Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
File: PnXUne0gVmynRcKPgM_ZqS9LfUc.mft (raw, json)
Hash identifier: OnODmWAp1IAbIIX1QZz7HcMnWQjGcuC/QujQU16WBsA=
Subject key identifier: 17:E9:A0:38:67:F1:AC:AD:05:85:4A:55:74:53:C1:62:3B:CE:2A:15
Authority key identifier: 3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
Certificate issuer: /CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Certificate serial: 019768BBC0640B1EEF7D8C8B80CD1A5D8A73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 10:00:24 +0000
Manifest this update: Fri 13 Jun 2025 10:00:24 +0000
Manifest next update: Sat 14 Jun 2025 10:00:24 +0000
Files and hashes: 1: PnXUne0gVmynRcKPgM_ZqS9LfUc.crl (hash: 2R/ThnnqvTI05j1Qs3OeG6+mHDTkcQZRaF0RV2xSqSc=)
2: pXJDsaj0ZUCw_GiSDcUZAr3Eqys.roa (hash: jxE0YH1Sz5qp4TF2g6NLi4CtXpHMgBECSGalZs0qi4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:c0:64:0b:1e:ef:7d:8c:8b:80:cd:1a:5d:8a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Validity
Not Before: Jun 13 10:00:24 2025 GMT
Not After : Jun 14 10:00:24 2025 GMT
Subject: CN=17e9a03867f1acad05854a557453c1623bce2a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0a:87:94:09:0e:41:2d:0b:49:66:50:b5:60:
81:bb:d8:6b:81:57:26:18:42:3d:72:a3:80:c2:2a:
78:be:c9:5c:8c:f9:be:27:de:89:b7:7b:d5:99:77:
b4:53:e7:a2:ec:41:fa:55:d1:e9:06:74:be:85:3a:
6b:bc:b1:6b:0e:1f:a9:3b:b8:13:b2:ac:76:05:63:
e3:32:88:ac:36:85:2b:e0:00:54:9f:fa:2d:72:04:
db:46:20:30:68:99:b8:29:d5:cf:b6:f6:74:9a:78:
a6:86:85:35:89:a0:d0:e0:32:fc:cd:7b:85:b1:90:
aa:99:6b:40:94:da:8d:89:9c:8f:a0:e0:42:0b:17:
cf:fa:64:2d:dd:e4:8c:29:b0:22:52:ae:9d:d4:41:
e6:22:43:02:20:47:07:98:b7:76:82:52:a1:1b:35:
c2:5f:b4:99:ee:ee:5a:7b:ea:6c:66:df:3f:1b:f5:
67:3a:60:9a:10:50:e8:18:bf:a4:7c:5a:3f:41:e9:
c9:7c:fc:30:b0:21:65:b0:34:c0:1b:91:0d:09:e3:
57:3f:fc:19:b1:be:8f:7a:e7:a3:2e:f6:a6:f9:39:
c5:68:a3:0a:cd:0c:f3:13:f1:4e:a8:ef:58:20:c1:
c0:1c:c6:f9:85:d2:8c:e3:bb:67:fc:7b:59:60:83:
fb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E9:A0:38:67:F1:AC:AD:05:85:4A:55:74:53:C1:62:3B:CE:2A:15
X509v3 Authority Key Identifier:
keyid:3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c2:c3:21:f5:47:4d:ba:e5:53:bb:3e:7a:21:0f:0d:fa:ea:
70:3c:4b:9d:18:2f:6a:38:00:a4:17:78:dd:b4:90:21:d0:c6:
6a:c6:b0:2c:ac:da:9b:fa:15:b0:9f:30:aa:72:e6:1e:07:61:
f5:f4:97:c1:cb:41:2a:1b:b3:91:46:f2:01:52:9b:de:a2:ac:
ed:93:4d:ac:2f:81:39:a2:57:39:bf:9d:0c:97:98:a9:ca:2a:
36:da:d9:7e:68:67:43:8e:da:0c:15:34:61:fc:e3:f2:bc:55:
4a:4a:d0:87:ce:65:50:07:b8:62:21:cf:1f:d4:e0:23:fd:d5:
c7:eb:7c:89:2a:66:90:dd:f0:01:67:46:3d:09:b0:1c:fc:65:
b4:94:10:71:72:1e:1a:79:ba:9f:88:01:9a:9b:8d:92:e0:07:
36:fe:d3:0c:9b:41:8b:6f:2a:97:28:05:c7:94:97:f3:ca:80:
11:49:9b:9c:8e:29:bc:2c:e8:1e:26:26:59:04:a7:52:d1:98:
ed:01:c2:ca:71:fa:c2:41:e1:17:f3:45:c7:70:3b:dc:fa:0e:
f0:0e:38:de:f4:1e:85:2b:b8:82:a9:40:48:ac:53:f9:fd:bf:
74:e9:8f:80:4b:f3:4d:da:46:fd:59:68:c6:fb:3c:41:be:6b:
97:b1:5e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:14 2025 by rpki-client