Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft
File: PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft (raw, json)
Hash identifier: JSIK+NNOG20qMcEkGs8Kso1mz7mEFlvHp7E2jaQk6eE=
Subject key identifier: 8B:49:CB:80:49:09:E8:CC:78:0E:95:56:26:F8:5A:A0:8C:DA:89:51
Authority key identifier: 3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7
Certificate issuer: /CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7
Certificate serial: 019923A0309F4BF7558979E881BD19825069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft
Manifest number: 0101
Signing time: Sun 07 Sep 2025 10:02:04 +0000
Manifest this update: Sun 07 Sep 2025 10:02:04 +0000
Manifest next update: Mon 08 Sep 2025 10:02:04 +0000
Files and hashes: 1: 1-AcyZzR_rYiM2ehdDTTg0kr4UTw.roa (hash: qHmoXJmRx4dkuxN3uy5t1kjSUTwhuDfIP867Nh4f5Ts=)
2: LbGHBzwRAfceRmxwP2ccsuOGwGU.roa (hash: ZwRIC8Resn0brXABJWxiiw1dDspM+fWK1hVb1pb6YYQ=)
3: PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl (hash: JnYxKFQuE511CzLhA+nPlzfSXNaJFlfLhKV3hIHuq+4=)
4: VjUF6mkOxxkGBT69SzLniaN5UYw.roa (hash: JTMUgsA+g5cqMZGbs8rgNYEsQMEwv0Fop5cCQWjZZZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:30:9f:4b:f7:55:89:79:e8:81:bd:19:82:50:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7
Validity
Not Before: Sep 7 10:02:04 2025 GMT
Not After : Sep 8 10:02:04 2025 GMT
Subject: CN=8b49cb804909e8cc780e955626f85aa08cda8951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:00:20:20:cc:cf:8f:8f:9e:b2:7b:37:31:d0:
04:68:c8:4d:62:a3:16:c1:44:df:46:fa:6d:0c:2f:
5d:63:42:4c:51:1c:1f:67:b7:8b:38:94:f1:33:2d:
78:05:29:c5:59:20:0a:77:67:c9:14:b9:cb:19:c6:
d0:d8:80:33:b4:a6:1e:13:c2:ed:92:dc:3b:4f:be:
a2:20:77:44:d1:13:d5:36:14:b6:01:5e:fb:11:dc:
06:af:83:a1:0f:a7:53:f0:96:43:f7:1c:64:be:30:
24:63:48:4a:b6:b7:37:f3:e5:17:dd:2d:8c:53:bd:
81:21:d1:65:42:8e:2a:69:38:53:63:f9:66:4d:dc:
0b:4f:e4:ae:60:21:fa:ad:6a:17:83:51:7f:cf:4e:
b3:e1:36:6f:f5:b6:97:47:e8:38:07:23:14:30:e6:
e4:e5:ce:ee:be:e0:d7:f0:1e:b2:48:ed:bb:fc:19:
2b:7e:c5:d9:61:a3:7f:7e:e1:5a:e4:72:f3:c7:57:
0f:84:b7:6f:40:41:63:d9:88:0a:a3:98:c7:9e:a5:
b5:52:7d:76:8e:63:88:4b:5d:47:fb:cc:aa:a8:47:
8f:ca:9a:cb:95:bf:65:ed:c4:a6:55:51:bc:f1:22:
e9:3e:0a:1c:7f:88:b3:77:dc:08:31:f9:ef:a3:a6:
f1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:49:CB:80:49:09:E8:CC:78:0E:95:56:26:F8:5A:A0:8C:DA:89:51
X509v3 Authority Key Identifier:
keyid:3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:93:eb:41:88:40:48:3f:c2:aa:fe:e0:52:d1:63:fb:8d:44:
f0:33:85:e9:92:ef:58:8d:de:ce:98:f3:b2:56:8b:95:52:58:
18:cf:4a:07:42:cb:d0:61:c4:46:10:19:02:5a:69:4a:60:2b:
9a:1e:41:02:7f:6c:4e:1b:f7:24:6f:20:8a:d2:38:33:d9:7f:
ce:83:8e:e5:10:8d:a6:2c:ee:06:6f:20:52:39:81:ca:89:13:
61:6d:44:8a:f0:b3:44:3a:81:a0:fb:81:30:3c:98:c1:e9:7f:
eb:5a:be:af:0b:13:ba:bb:cc:8f:c7:4f:fc:bb:00:31:6e:48:
77:e9:ee:3b:17:9e:4a:8d:cd:79:0a:dd:65:67:e6:83:e6:f4:
6b:7c:10:56:a8:61:c5:67:58:78:e6:16:9d:f4:08:ae:e4:90:
91:9a:26:07:11:a1:a2:07:f7:c1:28:7e:7a:58:15:51:97:1c:
2e:cb:9d:05:10:a2:e5:75:55:0a:70:08:0d:c9:84:6e:28:77:
72:c2:98:83:2a:7e:e8:aa:a5:f3:97:55:80:d3:57:1a:52:ca:
3d:0c:bd:a8:6d:08:92:89:0a:6b:44:59:b7:ad:46:80:d0:e2:
c7:dd:76:bf:d3:9b:67:e1:a0:f0:44:8e:5c:43:36:60:f5:f9:
f0:c5:9b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:34:14 2025 by rpki-client