Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.mft
File: PmxFIHWfOk74uamifiUzznMsVBE.mft (raw, json)
Hash identifier: g+zBb2xKUVDX58s0bhahTn7Yrli/LyRymblnVPBSzMk=
Subject key identifier: 5A:AF:54:BA:B3:DD:71:15:DD:38:C8:D5:76:48:FB:BC:8E:96:19:F1
Authority key identifier: 3E:6C:45:20:75:9F:3A:4E:F8:B9:A9:A2:7E:25:33:CE:73:2C:54:11
Certificate issuer: /CN=3e6c4520759f3a4ef8b9a9a27e2533ce732c5411
Certificate serial: 0197485509451F58DC16B393E38366756B7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmxFIHWfOk74uamifiUzznMsVBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.mft
Manifest number: 150F
Signing time: Sat 07 Jun 2025 03:00:21 +0000
Manifest this update: Sat 07 Jun 2025 03:00:21 +0000
Manifest next update: Sun 08 Jun 2025 03:00:21 +0000
Files and hashes: 1: PmxFIHWfOk74uamifiUzznMsVBE.crl (hash: ArXe16wGAtncKalisq0mI2smrvSn3f7BQYRh/y6pR8Q=)
2: f62uVetw4VLEAcyA7iUss0CmbKk.roa (hash: KfBTV0RaWF6oQ2oIYy/lZbeXGP7Rdv40K79+xRa2szk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmxFIHWfOk74uamifiUzznMsVBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:09:45:1f:58:dc:16:b3:93:e3:83:66:75:6b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6c4520759f3a4ef8b9a9a27e2533ce732c5411
Validity
Not Before: Jun 7 03:00:21 2025 GMT
Not After : Jun 8 03:00:21 2025 GMT
Subject: CN=5aaf54bab3dd7115dd38c8d57648fbbc8e9619f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:77:79:8e:9a:8c:a6:13:c5:80:d1:75:3e:53:
c1:05:c7:b9:c0:e4:7a:43:e2:12:9c:6e:6a:fd:f6:
23:f6:c2:0b:6a:ca:82:7f:7c:5e:ef:0b:2c:b7:b5:
95:0f:56:a8:17:69:72:e9:6c:ca:bd:d4:21:3c:5d:
ad:e5:0a:2e:5f:c2:da:dd:dd:30:b2:40:3f:01:ab:
c1:80:89:3f:bf:5d:99:4a:f9:43:51:cf:df:68:8c:
74:53:b2:6b:ac:2f:e1:11:f2:88:5d:fa:73:ca:ef:
0e:8d:22:5a:8d:07:82:59:ee:55:05:be:52:6e:2d:
3d:b1:20:9d:08:6a:5d:2c:51:de:fe:b1:2b:30:46:
8b:f0:a4:4e:f5:7f:d6:5f:e7:9e:3a:5d:aa:c0:09:
c1:94:fd:7b:8c:fa:d9:25:8e:e2:8f:4b:78:0f:44:
c9:49:79:db:21:de:28:bf:96:f6:23:cc:f4:1e:88:
09:7e:b4:2f:61:90:2f:d9:2f:1e:d3:8d:50:6f:c6:
93:d9:80:e8:ba:d4:60:cd:4a:86:38:57:51:05:d7:
8f:88:02:75:9e:66:fb:84:61:7a:b6:f5:29:8c:b6:
93:07:8c:2e:55:71:7e:44:c1:e9:65:b0:de:77:35:
f7:09:22:c5:6c:0e:3e:60:09:d5:f3:0f:c0:99:fc:
db:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AF:54:BA:B3:DD:71:15:DD:38:C8:D5:76:48:FB:BC:8E:96:19:F1
X509v3 Authority Key Identifier:
keyid:3E:6C:45:20:75:9F:3A:4E:F8:B9:A9:A2:7E:25:33:CE:73:2C:54:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmxFIHWfOk74uamifiUzznMsVBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:5d:84:4e:5c:54:44:56:3c:86:a0:cb:03:ae:03:d4:da:d3:
4a:77:f7:8a:cb:67:d3:aa:8f:8e:6c:96:7e:de:51:47:f6:6f:
f7:87:75:95:cc:83:d2:13:17:42:5c:52:6e:2e:35:7d:bb:e0:
94:83:59:fb:f1:86:79:25:c9:69:66:b5:52:39:44:df:82:f9:
5d:06:ac:ab:67:d2:e2:39:8a:7c:87:3e:3e:43:a5:e7:58:fa:
12:fa:33:3f:33:1c:e4:82:8e:4a:b8:d8:84:bd:46:40:42:3b:
55:f7:e1:8d:5e:04:f1:e4:eb:3c:57:b4:46:de:18:2f:44:08:
d2:8e:ae:07:09:18:ab:3a:19:79:b3:a8:3c:fb:a8:0e:bc:47:
5d:8e:8e:28:f8:19:b3:c0:74:6b:dc:e4:67:86:ac:bc:37:76:
9c:b8:54:df:44:0d:26:2d:ad:95:6a:a2:c2:ca:2f:d5:ef:14:
0b:6d:a9:7b:11:57:2f:d3:05:2a:6b:29:41:ac:cf:cc:7f:65:
b4:79:63:ed:61:02:8d:f6:15:e8:3b:90:1d:65:53:50:0c:f4:
36:f2:85:5b:be:b4:3c:32:85:11:80:b6:92:48:1e:8b:76:3b:
cd:9c:5c:57:90:a7:16:dc:4e:da:56:fd:3f:b1:dd:3c:22:8d:
26:73:f9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:46:02 2025 by rpki-client