Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
File: pmJGuAbomrpA5-WIiPNXZROjk0o.mft (raw, json)
Hash identifier: LkBvIIcpLv9OMIwDScygJzhYkuVKtuXm7yn3I9Qu+Ho=
Subject key identifier: 0C:15:2C:88:F0:F5:D2:51:0D:5A:01:66:62:06:2B:A3:52:F1:D1:9D
Authority key identifier: A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
Certificate issuer: /CN=a66246b806e89aba40e7e58888f3576513a3934a
Certificate serial: 01992330E0FA01A1835CB5163FC343457D1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
Manifest number: 1679
Signing time: Sun 07 Sep 2025 08:00:29 +0000
Manifest this update: Sun 07 Sep 2025 08:00:29 +0000
Manifest next update: Mon 08 Sep 2025 08:00:29 +0000
Files and hashes: 1: 6W6gmSc4k57Y4v5MIcHO8sDy0Nk.roa (hash: aByrM29yQlmUSgYmIxuh2nCAQIQ4+06fpCqZWYYHHbE=)
2: WwtbLNZ8w3CZaCckJBj7-wgL_Wg.roa (hash: awi9blZyXe6dA7Vb92PcI70MUj14FAGRwBheENnmVNg=)
3: pmJGuAbomrpA5-WIiPNXZROjk0o.crl (hash: 6xDUiWv/SLrHUtDsBnVTndZRwdMJA3gr8N+pwM/Owgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:e0:fa:01:a1:83:5c:b5:16:3f:c3:43:45:7d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66246b806e89aba40e7e58888f3576513a3934a
Validity
Not Before: Sep 7 08:00:29 2025 GMT
Not After : Sep 8 08:00:29 2025 GMT
Subject: CN=0c152c88f0f5d2510d5a016662062ba352f1d19d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cf:7d:78:dd:d5:c8:d6:01:6c:6c:44:27:57:
29:6a:5d:b9:0e:ee:35:b2:f2:ef:a3:5d:05:85:a6:
f7:2c:c0:44:48:2f:bd:be:5b:de:bf:5d:b4:13:09:
ee:57:19:84:eb:30:a0:a6:70:67:a0:67:91:98:62:
96:d8:7a:83:e5:4d:f9:a9:6d:b6:42:93:17:69:5e:
d9:f9:19:b1:5f:ce:6c:13:b8:66:84:ab:25:5a:3b:
d4:26:23:c0:fa:28:fc:43:63:d5:21:bf:63:f2:e4:
04:7a:60:55:91:c7:a1:dd:63:1e:a7:bc:47:05:45:
f1:26:ba:8d:25:e2:87:d7:a6:78:fb:44:40:bf:af:
bd:0e:ad:04:08:98:bd:93:4d:db:e3:8f:07:a0:e7:
4e:da:cb:f5:4d:88:48:b8:e7:4b:53:6a:fa:c6:bd:
7b:15:b0:03:3b:24:af:2f:26:74:a2:d1:c1:74:2f:
7b:7a:be:a3:b7:bc:d0:18:69:41:4e:b8:34:7c:3b:
d9:e5:4b:c0:bc:19:2b:08:54:88:c9:f5:49:a0:4d:
42:3b:e3:e5:07:a8:79:92:fc:fe:41:ee:e6:7e:dd:
84:af:c8:34:21:f6:fd:7b:cc:9f:42:fe:27:c1:c4:
e2:55:9f:d3:9b:22:45:98:9b:f4:46:18:a0:14:ff:
56:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:15:2C:88:F0:F5:D2:51:0D:5A:01:66:62:06:2B:A3:52:F1:D1:9D
X509v3 Authority Key Identifier:
keyid:A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:4b:7e:e6:91:b8:ec:66:78:ac:94:80:a5:2d:d1:33:46:8d:
