Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
File: PNVhnbjXcXN5lW1Op1t22ybRwck.mft (raw, json)
Hash identifier: c8g3t+CDYuetvKXWYlR1eQOYR1M7XWjUefLI5SFZrJg=
Subject key identifier: 38:78:DB:AA:EE:98:55:C7:E8:AE:39:16:AB:C2:26:62:14:FF:0B:CD
Authority key identifier: 3C:D5:61:9D:B8:D7:71:73:79:95:6D:4E:A7:5B:76:DB:26:D1:C1:C9
Certificate issuer: /CN=3cd5619db8d7717379956d4ea75b76db26d1c1c9
Certificate serial: 019889C54C9696C145788B93BAF0924CC145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
Manifest number: 1622
Signing time: Fri 08 Aug 2025 13:01:05 +0000
Manifest this update: Fri 08 Aug 2025 13:01:05 +0000
Manifest next update: Sat 09 Aug 2025 13:01:05 +0000
Files and hashes: 1: 4prfTAA9HBYIWFQscXuDZvPOJfU.roa (hash: zMicpYmGFLFzW1lGiXS7QLLBWvT2YuAYQEgxuNA/2gA=)
2: PNVhnbjXcXN5lW1Op1t22ybRwck.crl (hash: sXnPfDGfgVQMtTyQRmB48I8qa8DQjJNfk3tHBDat2Tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:c5:4c:96:96:c1:45:78:8b:93:ba:f0:92:4c:c1:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd5619db8d7717379956d4ea75b76db26d1c1c9
Validity
Not Before: Aug 8 13:01:05 2025 GMT
Not After : Aug 9 13:01:05 2025 GMT
Subject: CN=3878dbaaee9855c7e8ae3916abc2266214ff0bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a9:f4:99:8f:90:4c:15:25:f0:cb:18:35:1f:
85:99:53:d6:de:52:51:98:56:76:bd:3c:4e:0c:32:
85:37:68:ad:7a:0b:de:a3:14:13:37:9e:33:d7:fe:
4d:5d:c0:b3:87:71:1f:cc:00:dc:c5:6e:98:14:ea:
80:1e:ec:07:7b:f7:8e:4a:76:cb:3a:cc:4e:f5:83:
b3:bb:f8:4f:96:fd:c1:ca:74:fa:1a:06:e8:b2:6a:
0b:b0:f3:52:84:cf:40:99:a1:77:89:d5:0a:e4:c3:
28:5b:c1:7f:8a:f8:5f:70:dd:06:ed:34:53:07:2f:
db:bc:ee:62:0f:6a:59:4c:47:6a:83:62:d6:69:70:
c9:fa:22:56:bd:0a:68:d4:a8:f3:64:e0:80:77:c0:
d7:f6:e4:dc:fe:26:57:6d:21:96:65:36:ce:9f:3c:
a2:8f:03:c4:77:e6:f5:ac:07:e4:2c:9d:99:d9:a4:
48:55:35:64:b2:52:fd:5e:4d:eb:3a:82:e4:1b:c6:
10:ce:70:68:8b:93:56:43:c0:5d:9e:f2:b4:66:c2:
6b:be:dd:9a:d3:73:48:dc:55:42:97:24:de:9b:0c:
53:58:81:37:56:51:07:d0:af:0e:33:ea:68:a8:71:
31:9c:7d:28:8e:52:3b:db:34:a2:d4:39:45:3a:8a:
24:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:78:DB:AA:EE:98:55:C7:E8:AE:39:16:AB:C2:26:62:14:FF:0B:CD
X509v3 Authority Key Identifier:
keyid:3C:D5:61:9D:B8:D7:71:73:79:95:6D:4E:A7:5B:76:DB:26:D1:C1:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:8d:4e:db:fe:85:74:1e:f3:de:73:47:68:a3:cd:17:26:36:
00:a0:34:c7:1c:62:1c:36:c7:52:75:bc:c1:47:e5:db:71:40:
b1:98:9c:aa:99:a4:7a:63:21:64:96:0f:a9:da:61:ff:3e:de:
8f:96:98:6d:6e:45:b9:66:79:f0:b6:58:dc:9c:11:b1:40:ec:
2b:b4:f4:14:ee:3b:d1:4b:86:8d:33:81:6e:d5:f3:a8:cc:9c:
61:2f:50:fb:b0:eb:d5:d2:9d:6e:9f:32:96:55:d6:ca:c1:c6:
d9:38:b5:99:7f:95:f2:3d:0f:e9:ea:2d:8c:d3:14:60:26:f6:
96:be:03:5d:fe:dd:c2:3b:bf:34:20:36:e1:36:bc:21:9b:c6:
d6:4c:cd:a5:5b:7b:4d:be:7a:bf:7f:23:58:52:d3:f3:37:48:
6e:6a:a3:52:1c:0b:43:50:db:c5:76:99:f5:ed:ac:ec:41:48:
40:45:7a:73:34:0a:9b:5f:34:0f:24:a1:83:4a:b3:95:9d:96:
d5:ca:73:ee:ed:28:f9:3a:79:c1:d5:fa:0b:cf:0b:92:f4:4f:
83:b3:01:57:c9:05:54:89:37:3a:f5:9d:d1:03:eb:cc:33:1f:
06:8a:99:c4:f8:af:8b:50:7a:ec:28:44:9a:3c:79:45:2e:c6:
91:82:52:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:52:54 2025 by rpki-client