Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
File: pJ0uULdziu0KzBoOwv7jAIAlWDg.mft (raw, json)
Hash identifier: CMkjJ5T/7fi4rnDUXpweX1c5HHW4G6OCSIPMRfE+fJQ=
Subject key identifier: 36:8A:30:2B:11:C0:99:F7:26:32:14:49:F7:1D:E1:B0:D4:E4:CE:4D
Authority key identifier: A4:9D:2E:50:B7:73:8A:ED:0A:CC:1A:0E:C2:FE:E3:00:80:25:58:38
Certificate issuer: /CN=a49d2e50b7738aed0acc1a0ec2fee30080255838
Certificate serial: 0198CA2613F6293353AE757F99CA3B9C122A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
Manifest number: 0985
Signing time: Thu 21 Aug 2025 01:02:29 +0000
Manifest this update: Thu 21 Aug 2025 01:02:29 +0000
Manifest next update: Fri 22 Aug 2025 01:02:29 +0000
Files and hashes: 1: cGGNHHL2taAbcfw5rMUB84kQw_k.roa (hash: J56YjCbrct/bNrc5fidg1pLfrEEsu9MaAGzXOMhbxY8=)
2: pJ0uULdziu0KzBoOwv7jAIAlWDg.crl (hash: KC45NjA159wpknhCUrxThZjD8EZlvLolXQz+BNjY7VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ca:26:13:f6:29:33:53:ae:75:7f:99:ca:3b:9c:12:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49d2e50b7738aed0acc1a0ec2fee30080255838
Validity
Not Before: Aug 21 01:02:29 2025 GMT
Not After : Aug 22 01:02:29 2025 GMT
Subject: CN=368a302b11c099f726321449f71de1b0d4e4ce4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:28:0b:8e:30:a8:4d:bd:69:4b:55:a2:d9:98:
e5:f1:f0:56:de:b0:50:2a:c6:e6:c3:53:b9:dd:e1:
d2:d0:05:07:fc:53:f2:86:6f:0a:4d:16:78:ce:8b:
25:a3:a4:29:79:f0:ca:5f:07:19:5d:54:c8:97:dc:
8f:6e:32:2a:d9:d6:bc:74:8a:19:ca:f6:74:31:15:
67:3d:61:5b:e9:7f:75:1f:d8:fc:e8:2d:f1:25:95:
3c:32:77:b8:50:7f:44:9e:0d:ff:4a:b0:c5:2a:f9:
97:f3:ce:ed:e6:34:a4:4c:1b:e1:64:ca:2a:10:ee:
1b:2d:b7:87:fe:c7:70:88:a9:06:d1:21:4b:dc:e0:
31:be:da:83:f2:56:44:35:ec:d8:7c:23:58:c9:3a:
1e:c7:5e:08:40:74:b1:ad:7e:29:97:e3:d4:59:9f:
cd:51:35:0d:40:56:6f:4d:0b:30:79:08:9f:39:92:
9f:31:20:8b:5a:d3:66:45:21:53:de:5f:1e:79:b2:
eb:37:4f:11:9d:fc:74:05:0d:e8:5d:24:6e:97:d1:
34:b8:cb:6b:6d:59:53:9f:3c:42:b8:ba:24:b3:a2:
38:fc:8b:91:1e:cb:b4:a4:f6:be:f5:0c:ab:7b:9e:
41:c4:92:89:ae:77:90:af:fd:e7:8e:43:00:6b:28:
db:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8A:30:2B:11:C0:99:F7:26:32:14:49:F7:1D:E1:B0:D4:E4:CE:4D
X509v3 Authority Key Identifier:
keyid:A4:9D:2E:50:B7:73:8A:ED:0A:CC:1A:0E:C2:FE:E3:00:80:25:58:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:47:53:a9:cc:09:01:dc:01:ff:f7:0d:b2:53:8b:30:60:43:
35:f6:ae:2e:d7:2e:d7:be:75:17:e6:25:ad:c5:52:d9:84:3f:
ca:ec:be:32:40:a5:16:20:10:c6:c0:1c:c9:c4:e2:8b:84:75:
fd:7f:3d:c0:78:bf:56:00:f5:e6:28:63:19:e6:50:74:33:05:
42:fe:52:da:16:98:5b:39:70:c9:4d:79:47:0c:3f:b5:d3:38:
19:32:30:f0:fa:6c:42:cf:8f:23:64:a1:05:7c:54:fe:31:5a:
10:f6:60:b6:e5:0d:06:13:31:05:cc:3a:f8:90:fa:70:12:a5:
e4:3b:30:c6:e8:9a:88:e0:44:54:68:1f:c9:64:00:c7:f7:cf:
54:13:76:28:0a:2d:6f:2c:4d:0e:b4:25:f2:1c:33:43:0b:65:
f8:8f:c0:8f:83:85:b1:8a:b0:3a:ef:61:3c:4e:5d:8b:a6:60:
db:92:50:75:8b:fd:c9:8f:48:17:59:27:ab:35:c9:b5:81:3f:
ce:20:47:ee:8d:c1:d3:98:08:f0:92:5a:cb:ed:20:3e:e4:b4:
e8:78:d9:b3:e3:be:1a:f5:87:c9:64:01:39:05:39:23:4b:54:
17:bb:20:73:6f:db:53:13:3c:28:54:ed:d4:a9:16:c2:ba:43:
8f:18:08:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:00:07 2025 by rpki-client