Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
File: pjxtuvK89S8n5YwticbBxVuV3yY.mft (raw, json)
Hash identifier: sCbLNz3Kp6tho5/ZEKXzhr5uq+B64d5SlhETiKqCVGo=
Subject key identifier: 65:4C:27:64:DE:C4:6C:B0:2A:EA:A4:3B:AB:DE:14:C5:3E:B0:36:CA
Authority key identifier: A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
Certificate issuer: /CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Certificate serial: 0199FB4594023D856CA1CF5EAC87E89E798E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
Manifest number: 0959
Signing time: Sun 19 Oct 2025 07:01:05 +0000
Manifest this update: Sun 19 Oct 2025 07:01:05 +0000
Manifest next update: Mon 20 Oct 2025 07:01:05 +0000
Files and hashes: 1: NANvvd_V7iIUj7mJYMTOqque3Po.roa (hash: z7IZKlxruCsipOwPt42pcffU0s1l9uB/ojQdv9l2AxM=)
2: pjxtuvK89S8n5YwticbBxVuV3yY.crl (hash: N+Uu+5XvC6vJIkTint/jBKKvZVZy5Is7lFjC1hQijYw=)
3: yG3GRDnYBo69OMDgoi6l30IqdQQ.roa (hash: s36xnlN956H1thb9LXHw6o5GvT+TFLxm0zFqGU00y/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:94:02:3d:85:6c:a1:cf:5e:ac:87:e8:9e:79:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Validity
Not Before: Oct 19 07:01:05 2025 GMT
Not After : Oct 20 07:01:05 2025 GMT
Subject: CN=654c2764dec46cb02aeaa43babde14c53eb036ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a7:07:b5:ca:0f:1b:d4:88:10:41:b3:49:27:
aa:38:07:1c:32:17:3e:f5:75:bf:a3:b5:3f:d2:f5:
76:55:6d:f2:fb:c6:04:d3:a2:dc:41:d3:00:2b:6e:
80:98:fc:c7:5f:3f:65:b0:39:fe:88:ea:01:80:3d:
02:83:ae:ea:8f:79:e0:45:2a:89:6f:cf:89:87:41:
a6:39:23:77:a7:4a:82:8a:6e:ca:3f:fe:d2:49:6e:
3c:e1:1b:12:dc:cf:c7:68:7a:de:30:7f:81:f9:91:
2c:56:a8:dc:fc:8a:6c:a0:84:63:35:6c:e0:c0:39:
fb:9d:88:61:3b:bd:82:38:d7:2d:f9:3d:41:16:60:
12:af:9a:b1:48:11:d5:c6:cf:eb:01:29:4d:12:d3:
ef:fd:6d:f3:90:4d:76:75:be:b9:2f:79:fc:5f:7e:
d5:7b:2c:fb:b9:a9:f1:ac:7f:af:18:db:81:d3:c9:
78:23:f6:25:bf:fd:31:9d:96:a8:f8:cc:d9:a2:9f:
b4:7a:f3:35:7a:10:e1:37:fb:ae:5a:ad:19:c2:36:
51:bb:f7:8c:17:f3:34:a2:bd:cf:c1:d3:de:88:d3:
8f:c9:11:b6:aa:f4:4e:fa:f9:0c:32:60:3c:6a:ef:
7a:6d:88:c6:2b:dd:54:8f:ad:3d:67:20:84:dd:c0:
80:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4C:27:64:DE:C4:6C:B0:2A:EA:A4:3B:AB:DE:14:C5:3E:B0:36:CA
X509v3 Authority Key Identifier:
keyid:A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a9:85:d7:0c:0f:d2:c3:b5:b4:f0:f5:52:39:f7:e3:66:3b:
4f:3d:54:f3:cd:54:f8:04:f9:28:ad:c0:45:5d:e4:4b:1c:76:
b8:dd:09:52:a6:2d:69:9e:cf:71:f5:37:51:7e:61:7e:b1:f1:
f2:89:e5:fa:b4:c2:26:17:61:ab:09:9c:f9:d4:b5:0e:14:c6:
09:48:0b:74:ed:0b:9c:2b:cf:a1:c5:2c:e2:0f:ac:25:08:82:
27:f2:b3:75:2d:e5:67:44:4f:17:ef:91:ea:36:57:76:6f:21:
ff:f0:c0:42:69:c0:f6:52:9c:95:ac:cf:9b:fd:a4:95:b0:0a:
a6:37:98:bd:f8:3b:d2:b7:6e:6f:be:f3:82:a1:47:5c:46:ad:
7d:8a:c7:dd:9a:b8:1d:09:6a:f4:ea:17:01:0d:6a:f3:2c:da:
75:1e:33:af:4a:d5:2f:34:d8:d8:54:86:ca:44:31:d9:5b:37:
39:12:b0:ce:cc:a1:04:7c:00:06:e1:62:7d:70:77:22:a6:45:
b2:2f:42:7b:d8:09:b2:ba:5c:2e:0d:0e:9c:54:9f:b0:9d:bf:
86:1c:39:61:fb:f4:48:df:0d:a9:b3:e9:da:8a:a1:d7:c2:f6:
30:b2:3c:8b:0f:f8:4e:0a:83:f8:e5:72:54:f4:7d:83:dc:68:
2a:a0:5d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:46 2025 by rpki-client