Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
File: pJKfzWHcadzPvgHV_wA1tBrJUmA.mft (raw, json)
Hash identifier: jJ3k5D6JUWt3o1H/2edgO5IwfEh0KmxCTSA+qoAjNAQ=
Subject key identifier: 1F:4B:F1:E1:8D:85:FF:1C:18:F3:9E:E8:D7:E1:75:DF:79:42:B3:1C
Authority key identifier: A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60
Certificate issuer: /CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260
Certificate serial: 0197470C08F05CD7DFE74CD20D577F09B597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
Manifest number: 0E90
Signing time: Fri 06 Jun 2025 21:01:00 +0000
Manifest this update: Fri 06 Jun 2025 21:01:00 +0000
Manifest next update: Sat 07 Jun 2025 21:01:00 +0000
Files and hashes: 1: FMd4ncvFc0vMJ63ZqH_KhMZqr00.roa (hash: GAIpznWNN7ttQuk7XL5JgmFjADI10rnA9JaXxJOak4g=)
2: pJKfzWHcadzPvgHV_wA1tBrJUmA.crl (hash: UXvtvQjlnRwpY7TLC+0V8XJiNreLth7iuS8IRGbMdKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:08:f0:5c:d7:df:e7:4c:d2:0d:57:7f:09:b5:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260
Validity
Not Before: Jun 6 21:01:00 2025 GMT
Not After : Jun 7 21:01:00 2025 GMT
Subject: CN=1f4bf1e18d85ff1c18f39ee8d7e175df7942b31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:09:11:ae:62:d1:92:15:a8:26:d3:99:2b:68:
5c:49:75:37:76:4a:b9:55:71:c2:fa:18:a9:b8:7b:
00:f3:65:23:05:a6:88:47:02:56:3d:df:b9:cb:ab:
24:bd:77:bd:ae:2f:a1:d8:d3:78:3e:b0:7e:ed:f8:
ed:6e:e5:ef:0f:ad:c3:55:51:d1:7c:df:02:5d:66:
32:2c:52:22:71:76:ec:f8:4c:5e:3a:9b:e2:8c:2d:
e2:da:ee:b8:46:e1:4e:19:77:83:71:f9:cb:0c:1d:
f3:ca:76:68:96:0b:c5:62:ac:d0:fa:97:da:4f:4f:
c8:8b:0d:0e:c1:73:f8:d6:3c:33:8e:ac:74:bf:3d:
36:0d:f1:cb:73:f4:86:c9:9c:e4:da:38:c5:2f:31:
8f:a1:df:cc:fc:6f:a3:90:29:60:df:cc:22:4b:6a:
2b:51:c4:e6:ad:7c:13:31:f4:e6:72:60:82:a1:0d:
98:2d:37:4a:b4:5d:09:66:c3:3a:53:94:e9:71:1c:
42:dc:96:92:ad:e4:54:fa:86:16:0e:bf:42:55:08:
89:16:03:61:74:d1:c7:d9:4b:47:c2:1b:09:42:73:
78:0f:a1:ca:de:08:7f:e3:c0:8d:a1:33:3d:55:0f:
e2:f7:3a:f2:15:4c:47:bc:2f:71:74:0f:83:9a:ae:
8b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4B:F1:E1:8D:85:FF:1C:18:F3:9E:E8:D7:E1:75:DF:79:42:B3:1C
X509v3 Authority Key Identifier:
keyid:A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:8c:08:9b:87:30:ab:31:f4:d2:79:89:ba:89:8f:09:d2:9b:
d2:69:d5:9e:e3:89:47:26:d3:f9:06:4d:56:91:bb:51:89:32:
f0:21:bc:cf:d9:f3:7d:36:0a:34:f1:7d:cc:ea:c4:33:dc:61:
18:e3:67:cf:7e:9f:a2:4c:05:6e:9c:da:fd:bc:72:0c:1c:bd:
65:c7:b1:68:94:44:2a:e4:42:ca:a4:1a:8e:aa:5a:02:5a:96:
be:59:e7:91:f8:d7:7e:27:13:83:da:e5:44:6d:ee:91:70:28:
4f:e8:05:3a:89:85:6c:e7:54:ad:15:64:bd:58:8c:8a:88:bb:
71:cc:59:67:0c:93:7c:f1:8c:d8:20:62:e1:e2:d1:1f:1b:71:
26:3a:b6:8c:72:3d:65:16:06:49:87:08:6f:2e:1f:58:4d:83:
93:ce:94:8e:fc:c6:eb:17:aa:e1:8d:a1:7e:b5:5f:39:e2:c5:
87:62:3c:82:98:20:d4:6a:7c:d1:c9:ae:a5:8e:39:2c:ad:bd:
62:90:e5:ce:5b:14:39:4a:34:70:16:08:82:e8:03:ad:ad:cc:
7d:39:e3:46:2c:42:99:fe:c8:70:05:a1:48:f0:a1:c3:a1:f7:
60:a8:c4:a2:ef:b5:18:77:39:ca:c7:78:25:1a:25:47:e5:95:
43:5f:84:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:06:30 2025 by rpki-client