Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
File: PJMfJlqEcdMs6ESdnhhvDccRSno.mft (raw, json)
Hash identifier: IJQgL4glbSVi+HPdX6BtX1gmRYk9gY2gewu0+dmatr0=
Subject key identifier: B1:09:68:D9:42:82:96:E0:8A:9E:BE:07:B3:B7:C5:07:79:C8:07:FE
Authority key identifier: 3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A
Certificate issuer: /CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a
Certificate serial: 01984BF8D275699B567B344F7C494C09D66A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
Manifest number: 1300
Signing time: Sun 27 Jul 2025 13:00:54 +0000
Manifest this update: Sun 27 Jul 2025 13:00:54 +0000
Manifest next update: Mon 28 Jul 2025 13:00:54 +0000
Files and hashes: 1: PJMfJlqEcdMs6ESdnhhvDccRSno.crl (hash: iPI3COthOsfUKsAX+ADCX7B5PoW8S3O6+SnaLPfLRK4=)
2: PkJhyt9pT1uGvNEkXULDRnIoKM8.roa (hash: GnXTwsBZIxIhJPycvbpoXf49+cV9ppIdazG5Z3GlNBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:f8:d2:75:69:9b:56:7b:34:4f:7c:49:4c:09:d6:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a
Validity
Not Before: Jul 27 13:00:54 2025 GMT
Not After : Jul 28 13:00:54 2025 GMT
Subject: CN=b10968d9428296e08a9ebe07b3b7c50779c807fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0d:04:b8:8c:c0:1b:f9:50:b5:0f:bc:fe:3a:
4d:fe:de:4f:23:b8:e4:8e:d1:26:ce:c9:7c:3a:f7:
f6:2d:67:4f:dc:bf:37:ec:bf:55:5e:5d:e0:57:10:
f2:f8:f7:2d:a2:f9:92:f3:4e:9e:31:e6:54:91:27:
8b:c4:7e:2c:c2:85:80:09:48:13:83:7f:4b:19:ca:
31:c7:4c:d6:27:a4:a7:bc:ad:c9:b7:ad:75:83:5b:
f1:18:2f:b7:6f:dc:cc:13:56:bb:1a:a3:d6:7f:25:
c6:da:ff:80:b9:15:c5:70:d3:ca:23:5e:65:06:d5:
3b:1f:68:b6:c2:a5:99:08:d7:c4:67:b9:9a:6e:11:
0d:e4:0e:35:d4:ca:69:64:c0:00:47:24:83:70:dd:
ea:e1:93:5d:3f:f3:bb:ec:79:49:67:10:3c:65:3a:
3f:00:10:39:08:e1:3a:af:6d:fd:64:ad:64:44:9d:
ee:e4:9d:e9:ba:a9:3b:bb:10:01:b9:b6:ff:bc:29:
ff:90:e9:18:32:e5:86:f5:ca:aa:80:f8:0b:ec:70:
83:49:8c:77:31:06:fb:50:b7:da:03:7f:e3:1c:37:
50:52:16:27:79:7c:0a:1f:57:73:e7:10:7d:a9:a4:
1b:1b:72:bb:6b:b0:99:fe:31:89:77:0b:95:bc:18:
2f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:09:68:D9:42:82:96:E0:8A:9E:BE:07:B3:B7:C5:07:79:C8:07:FE
X509v3 Authority Key Identifier:
keyid:3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e4:33:28:89:b3:37:cd:d7:64:2b:83:15:45:59:58:36:69:
aa:6d:af:8f:4a:5a:ed:c8:8e:0d:f8:06:16:0d:78:6f:11:31:
a6:8e:11:8b:aa:df:4b:f3:05:b4:4b:fa:29:7c:36:06:69:9a:
26:26:ca:30:e5:a3:7c:6a:2d:f2:59:2b:bb:7d:52:e3:f4:5d:
73:54:44:90:eb:d5:ef:bb:94:24:b1:c6:11:d1:85:bd:e7:01:
0b:a9:57:f0:ca:60:ee:d2:a0:a2:7f:d5:80:d5:20:e1:51:31:
b2:c8:29:d4:75:2b:c0:ea:99:39:90:b6:88:45:48:18:71:a3:
e0:f9:9c:e8:d5:fb:6d:e7:43:3f:52:6a:c9:ac:dd:2a:6d:fd:
49:25:f8:43:86:69:9c:da:3e:df:3e:5b:c5:23:9f:e2:1f:b0:
12:73:23:bb:d4:35:bc:93:07:08:be:e2:9c:88:be:69:4c:48:
b7:7d:fa:20:76:23:87:75:ec:bc:16:ad:9d:82:a2:bc:9f:c3:
68:52:72:72:b5:95:46:9e:bc:fd:71:58:88:88:6d:34:bd:ff:
a2:97:5c:99:d7:97:da:db:91:30:1e:b8:9b:46:54:80:67:d6:
2b:c1:f6:12:80:61:c1:d1:b5:9d:29:cf:82:04:70:4b:03:4d:
66:76:0f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:03:34 2025 by rpki-client