
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
File: PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft (raw, json)
Hash identifier: B5GInBo9vR6ds8m0poF0KOrR29swu70COusYsX4IJIg=
Subject key identifier: 2D:E8:4C:4A:60:B4:28:FB:B3:80:59:E3:DC:26:B9:D4:5A:D8:7B:32
Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
Certificate issuer: /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Certificate serial: 019872CFCCDA70C3D531FF5F61468B85B5F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
Manifest number: 1054
Signing time: Mon 04 Aug 2025 02:01:17 +0000
Manifest this update: Mon 04 Aug 2025 02:01:17 +0000
Manifest next update: Tue 05 Aug 2025 02:01:17 +0000
Files and hashes: 1: PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl (hash: 5XOI98mSXqSGZ2oew62oUlJgAYlVyE5Rt4GA7StN9d4=)
2: X4mIRbShCI_swD4AYibAfXumzPE.roa (hash: ZCD8FV34ZVGGbkTB2fH3uXc5W92QDu1a+e1QI3r0+es=)
3: k0e8XrkRjigLyVCK_c8tyoDjXqU.roa (hash: VlaMdbNDNwgFwQ8MfYZ/SEPVePx9cKrNfoX/5Qh79Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:cc:da:70:c3:d5:31:ff:5f:61:46:8b:85:b5:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Validity
Not Before: Aug 4 02:01:17 2025 GMT
Not After : Aug 5 02:01:17 2025 GMT
Subject: CN=2de84c4a60b428fbb38059e3dc26b9d45ad87b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c7:54:ef:21:ce:67:87:01:1c:4e:9e:44:86:
58:29:1e:64:f9:08:8c:dd:f8:74:07:a1:a8:d3:79:
e8:46:60:89:2a:28:e0:85:55:46:88:76:97:c7:25:
5c:6b:af:ae:3b:1c:15:4b:58:ab:d2:ff:42:6c:eb:
e2:b3:97:c4:be:67:59:13:0e:b2:7c:22:9a:e7:b8:
f6:4f:9e:76:b9:ae:e9:a8:82:69:db:4e:53:41:3f:
a7:6e:2f:50:39:f6:27:26:e9:fc:a2:e7:78:8c:ad:
62:00:83:e2:35:a8:f4:57:e9:af:85:cd:0b:04:f9:
bb:99:ba:b6:df:53:1b:be:89:36:6b:51:20:0b:c1:
be:a3:7a:43:75:bd:ca:b4:01:2d:4f:b7:b8:ef:3d:
13:0f:f4:20:ca:6e:5e:cc:8c:82:9b:35:dd:43:c4:
61:56:eb:d4:3a:93:aa:d4:4c:15:52:a2:0b:c9:9e:
89:f4:77:be:cc:b8:04:14:33:74:11:de:9a:2c:e2:
15:35:cf:47:17:76:9b:ea:7e:cd:3e:de:1d:e8:7d:
04:1f:af:2e:f7:16:55:d0:3f:5c:4e:bd:de:e7:38:
e6:2f:66:64:8b:b7:b6:6c:64:10:e7:fd:b7:d4:db:
f6:da:e5:a9:44:25:ec:0f:ae:e2:21:0a:2f:52:62:
b4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E8:4C:4A:60:B4:28:FB:B3:80:59:E3:DC:26:B9:D4:5A:D8:7B:32
X509v3 Authority Key Identifier:
keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:16:87:b0:3e:29:c7:4e:9d:30:c1:b9:52:15:6f:a1:7a:d7:
d4:5d:3e:e9:2e:12:2c:2f:45:a4:fe:e8:6f:b7:4f:7f:df:06:
a2:26:d1:0c:d2:27:a9:2b:c8:9e:6a:a4:b2:82:d9:c1:ba:a8:
50:6d:3e:64:75:28:69:87:83:cd:35:88:5f:08:ef:e9:b0:dc:
20:16:2a:bf:3e:48:5d:1d:a3:2d:60:d3:b6:c9:dc:45:2d:b6:
fa:8c:7f:61:eb:1c:6c:b5:8b:ea:bf:5c:9a:20:64:19:8f:59:
97:3b:da:f6:fd:d6:a8:7d:31:a4:07:5c:34:0f:db:b1:48:bf:
2c:70:b0:80:6c:98:09:f8:bc:29:ab:26:b1:72:e8:01:19:6c:
dd:34:9b:c4:f8:99:fb:9d:89:c5:80:19:96:51:aa:65:aa:f0:
e9:37:93:1a:c2:cf:c7:6f:e6:e5:65:97:52:00:22:08:78:5c:
14:d6:7b:60:aa:ef:d5:fe:de:10:14:f8:cd:2a:59:dc:cd:02:
15:34:7d:4a:8e:06:9c:73:7e:42:9a:59:e1:c3:a6:6b:9a:f3:
d3:52:da:b9:f4:f9:c2:f3:cc:a7:53:db:42:96:49:4e:cb:15:
f6:3d:99:bb:30:1f:15:bc:f7:54:b3:93:ec:b1:99:a1:7c:4d:
f3:5b:9f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:49 2025 by rpki-client