Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
File: PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft (raw, json)
Hash identifier: kwpu14JWsBsDlhpRSjZdollWGKIYLWtcRVAatEnf12M=
Subject key identifier: B3:18:E9:69:BA:D3:5D:DE:0D:99:62:78:2B:F6:7B:94:F6:CF:08:E6
Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
Certificate issuer: /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Certificate serial: 0197684E65F67E20770D45D2C97917130136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
Manifest number: 0FCA
Signing time: Fri 13 Jun 2025 08:00:57 +0000
Manifest this update: Fri 13 Jun 2025 08:00:57 +0000
Manifest next update: Sat 14 Jun 2025 08:00:57 +0000
Files and hashes: 1: PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl (hash: 6FLgo5Iqs4aa+utkRBeppwrFT9Wm2YImwm7+bxYqfLE=)
2: X4mIRbShCI_swD4AYibAfXumzPE.roa (hash: ZCD8FV34ZVGGbkTB2fH3uXc5W92QDu1a+e1QI3r0+es=)
3: k0e8XrkRjigLyVCK_c8tyoDjXqU.roa (hash: VlaMdbNDNwgFwQ8MfYZ/SEPVePx9cKrNfoX/5Qh79Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:65:f6:7e:20:77:0d:45:d2:c9:79:17:13:01:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Validity
Not Before: Jun 13 08:00:57 2025 GMT
Not After : Jun 14 08:00:57 2025 GMT
Subject: CN=b318e969bad35dde0d9962782bf67b94f6cf08e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:93:b3:97:7c:5d:99:72:9c:80:80:a6:05:de:
19:19:01:14:91:35:d1:6e:f1:50:d4:a1:29:83:81:
25:43:b5:b6:38:75:ef:76:fb:c2:8c:91:af:97:d0:
10:07:9c:f9:1a:d5:3b:cb:1e:70:a8:b6:c9:1b:13:
a2:54:12:ce:11:a0:b1:e5:e9:b3:3c:fc:7d:56:23:
4d:7e:1c:35:06:17:dc:de:dd:21:88:32:d9:fd:58:
86:3c:2a:74:33:3c:79:95:58:36:00:ae:f1:6f:da:
a1:ad:78:2b:1e:df:d0:6f:8d:f6:06:56:9f:46:05:
ca:2a:00:81:b5:12:e8:79:11:08:14:73:9e:90:3e:
c8:3a:47:03:dd:c8:d7:09:46:d6:01:a0:d0:ca:34:
b2:c4:50:34:60:9c:59:85:86:e8:61:a9:74:51:b5:
23:78:68:4f:76:24:57:99:99:8b:6e:a7:78:a2:38:
13:9f:73:c4:28:30:b1:ff:26:f7:85:11:24:1e:53:
d7:d3:0b:03:06:0c:a9:c0:fb:8e:71:14:9e:00:30:
95:e4:be:d7:9d:8c:f3:4a:31:c7:19:7d:90:1b:f8:
21:d0:12:25:c6:38:35:ea:4f:36:a2:0d:13:39:86:
46:4b:f9:9d:15:18:62:3e:df:15:1a:ce:e0:7c:9c:
c7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:18:E9:69:BA:D3:5D:DE:0D:99:62:78:2B:F6:7B:94:F6:CF:08:E6
X509v3 Authority Key Identifier:
keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:de:e4:30:e9:62:a5:40:c4:04:ec:4c:42:43:f9:9f:ec:29:
79:f7:95:48:11:b5:7d:0f:b9:b2:8e:99:d0:03:a4:8a:51:a5:
c1:03:ff:ed:3f:a1:92:e3:12:b1:45:f6:d6:46:b1:ed:9b:81:
57:38:9c:d5:de:31:94:76:45:2d:b0:17:d9:28:3a:77:35:ee:
6a:cc:34:c3:19:c4:b5:82:d1:59:81:e3:93:8d:53:5a:5a:26:
58:79:2c:8d:d1:2d:1d:9f:8f:25:50:b1:d6:fd:12:b7:8f:87:
b6:10:39:86:11:70:13:0d:53:d5:b8:6e:c0:a3:ee:13:83:dc:
42:65:0d:36:ed:b4:55:30:0e:70:9c:e0:26:18:e8:59:c1:e2:
89:54:26:36:07:53:a0:c0:73:f4:0e:d1:8d:c9:b8:59:66:65:
be:90:da:e8:37:e3:ce:76:b8:cf:29:e9:38:5b:19:f1:d3:66:
bc:bd:09:c9:22:41:3a:05:1e:88:fe:93:4a:c1:13:bf:7f:bc:
67:c0:da:98:25:9b:de:28:02:a4:b5:07:2d:7d:d4:3d:26:7a:
55:67:0c:f3:48:ae:60:eb:7c:4f:f0:0d:db:8f:70:05:a1:ed:
ce:f7:91:b2:22:2d:19:15:0f:e5:72:63:4b:de:24:9c:12:56:
b0:58:86:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:59:35 2025 by rpki-client