Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
File: pJKfzWHcadzPvgHV_wA1tBrJUmA.mft (raw, json)
Hash identifier: 1Gy6IvFbcj8tg2DRe+tCpQhcrQIbnOrmnJq+T2OIO78=
Subject key identifier: 36:C3:F2:B8:AE:81:B5:00:4D:E6:A2:44:ED:E9:7E:33:81:A6:D1:CB
Authority key identifier: A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60
Certificate issuer: /CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260
Certificate serial: 019845F6F6D9A3C834C10DABC71E1494088C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
Manifest number: 0F14
Signing time: Sat 26 Jul 2025 09:01:09 +0000
Manifest this update: Sat 26 Jul 2025 09:01:09 +0000
Manifest next update: Sun 27 Jul 2025 09:01:09 +0000
Files and hashes: 1: FMd4ncvFc0vMJ63ZqH_KhMZqr00.roa (hash: GAIpznWNN7ttQuk7XL5JgmFjADI10rnA9JaXxJOak4g=)
2: pJKfzWHcadzPvgHV_wA1tBrJUmA.crl (hash: XBEUyDumLpsozSRf6Kwq5ikrn3nNvc2+dUdVqnj31sQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:f6:d9:a3:c8:34:c1:0d:ab:c7:1e:14:94:08:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260
Validity
Not Before: Jul 26 09:01:09 2025 GMT
Not After : Jul 27 09:01:09 2025 GMT
Subject: CN=36c3f2b8ae81b5004de6a244ede97e3381a6d1cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3a:59:21:fe:46:4b:98:1f:36:bf:1f:52:d1:
ca:cc:e0:6c:ec:81:a8:88:35:d5:eb:1f:f3:cb:3c:
6d:f0:2b:72:fc:99:c8:cd:14:47:93:1c:e1:63:23:
1c:73:90:52:e1:4c:c6:80:4c:23:0a:73:86:f3:aa:
58:8e:5b:94:5a:31:7f:14:e6:e2:8e:7c:a2:5d:c2:
ef:7d:cb:d9:c6:bd:b6:9b:1f:d2:1a:15:2c:df:13:
54:15:dd:73:10:7d:c3:cf:9f:e6:44:54:75:42:8c:
37:23:7f:94:45:c4:b4:c0:89:27:59:67:d7:45:b6:
c7:48:81:7c:73:9e:c0:c4:ba:d6:38:18:9f:d0:56:
bd:5c:f6:2f:14:3a:00:30:5c:6b:4b:89:5f:54:40:
12:84:d2:1b:e2:32:e6:09:a9:0e:24:b8:7e:e5:8e:
70:d6:a6:8c:61:4d:33:a7:f7:a7:87:bc:5e:c7:6a:
e6:76:ef:9c:ee:50:2e:c4:da:5a:db:fe:4d:4c:62:
b9:c3:b2:ae:79:09:0f:09:74:d0:09:33:2e:e8:41:
13:2f:0d:84:fc:e1:ec:f9:13:ae:c7:94:8f:85:11:
95:5c:b8:25:13:73:76:c3:8e:d7:0a:36:a1:f9:34:
6b:7a:02:13:77:d1:7b:ab:de:9d:64:57:2c:3a:0f:
3b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C3:F2:B8:AE:81:B5:00:4D:E6:A2:44:ED:E9:7E:33:81:A6:D1:CB
X509v3 Authority Key Identifier:
keyid:A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:1b:79:c3:2b:8c:f0:2c:9e:d9:6c:b4:05:11:1c:e3:51:30:
3c:f5:2f:39:ec:e9:84:1a:6c:f4:95:87:01:c3:21:bd:2b:20:
cd:81:ec:3f:af:55:08:f0:79:b4:ad:d8:7d:96:f0:1a:dc:de:
24:5d:87:0c:fa:2d:ef:2d:ab:b4:da:a3:71:01:b1:48:23:1c:
72:79:ca:22:0e:ba:87:20:bf:ae:ba:02:d3:57:23:56:6c:6b:
28:ed:d9:3c:0a:ac:51:36:2a:1e:ea:9e:e4:53:d9:a7:c2:65:
ca:dd:47:00:eb:f5:26:ae:0f:9a:d0:2b:2d:8b:37:c6:4e:f8:
3d:90:b1:36:6e:d2:a8:99:06:78:43:b1:99:59:34:ef:be:61:
b7:59:9c:02:90:06:cf:1b:20:9f:79:cf:a8:c9:11:4e:41:89:
79:cc:04:9f:43:f9:97:59:f8:76:d1:c0:e3:33:03:c5:c2:45:
98:34:b4:8d:d3:3d:fb:24:22:d5:31:2f:d7:2e:08:c7:80:82:
77:94:7e:6c:ac:76:af:47:51:ba:83:85:6e:63:bf:83:9b:d8:
65:56:86:68:c0:c5:15:57:64:c6:80:ff:4f:97:0b:ca:09:31:
ba:24:7e:af:f4:89:fb:8f:7e:19:c8:2d:b6:11:66:51:41:9a:
8f:20:23:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:20:45 2025 by rpki-client