Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
File: Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft (raw, json)
Hash identifier: gZj1LW7LSNpNOrDoofC6BQpe1tzIZYvKicRhjyqbID0=
Subject key identifier: FB:0F:54:1C:7A:CD:65:ED:51:18:AB:1E:0C:A9:0C:F6:32:D1:8F:36
Authority key identifier: 3E:3D:1C:21:A7:7A:0B:0F:7F:0C:E6:63:3E:13:E0:C5:7B:ED:B0:8B
Certificate issuer: /CN=3e3d1c21a77a0b0f7f0ce6633e13e0c57bedb08b
Certificate serial: 01987A51DC94525C7528B3B1E1297CE6C39A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
Manifest number: 1352
Signing time: Tue 05 Aug 2025 13:00:41 +0000
Manifest this update: Tue 05 Aug 2025 13:00:41 +0000
Manifest next update: Wed 06 Aug 2025 13:00:41 +0000
Files and hashes: 1: Gw9xXGUQ6gOLxmD3uhPbHUjxqdY.roa (hash: iN7hsvC2N6zVGHZJzHIWk+L6xeaF90AdvlMynpLLSsQ=)
2: Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl (hash: 2clrY5JwDO62uQJhhOJmvyqdJ7jdO81IHQ6E8ZzLp9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:51:dc:94:52:5c:75:28:b3:b1:e1:29:7c:e6:c3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e3d1c21a77a0b0f7f0ce6633e13e0c57bedb08b
Validity
Not Before: Aug 5 13:00:41 2025 GMT
Not After : Aug 6 13:00:41 2025 GMT
Subject: CN=fb0f541c7acd65ed5118ab1e0ca90cf632d18f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4d:ea:a8:25:69:a4:bc:ab:a4:b7:95:fb:9b:
27:82:5e:83:23:7b:d8:2f:88:41:ba:41:5b:78:1e:
bf:c2:3a:07:8a:9a:eb:22:e2:bc:66:c1:57:05:70:
f3:14:08:19:b9:41:ec:ce:86:cf:c2:12:77:ca:b0:
d6:2f:8f:25:79:a3:dd:57:41:90:a5:01:ca:35:78:
aa:89:0e:b1:bd:ae:c5:37:54:f2:75:30:f2:c7:c3:
e6:ce:c5:2c:5b:d9:73:7d:eb:66:99:ab:fa:af:48:
42:43:27:49:c5:3a:d7:bf:fe:67:50:9e:b9:a6:7d:
d1:20:5e:2b:08:e1:eb:38:09:4b:f5:fc:93:a0:98:
20:41:0e:80:c1:fc:d8:5f:5e:cd:ad:3b:c4:bd:72:
16:1e:5a:07:0d:22:96:c4:6f:5b:71:10:fd:96:b1:
20:02:65:50:ba:a1:8c:76:83:bd:74:a6:5f:5f:5f:
f5:cf:ce:06:8c:2b:49:12:40:6c:f7:1d:f5:07:c6:
68:f6:0b:c7:f5:69:dc:c1:2e:0a:15:b1:57:13:3c:
8e:9c:7f:b1:db:68:2c:b7:6b:92:4b:18:eb:53:32:
a1:bd:ba:51:ad:69:09:15:b7:83:df:88:f0:ac:d8:
4a:2a:0e:50:10:fc:8d:e8:f2:d5:f1:2d:3a:98:d7:
d3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0F:54:1C:7A:CD:65:ED:51:18:AB:1E:0C:A9:0C:F6:32:D1:8F:36
X509v3 Authority Key Identifier:
keyid:3E:3D:1C:21:A7:7A:0B:0F:7F:0C:E6:63:3E:13:E0:C5:7B:ED:B0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:7d:3e:66:2a:27:c3:c9:06:cd:4f:02:74:f0:98:0d:d0:fa:
7a:52:38:1d:a8:23:48:05:12:85:11:95:68:7b:74:04:12:a6:
f4:47:a0:94:d1:30:eb:85:05:64:8c:07:41:5f:68:b2:6f:36:
78:0e:15:e9:b2:6e:06:1c:9e:bf:8e:49:33:2c:ae:f2:85:d4:
ab:76:ce:b4:ca:29:0b:7b:90:1c:df:9c:7a:61:eb:b2:18:1b:
7e:d3:b3:37:f6:17:06:fe:49:ad:16:29:f5:e7:34:3f:27:0c:
ff:a2:46:9b:9f:34:d9:36:6e:90:05:26:14:d3:e8:d4:b3:c4:
31:8c:0e:bc:46:c1:44:63:08:f0:e8:ca:f7:39:e3:f2:5c:57:
c1:ed:bb:75:78:6a:fc:63:41:68:b0:75:00:5a:5f:d3:1f:b1:
ac:42:ba:50:27:e5:d3:74:75:98:bc:95:8b:5f:8c:a9:e6:d2:
1c:ec:d3:49:1b:d0:9b:6d:88:43:93:1e:9e:93:ff:db:e1:a7:
f0:20:59:9e:a5:2b:a9:73:d5:fe:d5:80:f9:c2:24:39:1d:ed:
fc:79:3f:db:2a:3a:e1:f1:c8:db:4b:a9:c2:e6:a2:99:95:4d:
40:b4:eb:c2:8b:2b:62:19:43:50:01:79:3e:61:19:a1:fe:6a:
ca:b7:55:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:12:45 2025 by rpki-client