Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
File: PComfc4HIjjpwEUV5n65kmcuNRs.mft (raw, json)
Hash identifier: oQ0+VfD0NMRkwTq/CTLnL1RGtoEYMELYrdxpr/pGdOs=
Subject key identifier: 25:D8:9D:49:C8:5E:16:34:E0:A1:31:0C:15:04:97:CE:75:86:0C:AF
Authority key identifier: 3C:2A:26:7D:CE:07:22:38:E9:C0:45:15:E6:7E:B9:92:67:2E:35:1B
Certificate issuer: /CN=3c2a267dce072238e9c04515e67eb992672e351b
Certificate serial: 0197718841E5854E7C3F6903C4935D4EFDD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
Manifest number: 1592
Signing time: Sun 15 Jun 2025 03:00:44 +0000
Manifest this update: Sun 15 Jun 2025 03:00:44 +0000
Manifest next update: Mon 16 Jun 2025 03:00:44 +0000
Files and hashes: 1: PComfc4HIjjpwEUV5n65kmcuNRs.crl (hash: Q+Sh9P/HAyWHLaERh0Zm09j+z/nd48D7Pj9ANP9btdE=)
2: ZGY0lWkEYWemqocgFCB9t9qlPGA.roa (hash: fiVljxbXsWOkY42tbBEX2UBc5QCY0m1ysP8nQ4McSh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:41:e5:85:4e:7c:3f:69:03:c4:93:5d:4e:fd:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c2a267dce072238e9c04515e67eb992672e351b
Validity
Not Before: Jun 15 03:00:44 2025 GMT
Not After : Jun 16 03:00:44 2025 GMT
Subject: CN=25d89d49c85e1634e0a1310c150497ce75860caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:59:0b:c6:34:3e:7c:a5:7e:f5:63:74:83:2c:
15:6c:68:4a:7c:bb:61:82:e3:7b:73:23:d7:b2:6f:
04:99:b1:6e:fd:86:e9:ba:f5:fa:95:c3:02:10:8a:
b3:05:0f:86:75:30:92:93:ff:7b:12:06:2c:b5:be:
7e:f7:72:64:d2:f9:be:a8:25:a2:e1:4f:ed:54:1d:
1e:43:e9:b0:31:23:8d:d0:b4:aa:6b:f4:fa:b4:45:
8d:78:5f:b9:32:cd:0e:7c:13:f7:4c:e1:ca:3a:11:
fe:0e:66:d0:94:60:4b:fc:48:4f:60:fa:37:a6:f8:
7f:fc:27:22:43:0a:6e:1f:ad:a8:ef:7d:20:b1:f3:
ae:30:26:02:39:92:43:72:02:de:f2:80:7d:82:a6:
44:f0:27:f5:db:0f:b1:1e:39:70:7b:29:de:55:a6:
a2:74:a5:ee:3c:2a:54:56:c8:7a:b2:64:e5:9b:62:
91:bd:57:8a:ff:41:47:95:7d:b1:f8:c5:6d:36:e4:
5b:bc:5c:be:53:99:6d:95:10:fe:c4:e2:9e:b8:6a:
0d:5e:e7:0b:41:44:04:54:49:13:82:5e:3f:05:5c:
17:ed:6a:43:37:d6:83:fd:20:13:53:d0:b4:49:04:
32:43:18:2c:69:97:28:31:05:c5:d4:af:a6:bf:1b:
f4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D8:9D:49:C8:5E:16:34:E0:A1:31:0C:15:04:97:CE:75:86:0C:AF
X509v3 Authority Key Identifier:
keyid:3C:2A:26:7D:CE:07:22:38:E9:C0:45:15:E6:7E:B9:92:67:2E:35:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:7e:27:0e:23:8a:f3:6b:b8:62:96:a5:0f:63:5e:b2:57:36:
fa:8c:a5:2d:dd:35:d2:f8:75:66:93:06:04:b5:71:74:f7:f0:
d1:34:42:16:f8:bb:00:64:65:f8:2c:9b:9d:4f:4a:7d:84:92:
d6:69:f7:23:85:14:c1:1d:bf:e9:44:2f:e6:db:e6:4f:39:8a:
93:7b:b9:d9:01:cd:d7:fc:c3:4b:86:37:30:ec:f6:9a:47:dc:
1d:55:7e:44:b5:01:46:67:e3:26:02:77:df:c3:01:bc:0a:94:
aa:d0:42:9e:74:3d:c2:c7:75:ac:c1:72:da:00:50:db:ad:ba:
9f:9f:5d:bf:7d:61:8a:ed:5e:9f:6e:d7:6b:4e:77:e8:c9:90:
4a:9f:91:d7:77:fa:ea:80:b3:47:12:60:8d:01:4c:de:9b:06:
e9:61:51:48:37:b4:9e:96:a2:da:d4:e9:f1:94:c8:25:2e:d2:
af:fa:e7:20:28:a7:fd:44:bf:fe:47:37:57:03:fa:87:cd:ff:
ce:62:4a:e6:59:99:a5:a5:84:f7:5a:bf:ee:64:bd:c2:db:c0:
15:11:c3:4a:4c:57:28:8d:02:bb:1b:dc:09:20:00:07:85:ca:
34:90:1c:bf:62:7d:15:5c:49:2c:e0:db:6e:ac:2b:1d:60:cd:
31:e1:03:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:36:17 2025 by rpki-client