Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
File: PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft (raw, json)
Hash identifier: n+nvrIUwbKUo0EoG9ZDgTb9B1bqnlw7M2WDal4WHbjI=
Subject key identifier: 7D:89:0C:EB:48:AD:83:55:F8:2E:48:06:46:4D:B5:62:2A:E1:34:23
Authority key identifier: 3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
Certificate issuer: /CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Certificate serial: 0198481BA85CADDBB14D7EFB336D6AC93EF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
Manifest number: 0818
Signing time: Sat 26 Jul 2025 19:00:28 +0000
Manifest this update: Sat 26 Jul 2025 19:00:28 +0000
Manifest next update: Sun 27 Jul 2025 19:00:28 +0000
Files and hashes: 1: LN9Y4VYuBPHcqnOfi1whRTolirA.roa (hash: oKsBnnzz1/szS+noOPKG/sq6k5F0SOG+hrVgu4395L0=)
2: PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl (hash: ElBKV54Y9BrklCT/m+xsSHw/phVjD7xxy92aL6iXayY=)
3: aOjeQ_LFlj3ColO7fwm2y03noI8.roa (hash: ZPkI6QIM1mrIPNFFrmXcy/CvfmDUl8kYYI0d126tg6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 19:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:a8:5c:ad:db:b1:4d:7e:fb:33:6d:6a:c9:3e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Validity
Not Before: Jul 26 19:00:28 2025 GMT
Not After : Jul 27 19:00:28 2025 GMT
Subject: CN=7d890ceb48ad8355f82e4806464db5622ae13423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f9:c8:e3:59:86:65:d4:02:83:02:fa:d0:b3:
69:85:7c:27:06:c9:5a:20:cf:d7:1b:c2:c1:ec:ae:
05:9c:d2:de:8c:ff:0a:d0:4d:d6:a2:89:53:f3:90:
fb:10:65:51:b7:80:bc:ba:0d:16:bc:42:ea:ba:6f:
1b:22:86:a1:cf:07:a4:c3:81:07:03:4e:67:95:c5:
13:72:e9:d8:17:e6:51:ea:0d:10:30:df:f4:75:34:
13:67:0a:bd:fe:7e:ee:14:a5:0a:32:c3:af:b9:ed:
ad:12:fe:ac:32:0d:a1:e2:fd:7f:8f:da:56:da:e8:
b3:a4:ef:b7:fa:b5:ca:3d:76:79:b0:a1:48:d8:58:
f2:50:ae:43:08:ac:88:b7:13:13:ba:a6:97:6a:9e:
ae:7b:fd:5a:86:99:32:d0:bf:1c:2f:28:53:b4:db:
48:ee:10:28:88:1f:16:2a:9e:bb:05:08:6e:fa:1c:
6c:c3:65:ed:1b:6f:a6:3f:b3:a6:a3:fc:82:7d:b8:
02:a8:13:62:df:e9:80:e1:94:c3:f2:62:d5:9d:3a:
33:ff:52:fe:a4:c7:03:2e:71:b0:80:1b:e0:af:c7:
dd:00:68:a3:61:0f:ba:95:e1:08:1e:61:d5:45:d4:
8f:25:40:7f:a0:91:52:db:e8:dc:07:04:a6:dc:0f:
ca:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:89:0C:EB:48:AD:83:55:F8:2E:48:06:46:4D:B5:62:2A:E1:34:23
X509v3 Authority Key Identifier:
keyid:3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ed:b4:b2:80:24:e7:44:65:44:65:6d:38:f5:c4:36:50:a0:
9b:09:c6:2a:e3:ba:03:b3:05:66:06:c8:45:27:1b:e8:75:f3:
5b:ca:cb:8e:fc:f6:26:b8:9c:96:50:25:1a:a3:d9:37:79:1b:
b4:48:59:25:08:fe:44:4f:be:e0:29:7b:99:92:b4:08:0e:9b:
ed:c1:2d:0a:2e:1e:30:3c:a9:71:f2:7f:d0:41:0b:1d:7e:4a:
89:90:2d:81:05:66:ee:62:43:15:26:36:8b:ad:61:9f:c8:35:
97:9a:a6:41:b3:ec:ab:83:df:2a:50:e6:c7:68:0f:ef:58:60:
67:f3:58:61:a6:ae:34:a0:e6:bf:47:d9:2e:59:67:c2:ab:19:
9f:af:2c:03:fa:9e:ad:95:a7:d0:19:be:39:e3:79:c2:58:78:
ef:73:bd:69:9f:52:80:0d:8f:47:89:43:3e:c5:7b:7d:41:91:
f2:21:f8:36:a6:7e:a7:c0:5d:8b:b0:61:8d:b4:5c:0b:ce:64:
03:00:c6:74:e6:e6:0e:c2:4a:7f:6b:f2:49:30:bb:85:8e:43:
6f:4b:dc:98:cf:e5:af:d6:90:ca:93:c0:26:4a:0d:c7:aa:dd:
28:db:74:ba:84:cb:01:86:27:2d:4c:52:3d:ba:8b:9e:5f:1f:
e1:d3:75:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:40:55 2025 by rpki-client