Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
File: pfanGhgNz4sjDEFPCfe3G66peBw.mft (raw, json)
Hash identifier: ecSyBfQqAV059VoqNvl7waAtqRw3c7rlRk822LB+S9w=
Subject key identifier: 71:D1:00:C5:35:81:C0:D4:87:92:90:C5:2A:4E:2C:EB:35:7E:3A:76
Authority key identifier: A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C
Certificate issuer: /CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
Certificate serial: 01976E871BC5A40F72D4D0345204B44276C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
Manifest number: 025B
Signing time: Sat 14 Jun 2025 13:00:37 +0000
Manifest this update: Sat 14 Jun 2025 13:00:37 +0000
Manifest next update: Sun 15 Jun 2025 13:00:37 +0000
Files and hashes: 1: 4ztGIasVEwEbakF0ec-7K0e5IU4.roa (hash: IY2hXYNDBxgugsXRkJWFvDBibE33L3+eqXYnL7k07xY=)
2: pfanGhgNz4sjDEFPCfe3G66peBw.crl (hash: vn9s3XRlhP7ehWlTTHWeb55Lq1jgHKfMQ8b3ysVedHI=)
3: yQmkLUR6MH6h1RvFVHhe4DDu7QY.roa (hash: 7D7oyqrxVnp9P9+upqmUz5U0xALaurO7hGz+98jrtEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:1b:c5:a4:0f:72:d4:d0:34:52:04:b4:42:76:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
Validity
Not Before: Jun 14 13:00:37 2025 GMT
Not After : Jun 15 13:00:37 2025 GMT
Subject: CN=71d100c53581c0d4879290c52a4e2ceb357e3a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f9:c6:40:a1:52:d6:82:7e:e4:ee:bd:06:26:
54:8f:01:81:81:26:fb:52:2e:f8:9a:48:73:2d:47:
7c:98:41:61:ad:49:90:cc:78:43:43:13:2a:32:8b:
23:ff:54:cb:ff:e2:93:36:97:71:c8:fe:ff:9b:94:
1f:56:bb:dc:e1:af:e3:2b:b4:42:40:f3:34:8f:22:
5f:f9:2b:e2:b6:42:26:d9:5d:f4:e1:4f:18:88:84:
39:e8:7b:0a:82:57:d4:08:53:1d:91:c9:57:9f:a0:
05:66:31:70:47:c5:a4:bf:45:6e:1b:6e:f1:a0:f8:
0f:6b:a9:9f:27:72:6b:75:e2:42:5f:46:db:ad:95:
3c:b0:eb:65:74:7e:af:fa:4e:11:1b:64:2a:89:f3:
31:58:c5:67:b5:97:16:d8:a3:5e:fa:e9:db:bd:24:
46:65:f6:5a:cc:c3:38:9b:f8:2a:15:e0:14:b0:9c:
9c:da:9a:39:0e:4b:28:20:92:48:70:8c:ef:33:b8:
06:1c:02:69:cd:eb:2f:70:58:b6:65:8b:8a:b8:19:
5c:1c:ea:79:bc:ac:29:1d:19:66:e1:96:dd:05:2e:
03:9b:d4:c0:4a:bd:b5:bd:0e:b4:4b:51:4b:23:08:
fe:c2:fe:2e:2b:58:ac:e7:cc:8e:47:42:98:de:7b:
73:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D1:00:C5:35:81:C0:D4:87:92:90:C5:2A:4E:2C:EB:35:7E:3A:76
X509v3 Authority Key Identifier:
keyid:A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:63:59:07:2e:a6:e5:50:1b:2d:d0:e9:92:0c:ca:15:45:2c:
da:80:b0:6c:b1:49:4e:9a:cd:c3:36:ff:a6:e0:97:62:22:0e:
08:dd:98:eb:b1:dc:fe:7c:0c:06:be:60:e7:38:2a:c9:d8:d8:
a5:99:af:d9:09:3f:b0:a7:0a:ee:a5:30:21:45:6f:d9:db:ab:
5c:44:12:75:5b:c8:21:4e:5c:61:a5:c8:1f:18:3f:ae:fa:85:
d2:12:e4:f0:db:d1:f8:6e:24:ea:1f:05:c8:0b:7f:de:c5:b5:
45:e5:c9:77:9c:80:3b:c6:58:85:27:85:2e:24:c5:c8:45:1a:
bd:44:0a:67:ca:81:ca:ab:1f:21:5d:28:8e:63:3a:13:0f:ba:
96:49:92:4f:ed:fc:72:b9:7a:59:eb:34:e2:cd:1e:f3:d4:36:
48:eb:58:94:a5:2b:18:ee:ad:12:68:62:6c:24:90:1c:dc:f8:
67:c3:85:61:33:90:8e:86:48:7e:83:b2:89:e6:f2:98:23:05:
f0:44:48:31:26:d4:d1:82:73:1c:19:1f:d8:04:78:26:24:98:
e9:e9:8d:7e:f4:9b:f7:4b:31:2f:f7:c9:6e:f4:44:93:1a:8e:
5f:e8:69:e5:31:2a:32:63:df:01:0b:e9:08:53:9e:17:51:dd:
a9:bb:2f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:57:32 2025 by rpki-client