Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
File: pJMvpJVkpXamFD5F-BVmjyANdjc.mft (raw, json)
Hash identifier: 71+LQN+IrTA602RRDBAP5f3MYBHdWb9DMFtPuF6Al7g=
Subject key identifier: 79:91:BF:6B:2E:C3:49:05:21:02:31:F4:E9:AD:5D:43:F1:FD:72:1E
Authority key identifier: A4:93:2F:A4:95:64:A5:76:A6:14:3E:45:F8:15:66:8F:20:0D:76:37
Certificate issuer: /CN=a4932fa49564a576a6143e45f815668f200d7637
Certificate serial: 0197B6A1D05467D28BB6FE992E44BDFF3542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
Manifest number: 0661
Signing time: Sat 28 Jun 2025 13:02:27 +0000
Manifest this update: Sat 28 Jun 2025 13:02:27 +0000
Manifest next update: Sun 29 Jun 2025 13:02:27 +0000
Files and hashes: 1: nbFO3tETAKU90cGGwpaCKUOKTLY.roa (hash: cquJx46DtG8x6pISzm/UdeY5xz+jlo5riwT4Pb8N/jw=)
2: pJMvpJVkpXamFD5F-BVmjyANdjc.crl (hash: 7wankjJH0Cno4pJpExTIQHCjTzwleaWe8gt0+MxNXmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:d0:54:67:d2:8b:b6:fe:99:2e:44:bd:ff:35:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4932fa49564a576a6143e45f815668f200d7637
Validity
Not Before: Jun 28 13:02:27 2025 GMT
Not After : Jun 29 13:02:27 2025 GMT
Subject: CN=7991bf6b2ec34905210231f4e9ad5d43f1fd721e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3b:c0:53:de:b4:4f:83:bb:ce:b4:1a:6f:eb:
8b:6b:cd:ad:23:50:cb:8b:a7:20:14:65:be:d0:12:
09:af:a8:59:14:2f:86:2f:1f:e2:e7:35:a8:2a:44:
5b:2b:8e:17:06:6f:70:48:1c:ad:47:b1:4e:52:0d:
8c:13:39:d3:93:96:70:ba:ec:fd:35:a4:57:d7:0b:
0d:93:c1:5f:50:95:e2:90:e8:30:5a:1d:12:31:08:
7a:16:9e:87:8b:44:da:fc:c9:7d:cc:c9:0b:bd:39:
22:88:12:d1:c3:b9:3d:40:49:08:32:4b:28:14:84:
fc:06:1f:6b:84:2b:91:92:ff:7f:4e:bd:2c:cc:f6:
4d:c0:35:0e:8a:98:7b:a7:47:44:80:6f:cb:54:3f:
f9:62:86:9c:2f:5d:73:9f:8e:c0:41:8a:d3:99:ec:
9a:e5:94:e0:f2:1d:97:e9:fe:93:7a:b6:55:aa:f8:
a2:8a:c9:5a:b1:57:f0:49:53:06:d9:d8:d4:ec:2c:
1c:cc:df:fc:9b:64:97:9b:75:77:3b:fe:63:61:0f:
78:11:d5:3e:b8:d5:a9:b3:9c:e6:2f:9b:c0:a3:bb:
e5:6b:fe:56:c8:55:41:43:db:81:55:45:56:75:5b:
2c:90:03:7f:bb:5b:ad:45:74:d5:94:b9:89:ca:67:
b0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:91:BF:6B:2E:C3:49:05:21:02:31:F4:E9:AD:5D:43:F1:FD:72:1E
X509v3 Authority Key Identifier:
keyid:A4:93:2F:A4:95:64:A5:76:A6:14:3E:45:F8:15:66:8F:20:0D:76:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:4f:11:e9:bd:37:2a:5a:57:66:76:83:d9:05:57:1e:87:d2:
56:c4:ef:1d:04:6c:b2:71:30:35:16:c1:9e:4b:53:49:14:a3:
32:d5:84:b9:56:5a:f5:b4:20:1c:96:ba:38:90:8d:03:d3:41:
33:ac:27:35:05:0c:c7:e6:8d:7b:53:37:f7:52:29:98:68:50:
3e:d3:1a:76:1d:b6:ad:4c:a4:30:0f:a1:a9:ca:76:87:85:e3:
9d:8a:ae:6d:a7:f5:1f:39:0c:cd:47:07:2f:7c:32:b7:6e:32:
8c:a4:8e:9f:91:0f:a7:c5:d7:f4:8f:78:3c:43:5e:ea:20:24:
d2:2e:22:f1:86:0f:f0:15:0e:0a:95:39:3e:82:de:36:e3:c3:
c0:5a:60:ce:a4:1d:30:55:1f:e7:b1:10:00:10:ee:7d:34:28:
08:f6:7f:9d:f3:6a:90:e9:a1:fd:23:7b:35:3d:85:72:47:62:
34:83:d7:b4:26:97:3a:b0:dd:b9:da:51:c6:44:4c:4e:dd:db:
3b:4f:dc:b7:8f:6a:b7:c2:1e:31:37:63:a0:01:d2:5d:d4:b0:
b1:5a:f2:61:5b:60:23:7f:31:02:ce:84:19:5b:88:ed:0b:22:
28:b9:9a:45:90:b0:4d:4a:90:f9:01:d8:c9:40:e1:7b:53:f8:
ce:ac:2f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:40:32 2025 by rpki-client