Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
File: pmJGuAbomrpA5-WIiPNXZROjk0o.mft (raw, json)
Hash identifier: tAH1Q5VQg+/rbP2Ad7JZOMwREIOKRFE6R8PXxYC0z64=
Subject key identifier: F2:80:15:55:16:59:27:53:D3:B8:B6:B6:A3:D7:2F:E5:71:9D:F8:9B
Authority key identifier: A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
Certificate issuer: /CN=a66246b806e89aba40e7e58888f3576513a3934a
Certificate serial: 01975F4AE277B32565415B3F512E7C322F96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
Manifest number: 158F
Signing time: Wed 11 Jun 2025 14:00:32 +0000
Manifest this update: Wed 11 Jun 2025 14:00:32 +0000
Manifest next update: Thu 12 Jun 2025 14:00:32 +0000
Files and hashes: 1: 6W6gmSc4k57Y4v5MIcHO8sDy0Nk.roa (hash: aByrM29yQlmUSgYmIxuh2nCAQIQ4+06fpCqZWYYHHbE=)
2: WwtbLNZ8w3CZaCckJBj7-wgL_Wg.roa (hash: awi9blZyXe6dA7Vb92PcI70MUj14FAGRwBheENnmVNg=)
3: pmJGuAbomrpA5-WIiPNXZROjk0o.crl (hash: xZxwOoF2GJwq4cDNAWNUlWiImiEOe3D6/HatY7lJ2Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:4a:e2:77:b3:25:65:41:5b:3f:51:2e:7c:32:2f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66246b806e89aba40e7e58888f3576513a3934a
Validity
Not Before: Jun 11 14:00:32 2025 GMT
Not After : Jun 12 14:00:32 2025 GMT
Subject: CN=f280155516592753d3b8b6b6a3d72fe5719df89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6f:4d:64:46:54:c6:0b:4c:e8:6c:41:65:f5:
f6:27:3d:a4:26:ca:ce:d0:e6:20:17:9d:77:00:2d:
da:c3:c9:27:0e:41:f6:c0:50:03:a4:7e:4d:9b:46:
13:1f:b8:15:0d:8d:3f:00:85:64:ba:a5:d7:ba:b4:
64:f2:bd:8a:f5:3f:32:3a:d5:02:bc:36:6c:2f:9b:
32:28:13:11:4a:32:88:cd:74:e2:33:57:89:f8:88:
30:35:21:4c:f3:fc:30:d9:e0:03:5d:ac:27:8f:05:
0a:92:84:36:ad:51:cf:eb:d1:ca:8e:db:27:0d:fe:
66:a4:32:f6:9a:60:2c:22:37:f2:4a:84:b5:c7:7e:
55:0b:12:93:f7:e9:a0:62:3b:47:b7:d4:4d:75:76:
a8:e4:d0:67:3e:57:3d:b9:e0:13:ed:a0:c7:2f:06:
e1:0f:2a:f2:ee:5d:84:3c:f2:72:f5:be:93:5e:15:
40:d3:ef:e3:0b:cd:cf:bb:bb:26:f4:c0:3f:45:d3:
29:83:e8:67:65:2c:81:32:41:a9:fe:b7:02:e6:a1:
5a:57:3f:58:99:bf:04:1c:1d:29:91:45:9a:8c:bf:
6f:1c:08:45:80:7e:92:0b:81:fd:cd:53:ac:97:01:
40:54:88:9f:d2:0d:07:76:d1:b7:b3:27:02:6d:06:
a7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:80:15:55:16:59:27:53:D3:B8:B6:B6:A3:D7:2F:E5:71:9D:F8:9B
X509v3 Authority Key Identifier:
keyid:A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:48:93:b4:67:1a:40:dc:57:c1:55:0e:5e:66:94:fa:cc:e3:
67:83:3a:93:f2:b8:22:7e:20:4d:21:99:31:a1:78:3d:2d:4a:
35:84:f1:8f:82:b1:ee:9e:2f:36:93:3e:9a:88:a8:18:23:e1:
50:57:24:d0:e8:16:e9:91:b9:ae:82:31:ba:c7:fa:99:cd:9b:
d3:33:bb:73:10:98:bd:c9:86:35:31:21:dd:8a:4b:62:e4:1d:
0c:bf:70:02:db:ba:9e:64:14:2e:45:97:5d:2a:a0:0a:3b:8f:
9c:7d:c1:df:25:b5:7a:9a:c8:b6:b5:b5:a9:03:f3:49:15:3f:
9d:88:0e:9b:0f:75:16:da:a3:2a:60:57:91:9d:e5:25:ed:f4:
d2:4b:b2:5d:e4:a4:4e:80:92:ac:63:fc:be:c2:1d:57:96:01:
0a:a0:95:cc:55:03:ca:3f:d5:9d:ea:61:4a:eb:8a:31:1a:9e:
a2:81:65:fd:97:5e:15:4a:5b:90:1a:0a:a7:8b:a6:b0:77:dc:
e9:26:6a:9c:68:bb:07:4b:b8:e6:e9:7c:2b:d0:18:09:b9:72:
21:5b:37:d8:54:e7:9e:ba:12:c0:30:1d:e2:e4:5e:d7:bd:d4:
48:6d:46:7e:fa:94:08:21:47:b3:e5:a6:32:78:69:d5:7c:95:
20:36:5b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:05:27 2025 by rpki-client