Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
File: pJMvpJVkpXamFD5F-BVmjyANdjc.mft (raw, json)
Hash identifier: OHbpFsJu/Ret1MQrCNSMF+yuWOvjjnbbcx+jqF38QZE=
Subject key identifier: 38:8F:21:BE:BF:F6:B7:AE:CD:DB:65:E2:D1:B4:F6:47:60:CD:5E:69
Authority key identifier: A4:93:2F:A4:95:64:A5:76:A6:14:3E:45:F8:15:66:8F:20:0D:76:37
Certificate issuer: /CN=a4932fa49564a576a6143e45f815668f200d7637
Certificate serial: 01974666BB225C3CF9B7F9B15F55AEEE0D82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
Manifest number: 0627
Signing time: Fri 06 Jun 2025 18:00:26 +0000
Manifest this update: Fri 06 Jun 2025 18:00:26 +0000
Manifest next update: Sat 07 Jun 2025 18:00:26 +0000
Files and hashes: 1: nbFO3tETAKU90cGGwpaCKUOKTLY.roa (hash: cquJx46DtG8x6pISzm/UdeY5xz+jlo5riwT4Pb8N/jw=)
2: pJMvpJVkpXamFD5F-BVmjyANdjc.crl (hash: Z6QAvUPLjKegqKEi2wPg1gOriWXDn+oBOZE3FjEd5lQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:bb:22:5c:3c:f9:b7:f9:b1:5f:55:ae:ee:0d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4932fa49564a576a6143e45f815668f200d7637
Validity
Not Before: Jun 6 18:00:26 2025 GMT
Not After : Jun 7 18:00:26 2025 GMT
Subject: CN=388f21bebff6b7aecddb65e2d1b4f64760cd5e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:14:1d:40:ca:7f:61:ea:05:47:19:e8:85:1e:
cc:89:10:bf:76:2b:44:6e:2d:10:bf:0f:fc:53:d4:
e0:5e:6b:5a:b9:d0:37:6c:36:89:79:2e:1a:be:ba:
3d:2e:2d:ba:0c:cb:1b:32:a0:0e:12:9a:ce:ce:16:
82:6b:b9:8e:0a:0c:6f:04:bb:a6:60:4f:13:48:db:
e8:14:06:b9:9e:cc:9d:2a:41:d5:85:12:f3:6c:3c:
c5:03:1c:93:01:3c:a2:66:76:f3:d7:cc:c2:9b:8d:
f9:8d:9b:16:81:c3:e0:3c:71:27:ce:bc:96:96:c2:
6c:68:cc:b1:75:27:50:1a:4d:7c:ce:0d:ac:a2:da:
2c:56:15:24:2f:14:5d:e5:35:3f:07:10:c9:23:36:
9c:74:21:96:11:54:55:18:22:79:23:4d:e2:de:d4:
5b:cc:26:5f:79:80:55:0f:07:63:28:07:d5:6e:b6:
c7:f6:d7:69:28:48:9c:16:49:b4:f1:a8:94:bf:bd:
e9:9c:18:99:61:8d:36:e2:b6:ed:7e:c2:60:19:03:
f5:70:80:ad:a8:6a:69:ee:9e:4d:e1:cc:8a:fb:1b:
ef:ad:6f:61:01:73:a6:4e:56:74:0b:1e:00:db:22:
90:90:b9:7c:d8:46:43:5e:0e:b1:b0:7b:7f:2c:45:
5f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8F:21:BE:BF:F6:B7:AE:CD:DB:65:E2:D1:B4:F6:47:60:CD:5E:69
X509v3 Authority Key Identifier:
keyid:A4:93:2F:A4:95:64:A5:76:A6:14:3E:45:F8:15:66:8F:20:0D:76:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:6c:6e:06:43:0a:f5:24:b7:6d:96:f4:45:59:c2:ed:30:04:
90:ca:58:cf:ba:d7:8b:54:cd:f0:c1:81:79:48:a5:c6:bb:87:
76:10:7b:8a:db:4c:ff:a5:b3:4d:26:3b:09:aa:67:42:5f:e3:
fa:f5:a1:4e:bb:ae:19:12:62:f7:f7:fa:25:e7:c4:31:49:32:
e3:f6:39:47:47:5f:34:00:d4:09:22:b8:f7:03:ca:ae:32:df:
1b:94:e8:b7:e1:08:d7:85:28:36:bf:ad:10:93:21:0f:ed:9e:
c4:2e:f9:e2:5a:24:56:bf:7f:ab:d4:20:45:1e:7c:d2:92:02:
aa:b6:b9:6f:c8:03:1e:42:02:17:db:99:58:67:ab:91:d8:de:
6a:30:1d:89:02:cf:21:17:7d:56:c6:a4:69:5f:4d:e6:4e:f0:
fa:da:5a:72:8d:ed:30:e7:4d:d8:a3:fd:d9:44:f1:7a:fa:60:
de:01:90:a6:83:1b:b3:d5:24:87:e4:24:48:fc:de:3a:ff:52:
23:4a:9a:12:48:87:e7:2d:87:35:38:09:84:3f:08:0d:03:10:
41:87:92:54:31:01:46:f2:a2:39:5b:f4:97:80:08:03:8e:30:
7a:e9:1b:19:00:4d:d6:d5:a7:32:1a:59:43:81:1b:cd:dd:cf:
99:23:fa:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:02:16 2025 by rpki-client