Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
File: PNKqcak6qcEye3NTigR45PeC9vc.mft (raw, json)
Hash identifier: UMr5XI724ckU3bcYy32CwByJy9/zT+7NmvRXh3J5SDw=
Subject key identifier: 8C:39:A3:35:1F:7B:B0:FF:ED:A0:F3:9F:DA:A7:1F:CB:1E:25:4E:CC
Authority key identifier: 3C:D2:AA:71:A9:3A:A9:C1:32:7B:73:53:8A:04:78:E4:F7:82:F6:F7
Certificate issuer: /CN=3cd2aa71a93aa9c1327b73538a0478e4f782f6f7
Certificate serial: 01987E65D344D44B6BB8B69FA0DEA924C7F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
Manifest number: 0D96
Signing time: Wed 06 Aug 2025 08:00:59 +0000
Manifest this update: Wed 06 Aug 2025 08:00:59 +0000
Manifest next update: Thu 07 Aug 2025 08:00:59 +0000
Files and hashes: 1: PNKqcak6qcEye3NTigR45PeC9vc.crl (hash: t7XozecPR1zYj8b2QCZfOoVuXcg1ogd5UcMVQ+lypNE=)
2: mkUXmgygJpYBMQ2Igm9L-tv-j1s.roa (hash: 9Fpz5SGKImESLClWOjbnaFAMtUoqIoi74+/yK2yHMuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:65:d3:44:d4:4b:6b:b8:b6:9f:a0:de:a9:24:c7:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd2aa71a93aa9c1327b73538a0478e4f782f6f7
Validity
Not Before: Aug 6 08:00:59 2025 GMT
Not After : Aug 7 08:00:59 2025 GMT
Subject: CN=8c39a3351f7bb0ffeda0f39fdaa71fcb1e254ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:22:76:c3:ae:2b:00:46:19:58:d5:af:8b:6e:
4f:18:e7:e8:9a:ac:42:89:86:0d:b5:64:a4:24:63:
7b:9e:92:c1:ee:c1:63:a6:74:0d:21:fe:97:d5:52:
82:0a:bb:33:9b:44:ee:50:53:67:3f:c7:ac:f5:30:
80:d6:39:06:7a:39:39:fe:91:07:c8:2e:4b:9c:cc:
1f:21:93:2f:58:f0:98:86:ef:a3:6d:89:2d:ca:49:
f4:7d:bd:7b:4a:1d:fd:ef:06:ed:2a:cc:71:e7:e7:
94:81:cf:e8:7b:13:d5:0c:e1:c0:ef:e9:22:04:ee:
7e:69:5c:f5:77:f5:06:cf:03:ce:11:9c:85:13:0c:
ef:0f:32:c7:2d:18:30:49:9f:d4:81:03:9d:33:2b:
8c:e8:78:cc:d3:3c:06:1d:0f:93:c1:7c:75:0d:73:
3d:e8:02:73:a1:d2:20:b1:3f:46:b3:04:ff:7b:3d:
21:a4:62:20:3f:f1:ec:4f:2f:a9:96:f5:f8:45:fd:
8f:fb:84:bf:9b:e7:04:12:08:f8:1b:9d:da:da:94:
5e:16:21:9f:60:74:40:4b:18:78:60:c5:9c:a8:3a:
05:88:20:cf:9f:58:2b:5b:e5:39:02:60:c1:4f:93:
b2:ce:6d:f4:0b:c6:aa:d7:fe:70:7e:af:25:56:dd:
6a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:39:A3:35:1F:7B:B0:FF:ED:A0:F3:9F:DA:A7:1F:CB:1E:25:4E:CC
X509v3 Authority Key Identifier:
keyid:3C:D2:AA:71:A9:3A:A9:C1:32:7B:73:53:8A:04:78:E4:F7:82:F6:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e7:be:92:b7:18:45:bf:36:43:32:53:27:a9:17:28:bb:11:
d2:79:98:b9:1b:00:e7:08:cd:bb:fa:44:ee:fc:64:85:c6:e6:
f4:7d:96:45:ee:8d:ff:d3:34:6a:fe:25:0c:cc:20:9e:56:4a:
76:8d:a5:a3:8b:44:29:eb:6c:ca:60:e9:6c:24:e5:0c:6e:75:
aa:cc:8b:e3:7c:00:8d:e5:c7:02:c4:24:78:81:80:90:9b:44:
c4:4a:2e:0e:69:b3:23:5d:af:ef:8c:44:f1:40:7b:86:5a:3c:
84:35:d0:d4:b9:89:9f:09:4e:86:6d:93:59:51:fa:11:1b:65:
21:cf:8c:27:46:2d:4c:d9:01:bf:bb:6a:aa:ba:f0:67:e8:fa:
37:1a:c7:b9:05:68:15:25:63:ca:88:5d:2a:ea:e0:b5:4d:03:
79:0c:85:9b:8a:c4:ef:46:a3:60:ab:d4:ee:94:d9:61:88:f7:
38:06:43:f3:33:01:02:87:8c:68:c9:eb:54:33:6a:6a:65:cd:
03:10:9f:0b:b8:4e:f6:2e:99:62:48:68:4a:3c:6f:0a:9a:c9:
34:87:2d:9d:ae:54:34:ff:5c:1d:83:de:11:d5:7f:92:90:6b:
a1:81:4f:31:28:63:1e:a5:d5:03:29:d9:85:9e:b9:64:7e:79:
87:09:52:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:19:13 2025 by rpki-client