Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft
File: PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft (raw, json)
Hash identifier: LOpLCY8Uxbq3heXTjaTArTaJdtW8L93hwV1khFie93o=
Subject key identifier: E6:44:50:50:C0:D0:CD:D9:FA:23:FB:E0:5E:95:DE:99:26:D1:84:10
Authority key identifier: 3C:9F:40:0F:88:4F:70:30:31:8E:B6:BE:74:C5:28:48:5A:BE:44:60
Certificate issuer: /CN=3c9f400f884f7030318eb6be74c528485abe4460
Certificate serial: 019848C0CC4AB43C4949A8D37F5039DE7E19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft
Manifest number: 0294
Signing time: Sat 26 Jul 2025 22:00:51 +0000
Manifest this update: Sat 26 Jul 2025 22:00:51 +0000
Manifest next update: Sun 27 Jul 2025 22:00:51 +0000
Files and hashes: 1: 5CyBpeLyifB2AFAXOFh8yVUvCwE.roa (hash: JsDCYkyYiFX4qZJz2FVAXDqsZF5P1tX4kX3+rULf7lU=)
2: PJ9AD4hPcDAxjra-dMUoSFq-RGA.crl (hash: Ce0XgQuUyf3QdlofqnjlezWb9xSXDoyMLo4fFPEMrBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:cc:4a:b4:3c:49:49:a8:d3:7f:50:39:de:7e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c9f400f884f7030318eb6be74c528485abe4460
Validity
Not Before: Jul 26 22:00:51 2025 GMT
Not After : Jul 27 22:00:51 2025 GMT
Subject: CN=e6445050c0d0cdd9fa23fbe05e95de9926d18410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:34:94:4f:05:5c:f4:1a:98:75:d0:22:44:46:
ae:43:94:36:28:b9:7b:99:1c:da:d4:9e:a9:ac:9a:
6b:98:05:da:1b:65:89:99:0a:82:fa:14:f6:eb:e0:
41:1a:47:4c:74:e1:69:be:31:27:52:76:a9:af:25:
a7:ef:d0:9e:93:06:45:82:90:f9:d7:c3:f3:6b:86:
62:28:43:f0:80:a6:9b:b8:c6:4b:b4:d4:e4:06:d2:
72:05:12:d6:50:b0:9c:66:3f:a3:c2:52:01:8e:84:
2a:2b:7b:02:1c:e0:bf:0c:f0:3d:fa:bc:e7:52:96:
dd:28:b2:83:52:c7:ef:4e:ad:83:66:ca:fd:b0:62:
2d:ac:ff:44:84:83:7f:c2:fb:b9:94:30:d1:d8:a7:
fb:61:ef:f2:cc:b6:7a:e4:c5:6a:84:84:9f:96:2e:
a6:32:bd:4d:9d:31:a6:73:36:50:fe:bc:08:55:d4:
01:59:d3:75:9f:6a:0a:f1:96:87:f2:b4:0e:28:29:
d1:00:53:6c:e9:4d:43:29:0c:77:e8:7f:f7:68:ef:
fc:30:1a:2e:ed:fc:32:9b:08:26:73:4d:8b:0b:95:
c7:a7:d4:25:0c:fd:03:15:88:f9:6e:8f:fc:be:52:
5f:12:13:b1:90:62:8c:bb:75:b7:e0:16:a1:94:83:
2f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:44:50:50:C0:D0:CD:D9:FA:23:FB:E0:5E:95:DE:99:26:D1:84:10
X509v3 Authority Key Identifier:
keyid:3C:9F:40:0F:88:4F:70:30:31:8E:B6:BE:74:C5:28:48:5A:BE:44:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ea:ea:b0:64:85:f2:60:83:5c:94:d6:41:5e:ba:84:80:10:
3e:da:55:10:68:98:d9:87:51:9c:9a:7a:f6:e6:5a:26:f1:30:
d8:6c:88:02:65:dc:64:10:15:13:12:63:99:3a:2f:50:47:c2:
3e:e0:6e:23:57:2c:9e:49:6b:0f:7d:2a:41:43:4f:97:bb:fa:
a0:79:38:09:bf:15:b9:a4:10:12:4f:45:2a:eb:0f:15:c3:e3:
4f:0f:12:cb:b8:8b:22:15:9d:04:ae:fa:60:f8:ec:95:e1:bd:
b6:66:9d:41:2e:1e:5c:02:08:3e:1c:d7:c2:41:9b:dd:bf:65:
5a:b3:07:21:19:39:56:d0:55:54:91:36:39:70:0d:65:bd:95:
b4:65:75:51:a3:ee:c6:f6:b7:eb:74:cf:ff:df:f8:41:48:91:
1e:e6:ae:04:57:5c:96:c8:b1:96:6e:56:88:5a:4a:e9:ec:d9:
76:15:75:43:32:93:db:91:b7:79:01:63:dd:9b:9d:a2:67:bf:
80:63:49:27:d3:a5:92:19:5d:fd:28:d7:e7:a4:cf:92:b3:92:
58:a2:cf:b9:42:99:08:49:ad:67:5c:0e:11:d8:f7:d0:ef:3f:
c7:61:56:be:6b:cf:1c:01:b6:fc:12:02:af:a0:aa:2a:5b:17:
88:bf:b5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:38:17 2025 by rpki-client