Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
File: PnFWq-5roji5BzFd-cVShlrc2ug.mft (raw, json)
Hash identifier: lCnOeJzxvFwmaCOL2ZaWFLyJmbV91YM3UbazXnbktu4=
Subject key identifier: 04:56:6F:6D:52:B2:B9:DD:D1:A1:FA:42:AB:0F:9B:1E:3A:52:71:93
Authority key identifier: 3E:71:56:AB:EE:6B:A2:38:B9:07:31:5D:F9:C5:52:86:5A:DC:DA:E8
Certificate issuer: /CN=3e7156abee6ba238b907315df9c552865adcdae8
Certificate serial: 019772645C71E251224CA6022B795F335D89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
Manifest number: 0803
Signing time: Sun 15 Jun 2025 07:01:09 +0000
Manifest this update: Sun 15 Jun 2025 07:01:09 +0000
Manifest next update: Mon 16 Jun 2025 07:01:09 +0000
Files and hashes: 1: PnFWq-5roji5BzFd-cVShlrc2ug.crl (hash: CuCCY/fnMh1GZ8J1RlZC+4+U5j8ofdaWCYEO4j4qjYc=)
2: QWM4nrBr-pa9JzWD2Zz8wHHbmCU.roa (hash: VKweVNYicugh0mCYY3yIR2LnHnKsWIZPY+G4TQfXJ6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:64:5c:71:e2:51:22:4c:a6:02:2b:79:5f:33:5d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e7156abee6ba238b907315df9c552865adcdae8
Validity
Not Before: Jun 15 07:01:09 2025 GMT
Not After : Jun 16 07:01:09 2025 GMT
Subject: CN=04566f6d52b2b9ddd1a1fa42ab0f9b1e3a527193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fc:68:57:4c:0a:a9:86:a2:b9:14:53:db:ba:
23:36:13:5f:d9:5d:6b:df:df:d1:a3:eb:3d:68:d4:
60:c5:b3:55:6f:a1:bc:27:b4:a6:4e:16:55:d2:ee:
f0:2d:0c:b8:92:73:07:71:26:2b:47:f1:5c:ed:cb:
d9:5b:e8:bc:31:de:59:07:dc:a6:58:00:72:a8:69:
01:21:f6:1d:c0:b6:5f:9b:d9:d4:6d:2d:94:ff:4f:
7d:c5:3a:b2:f8:33:80:d3:33:a5:93:d5:ba:73:f7:
1f:7f:2a:d0:63:33:ce:4f:0b:8e:9e:41:a4:11:56:
5a:f1:9a:19:59:6e:aa:e9:90:6c:5a:4c:30:aa:7c:
90:84:c9:c8:a6:26:ea:34:06:bd:37:b5:67:53:70:
8c:cd:c2:78:79:51:ad:12:38:36:66:e3:eb:93:fc:
81:da:72:f9:95:cb:cb:d1:19:d4:52:07:ee:e3:d5:
0e:45:08:f3:f3:17:f7:74:47:83:c5:81:16:43:94:
07:41:29:e4:be:f4:74:53:60:b1:33:40:12:65:74:
c8:0e:f4:9a:dc:94:ad:d6:8c:a3:24:79:1d:b9:8a:
e4:2e:e3:b2:31:86:77:3c:0f:a0:c6:8d:45:7d:05:
88:ba:0b:ab:fa:30:53:58:17:d5:06:b2:5a:e2:f0:
97:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:56:6F:6D:52:B2:B9:DD:D1:A1:FA:42:AB:0F:9B:1E:3A:52:71:93
X509v3 Authority Key Identifier:
keyid:3E:71:56:AB:EE:6B:A2:38:B9:07:31:5D:F9:C5:52:86:5A:DC:DA:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:03:06:f6:04:f4:eb:d5:53:91:a3:a2:15:af:c2:d5:27:09:
