Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
File: pmJGuAbomrpA5-WIiPNXZROjk0o.mft (raw, json)
Hash identifier: kmqVxV4TdS89TZa/7ss552A4MlAUtpj5/bxZBmboTww=
Subject key identifier: 0B:A0:5C:2D:4A:37:F3:E7:F1:87:F4:B6:22:9C:72:9D:FC:93:26:D0
Authority key identifier: A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
Certificate issuer: /CN=a66246b806e89aba40e7e58888f3576513a3934a
Certificate serial: 019648C56A369341921C729A559A34E881C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
Manifest number: 14FE
Signing time: Fri 18 Apr 2025 12:00:19 +0000
Manifest this update: Fri 18 Apr 2025 12:00:19 +0000
Manifest next update: Sat 19 Apr 2025 12:00:19 +0000
Files and hashes: 1: WwtbLNZ8w3CZaCckJBj7-wgL_Wg.roa (hash: awi9blZyXe6dA7Vb92PcI70MUj14FAGRwBheENnmVNg=)
2: XX7w2vPpzXRFuwUhQden5lCVCZQ.roa (hash: qufImvpEF3c9wVcCzVpZb6bGNeux1RbSpnlxjWKOWAA=)
3: pmJGuAbomrpA5-WIiPNXZROjk0o.crl (hash: 7ILOY54RvJWJyv/m3Kb/jrf7JpmRwxRRsQuqBTIOw4A=)
4: wR0fHEzjCHCPZPB5JGzxge-3qdE.roa (hash: Ll5NNx6rg9HE4x/GGGYOGCvVW3eD8cnr/rDcbdSk/qU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:c5:6a:36:93:41:92:1c:72:9a:55:9a:34:e8:81:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66246b806e89aba40e7e58888f3576513a3934a
Validity
Not Before: Apr 18 12:00:19 2025 GMT
Not After : Apr 19 12:00:19 2025 GMT
Subject: CN=0ba05c2d4a37f3e7f187f4b6229c729dfc9326d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ca:7b:bc:06:29:d8:75:c0:2d:4e:4e:2f:bf:
10:36:f6:9d:6c:b1:3c:26:8b:c6:04:98:70:1e:48:
a2:15:dd:b0:85:be:db:c0:0a:b4:af:f9:bc:45:62:
09:92:ae:1f:fd:c7:ff:e0:8a:47:43:f5:87:66:b8:
03:4e:a3:e6:b7:a3:8f:b9:52:a5:8f:43:d4:8b:1e:
0f:c8:4c:33:87:c7:c9:24:e0:d8:fa:fa:13:31:3d:
98:e8:10:85:73:a5:7d:00:e9:c8:49:85:c0:66:57:
e2:fd:bd:65:93:46:a6:e8:6a:44:96:fc:28:44:a6:
6c:31:ef:fa:e3:e6:94:9f:f7:c2:c1:7a:3f:21:34:
ab:b9:1d:5c:d4:84:f8:9c:64:4a:ef:43:e5:f3:25:
2e:a6:23:d4:ed:28:f9:87:a0:45:f8:85:23:a8:27:
1c:76:b5:e4:64:66:f2:c8:9f:fe:d5:0a:5d:0f:72:
40:7d:c5:29:5e:22:69:7c:24:67:1a:af:ca:fd:7f:
2d:7a:b5:96:5a:cf:44:24:fe:c1:79:d8:f4:a0:c3:
69:12:ae:3d:9e:da:70:1a:77:0c:54:7a:97:35:f2:
78:9b:7d:53:dc:68:db:84:86:a8:78:35:5b:9b:39:
34:25:d8:10:de:2c:ea:a2:6b:56:63:60:bf:3b:79:
53:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A0:5C:2D:4A:37:F3:E7:F1:87:F4:B6:22:9C:72:9D:FC:93:26:D0
X509v3 Authority Key Identifier:
keyid:A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e0:1c:8e:d9:f3:d6:4d:a9:5a:f3:d4:c6:a6:d9:87:35:41:
1e:d5:10:e1:fe:3f:64:12:04:c6:39:61:8e:e3:64:b7:9e:c9:
30:86:58:04:1b:ba:44:6d:0a:54:6b:ab:f1:27:b7:55:02:9e:
21:de:4c:8a:73:ed:dd:9c:42:9d:56:32:0e:54:6d:88:b4:c7:
0e:01:11:b7:d3:0b:be:78:f1:68:63:05:d8:c9:08:f8:48:d9:
29:29:45:8f:2c:17:61:cd:1a:2f:5c:ac:a3:5a:67:63:cf:3b:
71:26:43:f0:f4:e5:92:6b:4b:e8:3f:da:46:ba:3f:36:be:91:
2a:3d:52:55:11:a6:b4:88:d4:ea:66:37:44:fc:8d:be:e4:4c:
96:2b:c8:08:a0:fc:80:10:85:e6:5b:59:c0:97:8a:91:80:9a:
90:80:07:da:aa:74:11:0e:06:ae:11:3e:48:77:94:03:e4:57:
77:54:8b:1a:4a:ba:fd:cd:10:51:93:87:53:9d:db:29:ae:36:
ba:91:89:93:ee:4f:5e:66:a1:16:31:34:1e:8b:25:34:57:de:
03:5a:75:2c:b9:ab:16:5f:f5:1f:7d:f6:22:10:8e:c7:3d:c7:
f1:f9:f0:0a:c1:ff:1a:a3:1f:3d:df:97:94:84:01:78:89:6d:
83:a6:58:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 18:08:13 2025 by rpki-client