Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
File: PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft (raw, json)
Hash identifier: n4QLYQa8s8yywRckxYzF1Niy4zrjlyCxrEghc7Ac2wA=
Subject key identifier: A8:03:24:95:12:FF:B7:1F:94:5C:0B:73:32:46:38:FE:0F:B4:DD:4B
Authority key identifier: 3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
Certificate issuer: /CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Certificate serial: 019872986979BD9CE42F7A67E84D0D80E909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
Manifest number: 082E
Signing time: Mon 04 Aug 2025 01:00:47 +0000
Manifest this update: Mon 04 Aug 2025 01:00:47 +0000
Manifest next update: Tue 05 Aug 2025 01:00:47 +0000
Files and hashes: 1: LN9Y4VYuBPHcqnOfi1whRTolirA.roa (hash: oKsBnnzz1/szS+noOPKG/sq6k5F0SOG+hrVgu4395L0=)
2: PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl (hash: BAAInggwx6T/txMqfnkGmoD019bwLJc334lVwqxIEN4=)
3: aOjeQ_LFlj3ColO7fwm2y03noI8.roa (hash: ZPkI6QIM1mrIPNFFrmXcy/CvfmDUl8kYYI0d126tg6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:69:79:bd:9c:e4:2f:7a:67:e8:4d:0d:80:e9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Validity
Not Before: Aug 4 01:00:47 2025 GMT
Not After : Aug 5 01:00:47 2025 GMT
Subject: CN=a803249512ffb71f945c0b73324638fe0fb4dd4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bd:a0:a4:3e:26:42:bd:dc:99:13:6f:f6:15:
ca:85:be:ec:37:c9:6f:bd:2e:95:ed:da:a4:b5:20:
e9:e6:9e:cd:5c:e4:9a:11:1c:3f:7e:9c:65:69:9a:
e0:f8:9c:17:2c:49:72:61:e8:02:01:42:3a:60:83:
d1:59:c1:88:ef:51:55:f5:30:bd:a9:96:93:0f:97:
16:f1:93:0a:10:31:bf:6c:82:0f:59:00:80:a0:9b:
dc:c5:63:c2:e2:ce:e0:30:63:19:f8:3d:be:f8:47:
cc:86:e3:66:8e:d1:ee:02:ca:57:10:d2:12:79:44:
f6:f5:91:fc:8a:08:c9:40:40:a4:5f:4a:93:ef:88:
ca:c7:1a:98:15:87:a0:27:8d:66:a8:f6:68:49:a8:
ad:6d:23:32:ed:20:0e:25:d1:74:c9:37:2b:76:5e:
9e:9f:05:3b:cc:5f:29:10:a0:72:6e:fc:b0:cf:0f:
9d:8b:b5:ed:6c:2b:bd:8c:75:02:d3:95:24:ce:59:
59:74:b2:a7:b8:e0:8d:e6:33:8d:f8:fe:a3:1b:f2:
c3:0a:02:f7:62:71:ab:ff:b6:06:9e:ae:eb:19:af:
32:2c:3f:c8:a8:c8:37:6a:a3:25:f7:a7:b2:59:4d:
74:64:00:2b:a6:66:f8:82:0e:c3:f7:42:38:ea:71:
15:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:03:24:95:12:FF:B7:1F:94:5C:0B:73:32:46:38:FE:0F:B4:DD:4B
X509v3 Authority Key Identifier:
keyid:3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ab:a9:e2:98:92:de:1a:03:94:e9:44:24:ff:aa:9a:fc:18:
ef:51:a8:5f:22:66:c3:2b:fd:c4:97:c4:88:76:a4:92:41:a2:
db:a9:b5:f5:ba:c4:aa:ac:02:65:83:9b:58:fb:3a:7f:6b:f5:
42:18:37:af:44:e9:bf:5c:46:eb:ec:8a:8d:fc:ce:17:20:55:
e0:4a:fd:62:69:0c:01:9c:57:59:7c:49:fb:66:84:82:06:6d:
6b:4e:51:b1:80:c6:fe:6b:c3:b2:69:2f:7a:8c:19:3d:d2:b9:
a3:34:69:20:4f:51:75:78:74:de:a9:40:15:23:ed:2d:60:8b:
63:ac:3b:3f:71:b5:39:a0:c6:19:8d:8e:aa:d9:ee:28:53:da:
ed:72:ce:9e:06:2c:ee:d1:d5:92:44:51:fe:2f:c8:04:f9:e2:
95:de:f9:c1:6b:19:00:f4:08:14:da:27:de:c8:f5:c8:27:6d:
86:45:1e:1d:cd:bc:53:23:ca:d3:0d:10:f4:32:e5:60:11:8f:
4c:a5:c1:ee:ac:f2:42:a9:79:53:10:80:58:4d:74:13:19:2d:
7a:43:38:a2:99:8c:17:66:5f:2a:a7:7f:72:fd:9b:b4:4f:99:
2b:6e:21:d0:a8:3c:7d:9f:43:dc:66:6a:8e:28:1b:f3:5f:9f:
fb:c3:a7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:48 2025 by rpki-client