Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
File: PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft (raw, json)
Hash identifier: w8b++fv7w6eQbsbmqp1MRX7bNCMv7mlHHJJNneqDCek=
Subject key identifier: 39:5F:96:14:C5:F2:69:95:3A:33:E8:38:42:20:87:04:87:BF:5A:7A
Authority key identifier: 3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
Certificate issuer: /CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Certificate serial: 019771BF44CDC6713C3327C311E68BEBD8CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
Manifest number: 07A9
Signing time: Sun 15 Jun 2025 04:00:49 +0000
Manifest this update: Sun 15 Jun 2025 04:00:49 +0000
Manifest next update: Mon 16 Jun 2025 04:00:49 +0000
Files and hashes: 1: LN9Y4VYuBPHcqnOfi1whRTolirA.roa (hash: oKsBnnzz1/szS+noOPKG/sq6k5F0SOG+hrVgu4395L0=)
2: PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl (hash: SMwaStb11mVliJ4AdWLmZSiRwEwzzF0OGeuRAanwD5Q=)
3: aOjeQ_LFlj3ColO7fwm2y03noI8.roa (hash: ZPkI6QIM1mrIPNFFrmXcy/CvfmDUl8kYYI0d126tg6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:44:cd:c6:71:3c:33:27:c3:11:e6:8b:eb:d8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Validity
Not Before: Jun 15 04:00:49 2025 GMT
Not After : Jun 16 04:00:49 2025 GMT
Subject: CN=395f9614c5f269953a33e8384220870487bf5a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7c:b9:20:c1:56:90:6c:cc:0f:78:a8:c2:e7:
95:c6:3c:38:ee:1a:8f:33:eb:b2:41:ae:37:fa:f9:
10:0e:e1:da:7d:c8:41:04:62:1a:11:88:3e:8b:19:
67:19:00:5a:65:c1:5a:43:aa:3a:1c:03:89:98:d6:
49:c5:1e:5c:d9:c9:8c:28:50:b8:89:eb:02:c6:c8:
9f:73:41:cf:69:b6:fd:c7:9f:6d:c8:6f:c1:8e:2e:
9b:09:7a:1c:28:cb:d5:0d:7c:ac:7b:0b:1b:c2:78:
04:44:bb:22:79:9c:80:10:81:dd:f3:fa:09:be:73:
57:d2:9e:f8:e2:9f:95:0b:55:6c:af:8e:83:2f:a4:
05:a5:ae:74:2f:b5:72:c8:a2:91:08:33:41:b6:60:
0a:4e:7d:b3:7b:fb:f9:2f:05:4f:1b:2c:e6:7b:73:
ce:55:fc:79:15:80:92:26:7c:4b:20:e2:88:0b:5f:
e3:69:87:7a:6e:8a:c0:55:e3:d3:7e:5b:a2:3a:17:
dd:04:c0:e4:cc:7b:92:f5:4a:9b:51:46:7b:f3:71:
3d:58:59:dd:a8:69:9d:b7:7c:8b:23:5e:f8:be:27:
9a:c7:03:fe:04:ab:50:92:2d:14:9d:74:51:0e:e3:
fb:55:df:46:ba:4c:a2:db:2e:b7:ac:83:dd:78:59:
db:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5F:96:14:C5:F2:69:95:3A:33:E8:38:42:20:87:04:87:BF:5A:7A
X509v3 Authority Key Identifier:
keyid:3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:a9:be:31:38:40:60:87:76:c3:87:9b:e1:80:79:80:c4:b4:
7e:1e:df:4d:cc:2e:55:75:1e:ff:08:bd:ef:e6:08:73:22:88:
1a:5c:c4:bf:f1:29:36:49:48:e0:a3:c1:97:2b:7b:26:4e:d6:
48:21:47:29:7d:04:1e:96:66:95:66:25:53:eb:10:4c:f3:82:
cc:e8:02:5d:82:ae:89:98:4a:2b:4d:f7:cb:28:d9:e4:e3:be:
59:9d:dd:08:c4:d9:ef:c3:80:c0:91:59:d7:db:fa:92:0b:3d:
eb:8a:bc:8a:ef:4e:68:3d:5d:c7:a1:41:90:cf:e1:a9:63:bd:
bd:63:c8:f3:4d:05:ba:cb:f8:55:71:62:11:cb:90:c3:5a:c0:
8a:df:af:7b:66:16:3f:31:57:36:38:81:86:83:94:fb:ad:b0:
24:f1:c3:7b:6f:69:39:24:32:35:5d:b3:c5:84:63:3a:0b:13:
94:05:fa:91:33:d5:a7:49:9b:f4:74:b1:a5:ca:23:3a:28:80:
59:9c:cf:d0:aa:fb:4b:b6:a1:b7:02:60:a5:a6:ba:fb:3c:73:
ac:14:04:a0:62:e6:71:c5:47:13:21:d3:a0:da:80:82:45:ac:
d1:10:8f:cf:f3:ce:99:8a:65:b0:ba:19:75:d4:29:bd:1b:2a:
14:70:c8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:38:38 2025 by rpki-client