Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
File: PjMt0plMbuiUNhWKLqwfSCkizSo.mft (raw, json)
Hash identifier: +p2/+6Q8G72d1niVty+uPoASTEKr94Ybv8gMLxu0v7Y=
Subject key identifier: 64:70:7A:6B:F5:A4:D8:A6:5D:75:42:57:24:F0:1D:05:23:EA:D5:0A
Authority key identifier: 3E:33:2D:D2:99:4C:6E:E8:94:36:15:8A:2E:AC:1F:48:29:22:CD:2A
Certificate issuer: /CN=3e332dd2994c6ee89436158a2eac1f482922cd2a
Certificate serial: 0198D4049051EBE892B446D763AB8023A3DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
Manifest number: 0760
Signing time: Fri 22 Aug 2025 23:02:05 +0000
Manifest this update: Fri 22 Aug 2025 23:02:05 +0000
Manifest next update: Sat 23 Aug 2025 23:02:05 +0000
Files and hashes: 1: Eg6f3oV_tmh90tuvdcGS4z7md3o.roa (hash: +iCyWfpNRgku+keY+1TZvk0pjaW3ZowUvCSdJVvHiXs=)
2: PjMt0plMbuiUNhWKLqwfSCkizSo.crl (hash: byF5mhp8ixyIRPuw5jODOhnN2Ard9RuvDKD8x687XQM=)
3: hvAcV0p--qlqSvXjrIPln93SWWk.roa (hash: TjRxZCcsv470SMx3GoJIYlzXG8w9x5IPVw3HcGg4jOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:90:51:eb:e8:92:b4:46:d7:63:ab:80:23:a3:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e332dd2994c6ee89436158a2eac1f482922cd2a
Validity
Not Before: Aug 22 23:02:05 2025 GMT
Not After : Aug 23 23:02:05 2025 GMT
Subject: CN=64707a6bf5a4d8a65d75425724f01d0523ead50a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:65:58:28:8d:e3:64:ca:22:80:d6:00:9d:f9:
6a:24:35:c3:88:f4:ff:7b:54:70:47:49:8c:45:ff:
1b:da:d7:04:8c:d0:a8:64:eb:ac:8c:15:60:c7:58:
c5:2c:af:2d:16:d3:3e:01:50:01:e2:08:9e:17:ee:
da:cb:48:fa:07:31:27:67:a5:84:e7:b8:4f:84:47:
23:1e:2b:5c:7f:56:5b:c2:d6:01:7d:84:c3:67:35:
66:54:46:0c:23:e4:f2:00:20:a3:9e:a0:32:40:da:
f1:9a:a5:59:ef:2d:94:3f:08:7a:0b:3f:bc:8a:64:
ed:57:0a:2c:b1:53:b6:9e:67:01:f3:37:05:75:4e:
95:9c:76:0f:04:1f:f5:00:9b:50:0e:d9:0d:2e:f5:
b1:59:6f:43:78:83:45:3e:fb:36:6f:26:b0:4b:84:
23:3f:2d:97:37:3b:75:cb:64:98:ac:b7:fb:db:0e:
85:78:d4:29:49:51:64:6f:57:45:7e:cf:e4:57:82:
53:24:b7:18:5e:ad:23:fa:2f:c2:57:8b:93:ec:2c:
db:36:e5:85:fd:97:d7:93:85:fc:29:23:6c:99:ff:
c4:37:d0:9c:2f:c7:41:f4:36:a0:1b:6d:dd:7d:14:
33:85:3f:8f:0d:86:27:32:d0:1b:d1:f4:03:22:26:
c3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:70:7A:6B:F5:A4:D8:A6:5D:75:42:57:24:F0:1D:05:23:EA:D5:0A
X509v3 Authority Key Identifier:
keyid:3E:33:2D:D2:99:4C:6E:E8:94:36:15:8A:2E:AC:1F:48:29:22:CD:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:72:f7:ec:0e:b1:9b:a2:68:79:fe:72:49:ed:6b:0b:0f:54:
95:84:5f:e7:ee:b7:d9:73:db:3e:c9:cd:93:ab:03:e1:ac:87:
b4:ec:67:50:43:c7:61:1f:d0:fe:d7:3f:c8:32:76:42:86:43:
ef:d6:fb:10:da:bd:a4:47:a2:a0:26:23:a6:fe:5b:85:89:49:
8b:f9:90:3f:c7:1e:d0:ea:f4:9a:0c:24:f9:7a:78:3d:78:09:
d2:ac:34:25:5e:15:a8:71:d9:aa:8a:6d:a6:5c:61:73:77:c9:
2c:c8:a8:9a:e4:f2:db:a6:02:04:c6:85:3b:1a:29:85:14:1b:
47:8a:62:1f:42:73:fd:d5:39:dc:aa:ff:08:24:9b:c9:54:0c:
59:97:64:1f:f2:7a:1b:22:6f:ef:a0:22:39:77:85:b9:db:54:
3e:09:62:1d:6a:f9:d5:91:3d:05:d7:e4:b0:4f:3c:d5:59:c7:
0d:b8:3b:0f:0f:f7:22:70:e8:c0:29:53:ed:95:c1:8f:ba:59:
7c:70:65:b0:44:9a:da:da:90:ed:1b:38:96:9a:d7:b7:69:9b:
49:a7:e2:34:8a:1a:f2:a3:fa:bf:06:75:e7:68:46:42:fc:8e:
1d:9a:fc:51:fe:74:32:92:b2:c4:dd:4d:28:7d:45:a5:28:2a:
94:4b:ce:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:37:57 2025 by rpki-client