Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
File: pBM1JPJKSooh1GwGwQJfQPNK0no.mft (raw, json)
Hash identifier: Mdl02IMKnJgfQJKOx4Q3Qr+lNBtO++ABvCCmmfEfgXI=
Subject key identifier: 1D:89:AC:9B:DD:E7:A0:F0:43:B4:40:B7:F1:DB:AF:EA:99:A8:7C:8E
Authority key identifier: A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
Certificate issuer: /CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Certificate serial: 01993313D83B1DECC8093740706A9135C21E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 10:02:42 +0000
Manifest this update: Wed 10 Sep 2025 10:02:42 +0000
Manifest next update: Thu 11 Sep 2025 10:02:42 +0000
Files and hashes: 1: hDhJ2OmuACmi7Q_Pysi0Uy5-CBg.roa (hash: IpPR6/fjcqfY1Wb9zSV7h6VOKADAG8xAFr0zyQ+Kgzs=)
2: pBM1JPJKSooh1GwGwQJfQPNK0no.crl (hash: D+ZTwpHvV5uoE7RFaEtZ4Ed26IjQEz7og/o15T3pHks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:13:d8:3b:1d:ec:c8:09:37:40:70:6a:91:35:c2:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Validity
Not Before: Sep 10 10:02:42 2025 GMT
Not After : Sep 11 10:02:42 2025 GMT
Subject: CN=1d89ac9bdde7a0f043b440b7f1dbafea99a87c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e6:e3:6f:09:65:2b:c2:3f:3b:77:3b:fd:20:
fb:bc:6a:bf:22:7b:80:e5:0f:e5:92:f7:98:32:0a:
a3:5c:12:82:e8:0a:7d:4f:33:4c:ee:a8:08:b1:57:
14:78:1d:49:d4:61:5a:cb:b7:79:1b:5c:5d:e2:a1:
20:2e:4e:ba:85:ad:39:6a:0c:d4:8d:e3:aa:f6:86:
30:b5:e8:98:9b:a9:5f:81:9f:27:ab:86:65:4f:41:
15:bf:f7:f0:4b:4a:ce:00:27:73:0a:1f:ad:01:b4:
81:6f:58:8a:65:2d:52:ae:f7:1a:da:d8:57:42:23:
08:87:fe:0e:d0:9d:56:c7:58:d3:68:a0:e0:a9:e3:
4b:da:66:ce:87:6a:c8:18:da:fb:c2:2e:0c:e6:1c:
e7:7c:74:1f:08:c2:ac:23:d7:ba:91:66:dd:2a:3c:
6e:c2:60:c8:e2:92:49:2c:17:61:13:8a:ae:ac:07:
88:4e:3e:49:aa:aa:18:59:bd:16:bc:7b:d2:33:52:
fa:57:70:2d:7e:33:70:07:9b:1e:e2:05:a7:58:2e:
83:39:25:73:52:be:a5:d8:1d:c8:2d:1e:24:93:71:
bf:10:63:40:1f:e6:f6:27:0b:4c:b1:e7:37:16:8c:
42:19:f2:a1:98:47:63:52:72:e3:39:a6:41:b2:1c:
38:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:89:AC:9B:DD:E7:A0:F0:43:B4:40:B7:F1:DB:AF:EA:99:A8:7C:8E
X509v3 Authority Key Identifier:
keyid:A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:69:92:da:6b:7d:09:0a:35:af:b6:4c:e6:34:e9:47:84:ee:
33:46:da:e9:9c:09:30:aa:7d:cc:08:58:2a:ac:3d:d1:01:21:
e0:66:58:3f:34:b1:98:a8:43:e9:e0:fa:86:6f:3e:d1:11:ef:
5d:45:e0:1a:29:52:90:eb:a3:e3:fd:c1:3c:fe:f2:8a:9d:13:
9b:9c:a4:40:3d:eb:b5:e3:90:7b:2b:09:e5:8f:d7:b8:01:2f:
28:89:ae:95:d2:09:d8:55:49:f3:db:21:c3:69:9d:3f:56:d4:
14:88:34:a8:d8:ca:b6:4a:24:cc:82:72:63:de:fa:74:11:48:
4d:a7:3f:f5:8a:a9:69:d6:a9:75:a5:df:7c:92:a0:49:54:53:
25:b0:3c:a8:1e:6f:a9:fb:32:fa:a3:8a:ad:79:37:da:a2:a1:
9c:c6:93:72:9e:00:1f:ee:b6:29:ad:88:e2:9a:81:14:cf:bf:
eb:a4:94:9d:1e:9e:4e:68:8a:42:b8:b9:0d:3b:82:65:10:f3:
2e:a0:ce:80:15:f7:d3:f1:b5:43:64:a2:4a:c9:eb:fd:e7:86:
39:a0:47:2b:13:ad:2e:6f:8b:5b:07:57:74:8f:9d:60:fb:2c:
a8:97:61:ae:a8:ba:75:b3:95:c1:28:e6:5a:02:ff:66:48:2d:
d4:65:e8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:17:20 2025 by rpki-client