Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
File: pJKfzWHcadzPvgHV_wA1tBrJUmA.mft (raw, json)
Hash identifier: /i5v+mzp65HfHgzzZyJFNREP6C+0yTb9a4vzTSq+vjY=
Subject key identifier: B9:D4:E7:0E:08:06:A9:A3:BC:A6:DF:BC:E8:4D:0C:B5:63:EF:B3:84
Authority key identifier: A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60
Certificate issuer: /CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260
Certificate serial: 019885B15C1FCA4DA7307DEA3449F445D702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
Manifest number: 0F35
Signing time: Thu 07 Aug 2025 18:00:49 +0000
Manifest this update: Thu 07 Aug 2025 18:00:49 +0000
Manifest next update: Fri 08 Aug 2025 18:00:49 +0000
Files and hashes: 1: FMd4ncvFc0vMJ63ZqH_KhMZqr00.roa (hash: GAIpznWNN7ttQuk7XL5JgmFjADI10rnA9JaXxJOak4g=)
2: pJKfzWHcadzPvgHV_wA1tBrJUmA.crl (hash: F6I7dDeZkGW1jiy+PRlapYn9v86GDCzmRbQGdizIRVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:b1:5c:1f:ca:4d:a7:30:7d:ea:34:49:f4:45:d7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260
Validity
Not Before: Aug 7 18:00:49 2025 GMT
Not After : Aug 8 18:00:49 2025 GMT
Subject: CN=b9d4e70e0806a9a3bca6dfbce84d0cb563efb384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c6:b9:10:10:bf:f2:ee:2a:45:5b:70:13:fb:
3d:25:a8:6c:53:e2:1e:76:26:e9:bf:75:dd:2d:93:
f3:9a:1d:b8:e1:f0:ce:5b:86:1f:a3:c0:4b:2e:88:
d6:f7:fd:a6:38:9b:7a:fd:79:cf:34:0a:fc:6e:ce:
57:1f:d4:5d:1a:7f:4f:4a:d7:0b:4c:d7:d5:8d:3a:
2d:46:72:44:94:03:e6:64:5b:0c:dd:fa:ca:1b:18:
18:68:ed:8c:e4:b8:18:cc:25:47:81:30:fc:4c:60:
db:b4:d3:b2:fb:92:fe:26:fb:b6:d2:c2:8d:e5:5a:
60:24:90:b1:5f:8f:52:27:0b:75:a3:2a:d9:6d:0a:
ca:86:91:ef:bb:cc:c9:5b:b8:f7:bc:9f:b2:f5:58:
9d:ac:af:10:7a:97:e8:21:e0:78:95:c3:91:8a:9a:
8e:5e:3c:0e:25:c0:95:22:53:3b:1b:e9:24:ef:3c:
a7:47:78:a8:2c:c2:ab:6c:5e:3d:c4:ca:61:43:60:
8e:81:94:c8:c7:31:e4:dd:81:09:21:a1:95:62:85:
78:88:bb:ce:cd:31:54:32:c1:cb:78:3d:74:c0:81:
ed:4d:e9:73:af:fe:b5:1f:f3:6a:35:7d:91:b2:75:
c2:41:16:75:6e:0a:c8:bf:c6:19:b9:b0:44:18:03:
75:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D4:E7:0E:08:06:A9:A3:BC:A6:DF:BC:E8:4D:0C:B5:63:EF:B3:84
X509v3 Authority Key Identifier:
keyid:A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:1c:f1:1a:6f:00:88:8b:dd:15:12:ab:ed:dc:4b:42:51:e5:
be:12:ee:ab:18:33:9e:49:23:45:f6:37:66:0f:97:73:30:13:
80:fd:ac:a7:a4:31:8b:5b:25:02:81:c3:63:18:bf:9b:07:ef:
e6:fe:92:5e:60:a0:f4:3d:f6:4d:67:f8:05:5b:32:9f:78:dd:
1c:e5:35:17:5e:9d:60:bf:8e:0a:d2:20:c6:87:47:f3:77:60:
0e:90:20:b3:b4:a4:d1:ce:9b:a6:b6:8f:a9:0b:37:f0:c1:dd:
eb:ba:0a:05:d5:53:d0:2a:0d:80:9c:8b:84:ba:24:27:b3:d5:
6b:52:b3:2e:ea:ba:f3:43:b6:42:f5:7d:68:fe:61:63:3c:06:
65:91:74:fa:fc:00:ce:b7:ba:6d:3e:f6:f3:3c:a1:99:ea:cd:
32:04:69:cd:31:6b:b6:22:14:4b:c4:36:2c:3c:a6:7e:a1:98:
db:23:47:9c:81:01:66:76:66:3d:50:a3:30:d1:f2:ff:fc:89:
ff:0e:5e:3a:9c:2c:37:9c:ab:45:72:d5:1e:52:66:24:d9:43:
6d:16:2e:41:25:60:2c:c9:75:c4:48:21:26:5c:30:85:de:42:
cf:a7:df:b4:2e:33:71:12:f3:fb:3b:f4:e6:7d:9c:af:fc:e9:
fc:2d:fa:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:35:07 2025 by rpki-client