Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
File: PBHQXNKatxkq8DnPXz0AvpIVeTk.mft (raw, json)
Hash identifier: My9ZkPnl5N8xU6BEVDnMsojJ6hN8285l0vgd3LHUjHo=
Subject key identifier: C4:3A:AB:5E:4D:08:BA:D4:8E:B3:E0:1B:C7:24:B6:3A:28:99:C2:96
Authority key identifier: 3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39
Certificate issuer: /CN=3c11d05cd29ab7192af039cf5f3d00be92157939
Certificate serial: 01976FD12D9FAD29EB857A67E7E248E681F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
Manifest number: 07DF
Signing time: Sat 14 Jun 2025 19:01:08 +0000
Manifest this update: Sat 14 Jun 2025 19:01:08 +0000
Manifest next update: Sun 15 Jun 2025 19:01:08 +0000
Files and hashes: 1: PBHQXNKatxkq8DnPXz0AvpIVeTk.crl (hash: gaVEO4HdAfOm91B4urUN/BKc97NI1chCCeOsOWzAu/8=)
2: uXWEOT5kLicjM9eRqYG2MPSav7U.roa (hash: WztCPaYNfJzy3qntVN7a2OFcCyo/yo2zpUp1jJXzcgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d1:2d:9f:ad:29:eb:85:7a:67:e7:e2:48:e6:81:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c11d05cd29ab7192af039cf5f3d00be92157939
Validity
Not Before: Jun 14 19:01:08 2025 GMT
Not After : Jun 15 19:01:08 2025 GMT
Subject: CN=c43aab5e4d08bad48eb3e01bc724b63a2899c296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d3:22:eb:a5:a3:ab:74:4c:98:5d:46:ad:11:
1e:94:23:67:1f:ed:6b:e0:39:d4:d3:3a:da:0a:a6:
4e:35:e9:cd:e9:07:11:75:dd:bc:c8:de:1f:c8:03:
1c:70:42:cd:ff:0b:86:79:af:bf:7a:67:3f:58:08:
6a:cf:1b:fc:fb:44:c2:b8:ec:d7:7d:37:6b:06:ae:
a7:6a:85:40:0b:c6:b3:62:7f:40:8e:67:40:cf:02:
6f:38:23:af:9a:76:77:fc:1f:50:f4:2a:b6:48:9d:
46:24:32:9e:8b:d6:6d:a0:65:83:56:e8:39:b7:e7:
38:35:4b:cb:f7:73:0f:7b:49:e9:11:3c:57:28:28:
6f:99:da:4e:e4:0e:33:01:cc:26:b8:41:d9:58:be:
60:d1:2f:67:59:dc:64:90:73:3e:24:86:5d:5f:ac:
95:7a:a4:bb:27:71:22:58:8f:76:3c:6f:fe:7d:d0:
4d:e2:18:2e:dc:2a:17:fe:26:c5:6f:c9:b0:d4:44:
3f:da:bb:3e:af:50:e4:e1:5d:9d:f5:9d:83:9b:0b:
d0:98:f3:fd:cb:34:fc:00:3b:39:f9:91:50:cb:c9:
eb:78:9a:cc:6d:97:ad:33:52:8d:b7:50:cc:d9:dc:
b1:2e:7d:c6:f4:eb:f6:0e:25:55:e4:3f:e1:c7:45:
d3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3A:AB:5E:4D:08:BA:D4:8E:B3:E0:1B:C7:24:B6:3A:28:99:C2:96
X509v3 Authority Key Identifier:
keyid:3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:69:d3:a5:3c:1e:7c:47:ca:ca:5b:8f:0c:87:45:8a:ec:35:
8a:77:35:7f:d8:e3:e0:41:26:7e:6c:c4:c3:ab:8a:e0:d4:a2:
2b:3a:6d:e2:5b:d8:e3:3a:b9:9c:d5:b0:10:5c:36:95:13:50:
26:ae:2e:9f:30:e2:16:f7:54:57:31:71:cb:4f:f6:86:71:7d:
f9:b8:36:1a:15:cf:fa:d1:e7:28:22:d9:bd:97:12:ac:51:f3:
7a:26:b1:c5:7d:b6:21:3b:fa:0f:df:2e:cd:70:ee:7f:fa:10:
c3:f7:bb:96:d6:6f:24:0f:46:e5:6d:20:24:e1:7a:39:9e:f3:
57:a2:5d:ce:40:47:3d:2d:df:b1:fc:aa:a9:b7:f1:22:f4:15:
50:9d:e3:ae:bd:86:db:45:4d:61:b1:30:22:ef:6b:f5:52:34:
8b:3a:27:a6:0a:44:ad:fb:71:11:d3:c5:b4:11:a1:bf:e8:c2:
2c:63:d0:0b:62:9b:57:6f:e3:b2:10:79:9f:aa:8d:27:7b:da:
88:59:68:47:71:c3:27:be:f5:70:ef:a5:77:27:81:02:eb:33:
e9:e8:5e:40:c6:22:b1:aa:79:fe:67:fc:38:5e:85:eb:63:0a:
79:ce:43:3a:76:78:83:78:5c:3f:40:3f:70:1b:18:35:a5:f6:
89:15:5b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:37:51 2025 by rpki-client