Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
File: pJ9iZvYaHszU3uCUzHHG24a7s3s.mft (raw, json)
Hash identifier: yNseqTU00Y4irx4fisLdU/6eEboGaOGZnPC0iybruTM=
Subject key identifier: A5:94:C4:D2:C3:57:79:1B:C4:24:E2:AF:0F:54:C3:4F:91:99:78:75
Authority key identifier: A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
Certificate issuer: /CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Certificate serial: 01988BB36A2FA9D29A0330C986F5A3382CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
Manifest number: 0E51
Signing time: Fri 08 Aug 2025 22:00:47 +0000
Manifest this update: Fri 08 Aug 2025 22:00:47 +0000
Manifest next update: Sat 09 Aug 2025 22:00:47 +0000
Files and hashes: 1: Fhu6eteSMh-I7iJVqiXmMyG026Q.roa (hash: F9PD+ubtwzitBN7aKci6vGXmXOFiGygMSM+2xXKhmeU=)
2: O79Bxg0BR0VFMQ_a0ZyezMPMz0M.roa (hash: wV2tjiSpv38ZVgcsHYOWBKswr9oGmugpMMubTRaOGF4=)
3: pJ9iZvYaHszU3uCUzHHG24a7s3s.crl (hash: urTS0387W9lFCaUiFjG6nLLkNtyA0tgZQKTimlusSok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:6a:2f:a9:d2:9a:03:30:c9:86:f5:a3:38:2c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Validity
Not Before: Aug 8 22:00:47 2025 GMT
Not After : Aug 9 22:00:47 2025 GMT
Subject: CN=a594c4d2c357791bc424e2af0f54c34f91997875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:13:24:72:c7:8e:6c:8c:42:4d:d0:ff:46:38:
6b:57:76:86:3b:72:21:8e:94:20:94:97:c4:4f:d5:
84:bb:c2:c2:e4:13:76:f6:54:f3:99:83:86:c4:07:
75:35:80:5d:55:2e:b6:24:3d:8a:ce:5e:ee:b3:4f:
c4:7a:f8:ea:19:7b:15:09:ce:9f:84:e8:b5:21:3c:
99:36:a9:2d:41:7d:76:0b:82:f1:52:4a:20:e2:29:
7d:1d:1b:03:09:67:f1:8d:c0:15:a0:6b:23:79:82:
6d:c2:26:fd:41:db:9c:cd:c6:49:ed:6c:20:c6:64:
e4:d0:40:34:03:96:e3:81:f7:92:d1:70:f4:5e:7a:
f6:95:b0:b3:61:14:84:3a:70:03:8d:dc:1b:ad:cb:
72:05:7c:c5:63:90:40:97:8f:da:b5:0a:d5:fd:57:
d3:0e:7a:65:cc:be:07:65:5e:57:ff:c4:ef:db:1e:
07:40:d4:98:09:c0:d6:fc:01:eb:5d:f6:f4:48:9f:
7b:74:c4:bc:5e:61:92:6e:3f:e6:72:82:84:da:ef:
dd:e6:76:1d:34:de:68:db:cf:f6:73:73:13:9c:70:
4d:23:ea:93:e7:be:2e:0b:66:80:e6:63:98:0e:74:
5d:6b:a5:62:28:67:bc:67:5c:46:51:e8:2d:6f:22:
a5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:94:C4:D2:C3:57:79:1B:C4:24:E2:AF:0F:54:C3:4F:91:99:78:75
X509v3 Authority Key Identifier:
keyid:A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:0c:b2:99:71:0d:2b:65:d3:43:f3:1a:56:8e:f1:d4:97:be:
28:04:4c:98:35:f7:bc:13:82:f7:cc:14:d6:14:0f:7d:af:2f:
f2:e0:63:5f:75:e6:84:16:e4:48:60:2a:ff:c9:eb:23:1c:7b:
d0:bf:a5:f1:08:ea:e8:96:80:29:f9:79:71:bd:76:93:10:3c:
5a:54:36:8e:eb:49:b5:bb:cd:25:ba:ca:09:f4:ce:06:c4:be:
75:76:0e:c4:4c:e9:5d:a9:5e:bc:26:59:35:06:0a:e7:9a:43:
de:49:94:6b:86:0e:d5:91:c7:7f:6d:1e:7c:8f:e2:29:e2:19:
8f:d7:c1:7d:0d:d0:56:98:5a:66:7d:f2:ca:c2:32:1e:91:dd:
eb:06:46:00:ec:cb:97:62:3e:12:15:5f:1b:28:b4:53:d6:2b:
53:ef:26:d6:85:17:c5:c8:65:33:09:b6:e7:11:f0:02:d1:53:
33:8e:a4:91:85:ab:aa:06:ee:98:fb:78:a4:ac:fe:ed:aa:0e:
0c:3e:b6:f0:1d:b1:02:bc:2d:1b:b1:7c:96:be:73:24:df:00:
35:69:bc:e5:2e:28:5f:b4:8b:32:41:d1:6c:5f:39:bf:85:eb:
a3:79:75:89:48:21:b0:2f:e9:64:fc:66:2c:cd:7b:98:77:c3:
7d:9c:fa:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 03:04:16 2025 by rpki-client