Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
File: pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft (raw, json)
Hash identifier: jgYqBfX/AVQgRED8cY5QHn3F/ERIfmj5m286KH/F/nQ=
Subject key identifier: 84:8C:A7:E2:1C:12:03:7F:D1:41:9B:79:65:B6:62:F6:B9:A4:64:29
Authority key identifier: A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
Certificate issuer: /CN=a634878281144a46a856003d622f6141ea4e006f
Certificate serial: 01976929B01A335EFD7BAF136BB0881B650C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
Manifest number: 1590
Signing time: Fri 13 Jun 2025 12:00:29 +0000
Manifest this update: Fri 13 Jun 2025 12:00:29 +0000
Manifest next update: Sat 14 Jun 2025 12:00:29 +0000
Files and hashes: 1: BC9YAXepVvBWb0SpmFLnGsiu_0U.roa (hash: aM6wNA8MxfdfUppHaLmRAdGV0kYIIUvP9jpBwEyPjpo=)
2: _XoxeAXZ_0NOSgriyXyYImr8sp4.roa (hash: 95zz7gDtzubb5S5SZ2yFR8QhWyDigdhIQZqm7xDPB7s=)
3: pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl (hash: 7kjPim7dcDxFa1ka5z4adt3RCw87eY8yvEyXtpuwElk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:b0:1a:33:5e:fd:7b:af:13:6b:b0:88:1b:65:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a634878281144a46a856003d622f6141ea4e006f
Validity
Not Before: Jun 13 12:00:29 2025 GMT
Not After : Jun 14 12:00:29 2025 GMT
Subject: CN=848ca7e21c12037fd1419b7965b662f6b9a46429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3b:c1:d0:40:76:f8:f8:21:46:61:34:64:c0:
a4:51:ab:e9:39:ac:6f:68:93:52:d5:0d:a9:16:66:
f0:16:4c:3e:97:02:ea:3c:50:64:7d:9a:dc:2f:af:
a7:72:81:27:e9:93:cd:df:dc:d6:78:c6:c2:89:5c:
9c:8d:fb:19:6d:fb:43:8b:f4:25:4e:1f:ed:b2:b0:
04:85:79:fd:7a:3f:58:3c:c4:e3:39:af:01:f8:1d:
66:a3:84:f5:25:93:d9:05:ee:71:0d:10:8a:70:2a:
38:93:45:3f:57:e6:a7:0c:f1:95:c3:e4:c2:54:c1:
15:e4:e9:66:a4:7e:11:87:c0:f4:2f:b2:2e:33:3b:
ec:4b:c2:e0:b5:56:ac:d9:2c:ea:6a:9d:4c:5e:ba:
60:11:aa:0f:99:ee:7b:ba:14:69:da:ab:68:67:09:
48:e1:7d:ac:03:e4:b9:d7:a0:a9:35:ab:8e:73:67:
43:05:5b:9b:dd:d4:70:8f:34:3c:bd:ce:9f:45:ed:
29:1d:94:72:ac:18:c1:c0:34:f5:d8:74:b2:8a:8c:
f7:ff:cd:d3:fb:b3:24:40:a0:36:74:92:87:47:ec:
34:4a:ea:fc:21:b3:1b:10:d9:a9:85:f8:7e:0a:83:
c1:4d:2c:9a:5a:95:7a:83:7a:d8:b9:45:58:62:ae:
f7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8C:A7:E2:1C:12:03:7F:D1:41:9B:79:65:B6:62:F6:B9:A4:64:29
X509v3 Authority Key Identifier:
keyid:A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:bb:a2:52:e7:40:55:f8:cf:37:1d:24:83:b9:24:52:9e:aa:
fa:94:a8:94:3d:bd:90:6f:94:d2:26:92:03:f5:e3:53:7b:fc:
b9:14:b8:48:0d:f7:81:07:9e:1a:e4:bf:43:f9:6f:6f:61:94:
72:ae:76:1a:80:39:d3:64:1a:04:30:c5:17:e7:bb:31:bc:44:
d2:57:2c:90:cd:35:a4:53:0b:86:60:0b:6e:3f:23:8d:bd:ab:
65:60:81:3d:bb:da:44:1e:44:ef:86:77:3b:01:43:9a:4d:85:
8d:5e:27:14:4d:12:27:a2:08:77:10:8d:50:aa:12:b6:16:5c:
b8:2e:2e:b2:34:05:a2:0b:55:3c:57:fb:72:96:53:3f:a4:a4:
31:d8:99:3b:ac:35:1a:cb:c0:8e:dd:af:3b:a1:cc:fd:c6:24:
ca:02:68:ca:29:fe:fe:14:1e:9c:67:60:7f:61:36:f2:33:e2:
21:e6:5d:95:83:e6:55:ef:31:1b:62:a6:b4:f8:8b:f7:3d:cc:
77:77:c1:8f:76:b2:7a:4d:8d:80:a7:77:9a:db:9b:87:50:51:
3e:7e:59:a3:e4:9c:32:ec:4c:c1:47:32:06:41:0b:18:31:41:
0f:fb:37:90:71:17:4c:71:b7:95:4b:6b:e3:6c:57:15:bb:df:
42:df:d3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 14:54:52 2025 by rpki-client