Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
File: PNJOCMV2B8rrzBnIVS6uLpNeguU.mft (raw, json)
Hash identifier: SF8z5BKcQwbcxblYUGlfys4bNAAuCbWpPcHDXHZ3rOM=
Subject key identifier: D8:82:0F:46:DF:DE:1A:94:26:48:D2:EB:AC:ED:93:31:29:7E:DD:13
Authority key identifier: 3C:D2:4E:08:C5:76:07:CA:EB:CC:19:C8:55:2E:AE:2E:93:5E:82:E5
Certificate issuer: /CN=3cd24e08c57607caebcc19c8552eae2e935e82e5
Certificate serial: 0198820C3C3A85F1EFC9E0E479CD5C280A4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
Manifest number: 013F
Signing time: Thu 07 Aug 2025 01:01:36 +0000
Manifest this update: Thu 07 Aug 2025 01:01:36 +0000
Manifest next update: Fri 08 Aug 2025 01:01:36 +0000
Files and hashes: 1: AYSLpwufRV-W_9lRsqnuQFR2IOQ.roa (hash: Q3fm8OZk/vOZ06gyMzMxpxsqxYSULclXWKZVcRfqEg0=)
2: PNJOCMV2B8rrzBnIVS6uLpNeguU.crl (hash: EHsdWfZ7yvk3bdVqCnzfcKl0UV1CaxfTQHjFg5g5+V4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 01:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0c:3c:3a:85:f1:ef:c9:e0:e4:79:cd:5c:28:0a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd24e08c57607caebcc19c8552eae2e935e82e5
Validity
Not Before: Aug 7 01:01:36 2025 GMT
Not After : Aug 8 01:01:36 2025 GMT
Subject: CN=d8820f46dfde1a942648d2ebaced9331297edd13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2d:ac:e5:ad:49:70:cf:5a:c5:5b:e9:ae:2b:
26:20:f1:d9:f6:9f:52:ea:14:5b:19:ff:ef:a3:b1:
ac:9f:7f:c1:1e:b0:21:f3:f5:45:cd:83:e1:d1:1f:
5f:6b:30:1f:32:17:a8:aa:e6:2c:c5:e9:2c:1d:66:
b7:b5:1f:5a:1a:fe:39:d1:6f:d7:37:da:dc:fa:05:
bd:9f:26:dc:d4:96:91:49:cf:a9:3a:ce:ae:e1:86:
0a:c1:af:1a:79:e0:04:a0:e0:52:05:23:55:db:19:
9f:ca:4b:78:d8:fa:06:2b:4b:d6:c6:b7:76:23:56:
dc:21:f9:21:ff:ab:9f:06:98:ff:eb:20:a9:be:be:
26:83:1b:ea:08:b4:3a:f6:4f:61:60:e6:d0:9c:f5:
1b:c8:f7:02:26:7c:64:d5:4f:0d:67:e3:01:6d:b6:
a0:6b:b2:d5:16:9f:59:2b:11:a6:c6:b4:c2:a0:c8:
25:4d:23:3b:12:1d:2d:24:4b:0e:28:9d:4e:58:8c:
21:96:6b:23:31:b1:cc:66:76:a5:ad:7d:ae:6c:71:
97:d4:71:cc:ce:41:b3:c9:43:aa:85:6d:5a:4c:3d:
e2:4d:80:70:aa:a4:ef:1f:85:da:eb:bc:a2:54:65:
af:18:90:c8:27:e8:71:dc:fa:9c:ac:9b:57:46:e4:
a7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:82:0F:46:DF:DE:1A:94:26:48:D2:EB:AC:ED:93:31:29:7E:DD:13
X509v3 Authority Key Identifier:
keyid:3C:D2:4E:08:C5:76:07:CA:EB:CC:19:C8:55:2E:AE:2E:93:5E:82:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:25:af:be:0b:ae:79:1f:ea:54:16:42:81:0d:4f:a7:bf:f8:
64:46:90:a1:57:c2:b6:10:e4:2c:07:7f:07:84:25:b5:77:4f:
d0:f8:99:78:5b:88:6b:08:a8:72:7e:76:24:96:5f:f7:01:00:
09:f7:98:60:a2:1b:ab:d4:85:74:6c:cd:9a:bf:af:3b:15:8e:
f2:32:6d:13:5a:4d:b4:cc:08:a0:58:78:fc:a5:7d:18:9a:4f:
2d:7a:e9:b3:6a:cc:b4:b5:63:6c:25:d5:89:80:f6:a7:0c:07:
8b:1d:b5:70:a7:0c:cb:88:27:af:b6:e3:cf:c5:6c:57:85:4a:
f7:41:e0:5c:19:27:87:28:c3:22:b7:1b:f7:ea:8b:40:93:a9:
e2:7f:1f:99:d4:e9:61:78:97:5c:c6:38:99:b1:44:c9:24:5c:
24:d0:9b:c4:23:4a:af:9f:d0:6c:53:86:11:48:e2:d2:4f:16:
6b:05:7b:00:59:bb:a1:c7:d2:21:10:27:e9:77:aa:1d:98:e9:
52:b7:1b:ce:19:92:5d:e5:89:f7:44:59:68:f0:0f:2d:a6:6a:
f2:48:64:67:38:b1:1f:59:33:be:c3:03:1a:60:97:57:55:cb:
e3:48:54:26:96:89:74:fd:63:69:b1:be:ed:b8:49:59:7e:b7:
6c:95:65:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:09:01 2025 by rpki-client