Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
File: pmJGuAbomrpA5-WIiPNXZROjk0o.mft (raw, json)
Hash identifier: Ys0NnAIEYaGN/dSn2fiP0WrwPICmSD0cr8DAPy7reJI=
Subject key identifier: 53:4D:DC:9C:C4:F9:50:09:C1:F2:EB:09:87:BE:B1:AE:74:3B:8F:2C
Authority key identifier: A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
Certificate issuer: /CN=a66246b806e89aba40e7e58888f3576513a3934a
Certificate serial: 019765163B1E3EAE743D05C01D6CC6D20987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
Manifest number: 1592
Signing time: Thu 12 Jun 2025 17:00:45 +0000
Manifest this update: Thu 12 Jun 2025 17:00:45 +0000
Manifest next update: Fri 13 Jun 2025 17:00:45 +0000
Files and hashes: 1: 6W6gmSc4k57Y4v5MIcHO8sDy0Nk.roa (hash: aByrM29yQlmUSgYmIxuh2nCAQIQ4+06fpCqZWYYHHbE=)
2: WwtbLNZ8w3CZaCckJBj7-wgL_Wg.roa (hash: awi9blZyXe6dA7Vb92PcI70MUj14FAGRwBheENnmVNg=)
3: pmJGuAbomrpA5-WIiPNXZROjk0o.crl (hash: upUkmcucYdvElssJrLN22vv/Wz/NF+5ixGN19jNA9ZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 17:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:16:3b:1e:3e:ae:74:3d:05:c0:1d:6c:c6:d2:09:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66246b806e89aba40e7e58888f3576513a3934a
Validity
Not Before: Jun 12 17:00:45 2025 GMT
Not After : Jun 13 17:00:45 2025 GMT
Subject: CN=534ddc9cc4f95009c1f2eb0987beb1ae743b8f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:05:ab:68:10:d4:be:cc:c5:38:f4:f3:4f:35:
92:35:1f:fc:bb:b3:47:53:d5:e9:e1:9e:52:1a:dc:
85:99:cf:86:8f:df:f8:75:fc:d9:6a:a6:d6:52:b2:
42:e3:38:04:8b:ac:a4:2c:a4:75:13:fd:ea:93:26:
30:38:c7:a2:b1:54:69:9f:c7:9f:3d:5c:3f:cb:81:
a3:f7:b8:c3:46:6a:20:6f:83:09:a3:18:18:19:05:
6e:14:fd:c5:16:b1:b6:4b:7e:f1:15:ff:47:dd:8c:
a1:34:d6:43:25:31:b8:7f:46:4b:e0:46:30:49:dd:
74:f8:1c:f7:25:db:83:f7:c3:8e:47:1d:2c:bd:d4:
52:22:94:19:ba:bc:a4:12:1e:66:8d:99:d5:fa:78:
f5:42:72:f6:23:00:b0:f5:92:f9:af:44:39:55:9c:
57:3d:f9:54:97:0a:28:c8:58:80:3c:97:0c:6d:20:
d4:0a:08:93:70:3d:43:7d:31:d9:34:f6:fe:24:54:
fd:64:1c:db:c4:a4:f0:dc:c8:e2:6a:d3:bc:a3:28:
6f:a3:04:a6:3a:7c:90:d1:ae:90:17:21:e3:86:da:
a3:02:ba:f0:a3:48:62:d3:d9:06:4b:75:70:b0:48:
8d:0b:5a:d4:17:48:23:f4:62:7b:79:d6:81:bd:46:
f7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:4D:DC:9C:C4:F9:50:09:C1:F2:EB:09:87:BE:B1:AE:74:3B:8F:2C
X509v3 Authority Key Identifier:
keyid:A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:df:26:ad:9b:c7:02:82:96:b5:9d:5c:09:37:d5:ef:29:03:
