Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.mft
File: PJIZ2sNYSYbni0Hcn_tiJiO0rGE.mft (raw, json)
Hash identifier: c6hiPxcAnafTqzLMCJScaQDu9l7ci6xqKjeG6sLz8is=
Subject key identifier: 7B:8B:D1:4E:A2:8D:B7:4E:A5:BD:03:72:49:07:DD:1F:FD:DF:16:1B
Authority key identifier: 3C:92:19:DA:C3:58:49:86:E7:8B:41:DC:9F:FB:62:26:23:B4:AC:61
Certificate issuer: /CN=3c9219dac3584986e78b41dc9ffb622623b4ac61
Certificate serial: 019881D4A9C345655C603E51D0909E73A29B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.mft
Manifest number: 0311
Signing time: Thu 07 Aug 2025 00:00:54 +0000
Manifest this update: Thu 07 Aug 2025 00:00:54 +0000
Manifest next update: Fri 08 Aug 2025 00:00:54 +0000
Files and hashes: 1: PJIZ2sNYSYbni0Hcn_tiJiO0rGE.crl (hash: gej4vFfaUW+UycDjpq04TrG2+/IhvK+a+YhKC6VCatw=)
2: x_RfurRNedmEj2hSqHVNcrKbV_E.roa (hash: 8G+RNYkhEQwOffPjlh7thkZsriDB79Nwv1PSXlUOkh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d4:a9:c3:45:65:5c:60:3e:51:d0:90:9e:73:a2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c9219dac3584986e78b41dc9ffb622623b4ac61
Validity
Not Before: Aug 7 00:00:54 2025 GMT
Not After : Aug 8 00:00:54 2025 GMT
Subject: CN=7b8bd14ea28db74ea5bd03724907dd1ffddf161b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c7:bd:f7:56:c6:e8:25:9a:19:54:16:1b:dc:
69:3d:29:f1:d0:32:11:56:76:c8:71:f9:ff:28:f1:
7e:dd:a3:93:85:ef:8c:7d:40:68:47:f9:f1:20:48:
01:bc:1d:d6:8e:09:ca:44:26:ac:9c:6e:0e:6e:ee:
76:98:49:5c:95:78:42:a5:1a:fb:4d:80:b2:f4:de:
44:9f:a2:97:d5:64:f8:0d:7c:b0:92:3e:37:10:30:
09:d7:84:3f:33:cf:e3:89:fb:6e:a7:de:2d:54:c3:
ca:aa:0a:d1:e3:64:f8:35:40:b6:7f:be:fe:2d:ce:
4d:c4:e3:93:3b:48:b4:87:6e:72:f9:60:a9:28:aa:
9b:f0:60:ae:bd:db:40:85:29:3e:c8:69:8a:38:ed:
da:46:33:ca:c1:2e:d3:04:ce:d4:59:3a:8f:6b:30:
bc:d1:fb:4a:55:e7:5f:1c:30:7b:f5:79:d0:46:dd:
63:97:b7:28:3a:e6:da:ee:02:6c:df:4e:72:dd:56:
6b:35:83:40:42:ea:e1:1f:c5:55:37:82:5e:ad:37:
97:5e:f9:54:fe:3c:48:3e:b3:ae:fb:ff:cf:34:5f:
ff:6e:3d:f0:51:28:7e:e8:d5:cb:8b:d8:ff:e6:3d:
91:53:4e:02:40:99:16:b7:a1:cc:57:c2:ca:81:e8:
ff:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8B:D1:4E:A2:8D:B7:4E:A5:BD:03:72:49:07:DD:1F:FD:DF:16:1B
X509v3 Authority Key Identifier:
keyid:3C:92:19:DA:C3:58:49:86:E7:8B:41:DC:9F:FB:62:26:23:B4:AC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:fb:e8:f6:14:f2:6a:97:6f:27:86:87:c0:d5:a7:43:a7:0b:
5e:74:8e:a3:88:0a:8d:76:f2:03:a9:d7:e6:c1:0a:38:d1:61:
0c:85:4a:ea:83:08:b3:c3:73:66:82:9e:ae:e2:79:cf:5c:2b:
f2:93:21:e5:5a:5d:03:c8:07:0c:06:e9:0c:e8:c9:11:89:1e:
3a:75:34:55:df:42:c6:92:a8:33:65:cb:75:94:0d:b3:61:d1:
63:99:8a:43:3f:c8:f4:1b:0e:1b:99:75:bb:2d:2b:8e:bd:3e:
25:52:98:cb:bb:eb:1b:bb:7b:cc:f0:61:b5:4e:3b:3e:87:05:
e1:57:23:33:4d:67:64:a8:64:24:84:4e:94:5f:bc:c8:78:8f:
2d:a1:0b:ba:af:f4:2d:29:ca:33:6e:bf:c4:d9:70:5d:50:e1:
d9:66:30:fe:ca:b7:d1:c6:b4:fd:ca:69:14:b3:97:1b:a3:e4:
b6:a6:5d:83:65:5a:77:55:7e:a1:23:ce:16:52:37:0c:5a:ca:
4f:ed:eb:7d:15:46:a8:9d:fd:39:b1:2d:9d:0c:29:c2:09:70:
98:84:19:49:4b:f8:20:aa:ab:f9:f3:bf:af:54:e0:53:50:bc:
7e:15:7f:fa:05:5f:e5:11:96:63:1a:f1:ae:15:87:65:0e:a2:
85:a4:ea:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:16:17 2025 by rpki-client