Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
File: PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft (raw, json)
Hash identifier: i3G7J9VAeAMYgVyfJd4pgESIFGwD4lnViEk18Y/Gj0M=
Subject key identifier: 9F:99:2A:71:26:9E:68:3E:E9:62:D0:45:A6:EC:14:97:6E:BF:71:E6
Authority key identifier: 3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
Certificate issuer: /CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Certificate serial: 0196A50A37AE95BAA0A7C6FF3235D7DF6677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
Manifest number: 073F
Signing time: Tue 06 May 2025 10:00:32 +0000
Manifest this update: Tue 06 May 2025 10:00:32 +0000
Manifest next update: Wed 07 May 2025 10:00:32 +0000
Files and hashes: 1: LN9Y4VYuBPHcqnOfi1whRTolirA.roa (hash: oKsBnnzz1/szS+noOPKG/sq6k5F0SOG+hrVgu4395L0=)
2: PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl (hash: Vqf/U2UShJXShi27REx5IT4j3iOCDNibBj2JvnVi+Ww=)
3: aOjeQ_LFlj3ColO7fwm2y03noI8.roa (hash: ZPkI6QIM1mrIPNFFrmXcy/CvfmDUl8kYYI0d126tg6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:0a:37:ae:95:ba:a0:a7:c6:ff:32:35:d7:df:66:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Validity
Not Before: May 6 10:00:32 2025 GMT
Not After : May 7 10:00:32 2025 GMT
Subject: CN=9f992a71269e683ee962d045a6ec14976ebf71e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ef:a1:ed:c1:a6:45:db:32:ba:39:b7:4f:29:
13:b2:c2:c8:3c:00:a4:0b:2b:b0:11:e2:3e:cc:a2:
cb:ed:61:32:0b:5c:2f:94:5c:14:79:66:8f:e4:d0:
c9:01:14:73:59:9f:4e:1a:35:1b:5a:dd:2a:cb:a5:
ac:0d:93:ec:aa:2b:8d:84:dc:4f:0c:88:8d:ec:7c:
85:17:2e:48:e4:12:ae:4d:3c:20:c8:34:e0:e9:f6:
1b:33:4d:56:69:26:06:6f:a6:d2:1a:c3:d0:73:4d:
ae:1f:36:5d:6c:95:5d:40:bf:85:37:ea:2c:a7:56:
83:36:67:c0:48:54:9e:2e:c0:14:5c:af:02:74:a7:
36:d1:c6:ee:ef:87:e8:42:18:ae:f1:85:32:06:df:
88:9b:8a:c1:48:59:41:49:ec:71:05:7a:3e:1e:73:
5c:0e:71:11:93:58:a1:da:56:92:d6:6e:ea:36:c0:
b2:d1:df:12:07:de:0a:82:e6:25:52:8a:5d:72:8d:
4b:0b:2f:3f:68:20:02:07:22:65:34:85:e2:d2:94:
cc:ff:95:6a:fc:f0:13:12:26:07:f4:ff:31:c2:99:
87:59:c1:81:f2:8f:68:9f:b4:2d:9a:b6:39:0a:eb:
40:cf:ef:f9:d3:6f:70:0e:50:a3:8c:51:95:d8:04:
79:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:99:2A:71:26:9E:68:3E:E9:62:D0:45:A6:EC:14:97:6E:BF:71:E6
X509v3 Authority Key Identifier:
keyid:3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c7:0c:6b:6e:e7:d9:f2:97:ed:c0:02:18:33:fe:63:df:a5:
