Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
File: pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft (raw, json)
Hash identifier: ZyH4YxKz5Dy3wx5N3Wrb2GaFXjPOh28rQZQCZKtQOt0=
Subject key identifier: 23:D4:0F:34:E4:4F:71:3E:9E:38:38:01:94:59:28:77:CD:0C:E5:6C
Authority key identifier: A4:C9:3A:B3:64:C8:78:32:E7:77:62:26:EE:E6:C1:31:DB:E1:53:BB
Certificate issuer: /CN=a4c93ab364c87832e7776226eee6c131dbe153bb
Certificate serial: 01974666C5790B995344A4CACD2CA40B09E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 18:00:29 +0000
Manifest this update: Fri 06 Jun 2025 18:00:29 +0000
Manifest next update: Sat 07 Jun 2025 18:00:29 +0000
Files and hashes: 1: pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl (hash: T2Tj44u+Jha+kuFURxbstdjWZ4zdQ/+aU7sIp+8ppLM=)
2: pV9OuJfGvboWa4RSwyOam_iwesY.roa (hash: RTkqdqbXmblScuzpz+Ud/Jj/+DA6UotPUIkNIsu6BJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:c5:79:0b:99:53:44:a4:ca:cd:2c:a4:0b:09:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c93ab364c87832e7776226eee6c131dbe153bb
Validity
Not Before: Jun 6 18:00:29 2025 GMT
Not After : Jun 7 18:00:29 2025 GMT
Subject: CN=23d40f34e44f713e9e38380194592877cd0ce56c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a7:ed:5d:e5:4d:f3:56:69:71:b7:d7:50:7f:
f8:fd:d8:96:e0:bc:77:2e:ed:86:55:04:81:c5:ef:
80:92:ad:f4:1c:bb:d4:82:d3:77:30:26:65:c5:84:
3b:66:92:ed:30:b5:bb:dd:8f:06:0f:2b:d7:6f:c1:
72:c7:56:bd:f4:10:bc:74:98:15:b4:e6:df:41:c6:
33:66:15:64:e3:96:e9:d7:7d:28:a0:ec:5d:32:c2:
e9:cf:98:fb:50:f9:bd:31:d0:5f:48:52:cc:77:73:
9e:8d:e5:9e:1f:3f:a7:6b:b8:7f:dd:a8:5d:ce:ac:
96:b2:91:71:3d:e6:5a:72:15:7b:11:78:d5:c4:60:
79:3e:3c:ce:fb:3e:21:f6:e9:e5:7f:08:83:91:49:
2d:18:94:58:59:85:8a:83:52:bd:59:b7:d3:13:1a:
12:ce:7b:a5:08:32:91:c2:f7:0f:64:67:20:85:c1:
52:df:17:69:51:f0:b9:25:60:f3:97:00:e0:24:96:
d1:89:46:b8:a1:88:b7:c8:9b:cb:7f:ca:8d:86:18:
89:d8:67:aa:5f:17:6e:53:09:84:e1:29:6c:55:cb:
a2:35:33:94:b1:79:16:3a:fb:1e:47:6a:49:21:d0:
3f:15:be:1f:17:8a:e4:3c:ec:15:97:7d:90:45:f9:
e5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D4:0F:34:E4:4F:71:3E:9E:38:38:01:94:59:28:77:CD:0C:E5:6C
X509v3 Authority Key Identifier:
keyid:A4:C9:3A:B3:64:C8:78:32:E7:77:62:26:EE:E6:C1:31:DB:E1:53:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ca:de:43:da:6d:7b:96:5b:17:ea:77:e9:d5:3d:e2:78:e0:
9d:a7:06:b7:4c:e1:cc:97:1f:53:a4:6d:0d:ac:bd:cb:43:d0:
84:f4:a9:05:97:c8:66:30:73:39:9c:83:5c:b6:28:4f:23:d8:
6a:d5:7b:65:90:16:d6:32:61:64:51:b3:a4:4e:87:7e:e5:e6:
bd:de:b0:b1:6b:10:09:03:f3:be:38:bd:f3:fa:fc:69:8f:ee:
cf:68:b1:1b:34:d6:63:57:c3:b8:2e:dd:91:0e:3d:e5:80:f0:
b1:de:01:6b:14:fe:99:5e:ed:fc:b9:6e:6d:f0:0c:92:99:bd:
b3:41:cb:79:8c:ab:dc:f6:14:16:99:80:16:94:0c:3e:ad:d6:
77:bf:29:59:5c:56:1a:7d:9b:be:78:20:a9:c3:cb:83:4d:fa:
55:e6:a0:aa:58:84:17:52:d5:86:5a:30:bf:09:a7:e4:49:6e:
d5:6d:ec:bb:a7:c4:27:89:3e:2b:e0:43:4b:5f:e2:d2:af:7f:
fd:64:84:01:58:e8:99:2c:85:f6:64:49:39:62:c4:1a:cd:e9:
1d:42:d2:ca:79:eb:05:4e:b0:a8:6a:82:35:e7:7c:ca:91:d2:
85:69:0c:21:66:5b:d0:e9:b3:6d:fc:8e:4e:87:a3:52:78:3a:
0f:f4:1a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:37:08 2025 by rpki-client