Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft
File: pjx_KbiD9LPCQ22WPchTKhpjTMo.mft (raw, json)
Hash identifier: xNwW/cXV490W0EElRRe6ZM7mhuruYUTGeY1QkEbRths=
Subject key identifier: B9:BC:0D:7E:95:67:CB:E0:A6:B5:2D:46:F0:03:29:47:8F:33:7C:0A
Authority key identifier: A6:3C:7F:29:B8:83:F4:B3:C2:43:6D:96:3D:C8:53:2A:1A:63:4C:CA
Certificate issuer: /CN=a63c7f29b883f4b3c2436d963dc8532a1a634cca
Certificate serial: 01983A5FB6CCAB7671055B2CBE385DC245C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjx_KbiD9LPCQ22WPchTKhpjTMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft
Manifest number: 15F7
Signing time: Thu 24 Jul 2025 03:00:07 +0000
Manifest this update: Thu 24 Jul 2025 03:00:07 +0000
Manifest next update: Fri 25 Jul 2025 03:00:07 +0000
Files and hashes: 1: 6cMdAjAjxWNQr0UMoliPeDU-fWA.roa (hash: X9+lQnLG7wxNSb1wuAgMowV7QLLcJp35fGaen06SIac=)
2: oiBEvO2p29cLUYapByjoEoYyzDg.roa (hash: vhwwgY7QGbDe4OWAOvjloCFsUXviJLu/e8Pkbh7LI2o=)
3: pjx_KbiD9LPCQ22WPchTKhpjTMo.crl (hash: +AeYu0JVso+6vdXRXEO11ZS7JE16oNpeWTuW0sbvl8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjx_KbiD9LPCQ22WPchTKhpjTMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 03:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3a:5f:b6:cc:ab:76:71:05:5b:2c:be:38:5d:c2:45:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63c7f29b883f4b3c2436d963dc8532a1a634cca
Validity
Not Before: Jul 24 03:00:07 2025 GMT
Not After : Jul 25 03:00:07 2025 GMT
Subject: CN=b9bc0d7e9567cbe0a6b52d46f00329478f337c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d9:7d:b1:b3:3c:9f:ed:69:6a:6b:74:73:b2:
28:0b:69:1e:3d:22:c3:d1:16:73:44:d2:97:45:ce:
54:de:ab:ef:3c:c4:7b:7b:be:22:4d:db:0e:fe:ef:
0d:49:fc:df:1e:ae:73:4e:cc:a6:36:e0:fe:90:33:
84:9b:1a:9e:3e:23:f0:4d:1d:c6:7d:50:f0:53:c5:
88:85:c4:dc:98:cd:b8:85:67:a6:b1:21:86:b6:ea:
0c:d6:df:f4:55:f7:30:ef:e1:26:d0:64:cb:92:14:
1f:b2:b4:74:dd:c8:98:44:a0:fb:3f:80:0e:26:1b:
51:36:9c:36:cf:33:33:98:3f:ac:44:a2:ff:6d:c5:
2b:c5:28:d5:27:1c:99:e4:52:56:bb:6d:b6:86:d1:
94:bd:9c:fd:05:5c:a4:bc:03:28:cf:1c:84:25:7b:
fb:0a:1a:3c:14:f3:60:f0:08:7b:68:21:73:e2:4d:
c8:9d:48:d5:c0:86:a2:44:e7:0e:07:8e:7e:6b:52:
5b:60:6c:9a:5e:5c:fe:c5:60:b4:d3:af:19:3a:3a:
94:e2:a8:73:94:98:87:4b:9c:c9:73:1a:06:9e:10:
8d:f6:1f:81:09:bf:e8:ed:8c:a1:73:4e:2f:aa:12:
7c:37:8a:5a:8a:9a:46:6e:31:28:2a:3e:87:74:56:
b4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BC:0D:7E:95:67:CB:E0:A6:B5:2D:46:F0:03:29:47:8F:33:7C:0A
X509v3 Authority Key Identifier:
keyid:A6:3C:7F:29:B8:83:F4:B3:C2:43:6D:96:3D:C8:53:2A:1A:63:4C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjx_KbiD9LPCQ22WPchTKhpjTMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f8:d1:f8:fc:e4:aa:1e:dc:b4:20:6c:1b:f0:14:41:5f:57:
64:e8:cd:60:be:99:09:7c:6e:97:a0:3a:42:98:0c:3f:ae:92:
3b:f3:a2:78:97:d4:ab:aa:6d:e1:e9:9c:fe:51:fd:49:73:7f:
a1:1e:dd:f4:e9:42:20:2f:7d:a4:f1:9c:a5:58:00:e2:5c:ee:
75:fd:72:e3:1f:cc:71:39:ff:3e:89:f2:77:ce:1e:a0:1a:3e:
42:e8:e0:dd:6a:e4:9c:50:23:87:92:03:7f:79:fd:06:0a:03:
ee:80:e2:d0:de:e7:bb:55:fe:c8:41:88:e4:b5:22:7e:1f:42:
6d:ff:59:5e:ec:03:00:4a:f8:fc:f8:44:82:75:72:52:a3:ec:
fb:6f:45:c0:e2:16:60:6b:77:c6:93:e9:85:f1:ea:0b:54:a3:
0e:cf:e9:da:bc:0a:fe:bf:82:1e:d3:b6:b0:90:cf:82:03:99:
82:fc:6f:e8:35:34:3a:85:25:04:0a:20:fc:7d:6b:e9:86:16:
6b:3e:74:04:17:4d:d0:6c:47:7e:dc:86:46:f6:ed:28:91:2f:
5c:ba:95:5b:e0:c2:32:b5:13:c7:30:eb:75:8d:d2:7b:79:80:
62:d6:49:af:59:6b:0e:81:f3:8a:bb:f3:de:20:e8:ab:c3:62:
73:c0:73:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 11:53:21 2025 by rpki-client