Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft
File: pMK1k9mMCS_TCmAepdJEqr08sU0.mft (raw, json)
Hash identifier: Hyn1ViF+r+RgudUcxadUmJJJr/vbrsoQTrdjLSSN9hs=
Subject key identifier: FC:F7:6F:CC:17:75:F9:53:0A:12:93:0A:7F:D2:6D:F3:58:95:66:89
Authority key identifier: A4:C2:B5:93:D9:8C:09:2F:D3:0A:60:1E:A5:D2:44:AA:BD:3C:B1:4D
Certificate issuer: /CN=a4c2b593d98c092fd30a601ea5d244aabd3cb14d
Certificate serial: 01974D0E20AE2580BBAED8BBC4819A20F079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft
Manifest number: 0F79
Signing time: Sun 08 Jun 2025 01:01:00 +0000
Manifest this update: Sun 08 Jun 2025 01:01:00 +0000
Manifest next update: Mon 09 Jun 2025 01:01:00 +0000
Files and hashes: 1: U7nNEW5XGU3Qw3Z5TlXa8n1A0Xo.roa (hash: El8KNdvpLmelwHnPspzpd+ZkXP2SnewzZSQOjMbCymQ=)
2: pMK1k9mMCS_TCmAepdJEqr08sU0.crl (hash: vCKOOXSIUot4VtTI9AhUwIVhiF4v1Xk3u0JRFMIKgJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0e:20:ae:25:80:bb:ae:d8:bb:c4:81:9a:20:f0:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c2b593d98c092fd30a601ea5d244aabd3cb14d
Validity
Not Before: Jun 8 01:01:00 2025 GMT
Not After : Jun 9 01:01:00 2025 GMT
Subject: CN=fcf76fcc1775f9530a12930a7fd26df358956689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:60:8a:94:0b:cd:44:5a:5f:79:a3:ad:7c:54:
db:e9:63:58:55:ff:f3:4f:ad:7b:9d:e7:e1:c2:ef:
43:57:a2:69:86:29:73:b4:52:4d:6e:de:5d:48:48:
45:b9:be:ba:e4:de:cf:51:63:48:cd:4e:d7:fb:6a:
76:cc:9e:b2:d1:03:15:06:2c:aa:3b:e9:56:64:f0:
93:45:b9:00:44:2d:5a:26:c8:6f:51:69:7b:2b:7a:
e8:35:6a:bc:8f:95:96:63:cd:b1:23:70:92:13:66:
2f:a8:df:be:3f:d1:9b:08:9c:d4:0f:ae:9c:72:20:
7e:d8:29:fc:87:0a:e5:7d:bc:fc:a4:02:49:ad:1e:
64:53:1e:32:37:f5:7f:95:d1:92:4b:9f:97:5e:73:
6a:b5:f4:26:79:85:aa:1c:a1:47:82:14:9a:89:23:
ec:76:9e:2e:d8:18:04:b5:a7:2a:9a:5d:2d:5d:d4:
31:3d:7a:5b:6d:74:1d:52:7f:20:47:38:e7:74:58:
8c:b1:c0:67:6c:c5:68:74:c8:89:50:05:82:e8:5d:
d5:bb:21:d0:b3:ee:5e:e3:d7:33:9d:68:02:0e:6d:
a5:46:64:38:58:9e:fe:20:ca:04:79:d5:09:79:47:
fb:64:82:15:d3:df:d3:ca:97:60:b0:27:f6:68:d7:
aa:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F7:6F:CC:17:75:F9:53:0A:12:93:0A:7F:D2:6D:F3:58:95:66:89
X509v3 Authority Key Identifier:
keyid:A4:C2:B5:93:D9:8C:09:2F:D3:0A:60:1E:A5:D2:44:AA:BD:3C:B1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f8:9f:9d:40:c1:5e:07:b8:5d:6c:e8:17:cd:86:4f:2e:4e:
64:76:25:ff:57:c2:bc:03:a6:41:5c:a7:c5:61:4e:ef:62:55:
21:78:f3:01:56:35:02:89:1a:ba:1a:a1:08:86:ba:80:27:db:
8d:1e:7a:ed:9e:e2:6c:55:b6:23:36:7a:a7:f8:44:31:6d:77:
32:6f:34:53:85:41:c1:9a:0f:8c:34:d0:38:46:b1:d5:f9:20:
96:bc:b8:c4:25:ac:b9:40:54:4c:3b:95:29:f8:33:93:52:de:
8b:b9:ab:6c:8d:8e:db:08:0f:b1:8b:0f:b5:8a:d2:ff:25:a5:
99:66:f5:2f:78:31:8b:0e:9f:33:b9:17:32:3e:79:ff:15:fb:
82:70:1f:5f:e0:d5:11:f3:e1:8f:3a:8b:7a:bb:c5:5d:63:65:
f0:e6:01:49:70:4d:57:cd:c2:d2:ef:b8:0a:da:44:31:22:8f:
63:ce:e6:3c:ed:b3:4c:98:22:71:72:e2:c0:6f:db:50:73:15:
ea:02:7c:a5:d8:b5:ac:4f:bf:3d:55:0c:96:0a:57:81:cd:e7:
39:17:70:95:1c:b5:5a:75:ec:f7:ef:9b:c4:7e:a6:7e:26:cf:
51:ef:d4:4e:04:89:4e:bf:69:03:38:88:d6:ca:8d:a9:6b:09:
01:0f:01:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:40:21 2025 by rpki-client