Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft
File: pjx_KbiD9LPCQ22WPchTKhpjTMo.mft (raw, json)
Hash identifier: PIWuLGR0AYKwcW/QPMHJ3MAPDTUhR3NI3sa374pU/Kw=
Subject key identifier: ED:C3:D1:3F:E7:66:13:53:9C:6B:4D:56:98:CF:B2:32:7D:53:4E:30
Authority key identifier: A6:3C:7F:29:B8:83:F4:B3:C2:43:6D:96:3D:C8:53:2A:1A:63:4C:CA
Certificate issuer: /CN=a63c7f29b883f4b3c2436d963dc8532a1a634cca
Certificate serial: 0197B88FA1953E3B2EFF5CFE0F1B61EED6E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjx_KbiD9LPCQ22WPchTKhpjTMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 22:01:50 +0000
Manifest this update: Sat 28 Jun 2025 22:01:50 +0000
Manifest next update: Sun 29 Jun 2025 22:01:50 +0000
Files and hashes: 1: pjx_KbiD9LPCQ22WPchTKhpjTMo.crl (hash: yC8xJDytSqOhzMW5PnbAiSZ+T5W3/7rHkF3MQkMa0XM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjx_KbiD9LPCQ22WPchTKhpjTMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:a1:95:3e:3b:2e:ff:5c:fe:0f:1b:61:ee:d6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63c7f29b883f4b3c2436d963dc8532a1a634cca
Validity
Not Before: Jun 28 22:01:50 2025 GMT
Not After : Jun 29 22:01:50 2025 GMT
Subject: CN=edc3d13fe76613539c6b4d5698cfb2327d534e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d8:20:9f:5f:ea:81:77:68:1c:96:e0:d3:d1:
57:23:b5:20:f6:e5:cc:63:43:b8:f6:71:f1:07:b8:
2f:6d:8f:36:aa:07:a9:e6:30:e4:c6:e6:ee:26:63:
d5:b9:55:d7:f7:d0:5b:60:7f:fb:55:f8:3a:1b:0b:
81:ea:14:d4:f6:83:e7:0e:dd:39:79:1c:ad:2c:85:
ed:34:f8:8b:ba:61:ca:fa:7b:fc:72:7d:ad:3d:be:
1f:a1:41:0d:84:49:be:2d:5d:eb:c6:82:9c:6e:74:
af:95:29:2e:4e:e2:1b:aa:8a:46:40:ec:a1:a9:e9:
9c:31:f5:23:c6:58:3d:c3:ca:5d:69:7c:e0:0b:54:
30:55:bd:01:14:2a:8f:2c:46:43:1b:2b:1d:5a:fe:
6d:72:2c:dd:39:ef:5e:48:13:e1:de:06:e7:38:0d:
ab:18:7f:25:29:e5:ce:58:50:c3:8c:1b:45:5e:25:
68:8b:8a:30:fc:60:50:ba:a8:6d:2c:f8:23:70:06:
6d:14:e3:c4:61:88:9c:93:d2:be:d1:f9:19:25:5c:
34:e4:6b:3c:30:14:df:67:91:24:74:1d:0c:27:68:
15:88:5c:da:e2:f8:82:00:b8:c0:6f:cb:f0:fe:dc:
a4:5a:b4:e7:6b:eb:c1:c6:c1:6b:59:78:f1:ee:a6:
60:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C3:D1:3F:E7:66:13:53:9C:6B:4D:56:98:CF:B2:32:7D:53:4E:30
X509v3 Authority Key Identifier:
keyid:A6:3C:7F:29:B8:83:F4:B3:C2:43:6D:96:3D:C8:53:2A:1A:63:4C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjx_KbiD9LPCQ22WPchTKhpjTMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:98:13:2e:6d:4d:90:d0:e2:4e:55:5f:88:c4:d4:d9:bb:94:
8b:52:05:98:00:c1:4a:63:11:f7:de:1c:86:3e:eb:39:98:75:
9d:78:30:eb:76:a2:6d:c6:5f:3e:34:56:da:d2:10:71:3c:53:
8f:75:07:75:ad:2a:fa:22:3b:f1:99:ef:c6:82:f5:9c:ad:7a:
13:17:fb:1b:4e:84:c8:64:2f:d8:f1:d8:de:42:0d:70:3c:60:
a7:10:4d:39:3e:1a:96:82:9b:be:b8:28:ea:c1:a2:c7:f9:81:
65:70:00:53:d2:db:5e:42:c2:29:06:38:20:f8:a8:0f:a3:03:
0a:56:05:d5:1d:e0:e3:8a:6f:e1:18:11:01:6d:27:35:8d:99:
b5:e4:81:7e:74:dc:e2:ab:64:47:58:77:72:66:48:3e:87:f2:
e1:a3:60:6c:63:6d:87:89:b0:4e:cc:fb:23:e3:ea:d0:34:9f:
ab:34:11:0e:db:5c:ca:81:09:2b:43:ac:00:5d:96:7f:28:c4:
75:e5:70:92:94:5b:db:f2:41:59:7f:3c:bf:d2:31:b4:72:de:
0b:16:67:9b:fc:f2:0c:dd:b1:85:ac:c6:18:d1:a4:26:39:32:
62:c0:5b:e1:ef:91:24:24:f0:2d:0a:4f:62:1e:7f:39:20:02:
fd:b1:af:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:15:19 2025 by rpki-client