Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
File: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft (raw, json)
Hash identifier: OFBA1qx4FX+pwNCi9B7OycRBP10ZlWM3X0xMt08J6Vs=
Subject key identifier: 5A:3B:4F:F7:2B:7C:0D:71:B7:CD:47:23:AC:75:95:EF:E2:A9:50:8B
Authority key identifier: 3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4
Certificate issuer: /CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
Certificate serial: 0198880DEE8871EE006119B2A5765AAE0E4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
Manifest number: 03DD
Signing time: Fri 08 Aug 2025 05:01:11 +0000
Manifest this update: Fri 08 Aug 2025 05:01:11 +0000
Manifest next update: Sat 09 Aug 2025 05:01:11 +0000
Files and hashes: 1: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl (hash: 6+TY4TPuxj5jK0M0JGaoyyU1EA0GAK/kyGrsMQTL7Ms=)
2: UTJEyA5eoUQbkVsnzE_qVEPp7QI.roa (hash: QLgDwiA3HQMhzQTCpM1sPvRtSa6KhJD7pUZz4AfYcjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:0d:ee:88:71:ee:00:61:19:b2:a5:76:5a:ae:0e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
Validity
Not Before: Aug 8 05:01:11 2025 GMT
Not After : Aug 9 05:01:11 2025 GMT
Subject: CN=5a3b4ff72b7c0d71b7cd4723ac7595efe2a9508b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:65:7a:93:0a:f7:48:b1:df:0f:cb:13:2c:ba:
78:13:ba:37:84:50:0d:a3:d4:07:d7:dd:ae:4d:f9:
25:0f:14:cb:8f:8f:69:20:6d:17:38:b9:48:3e:39:
01:9e:2b:50:04:69:ba:2d:94:1a:06:5c:d2:7a:29:
dc:24:f3:02:8f:85:a8:1c:f8:90:25:49:eb:44:0d:
22:45:c0:a0:30:6d:87:da:da:48:97:cf:7e:36:31:
9a:46:4c:64:4e:5a:e7:62:40:eb:52:81:b4:66:78:
0c:0f:9e:d9:c4:d5:c3:37:df:6d:0d:6a:83:83:ba:
80:e6:37:99:ae:db:44:78:5a:81:cd:93:ee:99:38:
ab:e9:f7:8e:2e:88:8b:25:6a:b7:63:23:9e:f2:d2:
fc:dd:08:22:33:15:75:ee:c7:0b:98:fe:44:59:ae:
d2:71:d4:df:75:ca:c5:d9:e1:8d:ec:64:cd:d2:f0:
82:fd:83:8e:4e:48:be:b5:14:df:32:0a:eb:64:9b:
fb:35:06:e2:d8:3f:5e:df:4d:be:b3:fc:66:07:0a:
23:15:f2:2e:3a:7b:95:c8:6b:d3:8e:86:11:5c:a1:
43:7b:56:2e:f2:de:32:96:e9:a4:76:fd:b3:c2:77:
49:e7:c4:4a:e6:1f:df:f9:09:b9:1f:2c:86:fa:f9:
60:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3B:4F:F7:2B:7C:0D:71:B7:CD:47:23:AC:75:95:EF:E2:A9:50:8B
X509v3 Authority Key Identifier:
keyid:3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b6:ca:c2:8d:a4:a6:cc:72:23:c0:12:f9:74:44:ad:8a:42:
48:9a:a9:63:02:70:bf:68:7b:d7:18:8f:26:98:82:f2:39:db:
f1:e5:a0:22:63:51:a7:b2:3f:bc:c0:48:fe:29:03:16:65:9b:
1e:6e:7d:ee:97:fa:db:ec:af:4c:b4:79:27:c3:a4:1a:37:7e:
9c:88:80:91:6e:8d:6e:bc:b1:47:c8:4c:26:a9:aa:72:7c:5b:
12:e8:76:2f:01:b2:c7:1e:19:e9:0e:d2:44:b8:af:94:8a:f0:
37:96:78:e8:7b:40:a9:9c:4c:e9:23:80:2a:76:12:f5:99:aa:
c2:8b:c0:0d:1a:25:60:2c:7f:fc:d4:72:55:8c:8c:52:72:07:
42:3e:93:76:73:25:85:6d:03:74:c5:3a:bb:66:1d:44:cb:67:
da:5a:c9:ec:26:03:38:3c:05:6a:f6:a9:da:7a:b4:8d:02:a9:
ed:7d:30:ee:a2:c8:4d:b1:59:18:43:c4:ab:6b:6a:a3:dc:7d:
32:06:5f:03:a9:d8:78:92:c2:9a:f8:cc:79:f1:b3:84:80:9a:
2b:9b:96:84:f9:e8:58:77:91:c7:4d:15:11:8c:ae:97:d8:ce:
6c:73:79:14:a4:a5:ee:a1:04:1f:6d:e4:53:89:ae:ed:be:c5:
41:f3:55:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:24:11 2025 by rpki-client