Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
File: pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft (raw, json)
Hash identifier: HWOmXUDfj99RLHDeo0f4doy5cIMFUn3PtI78VjlBV3M=
Subject key identifier: 55:AF:99:8B:FA:5D:04:16:7E:12:5B:B2:C3:FC:F6:68:4D:6B:09:A7
Authority key identifier: A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
Certificate issuer: /CN=a634878281144a46a856003d622f6141ea4e006f
Certificate serial: 0199FBEBCDCF240B0C8F400D7B44C7ADB035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 10:02:38 +0000
Manifest this update: Sun 19 Oct 2025 10:02:38 +0000
Manifest next update: Mon 20 Oct 2025 10:02:38 +0000
Files and hashes: 1: BC9YAXepVvBWb0SpmFLnGsiu_0U.roa (hash: aM6wNA8MxfdfUppHaLmRAdGV0kYIIUvP9jpBwEyPjpo=)
2: _XoxeAXZ_0NOSgriyXyYImr8sp4.roa (hash: 95zz7gDtzubb5S5SZ2yFR8QhWyDigdhIQZqm7xDPB7s=)
3: pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl (hash: ursKR5OYalvo88GWPcewFcu7E/6vbnArktRp5AZ2EVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:cd:cf:24:0b:0c:8f:40:0d:7b:44:c7:ad:b0:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a634878281144a46a856003d622f6141ea4e006f
Validity
Not Before: Oct 19 10:02:38 2025 GMT
Not After : Oct 20 10:02:38 2025 GMT
Subject: CN=55af998bfa5d04167e125bb2c3fcf6684d6b09a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:54:19:9c:4e:b8:82:bb:18:df:b1:ad:33:d1:
f4:ec:1d:a2:07:7b:2b:6a:e3:0a:05:bb:ce:bd:cf:
2f:62:bd:71:9e:df:2e:8b:c8:a4:4e:c8:88:6b:36:
98:59:2f:bb:bb:bd:3e:86:e7:67:bb:3e:74:d0:72:
44:44:a5:f8:cf:47:2b:6c:50:7c:ff:bb:b8:41:f4:
66:93:01:c5:97:91:65:f7:b1:77:4c:f3:ab:1f:a4:
6b:08:eb:f1:17:3d:c1:93:fe:53:75:f9:d9:a1:3c:
a2:dd:c3:1c:62:5e:fb:66:9a:0c:bd:cc:41:02:69:
25:4d:b5:f8:56:d2:f7:63:b0:78:09:c2:52:5d:a5:
43:f7:dc:ba:57:af:7c:d7:ab:44:30:4c:4d:f9:d1:
43:85:0c:8b:7e:cb:34:99:e6:1b:3a:e5:d4:94:c9:
4c:29:f1:9a:29:ed:92:89:d0:41:7c:3e:a9:53:1b:
f1:26:e8:23:08:83:c5:cc:e1:c7:d1:a4:f8:08:ec:
f4:7a:d4:c4:83:89:f3:72:ea:fe:f7:e3:55:49:4f:
60:a8:f9:f8:f3:f7:39:4e:38:bb:cd:7b:07:16:74:
03:c8:c7:8f:0a:78:97:c4:06:03:73:5a:e2:c7:4d:
1f:15:3e:ca:89:03:76:e5:4f:1f:0d:76:48:93:87:
25:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AF:99:8B:FA:5D:04:16:7E:12:5B:B2:C3:FC:F6:68:4D:6B:09:A7
X509v3 Authority Key Identifier:
keyid:A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:ce:4f:06:f9:66:cb:f3:06:44:d1:dc:ce:27:a4:79:18:9d:
c0:a9:3b:7e:6d:d0:48:af:7e:c9:18:c1:0c:08:4e:4b:a5:52:
de:e0:69:38:a4:fe:f9:06:73:18:81:b5:23:4a:48:10:aa:68:
a1:b5:b3:1e:1a:df:ca:3f:6b:22:8d:61:ac:8f:04:4e:30:0c:
5a:2b:54:c8:2e:49:41:bd:9b:a9:5d:1a:29:f5:64:78:32:dc:
02:8d:2c:ac:5b:0a:fe:45:ac:cf:71:23:f2:b1:56:19:96:6d:
51:b4:e8:dc:20:f4:90:d8:4b:d0:cb:2e:91:b7:37:3c:19:02:
e5:95:47:b7:a9:98:0e:75:e2:6a:c0:63:b2:f4:c8:c3:4e:73:
b5:7d:8a:51:b7:ae:af:d5:fc:7b:29:51:7c:9b:1c:d4:61:83:
03:b3:61:64:72:9f:64:a9:3a:d9:5c:71:a6:85:39:3d:5a:38:
d3:46:85:a2:89:86:29:c2:c2:70:14:b2:7d:0d:b1:d3:c6:0a:
5d:12:7b:67:bc:06:df:59:80:4f:71:fa:e8:9e:0b:1a:f9:2c:
80:af:83:13:93:73:27:03:93:12:b4:7c:41:2f:6b:18:65:b0:
73:60:e4:da:d5:a1:cc:ca:53:05:ab:61:b9:ec:23:fc:68:69:
05:f4:13:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:43 2025 by rpki-client