Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
File: pBM1JPJKSooh1GwGwQJfQPNK0no.mft (raw, json)
Hash identifier: lpGrAhGqXr7HdabRIvU3q2Y5+SpVbN72lNBKU66+uW8=
Subject key identifier: 7B:38:87:3F:B4:4C:5A:5C:65:4B:37:F9:74:43:18:AC:EB:CD:82:B7
Authority key identifier: A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
Certificate issuer: /CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Certificate serial: 01975F81AC433BA55F17CD05B9E4094DFBB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
Manifest number: 1589
Signing time: Wed 11 Jun 2025 15:00:23 +0000
Manifest this update: Wed 11 Jun 2025 15:00:23 +0000
Manifest next update: Thu 12 Jun 2025 15:00:23 +0000
Files and hashes: 1: hDhJ2OmuACmi7Q_Pysi0Uy5-CBg.roa (hash: IpPR6/fjcqfY1Wb9zSV7h6VOKADAG8xAFr0zyQ+Kgzs=)
2: pBM1JPJKSooh1GwGwQJfQPNK0no.crl (hash: ijY6RjSOYQ93GP1Tf0VBHZ7i8UWs9kKAsX4K60jvE0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:81:ac:43:3b:a5:5f:17:cd:05:b9:e4:09:4d:fb:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Validity
Not Before: Jun 11 15:00:23 2025 GMT
Not After : Jun 12 15:00:23 2025 GMT
Subject: CN=7b38873fb44c5a5c654b37f9744318acebcd82b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:c3:98:fd:97:94:78:6f:5e:ee:1f:8b:bd:
4c:d4:37:68:57:2e:1d:b4:2b:b0:64:a2:4d:e8:3c:
45:e3:b4:b9:49:9a:44:8e:bd:00:63:c5:d1:91:bb:
2b:3a:8c:62:da:56:c3:b2:1a:d0:28:05:b8:58:58:
a2:98:46:4f:b9:15:bc:7b:95:2b:01:49:f2:8d:47:
b1:45:ca:42:33:aa:26:c7:5a:3d:1e:e6:06:7f:ea:
49:a5:29:fa:2a:43:c7:fe:e0:48:e9:4d:8c:ab:35:
fb:10:20:dd:73:77:20:e4:6f:72:b4:f4:f1:dd:9a:
9a:f4:7d:a4:61:3d:0d:b3:7c:b5:3e:6c:0c:52:3b:
d8:47:21:c2:b3:e5:fe:5f:3f:30:6b:85:43:44:4d:
4e:97:b0:26:00:af:50:b5:51:1f:90:97:3d:6f:de:
ea:09:7a:a4:e3:2f:e1:4d:02:15:de:92:95:70:87:
39:85:b4:5d:eb:4e:b7:ac:fd:4b:ae:a9:11:e9:33:
17:dc:dc:67:5e:4b:f9:83:56:6e:30:94:fa:03:1f:
9e:dd:76:3e:6e:84:fc:30:f5:fb:73:c4:ac:ee:ca:
0e:69:49:50:1d:17:dd:bc:09:69:ed:26:4f:c5:18:
53:f6:f6:d0:85:51:f2:0e:7d:7c:bb:c0:0d:ed:11:
a2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:38:87:3F:B4:4C:5A:5C:65:4B:37:F9:74:43:18:AC:EB:CD:82:B7
X509v3 Authority Key Identifier:
keyid:A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ca:96:6a:39:a4:e0:b7:a0:c8:4d:44:01:eb:fa:a5:aa:fa:
a2:8d:2c:fe:b5:75:c5:2c:9d:46:12:db:21:fe:fe:d3:b1:21:
90:ba:4c:5b:31:31:21:d9:07:39:6c:5d:f0:c5:62:f6:f3:a7:
e6:a6:4c:6e:eb:d6:a2:db:0d:14:66:c1:5b:c5:27:e2:7f:fc:
4e:82:75:b0:66:6d:61:97:b7:ab:c6:bf:b6:c4:42:1a:c8:8e:
72:0f:99:7d:37:b6:94:98:fe:c0:52:37:aa:ad:6e:77:79:6a:
34:af:ba:1b:bf:7c:59:fa:7a:30:25:2b:4f:b4:75:ba:55:c1:
72:b1:7d:48:06:97:3a:14:3e:2a:08:db:db:92:c5:4a:ae:dd:
28:61:40:0f:04:5e:d0:11:0e:84:6e:c4:fa:f8:5b:e8:6b:88:
8f:2f:33:77:9a:19:ea:3a:bd:6a:9c:ad:8e:fc:29:b9:2f:c0:
ef:bc:90:4e:fc:fc:72:20:60:3f:72:93:01:10:c8:f0:db:84:
ef:c3:b6:8f:1b:5b:2d:0f:de:fc:c7:24:a5:1b:9f:b6:d9:0d:
2e:c9:2a:30:27:e9:55:24:9c:7d:e4:fa:f3:c1:60:e3:7d:c2:
00:97:f6:c5:42:18:ba:fe:31:4f:cd:cb:06:66:cd:52:0b:80:
57:ed:a6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 01:39:51 2025 by rpki-client