Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
File: pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft (raw, json)
Hash identifier: V38gd2E/H8PyRncFjLUyOwNVUws/ezq4R0G6AIli/ho=
Subject key identifier: 84:09:1E:B5:28:3F:78:3D:71:57:A6:AB:0D:DB:97:67:FC:E7:0F:8F
Authority key identifier: A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
Certificate issuer: /CN=a634878281144a46a856003d622f6141ea4e006f
Certificate serial: 019A4EF54947D119F5DE34D651E7EE0601B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 13:01:29 +0000
Manifest this update: Tue 04 Nov 2025 13:01:29 +0000
Manifest next update: Wed 05 Nov 2025 13:01:29 +0000
Files and hashes: 1: BC9YAXepVvBWb0SpmFLnGsiu_0U.roa (hash: aM6wNA8MxfdfUppHaLmRAdGV0kYIIUvP9jpBwEyPjpo=)
2: _XoxeAXZ_0NOSgriyXyYImr8sp4.roa (hash: 95zz7gDtzubb5S5SZ2yFR8QhWyDigdhIQZqm7xDPB7s=)
3: pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl (hash: 2EnMTDwUVhzgJykmgoRviXBgxBp+TyXq1Pz39XvkjEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:49:47:d1:19:f5:de:34:d6:51:e7:ee:06:01:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a634878281144a46a856003d622f6141ea4e006f
Validity
Not Before: Nov 4 13:01:29 2025 GMT
Not After : Nov 5 13:01:29 2025 GMT
Subject: CN=84091eb5283f783d7157a6ab0ddb9767fce70f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cf:18:fb:3c:e5:8a:a3:48:bf:36:55:4d:27:
71:b1:86:27:fb:00:c7:43:32:00:4d:52:2b:5c:25:
37:69:7b:db:a0:72:40:00:86:6b:c4:6b:7b:94:d8:
ef:75:ee:5e:3b:7a:55:23:59:49:ef:a9:7e:fc:f1:
21:f0:aa:a6:09:32:51:6c:9b:06:1c:47:51:01:71:
d4:40:1f:f5:2e:f9:16:e5:1d:ba:cd:71:43:da:a6:
a0:91:50:02:f0:76:04:e7:6e:b7:3c:12:65:b9:df:
a0:b4:46:e6:fd:10:cb:c1:02:00:b7:f4:d4:31:74:
33:6e:13:00:84:f6:cd:54:40:4e:af:35:9c:27:ca:
df:d9:e3:4a:7c:73:a7:3d:6b:bd:dc:a8:63:b9:af:
b9:3c:7a:77:a7:e6:af:47:2d:9f:14:c3:bc:fc:03:
df:8c:c0:0f:b0:b4:cc:06:46:5a:af:8a:36:17:60:
97:cd:5f:ba:10:a0:bf:8e:ac:c2:76:0e:f7:18:68:
c6:4a:ff:b5:f8:ef:80:1b:11:2e:9e:84:63:13:48:
20:30:85:02:35:64:c7:c3:43:74:f7:cd:00:8d:2c:
28:8c:20:58:da:08:b3:c6:ff:08:2c:09:77:5a:fd:
48:01:3f:59:8a:1c:b1:69:a2:0e:a5:e7:fe:cb:9e:
1b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:09:1E:B5:28:3F:78:3D:71:57:A6:AB:0D:DB:97:67:FC:E7:0F:8F
X509v3 Authority Key Identifier:
keyid:A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f7:b1:37:4b:de:b3:3d:32:c6:46:a7:df:d6:77:10:c2:ea:
ff:91:af:ec:44:e7:17:93:14:45:ff:88:eb:16:00:f2:63:99:
ad:4f:a0:bc:2d:12:94:df:bd:a6:ce:be:2d:00:1a:ec:34:8d:
29:36:5d:61:e8:ca:e7:ba:95:18:3e:18:c7:c0:8f:28:98:f4:
75:9a:cd:43:29:8c:d4:8a:70:15:eb:54:e2:01:f6:12:1f:41:
c9:28:10:45:88:ef:85:6c:a9:ec:69:14:5c:b1:f8:b2:9b:23:
1b:1a:6d:9e:03:39:52:8d:78:81:55:8f:00:bc:dc:41:4d:4f:
0e:00:c4:01:d7:49:1e:08:8c:14:fa:7e:ed:ce:bb:b3:45:55:
ff:6f:f4:08:a3:70:cf:94:34:f6:b5:27:fc:70:bd:55:94:a9:
40:80:38:31:a4:49:a4:d8:b9:9c:81:7e:a0:0a:8b:6c:8c:dd:
e4:04:04:5b:73:41:23:7f:da:39:05:38:ce:df:de:8b:24:ca:
81:34:89:57:0c:3f:89:28:7c:f3:33:f6:5b:75:6a:27:65:ef:
d0:26:ad:1e:b1:6a:c4:69:e5:ea:c6:61:9d:5a:2d:03:39:ef:
6d:d1:6e:e3:67:88:ba:1b:00:de:61:ad:93:7b:95:e9:3d:4b:
90:25:2f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:17:38 2025 by rpki-client