
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft
File: pjx_KbiD9LPCQ22WPchTKhpjTMo.mft (raw, json)
Hash identifier: dr4/01bkWNKcfsLkSHvTT2WRCQh0zFrnCC/ecdGK1OQ=
Subject key identifier: 7D:26:6D:5E:31:E5:90:71:CC:17:27:D8:5E:D1:DE:80:28:BD:6A:F5
Authority key identifier: A6:3C:7F:29:B8:83:F4:B3:C2:43:6D:96:3D:C8:53:2A:1A:63:4C:CA
Certificate issuer: /CN=a63c7f29b883f4b3c2436d963dc8532a1a634cca
Certificate serial: 0198819E20FB9B5D32E4DF3982AB2A5A7975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjx_KbiD9LPCQ22WPchTKhpjTMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 23:01:20 +0000
Manifest this update: Wed 06 Aug 2025 23:01:20 +0000
Manifest next update: Thu 07 Aug 2025 23:01:20 +0000
Files and hashes: 1: hl9YaHYMtemKEI7D_jA4qgPzTFk.roa (hash: HxBm5oPeeE9yGfs365dZANWUtoaHONFCOpgK8z3kXuU=)
2: oiBEvO2p29cLUYapByjoEoYyzDg.roa (hash: vhwwgY7QGbDe4OWAOvjloCFsUXviJLu/e8Pkbh7LI2o=)
3: pjx_KbiD9LPCQ22WPchTKhpjTMo.crl (hash: r/VeGMlngi+fJ+/L+UTr7ZMF0ThlRFZUmzrUNyp3oYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjx_KbiD9LPCQ22WPchTKhpjTMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9e:20:fb:9b:5d:32:e4:df:39:82:ab:2a:5a:79:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63c7f29b883f4b3c2436d963dc8532a1a634cca
Validity
Not Before: Aug 6 23:01:20 2025 GMT
Not After : Aug 7 23:01:20 2025 GMT
Subject: CN=7d266d5e31e59071cc1727d85ed1de8028bd6af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:76:0c:fb:23:8a:5b:dc:ac:f4:ff:c5:21:3f:
68:c1:50:8e:2c:69:f0:3c:74:ea:be:81:00:d7:36:
8c:d9:83:d6:82:ea:c2:a6:62:ec:65:5d:ae:3d:8b:
fc:ce:1c:be:80:8b:04:c7:eb:e8:a9:a5:71:16:78:
3f:73:28:84:2c:e7:6c:6a:72:a4:ce:48:32:3f:28:
d5:2d:6b:44:07:b8:1c:d8:ab:9d:fb:9a:3b:f4:a7:
19:9d:d9:9c:1b:48:3e:27:18:1e:a0:ef:dd:62:04:
a0:43:d8:f4:30:de:dd:f0:bb:ff:df:e7:18:51:21:
0d:e8:93:99:6c:61:1b:c6:7b:a4:1d:66:c5:1b:d1:
c5:3b:df:de:42:df:e4:9b:e3:c9:9c:59:8b:78:62:
19:84:e3:c5:3e:3f:c2:9d:91:07:5d:bc:aa:99:37:
0f:8b:eb:fd:24:d8:00:f0:60:00:e5:3e:87:65:00:
20:9f:a1:4a:ce:cf:5b:2a:ce:4f:22:0c:69:17:53:
b5:8d:85:5f:f7:62:65:28:bb:e8:bc:df:3b:fd:28:
59:7a:72:06:9a:fa:c9:d4:94:48:67:19:fa:9d:25:
cd:21:97:8c:df:22:40:99:ec:31:56:45:68:54:3a:
c7:24:ef:1a:d2:3d:b5:c2:35:56:6b:ee:05:42:db:
7e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:26:6D:5E:31:E5:90:71:CC:17:27:D8:5E:D1:DE:80:28:BD:6A:F5
X509v3 Authority Key Identifier:
keyid:A6:3C:7F:29:B8:83:F4:B3:C2:43:6D:96:3D:C8:53:2A:1A:63:4C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjx_KbiD9LPCQ22WPchTKhpjTMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:fb:4a:de:b0:c5:9c:e4:e6:c1:66:98:4d:94:90:bd:91:4c:
ac:a1:8c:24:f7:ab:58:36:55:ec:8e:39:51:fa:fc:88:8c:70:
70:6f:f1:ae:40:1a:92:b8:94:7d:10:d3:ab:69:56:aa:b9:17:
00:61:2c:b5:2f:82:38:14:04:c9:c5:e7:6e:0a:d1:81:00:f4:
8f:13:16:bd:47:37:bb:50:c4:47:aa:16:7c:a4:7e:6a:d8:23:
31:1c:d8:1b:72:f8:57:27:cb:06:1d:ac:03:fa:43:fe:71:5e:
3a:bf:0b:39:c5:b6:d1:3b:3d:01:22:4a:24:52:48:db:49:5c:
2d:b2:ce:36:8a:1b:af:0e:1d:c4:bc:21:b1:dc:4c:86:49:dd:
d0:8c:a9:b6:a1:9f:8b:81:e1:5d:07:0a:9f:c2:9f:33:a9:77:
1b:28:3a:9c:3b:8b:4d:69:fd:62:4d:d8:dd:5b:46:85:a9:4b:
c9:4c:c6:6f:5e:67:29:3f:26:0f:0c:c1:37:17:9c:c9:5e:0e:
ff:6b:d2:90:d9:42:f7:0a:d9:fb:a4:dd:a4:a3:33:98:a0:58:
6e:8c:31:96:9b:24:c8:6b:1a:dc:87:89:bf:36:c8:be:16:a7:
59:e6:09:5a:f6:c3:34:eb:6d:83:5e:ef:bf:0c:3e:fd:5c:03:
51:e3:e1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:18:43 2025 by rpki-client