Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft
File: pjx_KbiD9LPCQ22WPchTKhpjTMo.mft (raw, json)
Hash identifier: bYzP5TGCJ/SBhGyvzvvlu9E/3kP39GmTLw+sdv9933w=
Subject key identifier: C9:45:01:B3:93:D7:49:7F:B0:34:06:2A:E4:7C:E6:BE:E4:80:81:B0
Authority key identifier: A6:3C:7F:29:B8:83:F4:B3:C2:43:6D:96:3D:C8:53:2A:1A:63:4C:CA
Certificate issuer: /CN=a63c7f29b883f4b3c2436d963dc8532a1a634cca
Certificate serial: 0197696082A0AFA8E10BBC540F1E2F4DDBEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjx_KbiD9LPCQ22WPchTKhpjTMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft
Manifest number: 158A
Signing time: Fri 13 Jun 2025 13:00:21 +0000
Manifest this update: Fri 13 Jun 2025 13:00:21 +0000
Manifest next update: Sat 14 Jun 2025 13:00:21 +0000
Files and hashes: 1: pjx_KbiD9LPCQ22WPchTKhpjTMo.crl (hash: ed9fkO5+6cW1lOLXy1b1HbNAt5ouCE5s9uUXo/JsPPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjx_KbiD9LPCQ22WPchTKhpjTMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:82:a0:af:a8:e1:0b:bc:54:0f:1e:2f:4d:db:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63c7f29b883f4b3c2436d963dc8532a1a634cca
Validity
Not Before: Jun 13 13:00:21 2025 GMT
Not After : Jun 14 13:00:21 2025 GMT
Subject: CN=c94501b393d7497fb034062ae47ce6bee48081b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:60:a5:68:eb:d8:99:d5:c5:c0:be:da:0b:50:
74:fc:e9:2c:d7:17:1c:e5:29:10:90:63:de:5a:3a:
ec:2e:a5:ce:07:c3:ba:b8:c2:25:0f:64:47:89:50:
de:e9:fb:4a:5f:af:99:e3:1b:5a:e2:8c:95:43:65:
64:46:28:73:38:0a:50:6d:13:1a:00:dd:dd:d1:13:
24:60:12:5d:26:0f:1a:e8:af:cf:23:2f:2f:38:cb:
b3:7d:70:da:1a:61:0f:fd:ab:99:15:7f:73:73:61:
97:88:6b:6c:22:cf:2d:0f:65:f5:51:3e:72:87:95:
2f:7d:85:46:1c:f0:cc:4f:c1:12:07:84:9d:51:26:
14:0c:68:23:5f:86:94:6f:dc:e5:fc:31:0d:7e:98:
7d:1e:d5:8c:b5:a8:d8:8e:6a:8a:6b:c9:8f:78:c2:
21:25:42:8e:d0:cc:81:7b:03:ff:dc:d9:c9:6d:1a:
5c:d7:19:fd:9a:16:10:2d:be:b7:28:1f:6a:64:be:
9d:c0:db:da:d9:fe:b6:ed:17:4c:4b:dd:53:ce:ae:
00:a7:b7:bf:58:b9:fd:e9:dd:85:b5:29:1c:a1:cc:
d1:25:4d:be:fb:f7:f9:30:08:0a:4c:19:92:99:6b:
7e:d6:95:9e:2d:3b:46:94:3b:63:bb:e6:63:68:60:
d6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:45:01:B3:93:D7:49:7F:B0:34:06:2A:E4:7C:E6:BE:E4:80:81:B0
X509v3 Authority Key Identifier:
keyid:A6:3C:7F:29:B8:83:F4:B3:C2:43:6D:96:3D:C8:53:2A:1A:63:4C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjx_KbiD9LPCQ22WPchTKhpjTMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:21:a5:20:95:e5:8c:2b:de:46:60:cf:76:94:a4:cf:38:80:
