Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
File: pmJGuAbomrpA5-WIiPNXZROjk0o.mft (raw, json)
Hash identifier: QG1fdXoMys/EvHmLhderON0PoB2omQwKsvgLKOsebSU=
Subject key identifier: 30:47:8E:06:E5:61:BE:55:F0:16:C3:FD:6E:63:58:F6:29:9C:5B:7A
Authority key identifier: A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
Certificate issuer: /CN=a66246b806e89aba40e7e58888f3576513a3934a
Certificate serial: 019768F325F62BBCD25BCDAE9CEA46272961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
Manifest number: 1594
Signing time: Fri 13 Jun 2025 11:00:54 +0000
Manifest this update: Fri 13 Jun 2025 11:00:54 +0000
Manifest next update: Sat 14 Jun 2025 11:00:54 +0000
Files and hashes: 1: 6W6gmSc4k57Y4v5MIcHO8sDy0Nk.roa (hash: aByrM29yQlmUSgYmIxuh2nCAQIQ4+06fpCqZWYYHHbE=)
2: WwtbLNZ8w3CZaCckJBj7-wgL_Wg.roa (hash: awi9blZyXe6dA7Vb92PcI70MUj14FAGRwBheENnmVNg=)
3: pmJGuAbomrpA5-WIiPNXZROjk0o.crl (hash: 1xT21GBVwGZFSuoqRlPMj7odY6vWRbl+I+52rithh1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f3:25:f6:2b:bc:d2:5b:cd:ae:9c:ea:46:27:29:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66246b806e89aba40e7e58888f3576513a3934a
Validity
Not Before: Jun 13 11:00:54 2025 GMT
Not After : Jun 14 11:00:54 2025 GMT
Subject: CN=30478e06e561be55f016c3fd6e6358f6299c5b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:41:d8:ea:1e:a6:03:f2:e9:df:ce:94:ff:16:
b3:47:bc:91:d0:f9:9a:22:77:89:21:ea:59:25:66:
a6:83:03:5f:c9:fc:fe:9f:c3:f1:51:f1:06:d2:a1:
90:4b:6e:66:c0:26:ad:27:6f:59:f0:82:8f:a9:75:
c1:42:03:1e:e4:e9:a7:c5:aa:2d:05:77:05:0c:94:
40:04:22:0d:33:79:cf:82:f4:de:98:a4:a8:9b:69:
39:b2:47:2b:66:a5:c0:5e:c0:75:d2:6d:5c:02:dd:
ed:60:69:80:ea:0b:e6:02:91:b3:8b:87:73:a4:2d:
53:f5:0f:5e:0b:cc:fd:f2:96:1b:c7:ad:1d:b1:6a:
51:4d:7d:dd:08:45:c9:bc:82:4e:4c:4a:10:e3:6c:
40:3a:b9:49:d6:ba:ce:a2:f3:ff:18:1b:28:9b:1b:
f0:7c:ef:e2:91:71:e3:a6:bb:d4:b0:b9:e3:ec:5e:
ea:49:4e:88:a1:f2:f3:b1:9a:e0:c7:55:c3:17:f8:
9a:6c:32:ca:74:0b:ec:ba:eb:35:31:f5:ca:d8:e8:
4f:9c:79:e5:c1:4d:da:9f:ff:ba:5b:85:c1:64:eb:
03:17:38:35:11:a6:e6:ce:cf:c7:26:5c:4c:e3:7f:
ab:61:03:54:88:1b:ba:02:a9:59:08:30:93:50:40:
d8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:47:8E:06:E5:61:BE:55:F0:16:C3:FD:6E:63:58:F6:29:9C:5B:7A
X509v3 Authority Key Identifier:
keyid:A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:5d:d8:79:de:e0:61:72:55:ba:18:72:cf:f1:5f:79:c8:ff:
e7:8e:87:f0:9d:4d:eb:86:dd:dd:d4:62:2b:8f:a8:f4:1f:f8:
29:50:7d:40:3b:a7:54:f9:12:21:ea:a8:64:eb:72:ca:52:56:
f1:6e:40:5f:24:ae:6f:15:51:6a:3a:6f:77:2b:4b:b2:e3:5f:
2c:f1:74:fe:39:53:5d:4c:23:24:23:6b:2d:12:f2:83:a4:4b:
36:e9:8d:9e:61:ef:b1:b6:30:85:5c:fd:df:28:7e:1c:16:c3:
0d:70:7f:47:44:6d:db:a2:80:61:ff:3d:af:15:ef:5d:0c:57:
6b:ba:c4:c0:5f:a9:82:fb:39:bf:8e:de:cd:0e:88:2d:7a:b2:
ad:58:02:f6:d1:f1:01:bb:32:22:48:9f:e4:6d:ee:92:cf:33:
12:f0:43:5b:07:e4:46:21:55:ab:a8:6b:a3:3f:03:62:0f:e5:
c7:47:0b:d3:1f:2c:b1:90:57:38:4c:0b:cb:47:f3:ef:1a:2a:
f2:0e:6d:73:e6:20:28:1a:68:44:af:e3:43:c6:43:13:ef:09:
a8:ab:c9:aa:f0:13:cb:bf:0d:48:53:e2:0b:9a:f5:bc:11:09:
32:32:c1:6c:85:02:4c:26:b8:5c:05:3f:49:48:1c:0f:14:20:
47:27:8a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 13:00:20 2025 by rpki-client