Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
File: Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft (raw, json)
Hash identifier: AIZrTHgs9YfahD7P9MhkNg2owkDE4Is06pG4BnXu26M=
Subject key identifier: 4B:0E:8E:A3:0D:97:B5:73:79:3C:B2:28:29:02:A2:0C:E4:7C:93:10
Authority key identifier: 3E:3D:1C:21:A7:7A:0B:0F:7F:0C:E6:63:3E:13:E0:C5:7B:ED:B0:8B
Certificate issuer: /CN=3e3d1c21a77a0b0f7f0ce6633e13e0c57bedb08b
Certificate serial: 01976BF3F734CF64A516876454ECD70BA0EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
Manifest number: 12C6
Signing time: Sat 14 Jun 2025 01:00:39 +0000
Manifest this update: Sat 14 Jun 2025 01:00:39 +0000
Manifest next update: Sun 15 Jun 2025 01:00:39 +0000
Files and hashes: 1: Gw9xXGUQ6gOLxmD3uhPbHUjxqdY.roa (hash: iN7hsvC2N6zVGHZJzHIWk+L6xeaF90AdvlMynpLLSsQ=)
2: Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl (hash: mf49V77PBvnIs8Mx02EVyEQsh1EAqt/ToczeVOQ/gI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f3:f7:34:cf:64:a5:16:87:64:54:ec:d7:0b:a0:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e3d1c21a77a0b0f7f0ce6633e13e0c57bedb08b
Validity
Not Before: Jun 14 01:00:39 2025 GMT
Not After : Jun 15 01:00:39 2025 GMT
Subject: CN=4b0e8ea30d97b573793cb2282902a20ce47c9310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:06:28:1b:7b:cf:1d:1d:b7:b6:36:47:82:75:
bb:a6:2a:66:4e:80:52:18:0b:72:94:7b:3b:67:a9:
24:e1:59:f9:97:f2:d2:82:33:f2:88:b4:06:f1:28:
28:d4:10:0f:c3:9d:56:ea:37:18:29:46:d3:7e:86:
a7:f7:20:df:53:38:2e:c1:f1:05:29:b6:14:93:ae:
59:bc:ab:67:81:ac:50:42:22:12:0e:5a:1f:fe:75:
b6:94:f0:b5:d4:2b:31:b4:32:1b:d2:b6:c9:63:ed:
c2:31:af:db:11:1a:ad:c6:61:9c:13:5f:d7:4a:76:
3f:ee:c4:37:cf:e0:8b:f8:70:e5:ac:00:cc:15:e8:
36:77:c4:4b:cf:2e:c9:0f:f7:18:b2:07:49:36:15:
03:4e:e6:e6:e1:83:8e:82:3c:d5:b7:f4:cc:94:14:
1c:bf:eb:1f:83:6b:15:83:2c:da:b9:5b:b8:c9:33:
e2:ec:73:7d:26:c7:df:4f:73:4b:7d:19:86:0f:dc:
e6:4c:5b:bd:67:1e:af:35:87:ad:42:52:00:82:81:
f9:b0:7c:b6:d7:fa:ee:aa:df:3f:b9:a9:24:f6:77:
51:c1:46:74:17:01:58:fb:77:b6:44:51:4d:cf:aa:
1f:97:77:35:20:03:f5:ef:cb:03:cf:ca:3d:e8:1d:
6f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0E:8E:A3:0D:97:B5:73:79:3C:B2:28:29:02:A2:0C:E4:7C:93:10
X509v3 Authority Key Identifier:
keyid:3E:3D:1C:21:A7:7A:0B:0F:7F:0C:E6:63:3E:13:E0:C5:7B:ED:B0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:86:d1:35:dd:88:4b:72:79:93:18:01:72:85:10:e8:3c:e8:
35:8d:dd:d7:44:38:70:dd:ca:5e:34:24:46:f3:fe:2a:21:1b:
d3:57:32:df:25:6d:1c:27:85:5c:04:08:d1:a9:93:d0:7b:d3:
4c:3c:86:c9:c2:e5:92:da:06:47:12:2c:6c:66:d3:dc:c7:5a:
3b:b2:1f:2f:26:4c:04:70:47:bf:14:b5:1e:4e:11:50:a4:40:
23:66:c1:ba:23:d8:c2:78:d4:fd:e2:c9:59:11:4d:5a:2c:88:
98:30:bd:9f:83:ab:d9:e8:42:b0:58:11:a8:0b:73:a0:9b:50:
ce:f3:ef:ae:0c:46:be:7e:80:cd:b2:41:2e:73:d7:c0:94:58:
56:f9:a2:a5:d6:60:c2:f7:4c:b7:5e:06:5a:f0:bd:9b:ed:5b:
68:d0:97:22:8e:52:dd:ab:d1:9a:1f:ea:34:48:96:80:3e:aa:
7b:7a:36:60:b3:c4:75:d0:a6:bb:23:ea:88:d8:14:a5:ea:87:
e5:0f:30:8a:2d:6f:5a:d0:a3:bf:20:be:1c:df:a1:c5:c3:4e:
fb:48:35:d5:3b:94:00:73:6e:ed:77:a6:14:83:11:db:0e:08:
44:6b:d3:3e:20:bd:31:3a:77:5e:a0:08:a5:81:2d:82:1a:22:
be:d4:f7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:45:16 2025 by rpki-client