Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
File: pk-mS7PC3keIMGMSxlLedJ7JNRc.mft (raw, json)
Hash identifier: HE+QtSw7RInGQ4zbLkQiblCcbWwoR7ZUrefYGl2o2CM=
Subject key identifier: 89:DA:47:17:46:EE:DE:B8:6B:8D:AD:FE:2C:1B:E7:E2:08:23:9E:FC
Authority key identifier: A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
Certificate issuer: /CN=a64fa64bb3c2de4788306312c652de749ec93517
Certificate serial: 0197488CCA4CC8EBDD33284AB2CD75B8CF3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
Manifest number: 0EBB
Signing time: Sat 07 Jun 2025 04:01:15 +0000
Manifest this update: Sat 07 Jun 2025 04:01:15 +0000
Manifest next update: Sun 08 Jun 2025 04:01:15 +0000
Files and hashes: 1: DGbM08ZTsAqYw2-cwkwYARO53tE.roa (hash: vRmKPjIDxHKM6g2DoHk9sDKKAGwsNzCt7i6bkh/HxXk=)
2: pk-mS7PC3keIMGMSxlLedJ7JNRc.crl (hash: bF8cKJVF28eiDr+MJ8nKpIekYVJ49JtIxHRnMR0X23Q=)
3: rXPM57-D6wTVhLckZD7CZVwkBW8.roa (hash: fUjK4fhETtHvQdYsLgWmfiWiFboo/MkwlvPD3alJWYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:ca:4c:c8:eb:dd:33:28:4a:b2:cd:75:b8:cf:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a64fa64bb3c2de4788306312c652de749ec93517
Validity
Not Before: Jun 7 04:01:15 2025 GMT
Not After : Jun 8 04:01:15 2025 GMT
Subject: CN=89da471746eedeb86b8dadfe2c1be7e208239efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:05:d7:ed:e0:39:db:62:4d:c5:13:f4:55:c5:
5c:0d:e5:c2:99:cd:64:a9:b7:1a:c0:02:5f:b6:ab:
14:bc:c7:8c:4a:e1:1a:80:37:20:65:c8:a6:0a:c4:
57:f6:89:ff:e4:28:1a:70:e8:58:56:68:ed:78:dc:
86:d7:e8:27:48:b4:75:fb:eb:58:b9:1f:68:fd:ac:
65:32:98:09:03:dd:7b:9f:b2:5f:18:6f:6a:c5:df:
db:fd:ed:7b:a4:4b:f7:a4:b9:ab:58:46:9d:fb:d5:
64:3c:a4:02:2d:f6:ba:30:1f:83:5a:ca:3b:10:8d:
96:f9:00:c0:7a:51:47:cd:f2:73:d6:5d:06:47:79:
97:a6:37:96:28:ae:5c:1b:5a:8b:58:d8:96:5d:39:
8d:a4:a4:ee:78:8e:8a:85:14:47:99:11:81:e9:7e:
fc:2f:bd:d3:3f:b6:f3:22:ca:3a:39:14:0a:51:39:
8d:db:f8:aa:d0:cf:f7:6e:87:bc:d8:21:cf:b5:4b:
c0:75:c6:10:4a:bc:27:c3:00:26:c1:c0:f1:7c:a5:
8e:50:38:de:1a:94:ea:bf:77:f8:c7:ce:11:95:a0:
6d:37:b1:74:fb:ff:79:e8:2e:31:c0:46:5b:8d:66:
7c:28:6e:9b:dc:9f:44:81:f3:c8:3a:c3:45:ee:48:
3f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DA:47:17:46:EE:DE:B8:6B:8D:AD:FE:2C:1B:E7:E2:08:23:9E:FC
X509v3 Authority Key Identifier:
keyid:A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:22:fb:f9:5b:5b:01:c4:7b:db:4a:1a:3b:99:db:8b:50:25:
