Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
File: PijW8T41ndC7RTSiRlWXTFfSsP4.mft (raw, json)
Hash identifier: RA3AeYhRkKvKythptFr2FYkDPn4QmIh/52rz6QLKGys=
Subject key identifier: AC:56:FD:D7:0F:F6:68:AA:07:77:88:41:07:38:F1:3F:BF:76:3F:97
Authority key identifier: 3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
Certificate issuer: /CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Certificate serial: 0197B6329475E54575D135CB3946F43EBE2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
Manifest number: 0842
Signing time: Sat 28 Jun 2025 11:00:57 +0000
Manifest this update: Sat 28 Jun 2025 11:00:57 +0000
Manifest next update: Sun 29 Jun 2025 11:00:57 +0000
Files and hashes: 1: PijW8T41ndC7RTSiRlWXTFfSsP4.crl (hash: hAUECXs2yppEsnuXSW31r9WHnWI/XI9aJcoja/G49NI=)
2: _-WfGC5BAnZg40YHw-xkJtMu1y8.roa (hash: fBNuXZvCsQYQGG7z7gRAz8VOFKDx2N1N7BNPe/5ZuRI=)
3: quGmI9u7kZ_srTH3LAyxtNKvCAo.roa (hash: RhLYYew4zXRTIVHsFT/3lhPwJj/c1cXNf2IyJ1qOi6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:94:75:e5:45:75:d1:35:cb:39:46:f4:3e:be:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Validity
Not Before: Jun 28 11:00:57 2025 GMT
Not After : Jun 29 11:00:57 2025 GMT
Subject: CN=ac56fdd70ff668aa077788410738f13fbf763f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bb:c8:12:cb:a9:c6:c9:70:b7:b7:a9:35:13:
20:c8:d9:93:8e:64:d5:23:83:c9:86:ce:f9:cd:d1:
74:cb:7e:6d:31:4b:e5:69:e0:22:9c:f9:68:90:e8:
fb:f5:5d:cd:e7:88:50:86:3a:0b:40:ff:96:a2:4d:
64:eb:6c:8a:0a:e0:4f:fd:aa:65:44:2f:ca:27:5f:
f4:2a:27:80:ad:38:cc:e3:f6:17:68:ae:f1:b9:72:
ab:75:02:dd:be:51:a6:ef:50:cc:a5:2c:d5:58:08:
67:6e:66:39:d1:73:4c:5e:1d:44:70:22:1b:6f:97:
b8:fa:80:9f:d4:44:6e:94:48:28:57:8c:f8:ec:96:
1a:fb:58:18:f0:f9:9e:81:2a:19:45:06:8d:41:97:
57:b1:28:da:0a:9f:19:c5:42:86:41:e6:1a:0e:1b:
e1:f3:30:cf:1e:73:c8:09:eb:2b:e8:a6:a3:1e:0b:
d2:0d:b5:d0:c8:4f:9c:fd:ec:45:19:8e:b0:80:2c:
7b:e6:18:26:3a:d6:5d:27:84:e2:f7:dd:1e:5e:01:
b6:50:bb:20:ae:b2:2c:59:07:28:a7:88:39:9c:69:
88:07:05:b1:6e:30:86:65:d9:43:3e:d9:b0:b9:91:
1d:4f:dd:79:14:78:e3:ff:cb:bc:22:3c:d4:71:e2:
59:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:56:FD:D7:0F:F6:68:AA:07:77:88:41:07:38:F1:3F:BF:76:3F:97
X509v3 Authority Key Identifier:
keyid:3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:8b:73:7d:bc:cd:4f:32:de:94:80:be:19:cd:b4:26:0e:0b:
7a:71:fc:7a:f6:1f:36:f1:47:4a:ba:a2:55:31:a2:b8:b8:ba:
fb:2b:44:66:d3:42:05:a1:6f:88:f5:9b:f8:f3:99:e4:55:af:
ee:cc:a7:1b:2e:c3:63:2a:66:be:bd:e5:7b:11:cf:a3:c4:e5:
72:e4:16:88:d7:c5:59:2e:6f:d1:fd:68:12:45:b2:de:1f:09:
c2:23:82:75:af:71:82:ce:64:8c:0b:c0:7a:77:dd:7c:96:cf:
ab:69:75:05:1d:32:2c:e4:0c:52:d8:a2:63:15:a5:d5:94:4c:
82:af:83:e0:f0:22:bb:cc:6b:35:a8:1b:56:dc:b7:c3:57:fc:
5e:c6:83:e6:6b:6d:26:71:ab:45:c2:d3:ec:15:f9:39:1d:72:
14:3f:aa:b7:a7:24:3f:27:57:02:50:68:43:e5:af:98:ca:86:
a0:aa:67:ae:43:c9:f3:bf:20:35:4e:17:a9:36:89:cc:8b:45:
b1:97:a0:f7:e3:27:24:30:4a:1f:85:10:66:8a:af:38:d4:19:
89:28:cf:c9:4f:51:82:7f:3d:9a:59:6b:c0:c3:b5:8f:27:a0:
e0:91:f1:16:5e:d3:0b:ad:fb:0d:23:50:de:5e:f9:6a:86:e3:
06:79:3f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:42:18 2025 by rpki-client