Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
File: PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft (raw, json)
Hash identifier: L7Mlcy4Oi6WlVC8UAi9Mw/UBenszu9hhv6qmjnbBs40=
Subject key identifier: FA:92:2D:4B:F2:86:C5:22:0A:19:B1:5C:E1:C6:C5:DE:D0:75:08:63
Authority key identifier: 3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
Certificate issuer: /CN=3cc94ff479778651a605121f1ffe678196328f35
Certificate serial: 0197499F5DC471F4D04E3492F5E6B7E1053C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 09:01:10 +0000
Manifest this update: Sat 07 Jun 2025 09:01:10 +0000
Manifest next update: Sun 08 Jun 2025 09:01:10 +0000
Files and hashes: 1: CahBkkjIRD5RSAyC_TG87QI2fzc.roa (hash: xwWB2SdIUKCzemaOm29fIJHDchBB//Ii3x59COqFn54=)
2: PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl (hash: ggKcd5oEfUTM9+lakjJpz5WPb5QeiEQgCjKwaWB9Lyo=)
3: j4vYQ759MLoLj0cN0zuQjHrzqiw.roa (hash: uApwJtUDHaWf6V3ibkhcekhPd8rOwJMJCw2CtVWuA6s=)
4: mXcskRJTzyB3nxmoygHfU8qKFgw.roa (hash: uQEoqefAcfOcPTcbOqYeFxWZJNwhk/YLJx7Ey5o+17w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:5d:c4:71:f4:d0:4e:34:92:f5:e6:b7:e1:05:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cc94ff479778651a605121f1ffe678196328f35
Validity
Not Before: Jun 7 09:01:10 2025 GMT
Not After : Jun 8 09:01:10 2025 GMT
Subject: CN=fa922d4bf286c5220a19b15ce1c6c5ded0750863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:95:d2:d5:bc:fa:51:fe:50:c1:14:7e:72:5a:
0e:3c:6b:9c:c0:ce:24:6c:95:54:6a:83:23:fc:51:
2f:09:39:25:65:2d:d4:22:e8:66:10:af:5c:65:eb:
5c:a2:98:4e:54:20:91:50:32:d7:26:dc:9c:34:db:
5e:26:23:73:5f:b2:0b:29:fa:8c:4d:ec:8c:15:10:
37:bf:47:82:d7:88:78:f4:e9:54:5e:ae:22:01:e4:
96:15:30:cf:78:e4:79:ed:00:81:62:00:e9:b4:79:
ee:93:b5:de:03:78:43:07:08:db:25:5e:ba:7a:3d:
42:31:d2:28:b2:15:67:6f:50:34:b3:a0:81:ff:a9:
87:ef:2e:b7:ca:4f:c7:23:af:99:f9:e5:2c:7e:0f:
26:d2:1c:f1:5f:a0:a2:97:a4:11:54:c8:d6:d0:c5:
4f:fb:9d:64:32:3e:aa:7c:0e:6d:16:7b:dc:73:23:
c6:dc:d6:23:4c:3d:f3:8a:b3:59:1e:92:72:c4:dd:
99:e9:c5:1d:d8:ba:c7:bd:87:d0:87:d3:3f:0f:7a:
61:9b:e3:14:d5:6d:d2:e8:cb:92:5a:a6:7f:21:dc:
6c:6a:4d:64:cf:93:2c:06:28:3c:7c:43:33:da:c3:
e5:6f:5f:c5:c4:e5:13:c1:42:9c:43:73:c2:72:d4:
b9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:92:2D:4B:F2:86:C5:22:0A:19:B1:5C:E1:C6:C5:DE:D0:75:08:63
X509v3 Authority Key Identifier:
keyid:3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:18:89:a2:42:71:4f:d5:ad:f4:4b:77:f9:69:b4:95:27:db:
0f:f3:44:29:14:15:3a:67:77:e7:fb:0b:27:c5:f0:63:f0:e1:
21:8b:33:c7:3a:75:21:99:d5:bc:1c:09:10:2e:c2:61:71:b7:
62:87:a2:61:5d:13:a3:ef:11:eb:12:4f:25:66:f5:54:83:6a:
25:84:67:91:3d:97:d8:50:10:75:d4:3c:6d:c9:43:e6:90:57:
e8:d8:89:17:14:bc:08:e2:db:94:98:8f:9d:c9:e4:45:a8:6e:
79:0b:3b:72:16:11:1d:8e:5a:ed:ef:94:12:a4:43:80:ed:a9:
c0:91:7c:6c:ae:77:cf:ab:88:42:69:aa:f6:5f:83:cd:e4:4e:
97:16:16:7d:0d:5c:61:ad:91:51:7d:19:ac:b1:58:99:df:cb:
bc:9f:ea:32:72:8b:b3:f9:d9:c5:d5:56:c4:bc:e9:c9:7d:9d:
f9:2f:c9:e4:49:44:bd:98:7c:4a:6d:1f:4d:cb:2e:f8:00:75:
62:f0:91:a7:52:ba:fd:da:0c:0d:f1:99:29:43:09:10:a7:a3:
20:3e:65:15:f0:ac:67:94:e3:c9:c6:f0:a1:d7:d8:15:78:f5:
07:62:d1:b8:5c:51:c5:ad:2e:9f:b9:7d:c3:4a:2b:f4:8d:75:
49:53:54:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:57:12 2025 by rpki-client