Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.mft
File: PmoAuz7ZB8Umrdtaq9mtdkssPZ4.mft (raw, json)
Hash identifier: aBVziUD8ttaJNBudGlFznri5KSR7U7lovW/JdJ9zgQ0=
Subject key identifier: EF:B3:EE:A9:4B:05:E2:F2:72:C0:3E:7C:BB:DA:00:ED:F4:AD:BF:2F
Authority key identifier: 3E:6A:00:BB:3E:D9:07:C5:26:AD:DB:5A:AB:D9:AD:76:4B:2C:3D:9E
Certificate issuer: /CN=3e6a00bb3ed907c526addb5aabd9ad764b2c3d9e
Certificate serial: 01984AAE82A6EDABDF92C33F411FCF355E7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.mft
Manifest number: 02CF
Signing time: Sun 27 Jul 2025 07:00:07 +0000
Manifest this update: Sun 27 Jul 2025 07:00:07 +0000
Manifest next update: Mon 28 Jul 2025 07:00:07 +0000
Files and hashes: 1: PmoAuz7ZB8Umrdtaq9mtdkssPZ4.crl (hash: 4iinynKfqybTDmnis29EUmrEw6DNhdfBmnWgcBDKIhQ=)
2: vEaUcgTOmvxT4RwiTozd0tA5mdY.roa (hash: NlBiID9/yPQCEPkEu0Pfr8aESCT+/QAEDOmwYhde0qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:82:a6:ed:ab:df:92:c3:3f:41:1f:cf:35:5e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6a00bb3ed907c526addb5aabd9ad764b2c3d9e
Validity
Not Before: Jul 27 07:00:07 2025 GMT
Not After : Jul 28 07:00:07 2025 GMT
Subject: CN=efb3eea94b05e2f272c03e7cbbda00edf4adbf2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:61:47:1f:90:09:33:73:86:12:34:81:f8:01:
3a:f3:63:71:be:3a:34:90:4a:4d:80:c9:1f:38:11:
a3:ea:96:03:ce:dd:07:88:e3:9f:44:fa:43:60:9f:
28:0b:02:fa:1d:11:88:0f:9f:cf:96:38:f3:04:d4:
28:dd:e2:1c:c9:23:2c:36:9e:c1:a3:07:2d:ac:53:
b6:98:86:95:8b:a4:ea:a3:7f:35:93:b0:95:e5:38:
c3:e9:6b:31:7e:24:91:fd:56:20:89:10:7a:24:f1:
af:e7:30:d2:9e:11:83:64:be:2c:12:bc:86:24:68:
02:03:6e:84:40:38:c3:28:e4:fb:b0:bb:01:19:a7:
3a:67:b1:d2:75:44:f8:8e:58:8e:e3:f8:ee:62:1e:
a3:9f:24:4c:31:21:df:c4:57:67:88:0d:30:7a:35:
a3:e2:29:7a:6c:e4:77:6d:8d:70:71:4a:f5:88:b3:
f6:e9:3f:73:d6:60:8a:2d:0e:dc:ce:7f:4b:7a:ba:
e0:28:ee:d5:08:98:45:16:6f:6a:dc:73:44:41:59:
29:b1:fa:f7:d3:cc:07:06:d4:08:59:1e:54:d5:af:
6c:e1:3c:7b:a4:d8:e7:45:04:d5:f8:c1:ee:96:d5:
9b:9a:b8:7a:c8:1f:78:06:c0:f1:7a:12:bf:96:0d:
51:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B3:EE:A9:4B:05:E2:F2:72:C0:3E:7C:BB:DA:00:ED:F4:AD:BF:2F
X509v3 Authority Key Identifier:
keyid:3E:6A:00:BB:3E:D9:07:C5:26:AD:DB:5A:AB:D9:AD:76:4B:2C:3D:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:c1:4d:bb:91:13:be:b9:7c:3f:be:77:a9:6d:91:56:24:d6:
01:be:d4:df:46:7c:08:21:5c:aa:71:e2:57:79:cc:95:8e:8f:
f4:cd:76:2e:10:0e:85:e3:fc:79:46:e5:d3:eb:a7:82:6a:1e:
07:aa:ab:48:56:78:cc:0f:a3:61:6a:2c:ad:fe:52:4b:72:18:
b0:e1:28:0c:19:2c:0d:35:be:06:a5:07:67:b0:5f:ff:d0:fc:
49:b0:a8:2d:1b:31:d5:75:4a:8d:4c:b9:f2:a8:fb:aa:f4:3d:
d2:b0:99:b2:c1:1c:9c:14:f8:89:83:ef:b2:8f:8a:73:4a:a4:
f1:b5:93:8d:31:e0:66:83:a1:5a:83:2e:6a:53:dc:8b:17:86:
b1:73:80:08:f9:7e:72:dd:36:07:17:de:cb:1d:95:2a:3b:6d:
a4:28:48:f7:c8:a5:92:c4:de:b6:da:db:95:ee:41:3b:34:ba:
74:f9:f3:07:69:b0:36:c0:97:aa:b2:92:65:63:b5:a4:f7:83:
95:e2:32:0a:c8:31:05:d4:1e:1d:25:3e:a1:ad:83:e6:5d:18:
1b:22:e9:16:5f:55:55:cb:05:7a:07:03:32:80:ae:ef:f3:33:
eb:c3:da:d0:80:53:12:35:1e:16:04:d1:69:18:7c:16:8d:f4:
7d:53:f7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:01:16 2025 by rpki-client