ea:2e:cb:5c:9a:23:04:94:16:92:c9:46:c2:b1:bf:3b:b6:d3:
33:86:3e:26:30:b9:bd:6e:9c:f6:9f:39:fe:4b:47:88:ce:ef:
62:a3:80:96:93:10:1d:8f:24:75:98:7e:7a:27:5d:44:53:83:
5d:2b:52:2e:11:a3:a3:c8:4e:70:b4:34:98:9f:7e:58:0d:12:
fa:d8:fa:01:32:15:30:fb:bb:07:02:b1:d1:a1:98:a1:78:4c:
b7:4a:1b:da:ef:2c:c3:54:b4:3f:a3:7f:52:d6:2b:12:bf:98:
61:3f:e1:cd:47:28:8c:fc:d1:9d:e7:04:e0:41:61:6b:e5:fc:
1a:54:8f:e8:c7:a9:e3:92:e3:9a:07:2c:5c:c8:01:60:f2:45:
56:fb:bd:1f:0c:a1:f9:36:c4:24:e4:ab:7d:a4:e7:39:4d:d5:
e4:fc:0a:b0:75:bd:d3:8e:87:ac:fc:8d:71:b8:48:ff:00:88:
b7:fe:3d:0d:c5:ba:5d:36:54:27:ed:42:63:59:1d:98:26:aa:
94:2c:79:37:49:b6:75:c7:07:97:aa:24:5f:cb:48:0f:c7:44:
43:c7:26:bc:b8:1b:26:5a:48:fc:ad:d9:32:26:47:c1:22:cd:
8c:4d:5b:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdyZFxx4lEiTKYCK3lfM12JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNzE1NmFiZWU2YmEyMzhiOTA3MzE1ZGY5YzU1Mjg2NWFk
Y2RhZTgwHhcNMjUwNjE1MDcwMTA5WhcNMjUwNjE2MDcwMTA5WjAzMTEwLwYDVQQD
EygwNDU2NmY2ZDUyYjJiOWRkZDFhMWZhNDJhYjBmOWIxZTNhNTI3MTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPxoV0wKqYaiuRRT27ojNhNf2V1r
39/Ro+s9aNRgxbNVb6G8J7SmThZV0u7wLQy4knMHcSYrR/Fc7cvZW+i8Md5ZB9ym
WAByqGkBIfYdwLZfm9nUbS2U/099xTqy+DOA0zOlk9W6c/cffyrQYzPOTwuOnkGk
EVZa8ZoZWW6q6ZBsWkwwqnyQhMnIpibqNAa9N7VnU3CMzcJ4eVGtEjg2ZuPrk/yB
2nL5lcvL0RnUUgfu49UORQjz8xf3dEeDxYEWQ5QHQSnkvvR0U2CxM0ASZXTIDvSa
3JSt1oyjJHkduYrkLuOyMYZ3PA+gxo1FfQWIugur+jBTWBfVBrJa4vCXgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFARWb21Ssrnd0aH6QqsPmx46UnGTMB8GA1UdIwQY
MBaAFD5xVqvua6I4uQcxXfnFUoZa3NroMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG5GV3EtNXJvamk1QnpGZC1jVlNobHJjMnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9hNGEwZjctN2RiZC00YjAzLWI3Zjkt
NThmMmQ0NGZmMjgxLzEvUG5GV3EtNXJvamk1QnpGZC1jVlNobHJjMnVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9hNGEwZjctN2RiZC00YjAzLWI3ZjktNThmMmQ0NGZmMjgx
LzEvUG5GV3EtNXJvamk1QnpGZC1jVlNobHJjMnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAawMG9gT0
69VTkaOiFa/C1ScJ6i7LXJojBJQWkslGwrG/O7bTM4Y+JjC5vW6c9p85/ktHiM7v
YqOAlpMQHY8kdZh+eiddRFODXStSLhGjo8hOcLQ0mJ9+WA0S+tj6ATIVMPu7BwKx
0aGYoXhMt0ob2u8sw1S0P6N/UtYrEr+YYT/hzUcojPzRnecE4EFha+X8GlSP6Mep
45LjmgcsXMgBYPJFVvu9Hwyh+TbEJOSrfaTnOU3V5PwKsHW9046HrPyNcbhI/wCI
t/49DcW6XTZUJ+1CY1kdmCaqlCx5N0m2dccHl6okX8tID8dEQ8cmvLgbJlpI/K3Z
MiZHwSLNjE1bNw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 13:17:02 2025 by rpki-client