Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
File: PnDBS_JvrwGY8eeyRynNcbM1GN4.mft (raw, json)
Hash identifier: br1HB8nnr5v3W9Uj1WGJ953fTp9k2jzoFDKu39M73Ic=
Subject key identifier: 53:0B:50:7C:DB:E0:52:E3:53:E7:02:D7:AB:F5:09:A6:03:52:33:DA
Authority key identifier: 3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE
Certificate issuer: /CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
Certificate serial: 01976D06CC69CE136F29261976F0CA6BF2A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
Manifest number: 0285
Signing time: Sat 14 Jun 2025 06:00:51 +0000
Manifest this update: Sat 14 Jun 2025 06:00:51 +0000
Manifest next update: Sun 15 Jun 2025 06:00:51 +0000
Files and hashes: 1: 4d9jncgFcD3LQEVJLbIB2I3M9lo.roa (hash: seBbCSSGlRgW36OWqyme1v3t3KHDAPOFROvpxV8jwzE=)
2: 4uaLh2b-bHV2NsxIJY_pK9e3698.roa (hash: sMeMy3i5FoQg0v9xzPREgO0rI8VqgJmcA0uZMgg0uts=)
3: PnDBS_JvrwGY8eeyRynNcbM1GN4.crl (hash: UOVigt9LhM7giycTH5EVWz0KX08lAloo3cP9mklO4VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:cc:69:ce:13:6f:29:26:19:76:f0:ca:6b:f2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
Validity
Not Before: Jun 14 06:00:51 2025 GMT
Not After : Jun 15 06:00:51 2025 GMT
Subject: CN=530b507cdbe052e353e702d7abf509a6035233da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ef:a7:0f:5d:96:4c:17:30:f9:d8:88:75:e9:
ac:70:d9:05:de:e1:f6:ed:44:b1:9e:f0:d9:b6:28:
63:54:91:c2:57:b9:85:d2:63:90:45:d3:71:a1:8c:
d2:9a:b7:51:13:ca:64:f2:47:3f:81:87:ac:c7:aa:
ac:4d:58:cd:f6:ca:3b:ab:d9:ee:68:0c:48:bc:3a:
62:32:86:84:ce:ec:ad:6b:93:ef:92:e8:be:73:52:
93:78:8f:7f:7a:a6:38:9a:86:87:a0:f3:0f:30:87:
af:27:fe:96:01:29:8d:32:c0:67:5b:ce:9e:91:1e:
9f:7a:6b:09:f0:4c:81:63:bf:f1:6c:76:4e:92:1a:
1c:cd:1e:34:a8:6e:22:35:0f:19:b7:e1:5a:ae:a0:
a3:3d:4c:83:54:09:af:15:50:3e:61:ae:d4:df:9b:
f2:02:bf:b3:a4:12:2d:e5:3d:c8:cb:c5:41:91:ca:
44:e7:a2:19:15:0f:d2:91:22:67:11:7f:ab:7a:94:
32:0e:4f:e1:c7:16:93:34:68:cb:9e:4d:44:32:08:
2c:8d:2c:90:58:5d:0d:c9:cc:d1:c1:68:a3:2f:8b:
eb:5f:95:e4:70:ed:e5:f5:e3:6b:9f:62:43:3e:a2:
51:f7:8c:fe:64:7b:65:47:a0:ca:9e:9d:9a:c1:9a:
c5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0B:50:7C:DB:E0:52:E3:53:E7:02:D7:AB:F5:09:A6:03:52:33:DA
X509v3 Authority Key Identifier:
keyid:3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:36:2d:95:8c:c5:e0:0a:e2:8e:ea:0a:ca:ab:16:28:bf:bd:
e7:5d:be:d3:78:bb:56:b7:17:95:3f:5e:5d:c5:b3:42:48:77:
92:11:04:34:13:53:17:84:db:cc:ab:0e:d8:a0:0c:95:d7:19:
5a:43:3f:54:0d:15:17:ba:9b:d0:80:9e:af:80:b5:2e:c9:85:
3c:6d:d1:cb:40:c0:eb:60:09:3e:e7:2e:bc:cf:84:a6:c9:e8:
e4:3b:6c:03:a5:63:3d:d7:1b:f4:33:70:e4:a0:75:22:b5:2e:
2e:08:27:c6:d1:54:c8:13:35:b2:64:0c:96:db:46:b8:d3:77:
79:6e:cc:35:f5:f8:59:84:c8:02:bf:e8:61:1c:d6:71:68:a1:
54:ac:e0:ee:e8:92:30:5e:dd:0f:e6:8b:6f:94:38:01:9f:8f:
70:43:7f:e5:40:8b:95:90:ba:7c:79:98:fd:bd:75:65:03:ad:
13:60:44:49:1b:0f:b2:57:16:32:57:95:13:91:3b:3f:5b:e7:
05:a2:3e:6c:91:0c:a3:95:0f:c2:69:c6:70:64:3b:d2:85:c5:
f2:03:2b:e0:bf:ed:e0:2c:53:27:ff:a4:78:d6:73:ff:09:a2:
b2:39:6a:4e:48:4c:a8:30:47:16:94:0d:02:9c:88:e1:90:4d:
e9:5d:38:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:28:23 2025 by rpki-client