Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
File: pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft (raw, json)
Hash identifier: WzWKfDMXXvwE9fznG2qk2MkcTzfuO4cVkxYEvLN2pj4=
Subject key identifier: 4E:73:55:AC:02:A7:EB:DE:F6:C6:48:9C:3F:F2:C1:B7:59:55:E6:C7
Authority key identifier: A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
Certificate issuer: /CN=a634878281144a46a856003d622f6141ea4e006f
Certificate serial: 01988EED0D9E4D47E733E38C8D06F0B9B464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
Manifest number: 1628
Signing time: Sat 09 Aug 2025 13:02:36 +0000
Manifest this update: Sat 09 Aug 2025 13:02:36 +0000
Manifest next update: Sun 10 Aug 2025 13:02:36 +0000
Files and hashes: 1: BC9YAXepVvBWb0SpmFLnGsiu_0U.roa (hash: aM6wNA8MxfdfUppHaLmRAdGV0kYIIUvP9jpBwEyPjpo=)
2: _XoxeAXZ_0NOSgriyXyYImr8sp4.roa (hash: 95zz7gDtzubb5S5SZ2yFR8QhWyDigdhIQZqm7xDPB7s=)
3: pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl (hash: Qluj5dVHy9HCYfCLJcRkyH0dq5pYhK5EttgJkXexg40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ed:0d:9e:4d:47:e7:33:e3:8c:8d:06:f0:b9:b4:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a634878281144a46a856003d622f6141ea4e006f
Validity
Not Before: Aug 9 13:02:36 2025 GMT
Not After : Aug 10 13:02:36 2025 GMT
Subject: CN=4e7355ac02a7ebdef6c6489c3ff2c1b75955e6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f1:a6:06:6c:47:f3:7a:53:16:e5:38:7a:74:
ec:8e:af:50:3d:a3:ae:e3:d4:57:5a:e8:d9:1d:aa:
0e:63:f9:86:fc:de:7d:ea:76:68:38:d9:96:f9:3d:
81:e8:37:5b:28:be:8f:e0:40:f6:0e:65:ad:b7:8c:
ce:16:22:f4:24:b7:7f:1c:47:fe:37:12:27:b0:cd:
7f:f2:26:b7:32:54:fb:72:4c:15:51:67:59:ce:1b:
4a:12:e6:a0:85:6d:d2:6f:d6:09:21:af:1c:32:7f:
4f:89:d3:ca:71:3e:f7:4d:90:73:79:6b:c3:d8:58:
f5:83:ff:4c:0e:29:82:f7:93:6a:e2:ca:34:71:80:
1d:c7:fd:f9:ea:27:a8:65:4f:6f:30:96:02:42:03:
72:09:cd:30:43:5d:90:9c:ea:19:12:8a:dd:42:3f:
aa:f8:b5:65:35:8b:6a:17:e1:2b:c0:f9:9b:6e:51:
c0:3a:21:7f:e4:68:39:bc:94:cd:46:94:85:0e:1e:
b4:0a:65:6e:ba:ff:50:4f:cc:19:d5:2b:c4:02:af:
9e:18:8e:53:15:3e:8e:5b:8b:01:7d:43:d1:7f:02:
f9:bd:52:31:fd:52:20:93:12:1a:31:49:98:e1:a7:
e4:b9:df:96:b4:8f:15:86:2a:68:5c:77:84:56:4f:
bc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:73:55:AC:02:A7:EB:DE:F6:C6:48:9C:3F:F2:C1:B7:59:55:E6:C7
X509v3 Authority Key Identifier:
keyid:A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:8a:ac:60:3c:7b:c7:98:3e:24:1c:0d:6d:b3:9c:f3:0b:fe:
66:74:53:f6:ea:f5:c2:89:0e:28:a1:d8:47:d6:1f:8d:be:aa:
d5:85:a3:6b:2c:d1:cf:d8:77:73:f4:0e:c0:c5:6a:8b:49:b0:
55:48:69:68:d7:d4:42:7b:46:45:ee:32:fd:d0:c8:00:bf:11:
9f:27:4c:a8:01:a0:de:2d:31:e8:44:af:e9:92:48:ec:cf:63:
76:8c:72:b1:59:2c:b2:96:af:71:97:df:31:eb:eb:14:2c:ce:
5d:93:a3:1f:ec:a3:a7:ba:f1:22:10:e9:d3:7a:3a:af:9d:b5:
3c:19:3c:84:21:b9:54:87:05:bf:fc:26:be:b1:73:24:c6:a3:
c1:0c:66:f4:23:e1:40:d0:30:4f:00:d2:d9:8b:43:02:0a:4a:
7d:df:65:8a:d8:12:29:29:a7:1c:a4:6b:a8:d7:67:88:81:49:
d3:fd:a0:39:a8:47:ae:08:50:27:5d:a3:a5:d0:fa:6e:c8:d9:
7b:34:03:d4:48:98:d5:6b:d9:f7:4c:57:53:c5:ec:3c:5a:de:
1b:73:48:46:02:a0:c8:7c:85:a9:cc:8b:8e:22:5e:db:ad:81:
2f:ef:d6:73:96:a9:a6:83:4c:a3:57:52:52:74:dd:ec:f4:ec:
15:fc:22:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:08:50 2025 by rpki-client