Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft
File: pjx_KbiD9LPCQ22WPchTKhpjTMo.mft (raw, json)
Hash identifier: K53OInlk6dpY3IwOdnZWnP/OfL7x4QSqCfNcqJkLAqM=
Subject key identifier: 33:AF:46:4C:29:6F:D1:26:50:2C:D1:65:A6:F1:A5:39:67:DA:0B:F7
Authority key identifier: A6:3C:7F:29:B8:83:F4:B3:C2:43:6D:96:3D:C8:53:2A:1A:63:4C:CA
Certificate issuer: /CN=a63c7f29b883f4b3c2436d963dc8532a1a634cca
Certificate serial: 019A1D2C316BB064DBFA2A8B657FB56DE366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjx_KbiD9LPCQ22WPchTKhpjTMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft
Manifest number: 16F2
Signing time: Sat 25 Oct 2025 21:00:26 +0000
Manifest this update: Sat 25 Oct 2025 21:00:26 +0000
Manifest next update: Sun 26 Oct 2025 21:00:26 +0000
Files and hashes: 1: UTDX9X0E-WocbOKc9uxoBBtUNW8.roa (hash: POK+eugWAjhkZBM6kVW5R4lWCtIN/mz6eft4yJE4FsE=)
2: oiBEvO2p29cLUYapByjoEoYyzDg.roa (hash: vhwwgY7QGbDe4OWAOvjloCFsUXviJLu/e8Pkbh7LI2o=)
3: pjx_KbiD9LPCQ22WPchTKhpjTMo.crl (hash: nlBl3Z4yFZUESGspKOaF3Wz7r8FrF8d9brlC9MA4S1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjx_KbiD9LPCQ22WPchTKhpjTMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:2c:31:6b:b0:64:db:fa:2a:8b:65:7f:b5:6d:e3:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63c7f29b883f4b3c2436d963dc8532a1a634cca
Validity
Not Before: Oct 25 21:00:26 2025 GMT
Not After : Oct 26 21:00:26 2025 GMT
Subject: CN=33af464c296fd126502cd165a6f1a53967da0bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ad:dc:2d:de:1c:3d:e0:99:27:4c:2d:29:9d:
e2:fb:c8:f4:e8:a0:54:9c:ea:fa:23:68:ab:a1:cb:
b5:4c:40:f9:e4:88:76:e0:58:5f:28:32:f9:ae:30:
91:5e:4b:46:7d:ba:12:91:a8:09:c8:c1:01:ac:7f:
3f:a9:aa:11:b6:49:ab:3c:19:0b:9a:a7:24:48:a7:
d4:32:62:c2:89:e8:1f:1c:28:2f:b5:95:e7:4b:34:
42:2e:2e:e5:3c:b2:f3:c8:fb:40:16:a6:08:85:20:
d7:61:9f:ef:b9:a2:01:0c:de:18:1e:77:0e:7d:11:
ec:c4:47:5c:f6:26:d9:ff:4f:5c:94:13:00:2a:bb:
f4:6d:b6:2a:b3:32:cc:5a:17:49:db:80:42:91:ff:
41:a0:b4:7a:f1:fa:e9:86:fa:f6:7f:05:08:a7:6b:
5f:27:f4:7b:20:e6:2c:c8:08:f8:ae:47:04:b5:f2:
23:02:9b:dc:80:55:a5:8d:0b:96:48:10:3c:fd:86:
17:8d:d5:dd:a8:84:55:12:f5:04:6f:e9:5b:6d:bf:
7a:db:e8:00:74:87:97:58:b6:7a:ad:ec:c6:58:68:
be:5c:b9:cf:ee:2b:f0:a7:90:40:73:a2:03:77:57:
14:d8:bf:9e:38:77:9f:c8:47:bf:1f:06:59:75:fa:
a7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AF:46:4C:29:6F:D1:26:50:2C:D1:65:A6:F1:A5:39:67:DA:0B:F7
X509v3 Authority Key Identifier:
keyid:A6:3C:7F:29:B8:83:F4:B3:C2:43:6D:96:3D:C8:53:2A:1A:63:4C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjx_KbiD9LPCQ22WPchTKhpjTMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c3:16:ce:ad:6a:ce:85:5b:a4:be:83:44:1c:94:db:53:99:
4a:ad:7a:0e:ce:21:f8:46:e9:aa:b1:ca:89:c7:ac:b8:4c:b2:
9e:dd:bc:e4:a5:52:ac:1d:ac:93:02:27:96:8b:11:5f:74:43:
c8:31:f0:2d:0e:5c:5f:df:a0:5c:25:7f:2f:63:a7:10:30:78:
09:69:01:9a:d3:3b:1d:2f:8a:af:14:a6:77:08:cf:09:8f:e8:
1c:14:a5:74:fc:dc:1c:08:cb:ce:e8:c9:45:bc:0c:06:f3:d0:
9d:55:71:7c:94:b1:cb:4d:2c:0f:29:bc:ff:a9:8c:3a:4e:8e:
ad:70:75:3a:1a:9e:91:de:9d:61:d2:f8:52:01:8f:ae:86:75:
8b:82:c8:23:98:51:f0:c7:64:65:74:49:e2:cd:35:df:04:cd:
4e:91:ee:d2:a7:fd:b0:37:e1:fb:29:3b:a5:f6:01:b2:02:bd:
3e:30:f0:26:fd:6e:be:ed:83:fe:8f:d4:ab:cc:d3:17:95:ce:
6a:f2:70:57:fa:d0:98:29:eb:8d:ef:27:4c:1e:3e:5f:2d:42:
c6:aa:cf:0a:5f:92:41:a3:f3:d9:d8:5c:0e:88:96:2f:be:05:
f0:b6:d7:5c:ba:9e:6b:80:a4:07:39:4d:5a:79:72:0d:0b:09:
a4:41:87:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 03:18:08 2025 by rpki-client