Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
File: pjxtuvK89S8n5YwticbBxVuV3yY.mft (raw, json)
Hash identifier: iGAOwXiOnwq9ppq4NE252bdEdbEP0d5AwbpqqQa2Nm8=
Subject key identifier: 5A:38:B2:CD:10:5D:91:C7:69:27:80:58:A8:A4:B0:CB:61:E5:24:77
Authority key identifier: A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
Certificate issuer: /CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Certificate serial: 01974DB26FF567D44075D4B3480F784B89F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
Manifest number: 07F6
Signing time: Sun 08 Jun 2025 04:00:29 +0000
Manifest this update: Sun 08 Jun 2025 04:00:29 +0000
Manifest next update: Mon 09 Jun 2025 04:00:29 +0000
Files and hashes: 1: NANvvd_V7iIUj7mJYMTOqque3Po.roa (hash: z7IZKlxruCsipOwPt42pcffU0s1l9uB/ojQdv9l2AxM=)
2: pjxtuvK89S8n5YwticbBxVuV3yY.crl (hash: NNUFn/+Bpyq7YaqX+dXrR9xRjpR3//VsXBY5Z0jYLvo=)
3: yG3GRDnYBo69OMDgoi6l30IqdQQ.roa (hash: s36xnlN956H1thb9LXHw6o5GvT+TFLxm0zFqGU00y/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:6f:f5:67:d4:40:75:d4:b3:48:0f:78:4b:89:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Validity
Not Before: Jun 8 04:00:29 2025 GMT
Not After : Jun 9 04:00:29 2025 GMT
Subject: CN=5a38b2cd105d91c769278058a8a4b0cb61e52477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5a:4c:22:14:a1:10:7f:4a:f5:9d:26:19:b2:
73:f6:ab:62:8f:30:32:2d:ed:04:43:60:25:8f:5b:
85:66:6b:6b:33:87:4c:6e:b2:37:de:8e:af:c1:2c:
12:44:d0:7d:87:3a:ec:03:7c:95:6b:80:62:f8:ae:
ff:1e:7e:06:68:14:5c:53:fc:35:52:f8:f2:58:a1:
77:7f:dd:0e:e0:0f:d3:bd:d0:c6:f1:e5:ce:11:09:
1a:8d:e2:86:99:1b:00:08:94:e0:a3:4d:f9:31:ab:
0e:0c:00:81:4e:eb:ac:85:da:12:a3:54:9d:ae:b0:
41:e6:c7:b8:31:d3:03:4f:c9:6b:b0:9e:af:cf:1c:
7b:37:1d:46:bf:6f:81:83:22:bd:57:5a:82:11:06:
b6:bd:89:91:45:c2:40:ba:eb:26:c5:43:a4:31:77:
dc:53:3d:37:b8:7c:fc:7e:b3:73:cc:5d:57:7e:f7:
94:5f:f5:54:b8:20:a2:32:9f:20:14:f4:4c:e1:72:
90:37:b2:99:78:1f:bc:0e:5b:ae:8c:82:67:eb:08:
64:c3:fc:bd:e9:84:60:44:47:df:ad:27:08:64:b2:
f8:bf:0e:92:b2:c9:84:a9:6b:79:0d:f1:51:20:b1:
08:64:85:7c:7a:35:e1:c5:68:39:25:9d:51:a2:02:
5d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:38:B2:CD:10:5D:91:C7:69:27:80:58:A8:A4:B0:CB:61:E5:24:77
X509v3 Authority Key Identifier:
keyid:A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:8b:a2:c3:6c:85:5e:3c:d9:62:37:68:c1:af:cc:07:b1:61:
a0:d8:81:de:ce:17:ff:50:31:51:96:7e:7e:3e:1d:d8:f4:4e:
8c:93:8f:12:f7:d9:c1:a5:f7:06:3f:9a:4f:91:ba:fa:29:80:
fa:cc:e1:bf:20:84:a7:16:8f:03:a4:62:9a:e8:45:64:c2:fd:
de:18:4a:1c:63:c8:5d:19:75:ff:bd:66:30:18:76:01:2a:97:
f1:25:04:70:38:2d:0f:28:ad:56:9e:72:6f:ed:33:b8:80:6b:
19:81:cb:b8:c8:f8:00:c1:7a:a8:bc:df:e8:de:ce:5b:24:ca:
5a:d3:b6:76:f1:10:08:80:82:03:e8:2b:1a:6e:cb:9a:3f:59:
22:e3:c8:41:c1:61:f7:59:16:39:0a:1a:58:ba:6e:57:94:5b:
37:3c:14:e7:98:78:2b:ac:83:f4:72:b6:0f:25:cd:93:47:3f:
e0:6c:e0:cc:bb:f8:cb:7f:be:48:cd:ed:8c:4d:bf:d9:10:dc:
39:40:4a:e5:44:00:30:c8:d4:75:ca:39:b7:09:40:cd:3a:40:
07:2b:b8:4c:e6:fd:f9:41:d0:48:24:fc:0d:b7:d5:2c:29:67:
4c:6d:3b:6c:98:b4:40:fa:59:44:6c:e9:5a:02:c5:8a:c3:92:
c4:92:ea:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:42:47 2025 by rpki-client