fb:9d:07:aa:ea:95:e2:6f:6e:af:df:6b:1c:60:f5:61:ce:d0:
4c:ca:e5:98:e2:54:11:2a:79:3c:5d:84:53:31:ba:31:22:7d:
5c:70:92:c5:fc:98:95:dd:d2:06:52:f0:73:34:97:08:81:12:
db:eb:f2:e4:c4:9c:d0:30:53:db:80:ef:59:00:f2:7a:7b:db:
07:4d:2d:5a:ae:d4:f3:77:62:c2:b9:39:aa:88:e6:c0:9c:c3:
d0:c3:b8:a4:81:35:a5:cf:49:11:01:8c:85:c3:e2:90:ca:e3:
61:24:55:f8:da:f5:4a:08:18:67:a1:fc:a0:00:59:1a:6d:2d:
f9:99:a0:8f:e0:b2:76:57:c1:a9:df:f4:70:52:53:16:bc:a3:
a9:b7:b9:c9:05:dc:a9:ac:c0:d4:42:0d:3f:0a:e8:97:3c:e2:
c4:39:84:b4:dc:bb:ab:fa:21:ba:d2:f9:a8:7d:c8:7f:aa:ec:
41:9a:50:60:9e:ba:ea:56:38:69:e1:fc:f0:c4:db:95:d0:72:
e1:87:80:7a:76:6c:f3:ea:95:40:ed:9f:64:15:9d:e9:41:78:
c7:d4:aa:90:f0:c9:a7:5f:2e:f0:6a:d1:9d:00:aa:c3:73:1e:
35:3a:40:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjMpMyOvdMyhKss11uM87MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NGZhNjRiYjNjMmRlNDc4ODMwNjMxMmM2NTJkZTc0OWVj
OTM1MTcwHhcNMjUwNjA3MDQwMTE1WhcNMjUwNjA4MDQwMTE1WjAzMTEwLwYDVQQD
Eyg4OWRhNDcxNzQ2ZWVkZWI4NmI4ZGFkZmUyYzFiZTdlMjA4MjM5ZWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAXX7eA522JNxRP0VcVcDeXCmc1k
qbcawAJftqsUvMeMSuEagDcgZcimCsRX9on/5CgacOhYVmjteNyG1+gnSLR1++tY
uR9o/axlMpgJA917n7JfGG9qxd/b/e17pEv3pLmrWEad+9VkPKQCLfa6MB+DWso7
EI2W+QDAelFHzfJz1l0GR3mXpjeWKK5cG1qLWNiWXTmNpKTueI6KhRRHmRGB6X78
L73TP7bzIso6ORQKUTmN2/iq0M/3boe82CHPtUvAdcYQSrwnwwAmwcDxfKWOUDje
GpTqv3f4x84RlaBtN7F0+/956C4xwEZbjWZ8KG6b3J9EgfPIOsNF7kg/wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFInaRxdG7t64a42t/iwb5+III578MB8GA1UdIwQY
MBaAFKZPpkuzwt5HiDBjEsZS3nSeyTUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGstbVM3UEMza2VJTUdNU3hsTGVkSjdKTlJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80MjdkYjItYzYxMy00ZTg0LWIzOGMt
OTA1NjliYzZjYTU0LzEvcGstbVM3UEMza2VJTUdNU3hsTGVkSjdKTlJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80MjdkYjItYzYxMy00ZTg0LWIzOGMtOTA1NjliYzZjYTU0
LzEvcGstbVM3UEMza2VJTUdNU3hsTGVkSjdKTlJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARyL7+Vtb
AcR720oaO5nbi1Al+50HquqV4m9ur99rHGD1Yc7QTMrlmOJUESp5PF2EUzG6MSJ9
XHCSxfyYld3SBlLwczSXCIES2+vy5MSc0DBT24DvWQDyenvbB00tWq7U83diwrk5
qojmwJzD0MO4pIE1pc9JEQGMhcPikMrjYSRV+Nr1SggYZ6H8oABZGm0t+Zmgj+Cy
dlfBqd/0cFJTFryjqbe5yQXcqazA1EINPwrolzzixDmEtNy7q/ohutL5qH3If6rs
QZpQYJ666lY4aeH88MTbldBy4YeAenZs8+qVQO2fZBWd6UF4x9SqkPDJp18u8GrR
nQCqw3MeNTpAvw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:46:27 2025 by rpki-client