Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
File: PijW8T41ndC7RTSiRlWXTFfSsP4.mft (raw, json)
Hash identifier: 9xDW6maSGgAngkChMDlHX0EG2gklagTvyA04PbwyOtU=
Subject key identifier: 69:4A:9E:5F:F4:1E:91:0B:E6:DC:4F:FB:D9:2C:D8:A6:87:72:A1:80
Authority key identifier: 3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
Certificate issuer: /CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Certificate serial: 01987F0ABC51E4EE80065DA08B71AA8C0A57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
Manifest number: 08AA
Signing time: Wed 06 Aug 2025 11:01:06 +0000
Manifest this update: Wed 06 Aug 2025 11:01:06 +0000
Manifest next update: Thu 07 Aug 2025 11:01:06 +0000
Files and hashes: 1: PijW8T41ndC7RTSiRlWXTFfSsP4.crl (hash: +HvZTDC8pO9Cri26qMfBa6deab+hRpE6cACTwwkl0hU=)
2: _-WfGC5BAnZg40YHw-xkJtMu1y8.roa (hash: fBNuXZvCsQYQGG7z7gRAz8VOFKDx2N1N7BNPe/5ZuRI=)
3: quGmI9u7kZ_srTH3LAyxtNKvCAo.roa (hash: RhLYYew4zXRTIVHsFT/3lhPwJj/c1cXNf2IyJ1qOi6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:0a:bc:51:e4:ee:80:06:5d:a0:8b:71:aa:8c:0a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Validity
Not Before: Aug 6 11:01:06 2025 GMT
Not After : Aug 7 11:01:06 2025 GMT
Subject: CN=694a9e5ff41e910be6dc4ffbd92cd8a68772a180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:29:6f:56:5c:b7:df:1c:01:d8:c9:d9:8c:21:
38:5b:94:24:80:21:8b:8c:ee:e9:cf:77:36:21:1c:
f3:95:96:06:cd:4f:fd:7d:c4:88:4d:20:5b:a0:99:
71:e6:06:20:d7:99:60:f5:42:cf:51:55:c9:ea:e2:
04:70:23:63:ad:16:9d:56:ca:7b:dc:80:0d:64:9b:
fb:52:b9:bc:27:83:f5:04:5a:28:1c:33:8f:6c:2f:
fb:29:d8:49:ab:e6:50:28:31:eb:82:5b:f8:c2:6f:
1e:ee:90:be:30:19:8e:f6:25:b6:ec:ae:31:70:bc:
0e:30:17:35:6f:85:bf:ee:3b:05:bb:f4:d2:09:65:
f9:36:1e:69:22:14:d5:42:d7:04:f1:b1:40:ef:a0:
99:78:ff:59:55:57:62:33:f9:67:a0:74:4c:e8:4f:
54:3b:c9:73:8d:04:72:eb:c4:b0:a8:0d:a2:41:27:
42:cd:6a:cc:bd:21:c6:64:b9:ef:22:0d:8c:45:a8:
cc:f0:3b:97:3c:6e:13:d5:c2:49:1a:5e:94:47:d8:
96:02:8c:34:92:fe:5d:39:48:c8:58:77:6b:d9:f1:
9b:e2:01:9b:33:37:11:14:0e:d0:c2:fe:18:1e:af:
94:99:8b:6f:15:03:c7:fc:49:33:d1:97:7a:f1:ce:
fb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4A:9E:5F:F4:1E:91:0B:E6:DC:4F:FB:D9:2C:D8:A6:87:72:A1:80
X509v3 Authority Key Identifier:
keyid:3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:54:99:a0:dc:5b:8b:de:02:42:c1:8e:3e:80:7b:0e:1c:38:
95:e4:6b:cb:c9:dc:5d:8e:7f:d4:73:d2:d4:4c:e1:f9:e8:b7:
73:be:da:f0:32:a9:f2:36:8c:c4:4c:99:a4:ae:44:fb:cc:75:
84:ad:42:d1:55:9f:e5:63:9e:d4:a8:78:25:8e:c4:6a:9c:d6:
ea:f2:c8:e7:ad:7f:f0:fc:30:9f:40:e5:30:ef:d2:3b:77:ef:
f1:b1:4c:3e:75:b6:f5:7e:c2:b8:91:47:79:38:09:d6:96:b1:
0a:57:53:74:74:33:b8:56:67:00:b4:1f:05:28:08:e8:13:d7:
9c:76:33:e9:1e:94:7f:b6:ea:7b:82:64:f3:c7:da:21:99:e3:
c4:c9:96:ef:f9:3e:d6:ea:59:55:b6:1c:39:e6:64:e3:67:c3:
8d:9b:2c:ff:bb:9a:73:76:49:7a:5c:d8:ba:6a:18:c6:65:76:
7e:8c:1a:8d:e6:a5:a8:56:1d:f1:f4:44:ee:48:a3:ac:35:8e:
7f:27:f0:c7:32:fe:59:6d:a5:67:b0:53:57:8a:56:ff:d5:6a:
44:7b:24:59:ad:36:7d:6d:7f:3a:b1:2d:1b:c9:7c:3c:83:8b:
14:78:00:c2:fb:84:30:36:16:82:cf:43:a5:66:3d:07:f7:2f:
d5:89:da:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:14:59 2025 by rpki-client