Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.mft
File: PJIZ2sNYSYbni0Hcn_tiJiO0rGE.mft (raw, json)
Hash identifier: r+N4YH3+9fSJvz1089IjP+rzl8pqpH2cyr6NWPJrkjc=
Subject key identifier: 18:EB:54:72:CD:EE:AD:BD:21:C8:48:93:E9:8A:3B:A0:2B:A6:2C:BC
Authority key identifier: 3C:92:19:DA:C3:58:49:86:E7:8B:41:DC:9F:FB:62:26:23:B4:AC:61
Certificate issuer: /CN=3c9219dac3584986e78b41dc9ffb622623b4ac61
Certificate serial: 0197B70E7CCE37810809D2FD149A806020EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.mft
Manifest number: 02A8
Signing time: Sat 28 Jun 2025 15:01:09 +0000
Manifest this update: Sat 28 Jun 2025 15:01:09 +0000
Manifest next update: Sun 29 Jun 2025 15:01:09 +0000
Files and hashes: 1: PJIZ2sNYSYbni0Hcn_tiJiO0rGE.crl (hash: NCrUGgKleygZDe6YnQz+msZGoP8+3yCeGWJam+p39rs=)
2: x_RfurRNedmEj2hSqHVNcrKbV_E.roa (hash: 8G+RNYkhEQwOffPjlh7thkZsriDB79Nwv1PSXlUOkh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:7c:ce:37:81:08:09:d2:fd:14:9a:80:60:20:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c9219dac3584986e78b41dc9ffb622623b4ac61
Validity
Not Before: Jun 28 15:01:09 2025 GMT
Not After : Jun 29 15:01:09 2025 GMT
Subject: CN=18eb5472cdeeadbd21c84893e98a3ba02ba62cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:23:71:95:98:af:8d:44:be:39:4e:b6:ae:93:
14:83:07:db:50:77:01:de:e7:75:05:0d:61:8b:81:
84:2c:f1:cf:bc:2a:44:5c:c4:eb:b7:d0:4c:a4:fc:
ff:f8:ba:44:6f:da:97:c4:c8:bf:81:dc:d0:c4:36:
42:36:84:9c:bd:16:af:2a:94:5d:c3:5a:b3:6e:8c:
d3:1d:86:2f:da:31:11:f0:d3:ad:a2:49:c2:3a:fb:
75:37:be:72:a1:bb:a7:ef:61:0e:bc:d3:df:68:95:
2b:9f:dd:c8:b7:c0:aa:22:a3:3a:ea:2a:b7:48:25:
ea:64:95:0b:5b:3e:9b:78:83:02:e1:38:5e:95:5f:
03:1c:52:1b:5b:34:da:29:3c:20:14:c7:5f:d2:31:
56:73:6a:9f:56:25:27:e7:53:ab:d2:45:90:47:89:
aa:43:56:0f:56:27:a8:6a:fd:36:ec:97:68:da:a0:
bc:d1:dd:06:e3:ea:05:0a:6e:4f:ff:15:21:bb:f2:
c3:15:5b:7f:71:fb:e7:b0:e2:38:02:d1:c1:57:41:
ec:d0:7b:33:21:75:18:2a:c3:b1:65:be:1f:05:87:
3b:65:97:cb:a3:07:d3:d1:99:31:97:d4:af:07:37:
7c:fd:cd:48:9f:86:da:28:a4:82:cf:97:3c:e1:2b:
64:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EB:54:72:CD:EE:AD:BD:21:C8:48:93:E9:8A:3B:A0:2B:A6:2C:BC
X509v3 Authority Key Identifier:
keyid:3C:92:19:DA:C3:58:49:86:E7:8B:41:DC:9F:FB:62:26:23:B4:AC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:62:ef:84:6d:9c:a4:cf:4e:5e:7e:ac:41:fb:4c:c8:d5:e0:
78:74:6e:f3:f6:f4:f3:c8:ee:b2:51:eb:56:6f:41:aa:ff:01:
48:0f:c0:95:3e:02:0e:c0:06:ba:2e:34:85:e4:70:9f:57:68:
58:94:3e:36:37:90:e7:94:b9:fe:09:11:0d:7e:bc:87:0c:67:
43:83:6d:a3:b2:55:5d:8a:9e:3b:49:64:58:f6:a6:53:36:30:
6e:f7:67:e2:e9:26:d5:c2:af:44:28:93:9e:e5:53:2f:78:5a:
0e:bd:05:22:3a:4f:9d:9e:a8:db:58:76:da:8b:ca:67:c5:17:
85:19:ff:55:cb:7b:92:80:01:8e:92:5e:03:db:5e:8e:c9:49:
da:62:12:52:c8:80:49:c3:d8:2e:c6:dd:17:de:d1:8e:3e:3a:
cb:2b:b6:03:80:e8:3a:74:3f:24:fd:95:06:64:45:0f:e5:d6:
54:c5:a8:40:32:22:62:8e:8c:95:23:59:16:28:96:64:88:cc:
55:4d:40:e7:9d:af:c9:8e:30:f9:3d:cd:8f:fb:c5:f7:e1:76:
f2:df:6a:66:de:29:af:a5:3f:3b:d3:f3:e7:0d:3d:96:ee:e2:
11:74:9c:7c:e7:04:ff:eb:49:30:67:ae:a1:de:20:4f:e5:e4:
aa:78:9e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:59 2025 by rpki-client