Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft
File: PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft (raw, json)
Hash identifier: mFAAjwQhfSZtIIL+nX51HxnQdQtwIT+j9FHyaW09Y2w=
Subject key identifier: F4:DD:74:FC:47:E2:A1:C1:87:2C:E6:33:28:50:30:DC:06:4A:4D:2F
Authority key identifier: 3C:9F:40:0F:88:4F:70:30:31:8E:B6:BE:74:C5:28:48:5A:BE:44:60
Certificate issuer: /CN=3c9f400f884f7030318eb6be74c528485abe4460
Certificate serial: 0197B7EA2C4B98950DB036293956FB26ECBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft
Manifest number: 0249
Signing time: Sat 28 Jun 2025 19:01:06 +0000
Manifest this update: Sat 28 Jun 2025 19:01:06 +0000
Manifest next update: Sun 29 Jun 2025 19:01:06 +0000
Files and hashes: 1: 5CyBpeLyifB2AFAXOFh8yVUvCwE.roa (hash: JsDCYkyYiFX4qZJz2FVAXDqsZF5P1tX4kX3+rULf7lU=)
2: PJ9AD4hPcDAxjra-dMUoSFq-RGA.crl (hash: tpbp1yGuOFw/lVW8mLmANPuzpcznqG2Az4tZ9MAo/7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:2c:4b:98:95:0d:b0:36:29:39:56:fb:26:ec:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c9f400f884f7030318eb6be74c528485abe4460
Validity
Not Before: Jun 28 19:01:06 2025 GMT
Not After : Jun 29 19:01:06 2025 GMT
Subject: CN=f4dd74fc47e2a1c1872ce633285030dc064a4d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:77:bd:bd:5d:82:e9:11:ab:9a:df:03:af:f4:
6d:c6:da:46:01:79:74:0f:4b:6f:c2:72:c7:ff:ab:
b3:a3:e8:58:8a:35:ca:96:27:8d:97:9c:c5:36:45:
ad:c5:3a:ae:d3:cf:2c:9a:aa:2e:47:21:3c:29:a6:
41:e3:7d:b7:a1:20:3c:c1:77:8e:e8:de:1e:33:9e:
b6:bd:55:17:a9:14:b6:e9:b4:97:e9:07:1d:a4:55:
98:e1:15:ec:ce:1e:b6:4e:97:75:dc:bd:4a:13:84:
18:eb:8b:77:66:d7:c5:28:06:8c:7c:79:6d:ba:42:
10:c4:e0:d6:98:1e:67:42:18:b5:2d:6b:eb:82:d3:
f9:45:fe:ac:7e:57:c0:b9:5c:4b:15:09:a4:90:13:
9b:15:6e:d1:65:d5:20:9d:27:b8:4d:0d:8e:56:a1:
49:03:fa:d6:76:f4:f6:a7:aa:b2:0e:b9:b2:82:63:
d4:77:96:91:df:8d:58:22:60:cb:ba:3e:b2:e0:d3:
05:44:52:4d:11:57:c7:ac:87:94:2a:c6:0f:91:4f:
ea:98:ee:68:ee:b3:8c:38:79:04:5f:9f:bb:8f:8e:
2b:83:33:56:16:3b:0b:fb:3e:b7:28:1c:2a:c8:ed:
3a:2e:55:e8:5c:8b:1d:8d:d5:db:02:d2:8a:70:de:
eb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DD:74:FC:47:E2:A1:C1:87:2C:E6:33:28:50:30:DC:06:4A:4D:2F
X509v3 Authority Key Identifier:
keyid:3C:9F:40:0F:88:4F:70:30:31:8E:B6:BE:74:C5:28:48:5A:BE:44:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b7:49:83:a0:87:f0:1c:9c:f0:23:45:64:8d:6f:e8:9a:56:
30:0a:12:3a:1f:ca:91:c5:b7:d3:88:c7:46:d1:0e:b1:9b:ca:
98:57:7e:dc:a5:f1:d8:8a:85:99:ff:ed:fa:b3:06:4e:33:45:
97:e6:b4:67:48:9c:66:89:2a:81:5a:c2:99:81:24:fd:6d:ab:
ac:9e:a7:77:2a:04:0c:51:c1:58:b9:e7:5c:1f:50:d3:f5:1a:
e0:fe:17:72:bb:90:5a:3f:d6:f6:cd:f0:19:d3:cd:d4:16:f6:
40:53:2c:c4:2a:eb:5d:7e:e6:79:68:97:97:c6:9d:02:0a:bc:
14:44:a0:5c:43:df:d4:40:b4:12:06:44:74:06:38:f8:52:30:
55:53:36:0c:99:53:4f:82:96:0e:2e:f9:49:bb:64:4f:dd:2a:
ba:ed:81:e4:d5:36:e8:df:0b:0f:33:86:6a:90:66:45:59:8c:
18:fc:66:d4:8f:8e:ca:e5:41:af:42:60:96:c7:7e:97:73:e3:
cc:b9:d5:f4:9c:a2:0f:7f:26:2c:64:09:12:19:ab:43:c3:50:
b2:73:1d:9f:ed:75:38:6e:01:14:9e:5d:11:24:3f:3e:5a:cc:
fd:9c:2b:b2:fc:f1:60:1f:83:a9:1c:33:61:17:25:84:99:b5:
d5:39:b8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:40 2025 by rpki-client