Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
File: PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft (raw, json)
Hash identifier: eJgh4c98BK2sucyB8nBEC2o5xe2Dinsj6OIyzjEg46M=
Subject key identifier: 7F:09:D5:44:04:11:0D:F7:C7:6F:6B:CE:A4:79:3D:E9:65:1E:EE:C2
Authority key identifier: 3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
Certificate issuer: /CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Certificate serial: 0199FCFDBEEF9DA45740B3D2A525BDD41060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
Manifest number: 08FC
Signing time: Sun 19 Oct 2025 15:01:51 +0000
Manifest this update: Sun 19 Oct 2025 15:01:51 +0000
Manifest next update: Mon 20 Oct 2025 15:01:51 +0000
Files and hashes: 1: PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl (hash: oAnKvkUsSaSQr4Ae4lXqg6y4KMxLWb9QoolN8bSvMV8=)
2: zw3ZQoqzEpP0EhpQ36h6FYlUI5I.roa (hash: Jk/Vq/HavBcVMjBR4tqdS47N90EhCkZ4tAXukBLV+pA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:be:ef:9d:a4:57:40:b3:d2:a5:25:bd:d4:10:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Validity
Not Before: Oct 19 15:01:51 2025 GMT
Not After : Oct 20 15:01:51 2025 GMT
Subject: CN=7f09d54404110df7c76f6bcea4793de9651eeec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bd:dd:3e:0e:9b:9c:fa:37:21:e7:b0:0c:a1:
65:ae:39:27:de:87:f3:04:a4:c1:9b:32:8e:85:ea:
fe:58:52:fb:bd:72:9c:fa:6b:4a:8f:9e:45:c4:9d:
92:33:15:e2:1b:86:26:20:bb:0a:cc:3e:fd:08:12:
8e:da:0c:6c:a1:ad:36:96:63:38:78:07:06:60:50:
0e:69:5d:76:d6:fe:d0:92:8e:96:6a:b8:1b:8b:75:
ad:a6:76:66:4c:48:b8:78:7d:94:83:6d:e2:26:dd:
da:80:c3:6c:87:ec:12:0e:af:96:14:54:83:2f:cc:
d3:b9:39:61:ce:91:7e:d9:3b:7d:db:2a:cd:33:9e:
78:58:f4:17:cf:5b:70:c2:12:65:f9:7b:49:dd:6a:
c7:dc:ac:b6:46:57:c6:d2:67:6e:41:84:e4:da:fb:
89:34:29:ba:dc:dd:1f:8f:a2:29:42:98:19:ad:a1:
5e:58:6e:9e:29:de:44:46:87:e7:39:64:53:b2:32:
be:4d:b2:24:c9:3b:e9:f5:10:08:93:87:11:7a:84:
6f:50:3c:d4:e0:2c:4d:4e:20:eb:16:be:ce:3f:c1:
e8:51:b3:36:a3:0a:b5:80:af:11:33:52:1c:25:6c:
84:c2:a6:8e:30:99:f2:19:13:3b:b6:c8:5e:77:b3:
ee:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:09:D5:44:04:11:0D:F7:C7:6F:6B:CE:A4:79:3D:E9:65:1E:EE:C2
X509v3 Authority Key Identifier:
keyid:3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:3c:e1:ab:d3:25:6f:45:1f:8b:bc:e6:6c:09:5d:63:fa:6e:
b2:53:b0:4c:3c:3c:53:d9:30:cb:de:aa:7e:c8:bd:19:cd:77:
51:bc:d3:ce:aa:60:c2:b2:63:31:53:33:a4:9b:1e:d4:d1:9c:
a6:e0:73:7a:31:48:3f:3c:15:28:2e:86:0e:b0:74:66:c4:2b:
5c:49:51:0f:de:bf:b5:ea:6c:52:fe:85:39:aa:c9:71:05:00:
38:a0:64:f6:6f:56:05:3d:8e:76:f3:5c:d5:61:12:cf:09:47:
a4:80:81:93:ac:68:f4:5e:3b:05:e2:7c:d6:36:5d:f7:62:cc:
4e:4a:3a:2e:39:b0:09:16:32:23:8a:81:a4:95:aa:9e:40:e4:
3e:89:d6:ba:27:7e:83:0a:ba:06:66:ad:22:3f:59:3a:68:09:
18:6c:a1:3b:da:7f:d2:a0:57:1d:e6:f2:9c:78:d4:db:83:e2:
9f:0f:6d:aa:e1:5f:85:36:6f:53:a3:5f:43:d9:d1:d4:1f:40:
48:67:c7:8d:a6:37:33:2f:d4:9f:db:03:5d:a6:b2:04:f0:d9:
48:41:81:cf:52:47:c5:c0:4e:c5:de:00:33:ee:0a:61:71:e5:
1d:3b:38:4c:2c:0e:90:c5:38:f0:8a:9c:d3:be:20:3e:39:45:
e6:e2:78:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:29:50 2025 by rpki-client