d5:34:52:a9:23:3d:9e:9c:ec:6c:ec:70:bc:b6:78:f6:27:10:
f3:3a:75:6f:23:85:24:8a:64:f7:8b:f7:b8:4a:5f:16:b0:f4:
a3:f4:ba:3b:38:7d:47:b0:d8:0d:52:46:99:63:df:66:75:12:
4a:b9:d8:47:0f:67:af:de:16:35:e1:21:fc:8e:29:e1:90:59:
31:a9:94:16:5f:9c:37:e8:d3:5c:c3:c1:da:0d:0f:9f:4f:a9:
45:eb:a1:ca:a8:d9:03:85:bc:59:27:8a:7d:55:96:18:f7:a3:
fc:0c:53:bc:df:a0:f5:51:e8:08:9d:d4:65:c8:77:37:0a:01:
72:79:cf:56:a6:b1:41:6c:f3:93:91:ef:79:f1:14:e6:33:5d:
28:93:e6:93:8e:4b:d6:bb:db:0c:1e:0f:ae:47:ed:82:e5:4a:
65:e7:ee:24:4a:5e:94:4d:e3:d5:16:9e:e6:3f:19:e9:20:8f:
0b:06:a9:4e:76:cb:2c:7e:d4:4d:a0:2f:17:ee:55:d6:8d:65:
69:0b:08:3e:88:a6:7b:de:95:92:65:db:78:19:bf:22:52:49:
38:d5:32:83:f9:00:98:cd:a0:73:d6:ed:ba:7c:01:78:dd:1c:
cc:05:9f:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYIKgr6jhC7xUDx4vTdvrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2M2M3ZjI5Yjg4M2Y0YjNjMjQzNmQ5NjNkYzg1MzJhMWE2
MzRjY2EwHhcNMjUwNjEzMTMwMDIxWhcNMjUwNjE0MTMwMDIxWjAzMTEwLwYDVQQD
EyhjOTQ1MDFiMzkzZDc0OTdmYjAzNDA2MmFlNDdjZTZiZWU0ODA4MWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GClaOvYmdXFwL7aC1B0/Oks1xcc
5SkQkGPeWjrsLqXOB8O6uMIlD2RHiVDe6ftKX6+Z4xta4oyVQ2VkRihzOApQbRMa
AN3d0RMkYBJdJg8a6K/PIy8vOMuzfXDaGmEP/auZFX9zc2GXiGtsIs8tD2X1UT5y
h5UvfYVGHPDMT8ESB4SdUSYUDGgjX4aUb9zl/DENfph9HtWMtajYjmqKa8mPeMIh
JUKO0MyBewP/3NnJbRpc1xn9mhYQLb63KB9qZL6dwNva2f627RdMS91Tzq4Ap7e/
WLn96d2FtSkcoczRJU2++/f5MAgKTBmSmWt+1pWeLTtGlDtju+ZjaGDWjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlFAbOT10l/sDQGKuR85r7kgIGwMB8GA1UdIwQY
MBaAFKY8fym4g/SzwkNtlj3IUyoaY0zKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGp4X0tiaUQ5TFBDUTIyV1BjaFRLaHBqVE1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8zMDRkNzMtNjViYS00YmJlLTlmZGUt
ZGMyNmU5ZWU4NDEwLzEvcGp4X0tiaUQ5TFBDUTIyV1BjaFRLaHBqVE1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS8zMDRkNzMtNjViYS00YmJlLTlmZGUtZGMyNmU5ZWU4NDEw
LzEvcGp4X0tiaUQ5TFBDUTIyV1BjaFRLaHBqVE1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1CGlIJXl
jCveRmDPdpSkzziA1TRSqSM9npzsbOxwvLZ49icQ8zp1byOFJIpk94v3uEpfFrD0
o/S6Ozh9R7DYDVJGmWPfZnUSSrnYRw9nr94WNeEh/I4p4ZBZMamUFl+cN+jTXMPB
2g0Pn0+pReuhyqjZA4W8WSeKfVWWGPej/AxTvN+g9VHoCJ3UZch3NwoBcnnPVqax
QWzzk5HvefEU5jNdKJPmk45L1rvbDB4PrkftguVKZefuJEpelE3j1Rae5j8Z6SCP
CwapTnbLLH7UTaAvF+5V1o1laQsIPoime96VkmXbeBm/IlJJONUyg/kAmM2gc9bt
unwBeN0czAWfdA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:17:24 2025 by rpki-client