Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
File: Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft (raw, json)
Hash identifier: tdRz6SZCWQcK/kgADlPB939Brpx0UgjruTYnj5QHunw=
Subject key identifier: 49:BE:A2:9B:95:A4:FF:37:FB:BD:87:3B:64:D3:3A:A0:6B:04:B7:79
Authority key identifier: 3E:3D:1C:21:A7:7A:0B:0F:7F:0C:E6:63:3E:13:E0:C5:7B:ED:B0:8B
Certificate issuer: /CN=3e3d1c21a77a0b0f7f0ce6633e13e0c57bedb08b
Certificate serial: 0199225538C6021634BF396BED530166AE99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
Manifest number: 13A9
Signing time: Sun 07 Sep 2025 04:00:34 +0000
Manifest this update: Sun 07 Sep 2025 04:00:34 +0000
Manifest next update: Mon 08 Sep 2025 04:00:34 +0000
Files and hashes: 1: Gw9xXGUQ6gOLxmD3uhPbHUjxqdY.roa (hash: iN7hsvC2N6zVGHZJzHIWk+L6xeaF90AdvlMynpLLSsQ=)
2: Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl (hash: pidl1jHf+s6c3scXsz2ulmdtjxMYVy4l2cAIMrzPtf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:38:c6:02:16:34:bf:39:6b:ed:53:01:66:ae:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e3d1c21a77a0b0f7f0ce6633e13e0c57bedb08b
Validity
Not Before: Sep 7 04:00:34 2025 GMT
Not After : Sep 8 04:00:34 2025 GMT
Subject: CN=49bea29b95a4ff37fbbd873b64d33aa06b04b779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:45:2e:81:29:ad:71:7b:02:68:81:bd:d6:19:
93:02:56:fa:e7:f9:2a:a6:2f:d2:49:68:b5:6c:1d:
6f:63:16:2e:9f:6c:51:92:aa:38:7f:4b:3e:a2:61:
19:4e:bf:d5:95:00:df:5e:0e:66:d3:65:90:46:26:
d6:c3:65:b0:32:19:11:dd:45:49:8c:c4:9b:d8:b8:
51:e4:7b:de:ab:ad:28:83:a9:2d:2e:9d:af:9f:10:
42:48:ae:51:c0:c0:c1:61:fe:33:20:69:af:82:03:
07:76:41:a5:e7:8d:77:06:34:05:02:0e:ff:94:80:
54:d5:7d:33:92:4c:a4:92:99:a3:22:08:35:36:d3:
58:9f:4e:d1:e5:94:08:1d:92:49:8b:e1:d6:d9:b2:
46:92:b0:61:d6:0e:ce:df:e9:25:c3:07:a6:f5:c6:
b9:3e:0b:6e:ae:dc:23:81:25:7b:65:73:6a:e5:45:
7a:97:5c:c2:c2:e4:86:7f:15:aa:3e:0d:85:9f:38:
22:e2:be:5c:48:01:03:e1:3b:b0:6c:9f:3e:8c:29:
51:89:97:d2:8f:52:43:e2:de:49:2e:5e:eb:53:9a:
e6:d9:52:9e:eb:d9:d4:11:b3:27:df:59:5a:52:b9:
57:24:14:66:63:01:d2:9b:ca:81:7a:00:ff:3f:2d:
6f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BE:A2:9B:95:A4:FF:37:FB:BD:87:3B:64:D3:3A:A0:6B:04:B7:79
X509v3 Authority Key Identifier:
keyid:3E:3D:1C:21:A7:7A:0B:0F:7F:0C:E6:63:3E:13:E0:C5:7B:ED:B0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:be:92:0e:8e:7c:d5:ee:c1:1b:e1:64:a4:b0:09:11:92:09:
cd:f8:8d:e0:3c:ce:c3:1b:ea:7d:f9:29:f9:f5:46:28:da:fa:
96:cb:f6:56:79:1b:60:cc:63:36:c7:9d:f4:53:3e:60:c6:75:
b2:34:d4:43:2e:84:4c:28:76:ba:b3:34:ff:05:92:82:e0:3c:
05:43:7e:e5:ff:85:79:1b:58:2c:50:71:a4:ef:be:41:1a:dd:
c3:b0:6c:8c:52:44:4e:2e:38:55:56:1a:fa:28:41:8a:e3:d6:
12:a3:f1:83:77:ee:2b:eb:70:2e:3b:6c:75:7a:fa:f2:82:c2:
4d:5e:c3:01:bf:b4:4e:39:af:22:84:a1:36:72:ba:22:70:ec:
c5:29:a8:f7:6f:76:49:1c:11:03:15:99:b7:92:e6:85:14:aa:
d8:83:ac:ad:12:e7:c8:e1:91:aa:7f:ee:ce:dd:b8:86:6d:6e:
fb:9e:c8:bf:41:df:cd:e9:26:a5:01:3a:1f:57:85:64:f4:cb:
3a:1d:45:1e:2f:1e:23:4f:16:a6:f5:fa:94:ab:bc:e4:4f:c5:
1b:27:f4:56:91:fc:6a:eb:bb:57:c6:7d:70:b5:ae:79:0a:32:
8d:69:e1:2f:2c:e0:7a:38:e9:f7:7a:fd:6e:4d:e3:d1:c8:05:
64:1e:db:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:54:30 2025 by rpki-client