Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
File: PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft (raw, json)
Hash identifier: Smuxe+PzShiDypKavIf92bqoL3KuGI6QDlHIQOLXS2I=
Subject key identifier: BC:88:32:65:0B:4D:A1:27:05:17:CC:A1:DC:F8:82:DA:B3:70:8A:E9
Authority key identifier: 3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
Certificate issuer: /CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Certificate serial: 0198D705BFF5F17387C4C07E085D797B6299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
Manifest number: 0862
Signing time: Sat 23 Aug 2025 13:02:14 +0000
Manifest this update: Sat 23 Aug 2025 13:02:14 +0000
Manifest next update: Sun 24 Aug 2025 13:02:14 +0000
Files and hashes: 1: LN9Y4VYuBPHcqnOfi1whRTolirA.roa (hash: oKsBnnzz1/szS+noOPKG/sq6k5F0SOG+hrVgu4395L0=)
2: PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl (hash: ZbuN4R+GUk3j7fi++0NLoHCwdURT4fcNVG+sm7s3hLQ=)
3: aOjeQ_LFlj3ColO7fwm2y03noI8.roa (hash: ZPkI6QIM1mrIPNFFrmXcy/CvfmDUl8kYYI0d126tg6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:bf:f5:f1:73:87:c4:c0:7e:08:5d:79:7b:62:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Validity
Not Before: Aug 23 13:02:14 2025 GMT
Not After : Aug 24 13:02:14 2025 GMT
Subject: CN=bc8832650b4da1270517cca1dcf882dab3708ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d3:c0:3a:50:68:ff:47:b7:7e:87:27:58:7f:
9b:d2:a4:52:cd:99:01:ee:b9:a9:29:0c:bb:1f:e6:
8e:d7:24:1d:37:dc:aa:df:4d:71:39:40:23:3b:63:
4e:2b:c4:c1:05:cc:72:da:7a:bd:eb:17:cc:bb:6f:
90:46:b0:ae:6c:d6:a2:e4:8d:8f:99:44:5f:88:36:
ba:8a:5a:9e:37:3c:3a:61:e2:45:33:df:25:13:6a:
e3:4f:74:da:cd:01:b6:35:00:8a:24:4f:88:84:2a:
a3:4a:2f:ce:bc:43:5a:40:1f:d9:b4:66:22:9b:47:
89:01:3b:de:3d:88:07:38:2f:f2:9c:0d:94:e7:cf:
04:79:19:86:56:58:42:e3:d7:47:a1:75:8d:7f:35:
f2:94:bd:73:4d:3c:0e:a4:44:76:0f:68:48:7e:91:
7b:c0:d5:7d:f6:71:51:5f:61:53:7c:09:0f:f8:ac:
2d:ed:c0:84:25:18:78:8d:af:b8:8c:a9:06:84:b5:
e1:eb:ed:af:91:9d:c1:6e:46:7d:79:51:00:43:4e:
c9:cf:5d:c4:78:ba:8f:a5:e3:8d:31:10:1d:97:e3:
73:1f:8a:4b:13:f6:8a:f9:02:40:dc:53:12:77:b2:
e1:3b:b3:a4:ea:ce:39:6f:1e:e9:65:5e:6b:88:9d:
60:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:88:32:65:0B:4D:A1:27:05:17:CC:A1:DC:F8:82:DA:B3:70:8A:E9
X509v3 Authority Key Identifier:
keyid:3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:94:c2:0d:54:c4:0d:8e:c8:f6:eb:27:9a:2a:79:f8:c7:94:
29:ac:8c:69:fd:a8:03:ba:97:d6:d5:bf:35:e2:c1:cb:6c:e9:
55:a6:b4:b5:95:ae:96:0c:38:6c:d5:e7:90:ab:dc:76:b8:7e:
ad:6f:6d:6e:e1:24:ce:90:11:ff:fc:f3:1d:f2:27:96:d7:81:
5d:15:24:d8:3f:70:58:82:2d:e8:0f:b7:8b:48:e2:67:b4:11:
38:9b:61:fa:e1:cd:88:f4:46:2c:8e:76:f1:24:ad:ef:69:03:
48:20:1a:2e:a9:47:d3:bc:d0:f5:67:6a:90:9c:c0:8a:1a:54:
37:c0:a6:08:5e:0b:00:77:e7:a8:b6:bf:de:4b:ea:40:bd:d6:
1f:a8:dc:f5:ad:67:d1:24:a6:d9:51:67:f9:82:f0:6c:3f:a6:
18:60:b1:9d:24:59:a7:0b:e2:4a:9f:18:77:00:f4:b0:7f:57:
14:a3:6c:4d:b1:78:20:14:60:08:18:d6:4b:54:c1:5e:a8:a6:
db:9b:ab:90:f1:75:98:7a:ab:8e:94:a6:84:a3:02:28:1f:95:
85:e3:1d:53:d5:59:fd:92:bc:02:14:f1:5f:de:79:eb:af:2b:
35:0e:0e:6f:e3:bd:2e:c7:b2:46:57:c1:6f:c4:d0:58:be:13:
3b:9a:b4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:44:16 2025 by rpki-client