Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft
File: pjx_KbiD9LPCQ22WPchTKhpjTMo.mft (raw, json)
Hash identifier: 2AyW3Hq3yjp4hNYqHkug8A66PTjEf4Rx8LofYuUZMBg=
Subject key identifier: 75:26:38:E8:B3:58:01:50:DF:33:00:CC:19:5A:1D:26:BD:B5:FA:1E
Authority key identifier: A6:3C:7F:29:B8:83:F4:B3:C2:43:6D:96:3D:C8:53:2A:1A:63:4C:CA
Certificate issuer: /CN=a63c7f29b883f4b3c2436d963dc8532a1a634cca
Certificate serial: 0198D4A8588807EAF080EE303C40CD4AA4D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjx_KbiD9LPCQ22WPchTKhpjTMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 02:00:59 +0000
Manifest this update: Sat 23 Aug 2025 02:00:59 +0000
Manifest next update: Sun 24 Aug 2025 02:00:59 +0000
Files and hashes: 1: hl9YaHYMtemKEI7D_jA4qgPzTFk.roa (hash: HxBm5oPeeE9yGfs365dZANWUtoaHONFCOpgK8z3kXuU=)
2: oiBEvO2p29cLUYapByjoEoYyzDg.roa (hash: vhwwgY7QGbDe4OWAOvjloCFsUXviJLu/e8Pkbh7LI2o=)
3: pjx_KbiD9LPCQ22WPchTKhpjTMo.crl (hash: jp9y9Hz9tLsR3dNGXD1J3H1iLIAXyUb2whYOO+1CIuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjx_KbiD9LPCQ22WPchTKhpjTMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:58:88:07:ea:f0:80:ee:30:3c:40:cd:4a:a4:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63c7f29b883f4b3c2436d963dc8532a1a634cca
Validity
Not Before: Aug 23 02:00:59 2025 GMT
Not After : Aug 24 02:00:59 2025 GMT
Subject: CN=752638e8b3580150df3300cc195a1d26bdb5fa1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b2:46:81:61:65:48:19:f6:e1:90:08:aa:f6:
58:ea:39:d0:e2:74:89:73:ae:83:fa:d4:bf:17:38:
7e:28:14:af:04:57:f1:d2:6c:12:20:97:b7:4e:1a:
0e:2c:3c:2e:1d:13:3d:c0:c0:d4:ea:1c:c1:ad:0b:
7a:ef:92:b3:ee:c6:78:a6:af:5a:0f:c5:49:75:61:
86:63:9b:8c:66:db:94:df:72:45:75:ba:c8:d8:19:
1b:8b:9d:ee:d3:49:a4:73:c5:f3:e7:b8:16:b9:98:
83:00:e8:47:16:53:88:89:24:d2:7d:c4:9c:c5:4f:
11:1b:83:17:f5:af:85:e9:dd:ce:d2:7a:40:d6:3d:
d2:fa:cd:f8:f4:9e:c0:fb:c2:d2:63:0c:b3:53:4e:
84:ce:e3:7a:61:34:49:8e:e2:19:e5:58:c9:ab:5a:
17:ae:c9:80:95:46:23:10:76:f9:ea:9e:ea:04:af:
9b:ce:a9:9a:d5:78:dd:9f:59:9a:cb:f6:0e:85:af:
c1:37:69:86:f2:a1:9e:50:81:24:13:2e:98:dd:b3:
8f:aa:68:c3:1b:7d:51:6d:71:c6:8c:72:b6:db:a0:
4b:24:92:55:b6:5d:b6:d1:b4:fd:9c:52:32:f0:68:
47:f9:2c:c5:97:96:cb:d3:74:e0:4e:96:05:b7:08:
dc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:26:38:E8:B3:58:01:50:DF:33:00:CC:19:5A:1D:26:BD:B5:FA:1E
X509v3 Authority Key Identifier:
keyid:A6:3C:7F:29:B8:83:F4:B3:C2:43:6D:96:3D:C8:53:2A:1A:63:4C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjx_KbiD9LPCQ22WPchTKhpjTMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:00:a8:21:e0:0e:f8:c7:31:e5:4c:26:6e:92:0f:e4:eb:2f:
2e:38:41:46:88:ba:8a:06:94:97:46:01:4c:e5:ec:ca:b2:35:
17:79:3b:b9:f4:f7:56:8a:ba:55:c2:d5:9b:a3:9b:57:48:22:
b1:e7:10:53:1c:ba:20:fb:87:f8:27:28:59:df:d2:92:a2:07:
95:ae:1a:5a:e7:43:d3:5c:b0:10:05:99:a0:77:55:46:0d:dd:
15:dc:50:02:f3:d9:4e:fb:3c:d1:c1:c7:e6:4c:4b:72:02:3c:
87:82:15:26:da:73:10:6d:fb:00:e7:f5:a9:fb:1b:d7:fc:90:
26:7b:83:7f:47:e0:34:a7:37:29:43:d4:e3:79:e4:a9:11:19:
14:e3:46:69:3a:4e:3d:b2:f1:7e:83:ed:77:1b:00:2c:5e:ec:
d9:f5:91:1d:7d:92:9b:a7:12:63:f0:3d:e7:ea:00:57:1c:4f:
6d:d7:17:3c:c4:e3:2b:18:f9:43:c4:34:ce:6d:90:f7:d6:5c:
30:2c:68:81:04:12:44:d4:54:10:24:b6:1c:9c:26:ad:c8:d3:
c2:36:e2:30:f1:a2:80:bd:37:21:36:6c:66:02:3f:68:e4:57:
b0:ea:7b:fd:b0:7d:76:ed:30:72:41:91:64:28:8d:ec:c1:2f:
d5:fa:b9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:51 2025 by rpki-client