Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
File: pmJGuAbomrpA5-WIiPNXZROjk0o.mft (raw, json)
Hash identifier: aeaJ5Y+pjpTyV93WmDA9uSvQJ2NdGNxZR7gP0Xal7x8=
Subject key identifier: 87:58:C0:17:DE:D0:B8:E4:7E:36:DA:C1:DC:99:A4:A8:06:97:92:ED
Authority key identifier: A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
Certificate issuer: /CN=a66246b806e89aba40e7e58888f3576513a3934a
Certificate serial: 019A7149B40C88186CD351F2BDE8C9A6CF5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
Manifest number: 1726
Signing time: Tue 11 Nov 2025 05:00:46 +0000
Manifest this update: Tue 11 Nov 2025 05:00:46 +0000
Manifest next update: Wed 12 Nov 2025 05:00:46 +0000
Files and hashes: 1: 6W6gmSc4k57Y4v5MIcHO8sDy0Nk.roa (hash: aByrM29yQlmUSgYmIxuh2nCAQIQ4+06fpCqZWYYHHbE=)
2: WwtbLNZ8w3CZaCckJBj7-wgL_Wg.roa (hash: awi9blZyXe6dA7Vb92PcI70MUj14FAGRwBheENnmVNg=)
3: pmJGuAbomrpA5-WIiPNXZROjk0o.crl (hash: HMVy5ZFG5h7Yc30toyAd7T6NrQavbUT/wTH6Ow5txug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:b4:0c:88:18:6c:d3:51:f2:bd:e8:c9:a6:cf:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66246b806e89aba40e7e58888f3576513a3934a
Validity
Not Before: Nov 11 05:00:46 2025 GMT
Not After : Nov 12 05:00:46 2025 GMT
Subject: CN=8758c017ded0b8e47e36dac1dc99a4a8069792ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:04:00:c3:50:e9:f4:92:b2:2f:4b:fc:c5:c7:
f8:62:35:e8:55:43:a5:4b:e3:4b:eb:ed:42:4b:04:
d6:d6:69:ca:ed:38:e3:41:d4:12:32:13:53:a4:5f:
f7:a1:24:db:d8:2c:2a:ac:02:77:04:cb:3f:7a:41:
7d:3b:c2:d1:e2:f2:ea:6e:e5:1e:0d:c2:8b:81:d2:
3d:bf:87:89:a5:31:e8:2c:7d:a9:88:da:9e:3c:c0:
31:fd:ac:b0:67:9e:67:9f:35:ba:e7:44:43:96:a4:
a9:bc:b4:29:01:97:27:ac:fd:d7:82:9e:65:51:da:
0e:42:4a:60:74:16:a5:54:a5:0b:85:83:b3:21:7a:
9e:08:bf:6e:a7:c4:37:c7:62:56:c1:bf:81:8e:91:
d1:20:a2:08:d3:54:16:73:44:67:e6:25:63:fc:27:
86:2a:29:c0:86:1e:96:b4:07:ee:74:f5:1b:09:c8:
0f:02:7b:d3:7f:64:e1:e0:98:d9:01:f5:b4:6d:a2:
e5:d4:0b:6a:e5:e2:f1:15:0b:17:cb:b9:49:a3:05:
18:d1:c1:b2:ae:4b:6d:03:d4:2d:e2:98:12:aa:9e:
aa:e8:cf:4c:1d:e4:79:b0:f5:3d:95:58:22:19:98:
bc:d6:2c:f9:cb:56:51:c7:c3:25:ab:bf:e1:75:8b:
e6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:58:C0:17:DE:D0:B8:E4:7E:36:DA:C1:DC:99:A4:A8:06:97:92:ED
X509v3 Authority Key Identifier:
keyid:A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:0f:04:31:64:fe:fb:bb:16:06:01:74:ed:a9:83:43:d8:eb:
d2:cb:f9:10:6a:73:9e:e5:e3:53:3a:c0:e9:0a:c4:cb:e5:1d:
4b:f5:f4:2c:ef:fa:0e:ac:9a:9f:3e:b0:33:51:5e:ea:a2:a8:
28:37:98:1e:c4:89:29:89:ad:e4:fc:69:fd:4c:10:fa:76:dd:
e4:c8:cf:ba:d6:29:7b:ba:3f:1b:33:73:9b:05:c3:06:25:71:
d0:87:35:f4:f4:06:32:03:78:13:f8:e0:6c:2c:fc:d1:7c:c4:
59:aa:1d:af:42:28:b2:0c:dd:e5:da:4e:ff:83:43:40:f0:9f:
d7:14:d1:55:e8:60:38:c9:08:c1:1c:ed:78:39:2a:dd:92:da:
9a:b5:d2:f2:a7:9a:09:a8:63:66:c9:47:a8:b7:01:e2:43:8c:
10:eb:0a:59:63:ae:ea:51:58:d3:30:0d:9f:f6:7f:23:77:a4:
7a:8d:da:1d:4c:bc:70:e3:76:f8:d4:bb:82:1e:b8:2f:36:9f:
08:f4:77:b8:60:6b:39:c5:23:ec:36:54:90:48:04:60:1f:8b:
ad:f4:22:2f:7e:51:c6:58:30:21:85:42:24:df:52:18:63:23:
8c:f0:6e:bb:13:6c:a6:b6:06:62:67:b5:da:2c:70:b6:8e:53:
44:b5:36:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:53 2025 by rpki-client