Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.mft
File: PmxFIHWfOk74uamifiUzznMsVBE.mft (raw, json)
Hash identifier: wz2Bt8g0l3nBiJ+5My6m5gOrTzZQB6UJTh7izdkY5IM=
Subject key identifier: 23:2C:EA:36:A6:3D:76:FD:CB:7D:E6:59:D4:66:59:15:4E:5D:AC:A2
Authority key identifier: 3E:6C:45:20:75:9F:3A:4E:F8:B9:A9:A2:7E:25:33:CE:73:2C:54:11
Certificate issuer: /CN=3e6c4520759f3a4ef8b9a9a27e2533ce732c5411
Certificate serial: 01984B54D6C28CC77D3F5AFD3F5DAA4C2A6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmxFIHWfOk74uamifiUzznMsVBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.mft
Manifest number: 1595
Signing time: Sun 27 Jul 2025 10:01:47 +0000
Manifest this update: Sun 27 Jul 2025 10:01:47 +0000
Manifest next update: Mon 28 Jul 2025 10:01:47 +0000
Files and hashes: 1: PmxFIHWfOk74uamifiUzznMsVBE.crl (hash: m9qdlXpZfDVeNnphQqSFJkwbhqIV3p9MnLDDto0qZ/Y=)
2: f62uVetw4VLEAcyA7iUss0CmbKk.roa (hash: KfBTV0RaWF6oQ2oIYy/lZbeXGP7Rdv40K79+xRa2szk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmxFIHWfOk74uamifiUzznMsVBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:d6:c2:8c:c7:7d:3f:5a:fd:3f:5d:aa:4c:2a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6c4520759f3a4ef8b9a9a27e2533ce732c5411
Validity
Not Before: Jul 27 10:01:47 2025 GMT
Not After : Jul 28 10:01:47 2025 GMT
Subject: CN=232cea36a63d76fdcb7de659d46659154e5daca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7d:25:93:e4:6f:85:fb:d2:15:ce:c7:87:29:
8a:c4:2a:7d:be:1d:16:82:4e:93:0e:36:e5:26:6b:
1a:69:f2:40:b8:5e:b2:07:93:f9:2d:35:65:4e:94:
d8:c2:55:08:a5:f6:c7:c2:f5:1b:6f:63:4f:80:2d:
f3:e5:7a:d8:68:cd:7b:d6:ab:fc:17:1b:4c:45:fa:
4f:da:79:19:d2:4e:bf:4e:c2:00:86:21:dc:24:58:
95:62:48:f2:c0:a1:44:00:0b:e8:42:61:ce:27:38:
ad:40:d8:65:bb:0f:f9:fa:e1:92:69:3c:3c:5e:01:
79:07:9a:80:d9:c7:6e:ec:c4:56:c2:9f:da:05:32:
6e:d7:2a:23:d8:9a:53:42:21:c5:50:e6:a4:58:a9:
44:cc:4c:fe:12:01:5b:f2:df:68:04:ce:5f:b9:03:
fb:0a:cd:d9:7e:ae:2d:6d:c6:7c:cc:ab:57:70:7b:
68:b8:4a:a8:97:f6:8c:d3:b0:4d:f6:01:d1:3d:56:
31:d2:18:e4:95:49:60:60:2d:ab:4e:85:8f:4d:70:
31:8f:c8:ad:f9:c9:94:88:5f:d8:c1:c3:16:68:4f:
d1:8c:c3:c0:e3:b5:6e:97:89:2d:43:fc:21:2b:1d:
c8:01:37:9d:57:b6:cf:0b:9b:02:a9:d6:74:05:80:
63:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2C:EA:36:A6:3D:76:FD:CB:7D:E6:59:D4:66:59:15:4E:5D:AC:A2
X509v3 Authority Key Identifier:
keyid:3E:6C:45:20:75:9F:3A:4E:F8:B9:A9:A2:7E:25:33:CE:73:2C:54:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmxFIHWfOk74uamifiUzznMsVBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:de:b1:04:97:9a:eb:b1:d3:b5:08:7b:d4:d6:f9:18:cc:43:
86:1f:7d:6a:fc:13:d8:58:b4:1d:41:79:09:a3:af:39:e5:32:
77:5b:f1:75:d9:85:5c:2c:f8:0e:ac:dd:b4:76:fc:3c:fd:53:
c1:26:e4:23:3d:3f:d6:6d:5c:b4:ee:ee:56:12:a0:ac:7a:d6:
a8:6f:2b:b6:3e:9b:8b:f9:15:bf:e9:41:c3:ca:03:87:4c:5b:
cd:b3:fa:91:e1:e3:aa:9b:73:0e:97:d3:a3:5b:49:15:b7:ce:
b2:36:df:e3:e2:36:c4:c8:f9:ef:69:39:fc:7a:96:7e:3e:67:
22:a2:0e:2e:93:bc:ec:d4:f7:40:dc:cd:85:4d:f4:21:d8:4b:
41:4e:9d:37:88:bf:55:81:77:47:05:a6:b2:bb:32:89:54:9d:
59:d1:47:18:13:51:37:0a:30:cb:8f:3d:c6:e6:7e:63:38:8c:
09:72:cc:a1:5a:dc:86:b8:d5:f1:be:db:d6:b3:04:05:1a:64:
5a:68:f7:85:fb:4a:f3:d3:25:f0:c6:62:a3:65:e1:bc:53:74:
08:7d:ce:e5:dc:25:bb:d9:46:ee:a1:bd:d4:cf:61:a8:c4:ed:
5b:cf:d4:dd:23:0a:b7:6c:52:34:b8:fc:fd:91:f4:26:7f:6b:
86:0d:11:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:05:06 2025 by rpki-client