Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
File: pjxtuvK89S8n5YwticbBxVuV3yY.mft (raw, json)
Hash identifier: 8HRiqYyNyXa3Bheg0FYiDwFEDXEkN/c/a7Rt8omiUd0=
Subject key identifier: B2:C6:59:1F:08:89:0D:40:F6:71:C6:DB:F5:66:C0:5A:F7:78:7C:44
Authority key identifier: A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
Certificate issuer: /CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Certificate serial: 0197C75DA3A0F206F41D7DA1603B018A6918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
Manifest number: 0835
Signing time: Tue 01 Jul 2025 19:01:32 +0000
Manifest this update: Tue 01 Jul 2025 19:01:32 +0000
Manifest next update: Wed 02 Jul 2025 19:01:32 +0000
Files and hashes: 1: NANvvd_V7iIUj7mJYMTOqque3Po.roa (hash: z7IZKlxruCsipOwPt42pcffU0s1l9uB/ojQdv9l2AxM=)
2: pjxtuvK89S8n5YwticbBxVuV3yY.crl (hash: 1Oo/Qg8Fg/MGKq0mhE47H6d2PZ2jIu6RE1leu8qDlvU=)
3: yG3GRDnYBo69OMDgoi6l30IqdQQ.roa (hash: s36xnlN956H1thb9LXHw6o5GvT+TFLxm0zFqGU00y/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:5d:a3:a0:f2:06:f4:1d:7d:a1:60:3b:01:8a:69:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Validity
Not Before: Jul 1 19:01:32 2025 GMT
Not After : Jul 2 19:01:32 2025 GMT
Subject: CN=b2c6591f08890d40f671c6dbf566c05af7787c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e9:a3:70:98:7d:b1:7c:1b:a9:df:d5:30:b9:
2a:27:50:56:a2:46:82:26:04:74:4f:dc:d9:31:d7:
9a:3f:35:ab:62:be:f9:80:4d:76:70:6a:ae:f9:6e:
ec:f0:9d:69:9b:15:fa:52:25:f0:09:31:36:8a:da:
bf:ea:e0:0a:11:e6:28:f4:b5:4c:bd:a8:a6:75:99:
41:e3:83:55:4a:c3:34:fd:dd:46:69:76:a7:ad:1b:
f8:e1:15:3e:21:b8:c4:ca:2d:fd:ca:4f:a3:a9:df:
3b:43:e0:09:40:e5:e8:8c:f2:ad:85:b2:1e:88:28:
1e:62:e0:dc:58:05:bd:ca:85:15:e6:ac:78:04:6a:
1d:a0:94:3b:74:78:45:ab:7b:a5:1f:2f:72:33:60:
ba:64:b6:7f:fc:09:46:37:34:1e:ea:73:06:51:fc:
f0:88:f2:a5:12:1d:9c:c9:2a:7e:f8:8b:35:c1:07:
c0:80:3b:c1:6c:f2:e1:28:e4:7b:2a:bb:18:34:81:
ac:31:f2:40:0e:ea:c9:6c:8c:97:3f:cb:8f:55:61:
2c:f4:fc:af:67:94:8a:c6:d4:41:ff:14:58:02:7a:
f7:5d:21:ce:40:76:1f:1c:3c:cf:87:01:26:57:04:
fc:e4:a2:75:fa:15:2c:04:00:c4:01:01:93:6c:fd:
90:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C6:59:1F:08:89:0D:40:F6:71:C6:DB:F5:66:C0:5A:F7:78:7C:44
X509v3 Authority Key Identifier:
keyid:A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:34:63:b9:e8:4b:d3:36:74:1b:80:37:e0:33:ae:e8:bf:28:
99:d6:d9:7f:06:74:9b:47:31:4b:95:87:66:72:fc:8b:89:16:
b6:58:89:98:55:83:14:d7:be:0c:d1:f8:18:0b:0e:24:8e:19:
01:33:a0:a0:08:74:b6:66:c7:f7:3a:88:51:2f:0b:c0:61:ac:
e1:82:58:9c:06:6b:1b:39:ec:fc:68:28:c6:31:f3:5c:9f:42:
ff:62:c9:0e:73:a0:4a:31:2c:6d:1f:b8:35:93:08:ee:55:e6:
c5:22:28:26:a9:fc:e7:75:fd:b2:9d:99:80:af:87:cf:06:ae:
c4:e6:0e:91:88:b7:22:47:6d:b6:c4:62:a0:4b:3d:6d:1b:7c:
d3:e4:9d:73:48:10:a6:5f:ec:8e:7a:9a:0a:8f:17:3c:93:72:
e4:9f:3b:31:ff:7a:15:4c:14:ae:93:65:80:21:f7:90:2a:39:
95:69:55:75:2c:44:08:82:c0:8b:43:d0:27:76:9d:84:ba:fa:
ea:a0:bd:67:d7:10:67:b0:a6:a9:aa:64:d2:b8:a7:63:21:e7:
ff:3e:96:9e:c7:82:97:be:f0:8e:56:2f:11:eb:10:a3:3c:f2:
0c:db:78:3a:77:f8:c2:ff:b6:ea:fc:5c:30:ac:fb:8d:e3:4e:
67:b8:5b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:46:07 2025 by rpki-client