Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft
File: pnkWCgRJ6LUPwByF3PzlSyxim1E.mft (raw, json)
Hash identifier: LmH9tKXaDk6UyqfCBSPOrJJBvWCLclmFH5B8ZV20bAA=
Subject key identifier: 02:69:15:34:B2:DC:24:CD:ED:B7:C0:81:F4:26:AF:03:3A:63:D2:C2
Authority key identifier: A6:79:16:0A:04:49:E8:B5:0F:C0:1C:85:DC:FC:E5:4B:2C:62:9B:51
Certificate issuer: /CN=a679160a0449e8b50fc01c85dcfce54b2c629b51
Certificate serial: 01968ADCAE0462EBA4F2DF8A5C23EA0712F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnkWCgRJ6LUPwByF3PzlSyxim1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft
Manifest number: 0F1F
Signing time: Thu 01 May 2025 08:00:40 +0000
Manifest this update: Thu 01 May 2025 08:00:40 +0000
Manifest next update: Fri 02 May 2025 08:00:40 +0000
Files and hashes: 1: 6zgBCVzd-5kdX0sgGe0YDglrk04.roa (hash: mpYaeNHnIzoaHZnsNjSuZCAnd5S6WeK+VhnJsngc1QQ=)
2: pnkWCgRJ6LUPwByF3PzlSyxim1E.crl (hash: eh9v+pqKPO1UU1zIwYPGJJGp1tcqLqJ7nI7u8+R/HIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/pnkWCgRJ6LUPwByF3PzlSyxim1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:dc:ae:04:62:eb:a4:f2:df:8a:5c:23:ea:07:12:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a679160a0449e8b50fc01c85dcfce54b2c629b51
Validity
Not Before: May 1 08:00:40 2025 GMT
Not After : May 2 08:00:40 2025 GMT
Subject: CN=02691534b2dc24cdedb7c081f426af033a63d2c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d3:86:05:db:2d:83:fc:14:06:43:2c:7e:2f:
74:17:d5:71:21:6a:7b:d6:f3:15:eb:3a:18:94:e4:
b1:c2:2a:dd:4b:8e:1d:20:60:bb:4b:a1:8e:21:99:
83:ee:3b:34:54:c9:84:fd:0b:18:52:c7:0b:79:43:
5c:d7:8f:80:d4:af:e7:e8:43:33:33:57:07:13:a7:
1a:28:7f:e5:0d:7a:6c:ae:d2:1d:c5:b7:7c:29:33:
02:fa:db:39:5a:54:39:d9:42:3e:be:8c:98:bd:2f:
48:2d:f7:fe:d0:dd:55:83:06:04:2d:ea:a2:83:11:
ab:53:c0:70:24:60:0a:c0:33:38:ec:80:fb:76:04:
b7:1b:bd:d8:da:bd:73:aa:cb:0e:59:22:1d:b5:af:
56:63:7f:29:d7:5e:2c:ed:70:98:0e:93:69:6f:57:
8e:12:cd:fa:e8:b8:e7:cf:d3:9d:4b:3e:0a:30:e2:
01:52:1e:ac:c1:1c:b2:db:18:cf:fa:fe:2c:90:81:
c6:68:45:7a:4e:20:93:9e:e5:f0:40:57:44:60:68:
67:3f:e1:2a:33:0a:d0:3b:1b:b6:b5:ef:f8:b7:f5:
11:7a:93:0d:22:5b:a6:39:69:bf:20:14:ba:9f:1e:
69:9e:02:18:b8:2a:e8:fb:26:e5:d6:ad:db:05:3c:
5b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:69:15:34:B2:DC:24:CD:ED:B7:C0:81:F4:26:AF:03:3A:63:D2:C2
X509v3 Authority Key Identifier:
keyid:A6:79:16:0A:04:49:E8:B5:0F:C0:1C:85:DC:FC:E5:4B:2C:62:9B:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnkWCgRJ6LUPwByF3PzlSyxim1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:8b:ad:64:1a:e2:07:3c:47:2d:fc:7f:9f:5b:31:0a:40:d8:
