:56 +0000
Manifest next update: Thu 07 Aug 2025 06:00:56 +0000
Files and hashes: 1: PComfc4HIjjpwEUV5n65kmcuNRs.crl (hash: eVFbWs4ePhjXvWnUyYdzsqsm/00ob4oYjcyJOgifd2c=)
2: ZGY0lWkEYWemqocgFCB9t9qlPGA.roa (hash: fiVljxbXsWOkY42tbBEX2UBc5QCY0m1ysP8nQ4McSh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f7:eb:13:27:cf:8b:68:64:89:e6:18:7d:41:ef:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c2a267dce072238e9c04515e67eb992672e351b
Validity
Not Before: Aug 6 06:00:56 2025 GMT
Not After : Aug 7 06:00:56 2025 GMT
Subject: CN=1954752a42a0572e428c0d2ccf436bbcdb54e668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e6:5d:27:e0:3e:3c:37:cd:ec:58:42:3a:92:
c2:16:5a:b0:0a:26:f0:d1:05:9a:1f:62:e1:17:91:
a2:42:22:ea:b4:6e:81:51:22:63:87:91:2e:79:0c:
50:03:ff:6f:db:29:8e:49:53:06:ab:9f:e4:a7:91:
bf:94:50:52:29:ff:9c:d7:7a:a3:c9:3a:87:e4:83:
4f:4e:e2:f5:e2:5e:3e:49:8a:de:0b:9f:3b:c0:e6:
9c:fa:0b:81:fd:7b:7f:10:4d:b1:fa:8c:5d:f3:ba:
4a:e2:80:aa:7a:45:b6:bb:c2:ed:bc:c8:48:ae:43:
a5:e4:75:f6:4e:f5:eb:93:2a:82:39:8a:4c:b3:de:
9b:64:59:e3:a0:07:7a:36:79:2a:68:f1:1f:45:b1:
2a:de:38:5e:3a:ff:2d:1a:be:e1:03:18:0e:5b:33:
e3:e0:2a:df:7c:d0:f6:b5:7e:e7:8d:51:75:42:c3:
b7:e7:eb:11:34:3d:fe:83:6d:bd:3f:4e:36:c5:4a:
08:88:ae:3d:bb:50:cc:b9:d8:17:96:fd:59:19:1f:
8d:c7:be:4b:6a:7f:7d:fd:a1:08:a8:96:4e:6e:4a:
a0:9f:2f:0e:e1:a9:dd:d7:85:2b:5c:01:73:8a:2b:
4a:0e:38:ec:a8:61:33:5d:e1:b4:0e:db:58:1a:83:
4e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:54:75:2A:42:A0:57:2E:42:8C:0D:2C:CF:43:6B:BC:DB:54:E6:68
X509v3 Authority Key Identifier:
keyid:3C:2A:26:7D:CE:07:22:38:E9:C0:45:15:E6:7E:B9:92:67:2E:35:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:e9:de:75:f7:31:c1:75:33:0a:de:db:59:10:7a:c2:a4:f5:
7b:c3:94:f2:69:b8:cf:b5:9d:71:5a:d0:67:13:95:e1:45:f9:
bd:0d:76:fc:39:bc:ab:8e:4b:93:c6:29:72:6c:64:93:dd:dd:
1e:94:e2:a1:a7:24:93:a1:b8:8f:49:a2:df:d5:87:1c:8b:0c:
fa:2b:88:d5:dd:a2:69:6a:2d:0f:d3:a0:9a:87:d6:4f:b5:bc:
d4:1b:c5:ac:7f:e4:38:6c:a8:d6:2f:38:99:5b:ee:9c:a7:76:
89:57:ed:53:94:76:81:c3:a8:00:64:95:d2:c2:ee:c3:ef:87:
b9:a1:1d:a2:a7:b4:41:6a:f5:b4:99:21:d9:8d:29:9f:e1:44:
7b:26:62:8a:7a:ba:96:38:41:52:a6:99:a5:89:b8:00:f4:ee:
11:a0:40:07:00:d7:3e:ff:05:c8:13:07:a5:9c:fe:aa:2c:ff:
65:ab:b9:ce:2e:a6:f9:8b:1f:35:55:af:61:c6:45:e9:e4:23:
90:54:fe:c6:d4:df:d5:f7:be:8d:bc:4f:b7:cd:e6:78:9b:ef:
c5:82:e1:33:38:e8:2b:1f:16:a1:13:3d:86:97:e1:dd:b4:04:
0e:c3:d1:c9:86:d0:0a:59:21:ba:bf:57:81:b2:dc:0d:09:3a:
2a:72:20:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:23:08 2025 by rpki-client