Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
File: pj_zsazNggGkEWyYdXM5I0KJgB4.mft (raw, json)
Hash identifier: vDQQ9bGrlQyJOseyHBnnAe9dnkfJ0VZKgchwx1aA138=
Subject key identifier: 38:B6:BA:F4:3C:98:DA:7B:C4:DB:32:2A:B4:FC:B3:F5:A1:3D:0D:9E
Authority key identifier: A6:3F:F3:B1:AC:CD:82:01:A4:11:6C:98:75:73:39:23:42:89:80:1E
Certificate issuer: /CN=a63ff3b1accd8201a4116c98757339234289801e
Certificate serial: 0199FCC6C1E0D44B98BCFEEDC828492B41BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
Manifest number: 05A9
Signing time: Sun 19 Oct 2025 14:01:48 +0000
Manifest this update: Sun 19 Oct 2025 14:01:48 +0000
Manifest next update: Mon 20 Oct 2025 14:01:48 +0000
Files and hashes: 1: mbvBXE7Ze3cn1Ev3k2dL5On_YTs.roa (hash: YK3JNqfED7VqhxPOSKGy2n6p5fg+7MEO42BqGf+EejI=)
2: pj_zsazNggGkEWyYdXM5I0KJgB4.crl (hash: PTwwKx1FhpXttqq5QMDtYUBJNXZEbBe4GYOYrlPDeqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:c1:e0:d4:4b:98:bc:fe:ed:c8:28:49:2b:41:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63ff3b1accd8201a4116c98757339234289801e
Validity
Not Before: Oct 19 14:01:48 2025 GMT
Not After : Oct 20 14:01:48 2025 GMT
Subject: CN=38b6baf43c98da7bc4db322ab4fcb3f5a13d0d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1e:11:d7:48:3a:3e:06:1a:2f:7b:8d:0c:20:
d5:8b:8a:94:04:39:65:c7:37:8d:93:88:c6:70:b7:
fa:83:2c:ba:84:f0:f8:3f:ba:c0:fa:c2:8f:41:5d:
e8:a2:79:3e:66:7b:46:64:7e:9b:6a:ed:9d:42:c2:
32:b9:87:e8:19:f7:ae:1b:7a:8f:6a:ac:b9:d8:8b:
5f:4e:2b:81:58:e2:99:b8:b4:95:22:41:ae:e8:56:
23:b0:d6:0c:c3:16:52:77:04:3b:00:6f:91:5d:73:
4c:f2:7c:84:f3:dd:1f:f3:e5:9a:ea:10:48:0c:03:
fb:2e:b0:38:4c:f0:aa:39:ea:5f:0f:34:cd:4e:51:
eb:1e:bb:69:6d:dc:46:af:42:b5:11:e4:98:34:da:
49:28:2f:7c:e1:1b:97:18:7c:b9:b7:57:46:58:5e:
84:94:63:39:10:bd:85:12:86:87:f7:08:30:d3:1e:
11:3f:a4:e3:48:57:49:3d:e9:a0:75:87:66:03:60:
f1:97:49:cd:46:6d:10:a6:60:83:43:7f:bb:4a:b1:
4e:b2:d5:70:a1:c9:9e:d3:d2:72:08:b4:a9:fd:17:
ec:12:08:43:5e:cc:f1:bc:c2:5f:47:af:d8:e7:f7:
3f:d0:ac:10:b0:82:5c:85:64:87:b9:20:f3:d2:ac:
37:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B6:BA:F4:3C:98:DA:7B:C4:DB:32:2A:B4:FC:B3:F5:A1:3D:0D:9E
X509v3 Authority Key Identifier:
keyid:A6:3F:F3:B1:AC:CD:82:01:A4:11:6C:98:75:73:39:23:42:89:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:bb:1c:73:0f:51:e8:af:d6:dc:7d:de:a0:3e:bb:b3:64:cf:
2e:23:83:36:99:36:e4:da:4d:03:f1:aa:80:39:ec:d1:74:a7:
53:63:5d:3c:c7:7c:da:92:93:b9:b5:46:47:1a:72:85:1f:67:
9e:b0:0a:5c:53:47:0d:e4:fc:5e:6b:4e:30:f4:c9:ad:d6:3a:
83:31:48:d8:ed:07:ef:b0:1c:aa:1f:27:d2:94:a0:1b:c4:4a:
1d:4f:20:97:02:d5:6b:19:98:07:0f:b1:5c:bc:2d:4e:36:27:
12:03:89:aa:27:31:6e:01:9c:0f:de:ef:8f:3d:87:d4:78:39:
87:2d:a9:31:3d:0f:7d:b8:f2:17:12:48:55:3d:af:4a:86:4f:
31:c2:5c:9c:bf:e7:51:9f:71:fe:4e:95:6b:f0:ed:22:72:ed:
1b:90:fc:1d:e1:09:e7:d3:39:aa:7a:ec:d9:82:a9:28:20:7c:
35:e1:2e:41:aa:ae:24:1f:f9:af:02:b2:9e:6d:f4:ad:30:42:
65:7e:ec:49:c1:00:f1:63:22:6f:90:63:6b:b4:49:75:d7:b8:
a2:98:32:ed:64:f7:7e:53:9d:4f:88:83:81:f0:2a:a2:3b:bc:
af:90:7f:eb:cc:96:32:6d:96:59:c2:ec:ba:64:3a:6d:57:00:
72:25:0a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:48:52 2025 by rpki-client