Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft
File: pjx_KbiD9LPCQ22WPchTKhpjTMo.mft (raw, json)
Hash identifier: 3Nj9rakPPXZ72HrAyXKdClLxQbWgmxhWslEsg4wHkVM=
Subject key identifier: 3C:AF:E5:A9:C1:AA:9E:76:C6:C4:0F:85:A5:03:DD:4E:2D:66:E9:13
Authority key identifier: A6:3C:7F:29:B8:83:F4:B3:C2:43:6D:96:3D:C8:53:2A:1A:63:4C:CA
Certificate issuer: /CN=a63c7f29b883f4b3c2436d963dc8532a1a634cca
Certificate serial: 0199FC5839DFE5F05C5A16756EE3F843C79F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjx_KbiD9LPCQ22WPchTKhpjTMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 12:01:04 +0000
Manifest this update: Sun 19 Oct 2025 12:01:04 +0000
Manifest next update: Mon 20 Oct 2025 12:01:04 +0000
Files and hashes: 1: UTDX9X0E-WocbOKc9uxoBBtUNW8.roa (hash: POK+eugWAjhkZBM6kVW5R4lWCtIN/mz6eft4yJE4FsE=)
2: oiBEvO2p29cLUYapByjoEoYyzDg.roa (hash: vhwwgY7QGbDe4OWAOvjloCFsUXviJLu/e8Pkbh7LI2o=)
3: pjx_KbiD9LPCQ22WPchTKhpjTMo.crl (hash: /hweITlT7LpCOLAF07n2Jk6Vp6tu/IXBFrrg00ygKGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjx_KbiD9LPCQ22WPchTKhpjTMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:39:df:e5:f0:5c:5a:16:75:6e:e3:f8:43:c7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63c7f29b883f4b3c2436d963dc8532a1a634cca
Validity
Not Before: Oct 19 12:01:04 2025 GMT
Not After : Oct 20 12:01:04 2025 GMT
Subject: CN=3cafe5a9c1aa9e76c6c40f85a503dd4e2d66e913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:84:c0:e8:b3:c1:07:35:0b:82:5e:c0:2f:d8:
93:f4:3e:e1:b6:44:d6:ab:20:d6:a7:b4:37:2a:12:
a1:3c:0b:10:24:15:5a:2b:b2:f6:94:77:d5:86:b2:
33:c6:2c:d2:ce:f8:19:7d:2e:24:08:25:2a:e7:1e:
40:a5:1c:e8:8b:8c:c9:f3:e9:75:84:6f:b8:9a:2f:
2c:9a:df:69:f3:cc:b4:52:a3:8a:ff:13:5f:90:1b:
99:58:25:1c:7f:e2:f9:4f:e4:2a:03:54:9c:d0:13:
d4:ee:6e:ca:c4:66:a4:01:97:78:1e:3a:e0:b6:30:
c5:e4:4c:67:04:83:aa:a1:7c:73:f3:df:3c:88:9c:
e4:5a:a2:36:36:8b:9f:9d:70:a5:22:12:0c:a4:73:
08:60:79:7b:1a:ce:96:82:42:18:66:20:76:65:49:
e1:45:3c:d8:55:38:a9:99:42:68:81:40:f4:43:13:
7f:c5:9b:25:d4:ff:f4:aa:cc:63:22:6b:27:cd:a8:
1f:34:0e:8f:12:c2:2f:57:01:13:27:d0:3b:5a:ad:
c1:d8:e2:ee:1d:a3:dc:ae:53:6e:aa:6e:48:f0:e6:
53:f5:64:c6:de:e6:28:8d:39:ad:85:29:24:d0:fc:
ac:56:aa:0f:65:89:f6:f3:cc:d4:70:e0:17:2a:fb:
07:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AF:E5:A9:C1:AA:9E:76:C6:C4:0F:85:A5:03:DD:4E:2D:66:E9:13
X509v3 Authority Key Identifier:
keyid:A6:3C:7F:29:B8:83:F4:B3:C2:43:6D:96:3D:C8:53:2A:1A:63:4C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjx_KbiD9LPCQ22WPchTKhpjTMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:3f:4b:d3:ff:81:a0:4b:e7:4a:2d:7d:1d:6d:f2:8f:8f:a7:
8a:1b:99:81:02:7b:f9:b8:c5:aa:f7:b1:60:b1:d1:18:10:2e:
67:26:be:2d:f8:38:9d:2f:08:22:e1:6b:f1:c9:16:70:8a:4c:
87:6d:29:ad:32:77:6d:14:05:5f:0d:94:b0:c4:13:b3:76:8a:
d2:09:b5:15:e9:f3:90:c2:1e:83:e4:b4:82:47:c9:fd:8b:1e:
f0:89:68:65:2d:a6:35:b8:fe:b0:71:a9:03:f9:46:62:9f:27:
e8:ad:99:f6:e0:23:41:7d:9b:7b:e8:be:f2:ee:69:79:1c:10:
c9:4c:d3:27:c5:f4:02:c3:e5:0c:3d:bb:07:33:67:e0:da:ab:
bf:2a:70:4c:1e:bb:b7:e2:b9:69:5c:9a:82:a1:7f:a1:6e:a8:
f6:42:0a:88:89:28:1e:95:22:7a:fe:84:52:65:02:34:69:ae:
24:47:10:ab:8a:54:f8:d7:34:2e:69:83:6c:80:b9:70:a2:fa:
0a:28:f3:5c:78:46:cd:3c:45:30:5e:99:3a:4c:ca:2d:a9:45:
57:df:0f:b5:78:63:94:1a:6a:3f:20:67:4e:cb:4e:48:6d:03:
09:21:7f:1a:18:48:7a:a8:3d:bf:d3:7a:73:88:f7:6e:91:72:
45:e6:8c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:44 2025 by rpki-client