4b:9a:b3:32:45:40:dd:db:14:8c:77:20:d8:87:cf:14:fc:68:
4b:b6:d2:47:92:7f:cb:58:96:28:b0:4b:4d:24:1a:2f:b5:b3:
db:d8:7c:09:c9:27:b5:30:25:97:79:c4:72:89:11:6b:f2:44:
0f:0d:a1:09:2d:0a:97:c8:5f:8d:75:70:8a:a2:c1:6c:18:f3:
fc:2e:13:77:a9:3d:1b:5a:b1:e2:8f:8b:46:9c:4c:8b:11:50:
1c:40:0d:17:3f:1d:47:07:9c:32:bc:87:28:97:64:26:e3:9f:
b9:a7:ca:51:4d:71:d3:cd:17:8f:f5:20:a4:f8:c1:ef:b5:41:
79:b7:0d:4f:46:8a:a1:36:9c:b8:02:f6:47:97:4e:fb:cf:2c:
e4:91:1d:c5:9f:24:7b:be:5f:22:31:fc:fd:e7:04:d5:f4:c5:
c6:6c:c6:17:34:16:d1:1a:e6:1d:07:2c:f7:7d:cb:7d:b1:fb:
ef:c4:87:fd:4a:d6:4b:d8:f1:f4:93:81:21:61:46:2c:f3:99:
7d:a0:12:7f:0f:49:86:ff:17:41:be:a1:89:75:bb:51:4b:8a:
da:17:89:b5:69:cb:78:dd:f6:a2:e9:44:4b:ab:62:57:78:82:
08:e2:37:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaK3K4EYuuk8t+KXCPqBxL1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NzkxNjBhMDQ0OWU4YjUwZmMwMWM4NWRjZmNlNTRiMmM2
MjliNTEwHhcNMjUwNTAxMDgwMDQwWhcNMjUwNTAyMDgwMDQwWjAzMTEwLwYDVQQD
EygwMjY5MTUzNGIyZGMyNGNkZWRiN2MwODFmNDI2YWYwMzNhNjNkMmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdOGBdstg/wUBkMsfi90F9VxIWp7
1vMV6zoYlOSxwirdS44dIGC7S6GOIZmD7js0VMmE/QsYUscLeUNc14+A1K/n6EMz
M1cHE6caKH/lDXpsrtIdxbd8KTMC+ts5WlQ52UI+voyYvS9ILff+0N1VgwYELeqi
gxGrU8BwJGAKwDM47ID7dgS3G73Y2r1zqssOWSIdta9WY38p114s7XCYDpNpb1eO
Es366Ljnz9OdSz4KMOIBUh6swRyy2xjP+v4skIHGaEV6TiCTnuXwQFdEYGhnP+Eq
MwrQOxu2te/4t/URepMNIlumOWm/IBS6nx5pngIYuCro+ybl1q3bBTxbIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJpFTSy3CTN7bfAgfQmrwM6Y9LCMB8GA1UdIwQY
MBaAFKZ5FgoESei1D8Achdz85UssYptRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcG5rV0NnUko2TFVQd0J5RjNQemxTeXhpbTFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83MmRlMzUtMzM4ZC00YTQzLWI3MTkt
OGI0ZDA4ZDM3YzVmLzEvcG5rV0NnUko2TFVQd0J5RjNQemxTeXhpbTFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83MmRlMzUtMzM4ZC00YTQzLWI3MTktOGI0ZDA4ZDM3YzVm
LzEvcG5rV0NnUko2TFVQd0J5RjNQemxTeXhpbTFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdIutZBri
BzxHLfx/n1sxCkDYS5qzMkVA3dsUjHcg2IfPFPxoS7bSR5J/y1iWKLBLTSQaL7Wz
29h8CckntTAll3nEcokRa/JEDw2hCS0Kl8hfjXVwiqLBbBjz/C4Td6k9G1qx4o+L
RpxMixFQHEANFz8dRwecMryHKJdkJuOfuafKUU1x080Xj/UgpPjB77VBebcNT0aK
oTacuAL2R5dO+88s5JEdxZ8ke75fIjH8/ecE1fTFxmzGFzQW0RrmHQcs933LfbH7
78SH/UrWS9jx9JOBIWFGLPOZfaASfw9Jhv8XQb6hiXW7UUuK2heJtWnLeN32oulE
S6tiV3iCCOI3rQ==
-----END CERTIFICATE-----
Generated at Thu May 1 16:16:46 2025 by rpki-client