Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
File: PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft (raw, json)
Hash identifier: vOaFTWGpuZO1TPF7cWWzBzw8rYzmiDY5yvsA36e0kaU=
Subject key identifier: 61:B9:E5:47:FE:FE:59:00:6A:99:8F:67:67:19:EB:EF:59:33:B1:0C
Authority key identifier: 3C:8D:FE:10:9D:E8:31:D3:2F:D7:8A:58:CC:5C:1D:14:9A:45:53:D2
Certificate issuer: /CN=3c8dfe109de831d32fd78a58cc5c1d149a4553d2
Certificate serial: 01988168122EC9972463E25DD8DF870C3B2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
Manifest number: 0F9B
Signing time: Wed 06 Aug 2025 22:02:17 +0000
Manifest this update: Wed 06 Aug 2025 22:02:17 +0000
Manifest next update: Thu 07 Aug 2025 22:02:17 +0000
Files and hashes: 1: PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl (hash: n/fVAf5XM8S0txPMM/EB7T1GMnfrp723iFJRN24z1Xg=)
2: lFB-3tPNMg7_ita4wpHXyFs1Wtg.roa (hash: 2vQA+DCbD+mwH0gGh6uSgSbBtdD3lkqqjcblNuRAAAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:12:2e:c9:97:24:63:e2:5d:d8:df:87:0c:3b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8dfe109de831d32fd78a58cc5c1d149a4553d2
Validity
Not Before: Aug 6 22:02:17 2025 GMT
Not After : Aug 7 22:02:17 2025 GMT
Subject: CN=61b9e547fefe59006a998f676719ebef5933b10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fc:a1:d4:87:25:31:72:5b:93:d2:91:3e:8b:
fa:27:f3:87:4e:48:ed:05:57:84:1b:c5:be:c8:31:
67:10:1c:b6:9f:51:e7:72:96:f9:97:81:df:32:3a:
ee:c1:23:d7:73:31:ad:de:b3:0d:09:4e:07:ec:1f:
9d:cd:fb:90:78:d3:b9:b3:ec:e5:97:66:d4:97:c5:
33:d9:1d:12:34:ba:72:a1:3e:94:c6:3d:4f:7a:74:
d4:b4:86:59:59:5a:9d:d1:40:70:d8:07:b7:d7:b0:
38:5d:a9:a7:f9:4d:b8:d0:33:5f:ab:1f:50:44:52:
58:2f:95:b1:30:39:d2:26:7f:a5:63:57:52:1b:1d:
a9:7e:b9:fb:2c:50:74:53:7d:48:16:07:2b:24:99:
be:35:65:6c:38:99:7d:17:07:3b:d2:0f:58:72:8e:
df:2a:76:d0:c8:70:3a:ac:20:fc:09:b4:37:0d:00:
3a:49:51:ef:68:54:5e:ef:13:45:1b:86:df:e5:72:
18:12:eb:35:6c:12:d2:c2:e5:1d:59:99:51:c0:f1:
31:47:54:b4:91:01:a2:a3:91:f9:41:09:76:4a:f5:
7d:ab:33:77:4e:ee:c8:e3:97:53:64:90:21:e6:9a:
3e:d5:11:a6:1c:e5:c1:08:e7:45:c7:07:37:c1:46:
e7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B9:E5:47:FE:FE:59:00:6A:99:8F:67:67:19:EB:EF:59:33:B1:0C
X509v3 Authority Key Identifier:
keyid:3C:8D:FE:10:9D:E8:31:D3:2F:D7:8A:58:CC:5C:1D:14:9A:45:53:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:23:99:64:9b:ce:79:8f:e1:c2:31:19:a1:81:e8:54:ec:70:
9c:98:b4:2c:9c:61:16:a0:80:a0:b7:49:5e:f5:cf:1b:30:49:
e1:db:20:6e:4c:4d:6b:03:8a:63:10:d9:a2:d4:2e:11:0b:0e:
47:e8:dd:1c:b2:0a:11:63:19:9a:10:8b:38:68:3a:71:9b:cc:
4a:37:e7:71:e5:e5:4e:9d:e7:65:40:ad:08:74:26:3b:55:5c:
dd:1c:bf:cf:58:78:f2:12:8b:4f:9a:fe:60:98:c8:af:29:54:
ba:3a:bd:1c:fd:ba:19:a9:3f:ef:63:91:5d:76:09:ad:6d:1d:
ca:d3:f9:4e:eb:69:0d:45:b4:35:61:75:2c:cb:5f:03:5e:06:
15:ae:76:29:9a:25:32:2d:09:ee:85:a9:f8:2f:72:90:e8:da:
5a:d2:f6:68:5e:4a:55:20:26:22:c5:71:e1:86:7c:bf:f1:de:
1c:96:fb:85:17:b5:d3:33:b3:5c:d6:8c:68:ec:b0:88:7e:0c:
b4:b7:f3:15:6e:d1:e8:fc:70:b4:73:d4:a3:d4:d4:52:d8:10:
24:ce:1f:48:8a:08:cd:61:68:6c:db:fa:f0:85:20:d8:ed:b0:
2e:e5:1f:1b:4c:cb:4e:8b:c4:22:74:ec:f1:7a:19:6e:49:c1:
53:ec:c7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:39:53 2025 by rpki-client