f6:86:a5:18:73:28:78:9f:98:13:d4:cf:b2:24:3b:5f:01:f8:
52:cf:8f:b2:73:38:17:f6:fb:f0:e1:af:9d:b4:eb:82:ec:04:
e8:14:e3:7b:42:f3:88:45:ba:8e:97:b6:0a:82:96:b1:a5:b7:
ad:43:b3:20:69:c0:29:4d:d0:b2:b5:87:59:18:1b:de:73:28:
9f:36:bd:76:4d:ea:ae:a3:13:e6:3a:a7:e8:32:06:1a:69:4d:
0e:b2:47:70:da:4f:45:4a:6c:f5:fe:29:2c:3e:1d:a8:39:fa:
27:aa:32:76:e6:90:ea:8f:8b:0a:fb:61:57:0c:36:11:a6:07:
c6:c8:39:27:75:25:6f:c7:b4:90:1d:08:09:d7:e2:a0:70:cf:
b9:d2:90:4c:eb:fe:b8:8d:d4:34:87:83:d3:84:a3:00:90:b1:
b3:ba:90:02:85:e6:35:4e:06:55:19:74:9f:cb:c9:19:9e:78:
49:de:2d:83:78:c4:89:a0:84:1f:ad:b8:bd:1c:73:73:5d:77:
6b:28:4e:84:10:98:6d:0c:db:3d:8e:04:3e:b7:b4:e4:95:af:
bd:67:f4:54:d2:63:c5:9d:ba:b6:18:a3:a6:79:b3:eb:66:b9:
e3:1e:fc:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZalCjeulbqgp8b/MjXX32Z3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMzRiMDJlZGM3YzI4NzhmOTRjNTEwNGNhZmE4OTc4YWZi
Njc1MmQwHhcNMjUwNTA2MTAwMDMyWhcNMjUwNTA3MTAwMDMyWjAzMTEwLwYDVQQD
Eyg5Zjk5MmE3MTI2OWU2ODNlZTk2MmQwNDVhNmVjMTQ5NzZlYmY3MWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu+h7cGmRdsyujm3TykTssLIPACk
CyuwEeI+zKLL7WEyC1wvlFwUeWaP5NDJARRzWZ9OGjUbWt0qy6WsDZPsqiuNhNxP
DIiN7HyFFy5I5BKuTTwgyDTg6fYbM01WaSYGb6bSGsPQc02uHzZdbJVdQL+FN+os
p1aDNmfASFSeLsAUXK8CdKc20cbu74foQhiu8YUyBt+Im4rBSFlBSexxBXo+HnNc
DnERk1ih2laS1m7qNsCy0d8SB94KguYlUopdco1LCy8/aCACByJlNIXi0pTM/5Vq
/PATEiYH9P8xwpmHWcGB8o9on7QtmrY5CutAz+/5029wDlCjjFGV2AR5gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+ZKnEmnmg+6WLQRabsFJduv3HmMB8GA1UdIwQY
MBaAFD40sC7cfCh4+UxRBMr6iXivtnUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGpTd0x0eDhLSGo1VEZFRXl2cUplSy0yZFMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi80MjI1MmUtMDMyMS00ZGEyLTkyZjQt
MzVhMDI0MWE0MzAxLzEvUGpTd0x0eDhLSGo1VEZFRXl2cUplSy0yZFMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi80MjI1MmUtMDMyMS00ZGEyLTkyZjQtMzVhMDI0MWE0MzAx
LzEvUGpTd0x0eDhLSGo1VEZFRXl2cUplSy0yZFMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE8cMa27n
2fKX7cACGDP+Y9+l9oalGHMoeJ+YE9TPsiQ7XwH4Us+PsnM4F/b78OGvnbTrguwE
6BTje0LziEW6jpe2CoKWsaW3rUOzIGnAKU3QsrWHWRgb3nMonza9dk3qrqMT5jqn
6DIGGmlNDrJHcNpPRUps9f4pLD4dqDn6J6oyduaQ6o+LCvthVww2EaYHxsg5J3Ul
b8e0kB0ICdfioHDPudKQTOv+uI3UNIeD04SjAJCxs7qQAoXmNU4GVRl0n8vJGZ54
Sd4tg3jEiaCEH624vRxzc113ayhOhBCYbQzbPY4EPre05JWvvWf0VNJjxZ26thij
pnmz62a54x78HQ==
-----END CERTIFICATE-----
Generated at Tue May 6 20:31:12 2025 by rpki-client