d5:35:e6:81:d4:5e:bb:38:ac:ba:7e:55:80:8d:18:5d:64:da:
02:86:84:65:67:cb:45:57:26:ba:55:ea:3f:ea:1f:72:ba:27:
56:af:9b:a4:44:12:18:13:7c:87:0f:57:e6:9f:fa:f0:4e:c9:
20:ab:76:68:e0:40:6f:a3:a9:7f:07:cc:1d:d8:2d:c7:93:ec:
16:33:ae:0c:4a:96:9a:56:1f:c6:70:7a:6a:7d:df:b9:5c:a4:
8d:f2:b4:94:3c:78:5a:60:de:71:73:9c:71:42:9e:a9:4b:72:
87:a8:ad:ea:43:be:ff:5d:4c:18:4d:52:dc:59:81:11:91:0e:
37:a5:46:b6:2c:12:5b:c4:0b:97:d2:d9:c1:39:1e:4c:a6:f5:
b8:9c:b4:3d:a6:18:35:40:a5:74:31:73:93:3f:45:fc:05:55:
57:db:c8:4b:64:31:df:ee:5a:b1:36:95:ba:49:f8:ea:89:59:
35:47:df:ea:8e:81:32:c2:da:00:6a:56:a9:26:67:a3:a5:13:
96:b8:28:9b:8b:e5:df:dc:cf:64:66:ea:97:ed:70:91:55:c4:
c3:41:f5:a7:66:20:2d:66:0c:a3:ec:06:ea:f2:15:8a:44:bc:
fe:21:10:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdlFjsePq50PQXAHWzG0gmHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NjI0NmI4MDZlODlhYmE0MGU3ZTU4ODg4ZjM1NzY1MTNh
MzkzNGEwHhcNMjUwNjEyMTcwMDQ1WhcNMjUwNjEzMTcwMDQ1WjAzMTEwLwYDVQQD
Eyg1MzRkZGM5Y2M0Zjk1MDA5YzFmMmViMDk4N2JlYjFhZTc0M2I4ZjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQWraBDUvszFOPTzTzWSNR/8u7NH
U9Xp4Z5SGtyFmc+Gj9/4dfzZaqbWUrJC4zgEi6ykLKR1E/3qkyYwOMeisVRpn8ef
PVw/y4Gj97jDRmogb4MJoxgYGQVuFP3FFrG2S37xFf9H3YyhNNZDJTG4f0ZL4EYw
Sd10+Bz3JduD98OORx0svdRSIpQZurykEh5mjZnV+nj1QnL2IwCw9ZL5r0Q5VZxX
PflUlwooyFiAPJcMbSDUCgiTcD1DfTHZNPb+JFT9ZBzbxKTw3MjiatO8oyhvowSm
OnyQ0a6QFyHjhtqjArrwo0hi09kGS3VwsEiNC1rUF0gj9GJ7edaBvUb3BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNN3JzE+VAJwfLrCYe+sa50O48sMB8GA1UdIwQY
MBaAFKZiRrgG6Jq6QOfliIjzV2UTo5NKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcG1KR3VBYm9tcnBBNS1XSWlQTlhaUk9qazBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81NTUyMjEtMDAwZC00OWY2LTgzMzUt
NGZkMjhjNjYxOWFlLzEvcG1KR3VBYm9tcnBBNS1XSWlQTlhaUk9qazBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC81NTUyMjEtMDAwZC00OWY2LTgzMzUtNGZkMjhjNjYxOWFl
LzEvcG1KR3VBYm9tcnBBNS1XSWlQTlhaUk9qazBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGN8mrZvH
AoKWtZ1cCTfV7ykD1TXmgdReuzisun5VgI0YXWTaAoaEZWfLRVcmulXqP+ofcron
Vq+bpEQSGBN8hw9X5p/68E7JIKt2aOBAb6OpfwfMHdgtx5PsFjOuDEqWmlYfxnB6
an3fuVykjfK0lDx4WmDecXOccUKeqUtyh6it6kO+/11MGE1S3FmBEZEON6VGtiwS
W8QLl9LZwTkeTKb1uJy0PaYYNUCldDFzkz9F/AVVV9vIS2Qx3+5asTaVukn46olZ
NUff6o6BMsLaAGpWqSZno6UTlrgom4vl39zPZGbql+1wkVXEw0H1p2YgLWYMo+wG
6vIVikS8/iEQLQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 03:23:39 2025 by rpki-client