
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
File: pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft (raw, json)
Hash identifier: hF5tFZ/kmtmGwyDsGpX2WDlOAOqT7oDJW7oygZc0kkU=
Subject key identifier: B7:99:DC:85:98:68:65:A0:3F:4C:99:03:93:D5:E1:34:BC:B8:66:B0
Authority key identifier: A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
Certificate issuer: /CN=a634878281144a46a856003d622f6141ea4e006f
Certificate serial: 0197CBDF3B85CA9C6587B50C30C649A1719A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
Manifest number: 15C3
Signing time: Wed 02 Jul 2025 16:01:33 +0000
Manifest this update: Wed 02 Jul 2025 16:01:33 +0000
Manifest next update: Thu 03 Jul 2025 16:01:33 +0000
Files and hashes: 1: BC9YAXepVvBWb0SpmFLnGsiu_0U.roa (hash: aM6wNA8MxfdfUppHaLmRAdGV0kYIIUvP9jpBwEyPjpo=)
2: _XoxeAXZ_0NOSgriyXyYImr8sp4.roa (hash: 95zz7gDtzubb5S5SZ2yFR8QhWyDigdhIQZqm7xDPB7s=)
3: pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl (hash: flobPE+G6gZ6cS7qaO7HA7W0znVuDH1lQYIyvIf1kWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:df:3b:85:ca:9c:65:87:b5:0c:30:c6:49:a1:71:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a634878281144a46a856003d622f6141ea4e006f
Validity
Not Before: Jul 2 16:01:33 2025 GMT
Not After : Jul 3 16:01:33 2025 GMT
Subject: CN=b799dc85986865a03f4c990393d5e134bcb866b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:91:09:c5:8f:92:4a:aa:cf:ff:b1:ba:4f:60:
d1:ba:86:9d:ea:e0:16:da:2a:c8:12:2f:f6:71:d5:
23:6d:72:90:48:0e:e9:ab:32:f7:95:92:2f:72:01:
5e:ad:6b:82:40:48:d4:6a:d8:b2:15:fc:fd:4e:4f:
ab:bd:63:30:84:05:72:cd:79:49:33:bf:71:e3:16:
14:42:2d:44:21:76:81:ad:65:2f:bc:b5:f7:83:f9:
4e:25:da:c1:e3:bb:a4:b0:65:7f:e6:e0:12:32:f8:
85:fd:87:e5:bf:1b:b2:d0:6d:9f:3d:ae:ab:5b:17:
e6:4a:40:3d:e7:40:94:a9:72:83:fc:80:e5:be:02:
eb:67:78:32:59:d5:cd:be:25:fb:0d:9b:0e:06:79:
e6:7b:34:ff:89:05:4e:51:52:86:3e:d1:b3:00:bf:
f9:2e:66:de:e0:a8:7b:53:f4:a5:7f:5f:5a:ec:4a:
6b:bb:f4:75:60:c1:b1:f5:20:e3:6c:f0:f6:95:5e:
c9:4d:7c:a6:e9:f3:b5:77:76:36:d1:80:d1:a1:bf:
e7:55:d9:d9:04:e4:f8:3b:ec:fe:7a:e6:5b:27:bf:
fb:95:85:99:4f:60:0b:9b:63:da:56:a2:b1:48:7e:
4a:ec:ba:38:d0:0c:e6:0c:12:6d:d0:dd:4e:fa:fd:
6f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:99:DC:85:98:68:65:A0:3F:4C:99:03:93:D5:E1:34:BC:B8:66:B0
X509v3 Authority Key Identifier:
keyid:A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:75:17:c7:ba:4f:c1:06:8f:c1:24:8a:40:b4:15:4d:19:0b:
e6:ed:8a:79:64:b2:6e:39:9e:f3:a8:47:7b:a8:71:31:12:59:
8f:f3:cf:a5:68:04:5d:57:f2:a6:15:e7:e4:cb:f6:10:a3:c9:
e9:4b:1e:9d:42:83:96:77:ad:87:11:03:07:ab:ac:74:0a:3e:
81:54:17:42:3c:58:01:10:21:8b:a5:1e:4a:1a:c3:fa:12:da:
55:ab:33:6d:f8:d3:2a:03:5b:19:20:37:50:c6:a4:fc:18:0e:
be:02:8e:ce:1b:23:10:cc:e5:f5:92:e6:58:7f:15:cb:25:30:
e4:2c:fd:74:75:f4:2a:92:da:29:c2:5e:c4:58:99:21:0a:86:
ac:c9:f9:f0:96:e2:36:8e:95:29:52:35:02:c5:5f:4f:fd:6d:
10:8c:58:e7:95:b6:0d:32:48:3d:15:50:ea:79:15:47:6f:dd:
ea:dc:d7:59:8b:74:82:35:31:6b:13:21:1e:38:4c:70:27:51:
a9:8a:ec:d8:97:f3:ea:06:97:cb:3b:f9:1e:1f:c7:88:64:88:
ce:c3:fd:a9:35:26:d3:03:d2:20:01:e5:4c:dc:a9:97:4d:b5:
ae:c1:73:27:16:c6:b8:cb:f0:9b:d8:f0:f3:b7:07:a0:ad:7e:
41:7b:96:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:57:56 2025 by rpki-client