Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
File: pmJGuAbomrpA5-WIiPNXZROjk0o.mft (raw, json)
Hash identifier: cFMO2m5TAWvAoLxa6ZSv7UohbjuriZp/p5sJRnHadNA=
Subject key identifier: 39:3C:2C:E7:5F:24:D3:15:4B:30:44:6E:2E:8F:27:12:A6:A2:0C:B4
Authority key identifier: A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
Certificate issuer: /CN=a66246b806e89aba40e7e58888f3576513a3934a
Certificate serial: 01976327FD7D516A2EE3A2997AADBE4DAE9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
Manifest number: 1591
Signing time: Thu 12 Jun 2025 08:00:54 +0000
Manifest this update: Thu 12 Jun 2025 08:00:54 +0000
Manifest next update: Fri 13 Jun 2025 08:00:54 +0000
Files and hashes: 1: 6W6gmSc4k57Y4v5MIcHO8sDy0Nk.roa (hash: aByrM29yQlmUSgYmIxuh2nCAQIQ4+06fpCqZWYYHHbE=)
2: WwtbLNZ8w3CZaCckJBj7-wgL_Wg.roa (hash: awi9blZyXe6dA7Vb92PcI70MUj14FAGRwBheENnmVNg=)
3: pmJGuAbomrpA5-WIiPNXZROjk0o.crl (hash: HgFynf5e0Vd80Fo31gcDU1jN8rAGW9OerXe1lj+4qkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:27:fd:7d:51:6a:2e:e3:a2:99:7a:ad:be:4d:ae:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66246b806e89aba40e7e58888f3576513a3934a
Validity
Not Before: Jun 12 08:00:54 2025 GMT
Not After : Jun 13 08:00:54 2025 GMT
Subject: CN=393c2ce75f24d3154b30446e2e8f2712a6a20cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:57:f8:32:25:18:0c:db:2b:61:82:4f:49:3e:
4a:4a:22:2e:00:53:f1:fb:37:46:20:69:c0:21:28:
54:7e:3a:66:f6:85:a6:3b:8e:5c:5a:69:1d:c5:17:
2f:3a:95:c5:b2:65:a3:ca:0f:ad:62:f2:80:05:61:
ad:41:3c:85:f2:34:be:67:23:55:fb:77:39:43:92:
d2:6b:c9:8e:3b:12:2e:13:dd:2c:fa:90:ab:42:c5:
12:2c:6d:24:bd:eb:d7:b3:c7:e7:49:47:30:fb:57:
4a:f2:76:53:ed:02:42:45:c8:9e:f2:a1:ae:d4:49:
d8:1d:56:d8:37:62:36:8f:b4:42:74:cf:e5:62:5b:
d8:bb:73:15:62:d3:dc:a6:f1:11:32:c1:45:50:6e:
ea:e9:e3:9f:f4:ee:42:6c:d8:de:b1:de:f1:c5:48:
a7:5c:fb:8a:6a:44:b5:a0:22:88:a5:7f:0d:d5:56:
6c:1d:c7:7d:bd:13:6e:a6:9d:c7:54:6f:ea:48:47:
03:d9:71:7c:c1:94:16:01:e0:5a:37:a0:46:7d:b2:
d8:8b:09:ee:77:f8:04:54:bb:93:53:0c:ed:44:f4:
72:05:6d:69:4c:d4:30:0d:c4:f1:59:4d:0f:11:09:
0c:93:b9:d8:91:11:83:5f:2d:8c:5a:de:15:90:cd:
a1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3C:2C:E7:5F:24:D3:15:4B:30:44:6E:2E:8F:27:12:A6:A2:0C:B4
X509v3 Authority Key Identifier:
keyid:A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:9c:43:6c:00:c9:db:dc:a8:d6:83:d1:f8:13:f4:89:63:dd:
72:d9:69:fd:52:2c:29:b5:50:0d:1d:bb:89:01:01:c7:46:7f:
a1:14:d6:1f:a9:4a:49:f6:e4:11:a5:b1:d8:d9:36:f8:c8:7a:
09:e1:4b:76:cc:ba:83:c0:e5:09:39:b4:0f:f9:5e:81:c0:7c:
81:a2:48:34:22:b2:48:ed:75:21:69:b1:39:03:3d:0c:c1:6b:
73:46:da:6c:e2:c9:7f:b7:11:6f:0a:46:3b:6c:99:b5:90:e5:
da:2b:2c:ad:3f:3f:b2:3c:cc:51:8f:13:a1:ca:cb:5a:3b:02:
18:40:a2:d6:db:9b:2b:d4:c6:52:3a:92:e4:24:46:67:32:8a:
97:36:bd:e6:01:e4:2f:ea:04:73:ae:6b:8d:c3:fd:4b:df:58:
ce:8f:13:5f:ec:f8:fe:91:bc:fa:e1:5d:6a:e8:da:ef:34:4d:
c8:a7:a3:c1:0c:6d:be:04:e6:3a:e0:c7:00:d1:a7:12:cc:2d:
ab:1d:3f:37:71:33:73:d6:ef:bf:11:5e:9a:97:04:df:28:9b:
4b:58:0d:4b:11:f2:7f:25:93:02:7a:ae:6b:ad:39:d1:a2:29:
b5:5a:f1:e0:d8:4b:14:84:96:0a:4f:f7:ee:95:24:4b:69:8c:
75:bd:7c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 11:48:35 2025 by rpki-client