Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
File: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft (raw, json)
Hash identifier: PsS1klpFyt59sEr1hZdlqwa4LC9J5nyNFpKGSwCbNbg=
Subject key identifier: C2:2F:1A:8B:1F:A1:D3:CB:9E:CA:41:94:FA:E9:C3:B5:DE:50:DD:C5
Authority key identifier: 3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4
Certificate issuer: /CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
Certificate serial: 01977007AB7989EC7A1A107C17125E878050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
Manifest number: 034C
Signing time: Sat 14 Jun 2025 20:00:40 +0000
Manifest this update: Sat 14 Jun 2025 20:00:40 +0000
Manifest next update: Sun 15 Jun 2025 20:00:40 +0000
Files and hashes: 1: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl (hash: w3lsunrVCYMHjmAeUqr3WmsZj51s9M7s7PQsvPpgV6U=)
2: UTJEyA5eoUQbkVsnzE_qVEPp7QI.roa (hash: QLgDwiA3HQMhzQTCpM1sPvRtSa6KhJD7pUZz4AfYcjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:ab:79:89:ec:7a:1a:10:7c:17:12:5e:87:80:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
Validity
Not Before: Jun 14 20:00:40 2025 GMT
Not After : Jun 15 20:00:40 2025 GMT
Subject: CN=c22f1a8b1fa1d3cb9eca4194fae9c3b5de50ddc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d0:33:c1:69:ed:ab:80:cc:fa:ef:de:db:5b:
6e:f6:ee:d7:b4:55:3d:43:4f:91:59:17:80:8d:58:
b9:12:13:35:49:b0:f4:84:ec:bc:45:83:64:29:07:
2c:7a:43:fa:f8:9a:ab:6a:c5:15:fa:8e:52:c6:8b:
32:3f:0d:b5:5c:43:7d:95:7f:0c:d6:f0:28:21:f5:
f1:12:79:4e:7d:34:43:73:74:00:99:89:78:06:69:
e4:78:95:a0:57:11:86:d4:b8:21:bd:3a:46:d0:38:
26:82:08:74:8d:c9:da:6d:aa:71:cc:0f:e7:6d:f3:
67:e4:8a:cb:9c:9d:b8:c9:82:4d:2e:66:38:fd:9d:
2c:7f:c9:4a:6e:64:72:6b:e0:38:5a:de:84:9b:e7:
79:ff:e6:b9:09:ad:1c:f4:e5:8e:64:64:7f:8e:20:
cc:05:88:70:f4:63:d2:bb:8c:9e:53:f9:53:1f:5a:
a8:76:87:0b:54:cf:93:4c:36:6c:07:75:0d:08:29:
be:d4:23:9c:ab:d6:64:af:85:88:5a:45:db:a3:39:
2c:26:f9:a8:04:be:46:cb:87:e4:fe:6a:63:2c:1e:
e6:36:67:b2:57:1e:73:aa:dd:5d:23:82:db:8a:5a:
d9:77:5f:b6:99:e8:36:04:de:08:49:4c:ca:18:a7:
ab:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2F:1A:8B:1F:A1:D3:CB:9E:CA:41:94:FA:E9:C3:B5:DE:50:DD:C5
X509v3 Authority Key Identifier:
keyid:3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:77:55:63:3b:a3:ae:ea:90:1c:90:a9:97:37:bc:44:8c:bf:
f9:0e:b3:1f:8a:e4:a1:3b:4b:4d:09:4d:a8:4b:4c:b0:0f:ef:
af:80:bd:10:85:78:c1:ce:2a:ce:7f:16:04:22:a4:e9:72:30:
55:f5:da:cd:89:59:63:46:a6:17:e9:ca:bd:95:ed:c7:28:9d:
cf:07:c0:be:18:75:c7:20:9d:fb:6f:96:6b:ce:55:a5:3c:d6:
ce:8b:4b:09:e1:7d:6d:0a:b3:d1:5a:bb:6a:ab:2d:24:36:5d:
29:26:e5:34:e3:78:41:57:5b:4c:c4:66:a4:fe:fe:25:b9:1c:
08:2c:8f:96:3d:85:f7:ea:27:85:30:94:fa:e5:97:2b:55:ee:
87:98:57:ec:14:85:db:7b:85:38:be:18:6f:09:93:7a:e1:43:
35:ea:ca:bf:3c:82:3d:e2:40:54:94:07:b5:1b:4b:77:ea:42:
5f:e1:22:84:92:74:ad:10:3c:37:3c:9d:91:a2:b5:69:34:d8:
fc:96:af:62:6f:a2:62:bd:e1:73:2d:5d:b3:71:c2:95:28:36:
ee:dc:91:ca:26:a1:cc:e5:d9:7c:e6:57:f9:39:73:bb:d2:23:
84:30:20:28:76:91:3e:fa:23:ad:eb:73:df:7c:fb:5d:31:d2:
e7:95:bb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:16:57 2025 by rpki-client