Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft
File: PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft (raw, json)
Hash identifier: ZPaizZVj8h+cGU70advG7TEAh0R7lVncg506XKL2EBw=
Subject key identifier: FD:78:9E:BB:D9:1F:F3:9B:03:67:F5:C4:00:93:76:E8:73:6B:8C:2C
Authority key identifier: 3C:AB:C3:DD:E8:F1:6C:F6:D9:18:A4:0F:16:82:CA:41:BE:4D:0A:41
Certificate issuer: /CN=3cabc3dde8f16cf6d918a40f1682ca41be4d0a41
Certificate serial: 019771BF179121FB19969CD0CED14FE3A5A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKvD3ejxbPbZGKQPFoLKQb5NCkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft
Manifest number: 0CBB
Signing time: Sun 15 Jun 2025 04:00:38 +0000
Manifest this update: Sun 15 Jun 2025 04:00:38 +0000
Manifest next update: Mon 16 Jun 2025 04:00:38 +0000
Files and hashes: 1: AuOuUKhz7LbWM9xXAFqUFIS1KQI.roa (hash: yQUlcBfkC7CQTeK1Wv3DBode7pqw+A1kJYyGEQOXp9g=)
2: PKvD3ejxbPbZGKQPFoLKQb5NCkE.crl (hash: aeELRb353K/ktpfpAzp4hlZZLl6Gs9P+p/mzij0a+UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PKvD3ejxbPbZGKQPFoLKQb5NCkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:17:91:21:fb:19:96:9c:d0:ce:d1:4f:e3:a5:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cabc3dde8f16cf6d918a40f1682ca41be4d0a41
Validity
Not Before: Jun 15 04:00:38 2025 GMT
Not After : Jun 16 04:00:38 2025 GMT
Subject: CN=fd789ebbd91ff39b0367f5c4009376e8736b8c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cc:18:0b:61:7f:27:b5:c8:0c:75:d5:46:b0:
18:e6:15:2d:06:dd:01:2e:cf:06:42:82:77:91:8b:
0b:22:fb:db:3f:a2:c7:eb:df:9d:c5:97:c6:5a:76:
7a:47:a6:d0:55:af:0c:69:58:71:c1:9a:8f:32:ce:
80:7e:09:3b:b8:1b:9f:7d:42:b4:0f:15:10:a9:bb:
66:a6:f6:0d:16:4b:2c:94:b3:d8:13:8f:58:18:4b:
03:12:e6:40:d5:a5:d9:b2:98:47:b8:4d:4c:57:e0:
8f:bc:af:3b:07:76:f6:db:e7:e4:16:e3:46:09:e9:
e9:48:0d:c1:3e:80:14:30:fd:91:3b:cf:97:b7:d0:
d6:68:0f:11:8b:36:2b:dd:8e:20:b7:d1:74:96:f3:
9b:ce:13:c3:c6:dd:77:51:6d:2e:65:48:af:e6:68:
c4:23:44:5c:88:45:a3:f9:da:9d:d6:c6:a5:8f:be:
1e:c5:92:c2:a3:cd:37:ed:5c:c6:a5:5b:20:e8:c3:
14:2d:7a:24:54:c5:70:5e:dc:9d:ef:ba:c3:f7:60:
fb:be:d7:7d:cd:c3:39:9f:51:b2:73:cd:2e:fc:3b:
65:84:0d:51:b3:34:3b:c4:e8:30:09:22:d2:7f:0e:
09:c9:14:3b:76:40:96:59:4e:39:f9:10:53:5e:c1:
4a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:78:9E:BB:D9:1F:F3:9B:03:67:F5:C4:00:93:76:E8:73:6B:8C:2C
X509v3 Authority Key Identifier:
keyid:3C:AB:C3:DD:E8:F1:6C:F6:D9:18:A4:0F:16:82:CA:41:BE:4D:0A:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKvD3ejxbPbZGKQPFoLKQb5NCkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e3:a7:27:a3:35:d0:35:52:6b:33:4a:21:6c:1d:e4:49:6e:
f2:9d:9f:84:49:83:bb:fe:e5:02:73:d6:bd:c7:98:d1:b0:c5:
a8:62:80:dc:8d:7f:52:47:96:f6:74:6a:d7:43:34:fa:21:52:
b7:a7:0a:fa:30:ed:24:7d:b9:88:69:3e:e3:38:a8:ad:92:0d:
a1:03:8a:b0:49:21:6f:ff:86:24:6a:84:5d:6d:72:67:45:ac:
a2:4b:00:7a:db:30:fe:5a:07:13:66:c4:ba:d0:52:f4:74:3c:
40:ba:18:93:aa:84:61:8f:3f:e8:da:66:a9:52:7b:7f:59:e2:
a7:62:15:60:d5:c3:3e:e1:01:87:a3:f2:bc:52:14:e4:a9:9e:
8f:18:e6:9a:9e:e3:72:81:ca:31:67:42:3d:35:94:8a:3c:9b:
df:82:b6:37:e8:2c:c1:78:26:6f:e4:61:31:50:03:d0:b9:29:
ea:c2:1e:b1:4f:4a:b3:ae:53:e4:b2:ff:e1:99:d6:4b:8c:84:
10:f9:22:70:bb:0e:9f:48:61:7a:7e:05:70:0b:bb:59:f7:1f:
f2:4a:84:ce:7c:8d:c8:f7:2b:b6:e2:1c:a5:e1:ce:1b:7f:a4:
51:a9:10:19:32:9d:8f:84:a6:8b:1a:fb:93:c8:e6:62:e4:52:
a7:9c:02:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:52:08 2025 by rpki-client