Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
File: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft (raw, json)
Hash identifier: 6KP9PNAlZCEUnqmsak3PSbr3aEYbCRyqzk/EN24fT2c=
Subject key identifier: 35:B5:31:48:CF:21:49:6E:68:14:8A:0D:B9:37:7A:49:A7:F5:0B:AF
Authority key identifier: A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
Certificate issuer: /CN=a4a37878c14f216c32649819ea428a58225504fb
Certificate serial: 019873E2EE24ABAB18943EA8F57ACBB0D101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
Manifest number: 05BF
Signing time: Mon 04 Aug 2025 07:01:48 +0000
Manifest this update: Mon 04 Aug 2025 07:01:48 +0000
Manifest next update: Tue 05 Aug 2025 07:01:48 +0000
Files and hashes: 1: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl (hash: jEiVUPUY9ErVQJk0T50mNGJDYFDiCgv5znQ1/oZDgAM=)
2: ro12KKiX-LBkOFDMXKVrhIyQ9tA.roa (hash: 3rfI99WFfWKHo+rtyifcnFcBumsIBP/guPHdSOGN9zM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:ee:24:ab:ab:18:94:3e:a8:f5:7a:cb:b0:d1:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a37878c14f216c32649819ea428a58225504fb
Validity
Not Before: Aug 4 07:01:48 2025 GMT
Not After : Aug 5 07:01:48 2025 GMT
Subject: CN=35b53148cf21496e68148a0db9377a49a7f50baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a6:ae:10:f9:49:a0:80:5f:f6:95:4a:53:a6:
44:14:12:fa:55:53:67:41:b3:4d:fd:d1:ee:5c:af:
1b:2c:7c:7f:ec:72:c2:d2:b5:38:d1:06:e8:8e:68:
78:b5:bf:78:fc:85:c3:59:8f:96:4a:8a:ad:5f:d2:
6e:38:0e:24:1c:a4:a1:ce:ce:cb:e7:79:39:df:cd:
93:a5:8c:6c:93:d3:cb:73:5f:c4:e9:30:5e:c2:98:
7f:f9:71:f8:a1:f4:58:0b:55:dc:b4:5b:a3:7e:ae:
6a:66:27:e7:74:a1:83:86:64:6d:e3:9e:79:e0:e3:
4f:5a:3f:44:81:05:c1:5a:9a:fb:90:d3:2a:52:93:
d5:2c:6f:a3:9e:70:7d:65:ec:6c:62:b8:f2:ef:b4:
41:84:f1:0e:fb:cb:4f:45:f2:3a:5a:0a:46:c0:ef:
48:3d:9c:59:a2:9c:5d:a9:52:86:e0:a1:a4:eb:0b:
c5:97:5a:f6:62:f1:9e:43:86:dc:2e:d4:71:25:ff:
67:27:a3:57:9e:66:6e:35:02:96:e5:21:eb:bd:a2:
6c:be:14:3b:59:82:d3:37:d6:35:c8:c6:b0:21:b5:
6d:8c:bf:bc:60:d7:52:ab:75:6d:85:c2:1a:e1:2c:
00:72:67:7d:e8:4b:3b:94:20:78:bd:83:7c:41:68:
f9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B5:31:48:CF:21:49:6E:68:14:8A:0D:B9:37:7A:49:A7:F5:0B:AF
X509v3 Authority Key Identifier:
keyid:A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:6f:74:5b:94:1e:1c:73:8b:35:03:f3:0f:30:1d:27:0a:c2:
81:48:35:83:ea:3f:ac:85:78:33:de:d8:f1:b2:b7:9e:a1:ca:
33:96:c9:a8:97:fa:20:25:6e:eb:16:96:db:b9:4d:db:56:f0:
5a:1e:14:9d:88:4a:e2:9a:4a:80:d5:f4:5a:1f:0a:40:ab:32:
f9:5f:55:21:dd:c8:3e:7e:24:d5:15:b5:2b:26:df:1c:e6:b1:
0f:3f:ae:b0:28:ad:1e:c9:55:52:f0:0b:58:ec:c7:2f:ad:fb:
da:0b:1a:8a:37:b2:67:3c:ce:f6:08:a3:50:cd:d9:24:87:0b:
73:dc:79:47:bc:4c:e5:92:ba:ef:10:d4:0d:07:e5:b5:f6:ca:
d9:c0:e8:b2:28:f7:a8:51:b0:f6:ed:2a:48:80:93:ab:55:27:
20:38:62:f5:ea:08:b4:4d:c5:a5:14:f5:fc:c4:fb:73:d2:63:
4c:6c:2b:0f:00:78:8b:e4:ef:24:6e:ef:97:01:7d:c3:a8:f5:
eb:7e:1c:07:1e:ba:44:59:5e:3e:7a:9f:91:b5:67:24:88:76:
da:50:bd:79:54:e6:38:2d:4a:a4:b7:38:fd:8a:6f:7b:f6:02:
8a:9b:3f:e9:e2:55:8d:cd:ce:6b:9c:23:14:3f:ed:8b:6f:b1:
32:08:58:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:21:04 2025 by rpki-client