Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
File: pmJGuAbomrpA5-WIiPNXZROjk0o.mft (raw, json)
Hash identifier: Ag2kA0un0IM27uRIoiwnmF31pTJC7/2zF995Pun7XVM=
Subject key identifier: DD:AB:53:42:C9:2C:79:70:2A:62:0F:AA:A3:17:56:A7:65:4E:09:2D
Authority key identifier: A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
Certificate issuer: /CN=a66246b806e89aba40e7e58888f3576513a3934a
Certificate serial: 01975B6DFDFF05D6BF21B9AEF5140D2AE16B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
Manifest number: 158D
Signing time: Tue 10 Jun 2025 20:00:24 +0000
Manifest this update: Tue 10 Jun 2025 20:00:24 +0000
Manifest next update: Wed 11 Jun 2025 20:00:24 +0000
Files and hashes: 1: 6W6gmSc4k57Y4v5MIcHO8sDy0Nk.roa (hash: aByrM29yQlmUSgYmIxuh2nCAQIQ4+06fpCqZWYYHHbE=)
2: WwtbLNZ8w3CZaCckJBj7-wgL_Wg.roa (hash: awi9blZyXe6dA7Vb92PcI70MUj14FAGRwBheENnmVNg=)
3: pmJGuAbomrpA5-WIiPNXZROjk0o.crl (hash: 1iRAy05ITJOFAoUITVw1TLoZ2Q4Lw7aHT42r8FPf+8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:6d:fd:ff:05:d6:bf:21:b9:ae:f5:14:0d:2a:e1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66246b806e89aba40e7e58888f3576513a3934a
Validity
Not Before: Jun 10 20:00:24 2025 GMT
Not After : Jun 11 20:00:24 2025 GMT
Subject: CN=ddab5342c92c79702a620faaa31756a7654e092d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9a:82:92:cc:0f:30:fa:51:ec:1e:b3:ff:1a:
f1:8a:0b:f9:98:c2:71:90:80:5e:52:53:71:7e:e9:
84:70:b6:e2:94:e9:55:89:d8:27:08:ca:e1:aa:41:
da:de:48:ef:72:5e:97:74:9a:87:72:ae:69:d9:77:
1c:a4:c7:9c:51:ef:8f:3f:76:13:2b:03:c6:15:e5:
af:23:7d:1b:24:73:e2:34:48:0f:8b:bf:52:12:19:
16:71:a1:80:15:a3:99:0d:6b:bc:5b:72:89:3f:69:
45:1a:59:80:6c:b6:5f:b8:2a:e3:94:c2:b5:0b:45:
67:7e:18:e6:80:aa:b8:9a:0a:c3:78:c4:62:39:4d:
da:7a:a8:a3:99:dc:f4:55:ac:81:16:fd:ad:52:45:
3b:65:23:bc:f5:53:f0:7e:84:af:e5:c0:c4:d2:05:
f6:1f:b4:86:af:c0:ea:90:20:2b:38:74:57:af:f8:
4b:9b:67:0c:ad:d2:bd:e2:dc:f5:f4:4d:c2:e5:e5:
b0:e8:f6:83:9e:7c:8b:b1:fb:4a:3d:36:a9:2d:b0:
8e:fe:90:8e:a6:2f:35:10:17:0c:9b:0b:9c:0e:fe:
ec:cd:b2:bf:93:f4:85:69:f4:7a:d0:43:da:84:85:
41:3c:51:d2:3b:28:02:01:5f:b1:ae:dc:20:46:46:
52:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AB:53:42:C9:2C:79:70:2A:62:0F:AA:A3:17:56:A7:65:4E:09:2D
X509v3 Authority Key Identifier:
keyid:A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ee:1d:1b:5a:a0:36:ae:39:aa:3d:a7:da:e0:2e:1f:b1:8d:
84:b1:b3:a2:cb:55:eb:33:ab:2b:c1:48:df:a8:30:e4:a6:d5:
0b:7b:d5:70:24:8a:b0:52:64:b2:cf:d9:16:df:7f:3a:e1:af:
29:02:b5:53:b2:40:f0:64:ad:32:a6:90:52:c9:0b:1c:ac:9a:
7c:1b:be:7d:28:25:08:e6:4f:1f:1f:7c:b9:14:77:b9:57:06:
95:36:05:0a:95:e5:ee:cf:53:34:e7:1c:9e:3d:b3:f8:a3:7a:
37:92:36:b0:a8:a9:f0:aa:c4:a9:16:06:cd:c4:b6:ae:a8:55:
5d:e3:d9:40:bd:8d:a9:8d:0d:a5:86:4a:15:86:4d:57:4b:06:
0e:90:d5:3b:e7:98:02:4c:f5:e8:21:b3:3b:34:4a:ec:c0:27:
ad:9d:13:63:b6:83:14:ed:9b:0e:4b:67:92:23:9d:e0:26:76:
b6:e7:40:d1:ff:50:d2:ea:d1:69:a6:4b:c8:c1:82:7a:e5:bb:
22:89:39:df:f9:d0:0d:19:35:ec:b1:53:1c:ee:08:0d:6f:7e:
74:61:de:5e:74:13:28:38:d9:5b:5b:86:2f:76:f3:b2:4d:d7:
a7:c3:1d:28:08:f1:3d:ca:db:86:a1:a7:51:fd:b6:41:d2:76:
1a:49:b1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 04:44:23 2025 by rpki-client