09:1d:3a:fb:3b:73:a3:2a:d5:bb:8b:09:e6:28:46:77:e4:22:
a8:1e:d2:9c:f5:b1:5b:72:dd:82:b8:60:3e:54:8a:92:af:1d:
8f:70:5a:9c:6e:d3:da:e6:0d:ec:a7:b9:79:9d:d1:c5:42:1e:
63:04:fd:79:d0:46:ab:be:13:8e:b5:f8:07:3a:1a:79:11:0b:
c4:58:10:71:46:66:f5:e6:3a:6f:bf:c9:b0:00:56:dc:0e:cd:
fb:8b:53:bc:79:93:28:ca:62:56:ae:b6:2f:2d:e0:97:0f:be:
76:53:90:62:23:ea:c8:67:71:12:32:48:77:7b:e4:8e:7b:c5:
17:a6:a6:df:2c:2c:8e:4b:88:c0:24:89:a2:15:c8:22:f7:28:
05:1d:50:d8:ca:f0:c3:2a:bc:dc:31:c9:e8:1f:ab:4e:1b:d8:
61:ff:56:0a:eb:af:70:ea:c4:37:b1:07:d8:2a:34:82:5c:cc:
fb:ba:b0:25:5d:cd:54:a2:4f:ec:d6:5e:94:ee:69:d2:78:9a:
04:9b:c0:7f:8c:52:80:b8:9a:c6:99:99:e4:1d:e8:02:67:5c:
16:35:e9:1e:0d:a5:39:53:10:a8:52:5a:4a:dd:a2:6b:2a:2f:
8a:30:ab:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMOD6AaGDXLUWP8NDRX0bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NjI0NmI4MDZlODlhYmE0MGU3ZTU4ODg4ZjM1NzY1MTNh
MzkzNGEwHhcNMjUwOTA3MDgwMDI5WhcNMjUwOTA4MDgwMDI5WjAzMTEwLwYDVQQD
EygwYzE1MmM4OGYwZjVkMjUxMGQ1YTAxNjY2MjA2MmJhMzUyZjFkMTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmM99eN3VyNYBbGxEJ1cpal25Du41
svLvo10Fhab3LMBESC+9vlvev120EwnuVxmE6zCgpnBnoGeRmGKW2HqD5U35qW22
QpMXaV7Z+RmxX85sE7hmhKslWjvUJiPA+ij8Q2PVIb9j8uQEemBVkceh3WMep7xH
BUXxJrqNJeKH16Z4+0RAv6+9Dq0ECJi9k03b448HoOdO2sv1TYhIuOdLU2r6xr17
FbADOySvLyZ0otHBdC97er6jt7zQGGlBTrg0fDvZ5UvAvBkrCFSIyfVJoE1CO+Pl
B6h5kvz+Qe7mft2Er8g0Ifb9e8yfQv4nwcTiVZ/TmyJFmJv0RhigFP9W0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwVLIjw9dJRDVoBZmIGK6NS8dGdMB8GA1UdIwQY
MBaAFKZiRrgG6Jq6QOfliIjzV2UTo5NKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcG1KR3VBYm9tcnBBNS1XSWlQTlhaUk9qazBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81NTUyMjEtMDAwZC00OWY2LTgzMzUt
NGZkMjhjNjYxOWFlLzEvcG1KR3VBYm9tcnBBNS1XSWlQTlhaUk9qazBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC81NTUyMjEtMDAwZC00OWY2LTgzMzUtNGZkMjhjNjYxOWFl
LzEvcG1KR3VBYm9tcnBBNS1XSWlQTlhaUk9qazBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQUt+5pG4
7GZ4rJSApS3RM0aNCR06+ztzoyrVu4sJ5ihGd+QiqB7SnPWxW3LdgrhgPlSKkq8d
j3BanG7T2uYN7Ke5eZ3RxUIeYwT9edBGq74TjrX4BzoaeRELxFgQcUZm9eY6b7/J
sABW3A7N+4tTvHmTKMpiVq62Ly3glw++dlOQYiPqyGdxEjJId3vkjnvFF6am3yws
jkuIwCSJohXIIvcoBR1Q2Mrwwyq83DHJ6B+rThvYYf9WCuuvcOrEN7EH2Co0glzM
+7qwJV3NVKJP7NZelO5p0niaBJvAf4xSgLiaxpmZ5B3oAmdcFjXpHg2lOVMQqFJa
St2iayovijCr9Q==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:27:03 2025 by rpki-client