Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
File: pJxODPXI27tqZ88dovMfQWJ0n90.mft (raw, json)
Hash identifier: onJU/87reYBzxsLZRXx5LuhrF5mCiYvGAK32JD0dAcI=
Subject key identifier: 46:FD:7D:69:B8:BC:6A:51:CD:E0:D4:5D:A8:69:85:24:F1:A6:51:BF
Authority key identifier: A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
Certificate issuer: /CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Certificate serial: 0198D47330683B819523BC2582B0AF319853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
Manifest number: 1661
Signing time: Sat 23 Aug 2025 01:02:55 +0000
Manifest this update: Sat 23 Aug 2025 01:02:55 +0000
Manifest next update: Sun 24 Aug 2025 01:02:55 +0000
Files and hashes: 1: oTERYQxbfcdAepRJdL-H3PXCPnk.roa (hash: BUX480Cq0/FWcz+EdrT0tY5q1vVSAi6pm1ula8qFGn4=)
2: pJxODPXI27tqZ88dovMfQWJ0n90.crl (hash: ea8IKFS1PfR+Z1Fmm11MUhGTyeMFOP6DwPtE7V9oPdk=)
3: wsY5k4qqG0xYHV0_JKKO-MLN1Lc.roa (hash: f/706SBS64fiaR4N+7m+WUBpo55cQMTVv5UqqvUPZQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:30:68:3b:81:95:23:bc:25:82:b0:af:31:98:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Validity
Not Before: Aug 23 01:02:55 2025 GMT
Not After : Aug 24 01:02:55 2025 GMT
Subject: CN=46fd7d69b8bc6a51cde0d45da8698524f1a651bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ad:85:c4:6a:b3:f5:9c:be:0f:96:1d:68:9f:
48:51:77:26:85:a5:24:7e:43:88:7c:f8:8f:84:04:
dd:c5:99:cc:a0:50:e8:86:31:d4:35:8d:60:a8:15:
a9:1c:6e:66:12:68:ae:8e:13:c2:2c:ce:1a:2e:ed:
01:5e:8c:e2:89:c8:66:9a:15:d8:97:b0:5c:68:9c:
5f:ef:bb:5b:13:57:76:52:06:04:08:f4:10:0f:28:
ed:f5:84:4a:1a:1f:16:39:be:24:b4:2b:da:49:47:
75:1b:08:d7:c8:71:8f:8d:58:66:48:1c:64:2d:a5:
46:25:e7:f6:cb:b2:ec:74:74:57:8c:63:1d:40:6d:
35:bf:82:9f:7e:eb:fa:98:eb:b6:6e:3a:d5:f7:48:
68:93:81:24:f3:8f:7d:9e:f2:35:34:8e:d3:f9:ae:
76:94:ab:6c:a9:53:d5:e9:bb:0e:d2:d1:b5:06:ab:
7a:b3:8a:4d:33:13:d5:9b:e1:19:21:74:59:f8:c7:
0b:a3:63:b0:65:a2:3a:9f:49:be:36:53:33:f1:36:
8d:eb:e5:ca:1e:26:40:7d:93:8d:d1:81:01:ce:d7:
7a:32:82:4c:eb:2c:ac:e6:d4:71:9c:48:b9:de:9c:
a7:d5:2d:39:30:d7:55:4c:31:41:d5:97:41:be:07:
43:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FD:7D:69:B8:BC:6A:51:CD:E0:D4:5D:A8:69:85:24:F1:A6:51:BF
X509v3 Authority Key Identifier:
keyid:A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ab:be:27:44:bd:82:b2:e1:7e:d4:f5:99:1c:17:2b:b6:9e:
a1:73:a0:94:c9:f2:e9:68:06:75:88:80:10:ba:c2:84:88:fb:
dd:c0:4f:3f:b1:8b:8c:77:3c:06:2d:3c:9f:9b:5d:60:2f:1c:
2c:c3:78:99:9e:e0:77:af:bc:4b:12:f9:cd:ac:5c:86:5e:91:
79:3d:5a:44:eb:f8:6a:5b:b1:f3:04:89:d6:a5:f3:d6:60:83:
97:2b:17:62:5b:87:71:9b:6a:69:f3:55:0d:f8:a1:53:4d:2c:
ba:a0:06:94:f6:0a:bb:eb:da:f3:cb:50:67:9d:76:17:af:f5:
54:e3:1c:80:70:f8:4a:3c:f1:fb:35:2b:42:f6:9a:72:b1:d2:
1b:2a:36:b7:8a:a2:9e:cf:fa:bf:9c:75:5f:67:32:9d:8d:3c:
bb:df:f8:16:7d:62:64:70:65:9f:01:f4:66:87:b5:a4:54:6f:
8b:ac:3a:a5:49:c9:47:83:f0:30:c0:05:80:5e:c0:c7:f4:d6:
04:70:28:a9:e9:b7:4e:d3:dc:96:69:f6:61:02:32:33:a4:6d:
1b:77:56:46:65:2b:26:64:2a:a0:aa:d8:66:30:c6:8d:d1:4f:
63:62:62:b2:e1:5b:a8:ac:ed:13:d4:a1:cb:f1:3e:f3:ab:a6:
52:b2:fa:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:13 2025 by rpki-client