Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
File: pjxtuvK89S8n5YwticbBxVuV3yY.mft (raw, json)
Hash identifier: K74ZUM4F+v1TQh2uslPtbdAnUYXqtIrSfAV+oKGwylI=
Subject key identifier: DF:46:20:A5:C4:48:5C:21:14:1F:4B:FD:13:35:01:FD:95:C1:4E:2D
Authority key identifier: A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
Certificate issuer: /CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Certificate serial: 019768BBCC793341A36B9BD0814D1305E6B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
Manifest number: 0804
Signing time: Fri 13 Jun 2025 10:00:27 +0000
Manifest this update: Fri 13 Jun 2025 10:00:27 +0000
Manifest next update: Sat 14 Jun 2025 10:00:27 +0000
Files and hashes: 1: NANvvd_V7iIUj7mJYMTOqque3Po.roa (hash: z7IZKlxruCsipOwPt42pcffU0s1l9uB/ojQdv9l2AxM=)
2: pjxtuvK89S8n5YwticbBxVuV3yY.crl (hash: 1l/HlsO7IhHQB7nTwNzmjM65SVb338u0sRbW5RTNopI=)
3: yG3GRDnYBo69OMDgoi6l30IqdQQ.roa (hash: s36xnlN956H1thb9LXHw6o5GvT+TFLxm0zFqGU00y/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:cc:79:33:41:a3:6b:9b:d0:81:4d:13:05:e6:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Validity
Not Before: Jun 13 10:00:27 2025 GMT
Not After : Jun 14 10:00:27 2025 GMT
Subject: CN=df4620a5c4485c21141f4bfd133501fd95c14e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:85:ac:34:e4:6d:05:6a:ba:6b:d9:89:1d:e7:
dd:df:2c:95:fd:aa:79:56:58:a4:99:6a:62:a4:df:
e6:8e:ad:92:23:fe:68:ab:32:8a:01:ce:a1:ba:f5:
99:bf:7d:92:6b:c2:b1:a5:9e:2f:c7:12:ea:22:62:
43:24:f3:98:f3:7e:79:4c:b9:57:6e:52:47:c6:72:
0c:b3:e0:9b:2a:8a:77:93:79:02:75:8d:76:38:ed:
5b:5e:b6:8f:ca:5d:fe:51:84:05:59:ac:d2:07:f8:
88:11:31:b9:f7:ae:a0:5a:a4:b1:c9:81:57:01:7f:
9b:7c:b6:ce:74:04:18:7f:f8:59:7e:92:8d:11:90:
92:b5:dc:b7:35:12:21:d9:47:96:78:9a:f2:a0:7a:
32:ca:7d:0b:6e:13:69:9b:87:43:ed:8f:65:55:e2:
cc:24:69:42:b4:8e:42:51:cd:a0:e1:be:62:b4:ce:
b2:f3:3f:e9:0c:fa:61:3e:81:b1:b0:68:1f:09:dc:
b0:24:91:16:1f:62:b3:2e:cd:34:63:b3:67:95:15:
0f:78:18:c8:9c:03:b5:2f:01:f2:8b:c5:dd:da:fe:
a8:96:41:dc:3d:74:5d:81:a5:5a:ec:fb:a8:e4:fd:
69:39:7f:18:33:50:69:4d:db:20:d7:fe:3d:64:93:
56:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:46:20:A5:C4:48:5C:21:14:1F:4B:FD:13:35:01:FD:95:C1:4E:2D
X509v3 Authority Key Identifier:
keyid:A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ba:6d:c4:cb:61:8b:3a:d1:4d:21:23:39:3a:88:95:a9:69:
db:47:24:be:4d:60:72:7e:2d:e1:7e:25:6e:ee:e8:8a:ed:56:
aa:4c:42:d2:f3:ab:21:e3:99:62:6f:14:05:ce:20:cd:bc:fa:
78:c6:bb:75:44:1a:2b:85:d3:37:f8:1c:36:e7:ab:b3:ee:14:
d8:c2:b0:83:22:b3:25:d6:5b:57:50:9b:3d:64:a5:86:38:d1:
d4:4c:53:c2:26:dd:a6:ca:93:e6:4f:51:42:e3:32:8a:8e:89:
d9:7d:5f:78:e6:07:3d:e1:4c:64:1f:34:76:f6:9b:e6:c1:7d:
72:91:b4:25:35:bd:86:24:54:3a:16:91:e5:9d:03:6e:84:01:
f8:26:e7:6d:01:bd:6b:34:b2:7b:15:f1:1f:3b:9e:99:ec:ac:
ee:44:63:dd:a5:d2:0d:9f:56:0e:01:8f:29:04:fb:82:8e:8c:
e7:c1:c4:b7:a0:ff:43:ec:d0:ae:9c:e4:56:4c:84:bd:e9:66:
68:25:05:24:90:5b:b7:f2:89:24:a3:ce:be:7d:ac:b8:68:5f:
73:5c:49:de:46:0f:b3:e4:9d:86:24:1b:95:07:41:a5:46:4d:
ac:51:d0:74:1a:28:a5:14:58:26:09:33:ba:4e:e3:6f:54:3f:
bb:55:ba:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:42:27 2025 by rpki-client