Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
File: pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft (raw, json)
Hash identifier: Ix/Ay9KCa7BfzCBzJPFnnvbqQ1LPx98lLx1y4TcPd+g=
Subject key identifier: 00:90:E3:A6:F5:5B:34:1C:82:43:01:EA:A2:E3:3B:D6:59:B8:91:A3
Authority key identifier: A4:91:7D:88:5B:67:56:72:FC:8E:FB:89:D6:E1:4E:23:67:50:52:D9
Certificate issuer: /CN=a4917d885b675672fc8efb89d6e14e23675052d9
Certificate serial: 0198D4731DABA95F158D502AB6F603F4CBD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
Manifest number: 08C6
Signing time: Sat 23 Aug 2025 01:02:50 +0000
Manifest this update: Sat 23 Aug 2025 01:02:50 +0000
Manifest next update: Sun 24 Aug 2025 01:02:50 +0000
Files and hashes: 1: pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl (hash: IkfElWMy8cncWhRrT02qK6uMFi4Wr4/GayU+mcs9Yq0=)
2: prQrRYa7iRxtGVoZ-fOmbS6yQ1I.roa (hash: tnsyAKD0R4WdSHhtE37JrhpYKkCqh9rly9GAA3vquY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:1d:ab:a9:5f:15:8d:50:2a:b6:f6:03:f4:cb:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4917d885b675672fc8efb89d6e14e23675052d9
Validity
Not Before: Aug 23 01:02:50 2025 GMT
Not After : Aug 24 01:02:50 2025 GMT
Subject: CN=0090e3a6f55b341c824301eaa2e33bd659b891a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cf:1f:29:30:6e:bf:2d:21:ab:68:a6:5c:f0:
50:3f:7d:1a:72:e3:8b:9f:6d:18:6a:70:54:a6:44:
5c:66:50:01:a7:b8:76:74:e9:08:59:d0:60:3b:18:
69:5a:91:53:14:26:31:1f:54:87:ed:7b:9f:83:22:
67:df:8e:72:ca:12:c8:4f:ff:e1:f4:92:36:78:ff:
59:9e:a8:a8:57:d1:c1:13:34:47:75:0e:8b:5f:36:
7b:bb:00:96:d6:dd:da:f4:f2:47:c6:98:6f:00:22:
c1:17:7b:a0:ab:4c:e4:8c:93:a6:a9:b1:13:65:66:
f3:67:f7:15:eb:bf:76:4f:51:48:8d:96:ff:18:ee:
43:e2:4b:fa:05:18:b6:2e:be:6c:a3:2c:ce:32:b2:
29:1a:19:10:09:6f:f6:95:00:08:a5:c0:5f:18:fd:
49:a8:a3:bb:5f:7f:71:5e:9c:72:83:e0:a8:e4:e7:
d1:16:5f:ff:0b:04:d4:69:7e:a0:c4:ed:d7:da:76:
62:8f:89:b8:d2:06:22:f5:a3:17:0a:04:6d:1e:c3:
c9:21:22:cb:f8:a4:4e:12:3d:1b:74:99:9f:21:a1:
87:f3:f8:53:bf:4e:91:65:83:a9:93:b9:31:b7:c6:
f8:75:c3:fd:db:13:6e:ae:60:39:06:f0:53:c4:41:
71:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:90:E3:A6:F5:5B:34:1C:82:43:01:EA:A2:E3:3B:D6:59:B8:91:A3
X509v3 Authority Key Identifier:
keyid:A4:91:7D:88:5B:67:56:72:FC:8E:FB:89:D6:E1:4E:23:67:50:52:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:85:fd:d9:0a:fe:93:68:5f:c4:80:7d:03:f8:4b:ad:da:f5:
15:99:35:f3:06:7b:59:ca:73:e4:8d:85:26:f9:14:20:da:4c:
0b:67:f2:41:2b:c3:a4:d9:66:eb:d0:a9:5d:bd:fe:c8:b5:88:
7b:5e:60:65:28:89:1f:a7:f5:d3:1d:21:ce:9f:62:55:9f:9a:
b1:c3:74:65:56:83:f4:d5:32:75:da:b6:e1:31:a2:df:4f:c9:
d8:5b:0f:09:3f:25:3f:dd:4d:80:27:6d:3c:31:be:73:fd:09:
05:31:60:e6:1e:82:04:b4:32:45:e8:fe:c6:ad:d1:1c:a0:d3:
35:c1:c6:ad:09:d2:96:e7:35:53:65:c4:45:e1:a5:43:d8:f3:
4d:e7:a3:d1:f1:6a:4c:39:e6:42:5f:49:2f:2d:d5:3b:20:d6:
04:1a:2e:2f:c9:67:ff:17:06:2e:b4:61:9d:dd:5a:32:2b:44:
3f:dd:4c:15:b8:fd:69:f4:cc:b9:cb:a4:59:9a:6f:b5:e5:85:
53:ca:62:f5:d9:83:28:c1:ec:ff:0f:33:01:01:11:58:8a:b3:
a7:76:80:c7:99:c3:12:c3:26:23:51:81:c1:72:1d:f2:6f:58:
ba:cc:64:25:3c:4f:26:0f:21:92:ef:6d:c1:47:94:ec:07:b5:
14:30:6b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:12:02 2025 by rpki-client