Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.mft
File: PJIZ2sNYSYbni0Hcn_tiJiO0rGE.mft (raw, json)
Hash identifier: Tg1lDu7dw0l0II25a6oCMVqesLr6hbo3Bsq+xCMoBqc=
Subject key identifier: AE:37:D5:B2:D1:57:A1:20:9E:95:E2:CE:04:6D:64:4B:1A:65:F6:8E
Authority key identifier: 3C:92:19:DA:C3:58:49:86:E7:8B:41:DC:9F:FB:62:26:23:B4:AC:61
Certificate issuer: /CN=3c9219dac3584986e78b41dc9ffb622623b4ac61
Certificate serial: 01984DAFB324351259B2E723191D25FBEDC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.mft
Manifest number: 02F6
Signing time: Sun 27 Jul 2025 21:00:16 +0000
Manifest this update: Sun 27 Jul 2025 21:00:16 +0000
Manifest next update: Mon 28 Jul 2025 21:00:16 +0000
Files and hashes: 1: PJIZ2sNYSYbni0Hcn_tiJiO0rGE.crl (hash: aaupXoEqrIw5XBEosnfZV0fq8Wl5QdaoETdAZUm7IME=)
2: x_RfurRNedmEj2hSqHVNcrKbV_E.roa (hash: 8G+RNYkhEQwOffPjlh7thkZsriDB79Nwv1PSXlUOkh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:af:b3:24:35:12:59:b2:e7:23:19:1d:25:fb:ed:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c9219dac3584986e78b41dc9ffb622623b4ac61
Validity
Not Before: Jul 27 21:00:16 2025 GMT
Not After : Jul 28 21:00:16 2025 GMT
Subject: CN=ae37d5b2d157a1209e95e2ce046d644b1a65f68e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3c:54:6c:0e:4a:b7:83:6a:d8:57:71:ad:bd:
f6:fa:34:fc:69:7f:85:1d:29:8f:6d:b5:e0:6f:b7:
cc:e6:30:e8:fa:e5:cd:bd:2b:18:8a:59:b1:4b:78:
b5:29:b9:aa:08:a4:d2:ec:2b:1e:3e:b9:6b:1b:ee:
10:9c:4d:83:16:6f:7f:ee:e9:95:61:15:ab:d9:a9:
2a:56:cf:48:cc:41:f7:2d:f4:fe:20:d1:0e:4e:35:
2c:9a:42:59:82:a1:02:d9:0f:1f:02:d1:b2:ce:35:
91:c0:38:8f:a2:77:2b:46:2a:21:16:51:eb:7f:e7:
09:a0:e3:8c:c1:3a:25:de:ef:a2:48:d3:c1:bc:7f:
8e:e9:52:55:6f:77:75:2b:c2:6a:f8:3c:bf:0b:f8:
31:f2:4a:e3:9a:24:78:4b:58:3c:38:c7:58:60:6a:
d0:bb:58:9a:30:33:5d:de:49:13:dc:f8:bf:de:d9:
8b:7d:47:0b:6d:cb:c0:e3:b0:9b:d5:7a:1a:56:91:
54:7c:f2:02:9d:09:b6:f5:f1:93:c2:f1:a7:7c:93:
bc:2f:24:77:cd:08:1f:37:bd:36:10:e1:4d:63:1d:
07:5d:eb:9c:63:ff:bc:cb:5b:1f:23:fd:5b:4a:7b:
f2:ba:8a:91:04:ed:01:c0:3b:1d:f7:7f:17:5d:00:
73:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:37:D5:B2:D1:57:A1:20:9E:95:E2:CE:04:6D:64:4B:1A:65:F6:8E
X509v3 Authority Key Identifier:
keyid:3C:92:19:DA:C3:58:49:86:E7:8B:41:DC:9F:FB:62:26:23:B4:AC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:2d:10:2a:fe:93:59:cc:a2:c5:7b:58:30:6f:e6:55:dc:a2:
8b:64:37:7d:02:59:13:e8:01:23:c0:27:73:f7:75:49:93:53:
c9:55:3d:5c:ad:e5:5a:81:38:a5:7b:f4:33:87:68:38:50:43:
12:65:25:91:80:71:2c:fe:6b:11:65:ce:d0:7e:73:9b:e7:7f:
e8:a2:d6:92:e2:9b:16:1d:e1:6d:ea:9d:5e:2f:58:90:77:d7:
bb:fa:90:99:e9:87:b0:c9:3a:53:10:83:e4:58:96:2a:66:4e:
c2:ea:03:e1:1b:bc:12:20:f0:ce:69:36:cd:a2:0f:b8:01:4f:
7f:e2:2e:e2:5c:5f:a6:31:0f:8f:84:57:a7:c5:a6:6a:91:c9:
5f:08:e1:83:23:ac:87:e2:0c:70:0e:48:fc:c6:07:52:6a:4a:
95:4a:ad:ed:3f:3e:16:7d:70:87:9d:03:a8:f2:2a:f8:39:8f:
8e:e3:6d:e8:37:1b:41:d4:d2:6c:3d:b5:5a:bf:7f:55:de:a2:
6a:89:b5:a2:ac:49:65:ba:58:32:5b:b8:94:cd:1c:b8:11:e9:
20:95:54:c4:0e:fb:04:0c:86:46:df:3a:30:10:33:ba:4b:5a:
0b:60:b8:a0:39:e5:d4:62:ce:98:68:37:b5:fd:63:c3:7d:9b:
98:87:5f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 01:08:11 2025 by rpki-client