Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
File: Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft (raw, json)
Hash identifier: k9pY3iXnGk10Ch3n6zu2A/LzKjVmwGZmQbc/KSa+rqQ=
Subject key identifier: 15:1B:7D:D0:80:A0:F6:D8:F8:78:92:C6:74:DD:27:BA:19:2A:2D:32
Authority key identifier: 3E:3D:1C:21:A7:7A:0B:0F:7F:0C:E6:63:3E:13:E0:C5:7B:ED:B0:8B
Certificate issuer: /CN=3e3d1c21a77a0b0f7f0ce6633e13e0c57bedb08b
Certificate serial: 0197B745434355895A1680D3D2530BE8D733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
Manifest number: 12ED
Signing time: Sat 28 Jun 2025 16:00:59 +0000
Manifest this update: Sat 28 Jun 2025 16:00:59 +0000
Manifest next update: Sun 29 Jun 2025 16:00:59 +0000
Files and hashes: 1: Gw9xXGUQ6gOLxmD3uhPbHUjxqdY.roa (hash: iN7hsvC2N6zVGHZJzHIWk+L6xeaF90AdvlMynpLLSsQ=)
2: Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl (hash: RKI7zqsfAKrIP8rHFKFEFHIlq0Se9Qv6H9a80yO2c/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:43:43:55:89:5a:16:80:d3:d2:53:0b:e8:d7:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e3d1c21a77a0b0f7f0ce6633e13e0c57bedb08b
Validity
Not Before: Jun 28 16:00:59 2025 GMT
Not After : Jun 29 16:00:59 2025 GMT
Subject: CN=151b7dd080a0f6d8f87892c674dd27ba192a2d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6d:a7:6e:12:3a:f2:c9:c0:d4:14:4c:0e:37:
29:d6:05:03:d0:61:bd:57:71:32:d2:3d:b9:54:c3:
47:4a:dc:92:f3:98:6a:aa:05:55:4b:56:35:5d:64:
0c:1e:86:35:ee:c5:52:be:59:7c:03:ab:99:0e:bd:
f0:b4:56:98:8a:10:20:1d:95:81:53:d7:56:51:fd:
1f:77:47:d5:b9:c4:61:d0:ac:ff:21:cb:52:0b:60:
69:b6:9e:8c:a0:7d:e9:f2:f0:e9:91:c0:e1:f0:da:
23:cf:af:2c:8a:ea:ad:25:4d:6e:e6:c9:95:c2:51:
08:30:17:ff:b2:c8:58:03:8d:7b:8e:13:8e:64:a8:
d7:ef:59:97:81:e8:ee:55:8d:84:0e:41:fc:88:ab:
7d:e5:64:01:3a:ba:d4:e4:61:63:ee:51:b9:bd:25:
8c:43:25:69:97:be:cf:b2:95:fe:ef:f3:2a:81:4b:
8a:3b:2c:30:ff:5d:54:8c:d7:c6:1f:82:27:a1:32:
c5:50:f3:6a:50:ad:2a:3b:09:41:52:c7:a4:69:0d:
96:e5:56:f7:0f:7d:38:d7:de:56:88:32:da:49:43:
e9:9c:0d:cc:4f:93:bd:eb:6d:31:e5:a5:70:ae:5c:
8d:a3:54:67:c3:d0:4a:fa:48:38:27:fc:9c:16:ca:
40:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1B:7D:D0:80:A0:F6:D8:F8:78:92:C6:74:DD:27:BA:19:2A:2D:32
X509v3 Authority Key Identifier:
keyid:3E:3D:1C:21:A7:7A:0B:0F:7F:0C:E6:63:3E:13:E0:C5:7B:ED:B0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a0:97:e2:24:dd:3f:94:18:25:80:d3:4f:ab:e3:8e:d7:e1:
fb:06:4b:9e:67:fb:bf:16:57:57:3b:e1:c2:bd:3c:db:68:3e:
b0:57:86:b7:b9:08:78:4e:44:f8:5a:7c:f1:b2:b0:41:eb:cb:
fc:29:bb:a4:43:9f:67:23:73:09:01:d6:e7:52:11:b5:2e:7c:
2f:d3:f2:f5:4c:b5:2b:c8:15:83:43:d0:70:69:bb:86:ee:a0:
8d:c8:0b:90:a2:fa:a7:1c:e3:f6:a9:83:08:36:77:7a:74:33:
3e:4d:03:34:fd:ec:e9:35:de:a9:ad:5e:df:d1:96:2a:a0:19:
15:40:24:79:a9:94:d4:64:b3:54:98:df:b8:43:37:aa:db:58:
71:8e:5a:ab:b3:64:a7:c9:30:69:ec:5d:c9:a7:9b:ca:14:08:
21:60:14:30:ce:6f:a7:ef:23:2c:f8:bc:3e:78:6a:f9:f0:54:
57:cf:e8:33:87:cf:d7:1a:51:b7:74:31:1c:fa:43:b6:c2:bc:
12:65:8b:7c:f8:d1:64:6e:18:d0:85:e9:e8:21:07:fa:bf:6e:
a7:d7:30:a8:9c:a1:e5:81:d2:11:1c:b4:58:71:d5:b7:f1:1a:
00:93:e2:96:e4:21:ef:ac:58:99:03:65:d7:cf:84:db:13:77:
65:cd:ad:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:14:23 2025 by rpki-client