Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
File: PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft (raw, json)
Hash identifier: jLouyUePgGplKlErpKi0UuqNwrYx1DqrfILGYjKh408=
Subject key identifier: FB:66:A7:2E:13:63:B8:41:A4:8B:FC:3A:95:9A:FF:FA:FE:57:33:20
Authority key identifier: 3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
Certificate issuer: /CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Certificate serial: 0197B7453A0ADF33B00DBCAD044A10FEA02F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
Manifest number: 07CD
Signing time: Sat 28 Jun 2025 16:00:56 +0000
Manifest this update: Sat 28 Jun 2025 16:00:56 +0000
Manifest next update: Sun 29 Jun 2025 16:00:56 +0000
Files and hashes: 1: LN9Y4VYuBPHcqnOfi1whRTolirA.roa (hash: oKsBnnzz1/szS+noOPKG/sq6k5F0SOG+hrVgu4395L0=)
2: PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl (hash: Old8EXNyeJYUokrB2RystTRM/HNc7LxJy18zwWlF0WE=)
3: aOjeQ_LFlj3ColO7fwm2y03noI8.roa (hash: ZPkI6QIM1mrIPNFFrmXcy/CvfmDUl8kYYI0d126tg6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:3a:0a:df:33:b0:0d:bc:ad:04:4a:10:fe:a0:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Validity
Not Before: Jun 28 16:00:56 2025 GMT
Not After : Jun 29 16:00:56 2025 GMT
Subject: CN=fb66a72e1363b841a48bfc3a959afffafe573320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:19:e8:70:13:c9:77:d0:e0:72:d4:82:f4:9b:
d0:ab:a9:4c:19:05:37:8e:30:dd:7b:c4:c1:a7:24:
87:d4:ac:58:61:be:e9:15:62:a4:bd:0a:52:07:f9:
4b:6f:6a:5e:ee:04:ef:b5:15:16:e7:8f:8b:fb:ec:
0d:d6:a3:1d:6a:7c:f3:26:ca:6a:40:73:4b:82:e1:
87:b0:2d:12:b3:f2:01:61:2d:48:7f:fd:d3:3d:ff:
7f:44:16:47:93:d9:dd:9c:33:01:70:ca:96:c6:b7:
c6:cd:32:1f:7b:07:21:11:71:54:fd:5b:44:d9:43:
0b:82:7f:c5:33:f6:52:43:c6:3b:26:a2:e6:0e:1e:
7d:df:3f:37:4c:b0:9e:15:fb:9f:a1:3c:48:a9:35:
09:c9:34:66:93:ea:75:13:c6:f6:e5:0b:9c:d8:84:
47:fc:a0:7b:eb:74:9b:c7:33:fc:4c:9d:ad:0f:58:
e1:c3:33:82:72:e8:c8:e2:0d:a6:db:3a:f4:e8:fc:
5c:5e:bf:f7:e3:7e:8a:df:26:2c:8f:0e:5f:f7:70:
42:e1:60:1c:9e:2a:b7:44:d4:0e:13:2f:61:1b:28:
88:4c:c0:d6:e5:2a:33:bd:a9:9b:a0:71:02:03:bc:
bf:98:6e:bd:f8:af:0c:12:77:05:7c:01:45:22:09:
e0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:66:A7:2E:13:63:B8:41:A4:8B:FC:3A:95:9A:FF:FA:FE:57:33:20
X509v3 Authority Key Identifier:
keyid:3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e6:78:a9:7d:56:76:25:0f:38:7b:99:b2:48:47:0e:bb:0b:
57:6e:19:d1:59:18:26:5d:35:ad:ac:36:72:97:2f:5e:3c:ea:
7b:08:b4:a5:29:47:73:48:46:d0:fa:37:27:2c:59:d4:44:ba:
e5:59:8c:74:f4:69:2f:f4:ac:3b:93:05:76:b8:ae:b6:79:76:
95:33:ab:51:42:45:71:e7:78:80:a4:9d:41:56:ce:13:eb:e3:
4e:a9:8f:7c:03:d8:51:8b:16:d4:9d:d0:f3:9f:7a:32:9a:69:
71:b7:8d:a9:03:74:59:22:7a:c9:57:66:71:c6:cb:64:13:d8:
fd:55:62:75:12:0d:b9:85:69:f5:16:49:32:89:d9:b3:b8:29:
8a:3c:b7:95:36:d0:16:50:53:b6:a7:c8:d6:5a:1b:de:67:e1:
28:be:2f:31:ed:a5:76:4e:f8:6e:50:2f:15:d7:6b:05:4b:b3:
83:c9:46:bf:90:d9:26:e7:6d:44:fd:c4:b8:c2:79:2b:a7:23:
f2:79:9d:61:20:75:bc:f6:e8:bf:5c:11:1a:b6:5b:06:df:04:
49:38:db:2f:ea:54:83:46:4b:44:d7:2c:60:25:89:41:0a:ce:
bf:c1:1b:16:99:e2:9a:dc:4f:8b:c3:85:18:d8:a3:9c:3e:4c:
13:be:89:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:14:32 2025 by rpki-client