Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
File: pBM1JPJKSooh1GwGwQJfQPNK0no.mft (raw, json)
Hash identifier: 09bxQhK9NHhEgZ9Z4g0SZKe02Z1E80u8ZJ87szknCUY=
Subject key identifier: F8:6D:3B:A1:CE:72:A9:12:C1:C0:94:C4:BE:50:B3:9F:18:60:90:3F
Authority key identifier: A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
Certificate issuer: /CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Certificate serial: 019755D9EBBF9FB6C3AEEF262B7A1BFCCCEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
Manifest number: 1584
Signing time: Mon 09 Jun 2025 18:00:34 +0000
Manifest this update: Mon 09 Jun 2025 18:00:34 +0000
Manifest next update: Tue 10 Jun 2025 18:00:34 +0000
Files and hashes: 1: hDhJ2OmuACmi7Q_Pysi0Uy5-CBg.roa (hash: IpPR6/fjcqfY1Wb9zSV7h6VOKADAG8xAFr0zyQ+Kgzs=)
2: pBM1JPJKSooh1GwGwQJfQPNK0no.crl (hash: Vfkiyav7aLnwfbqCV0e7z6hGVQj5UMErWeDBVYZh2x0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:d9:eb:bf:9f:b6:c3:ae:ef:26:2b:7a:1b:fc:cc:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Validity
Not Before: Jun 9 18:00:34 2025 GMT
Not After : Jun 10 18:00:34 2025 GMT
Subject: CN=f86d3ba1ce72a912c1c094c4be50b39f1860903f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d9:f2:b6:c9:23:36:42:9b:6a:8d:8e:70:9d:
d0:e8:1d:64:e0:e5:68:47:3f:5e:98:bd:55:14:14:
45:a4:26:1c:59:67:65:a2:20:15:ce:74:e2:64:cc:
9b:65:89:45:52:2a:37:cb:80:32:b7:92:4c:d2:69:
b5:36:d3:37:9d:db:59:1f:44:55:5c:eb:8d:3d:a8:
de:8e:f3:75:ea:c1:4f:77:6c:84:0d:5d:9c:3a:a5:
c0:f3:b3:94:b6:33:a1:45:01:d8:e4:30:6c:d3:ee:
c4:91:7d:fc:1d:96:9e:a4:93:62:c3:6c:1b:77:c6:
fd:f3:05:51:27:1a:d8:9b:67:f9:1a:51:97:e3:8c:
81:06:8f:2d:88:11:3d:90:f9:b9:49:23:e9:a7:62:
17:35:ff:ac:12:37:26:44:f1:41:f4:f3:0f:98:1b:
67:37:87:25:c2:03:1d:b0:a5:cc:b9:61:88:b6:89:
e9:f9:74:a8:1b:05:5f:9a:7d:0f:50:57:6c:10:bb:
cc:22:b6:19:58:13:30:0b:c4:55:ce:55:a0:21:34:
72:50:26:7b:c7:8b:2c:6f:2d:a9:67:0b:d5:17:2e:
59:a2:15:63:60:18:53:f4:46:6d:ca:14:6c:25:fd:
94:b8:00:57:c1:ba:43:1a:dd:d2:7a:3d:46:66:42:
29:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6D:3B:A1:CE:72:A9:12:C1:C0:94:C4:BE:50:B3:9F:18:60:90:3F
X509v3 Authority Key Identifier:
keyid:A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:6b:b3:93:6e:66:e7:65:e9:50:11:76:6a:01:ce:86:ea:32:
00:0d:1e:ce:f1:82:9b:e5:6d:38:f2:9c:22:94:c7:1a:31:3b:
bb:58:0d:18:3c:6f:2a:e7:4d:03:b4:3a:fb:47:ea:39:c2:09:
b8:8a:0f:d0:3c:df:c5:56:cd:ca:f2:77:cf:71:77:29:32:e9:
6c:a5:d4:a3:a3:02:21:8b:7f:e2:d3:dc:38:2f:e3:02:dc:d1:
b0:55:31:c0:24:c5:24:94:49:15:6f:a9:b5:0a:b1:e9:39:31:
57:4d:8c:d8:6b:79:98:bb:4f:6c:f8:34:74:d0:c5:32:81:5a:
30:d3:f2:c9:86:dc:2d:3e:14:c2:ed:ae:e4:f8:37:a3:3b:a4:
aa:01:2a:5c:ac:7d:ea:5e:82:43:dd:99:a8:d2:41:41:da:1f:
8e:ee:a7:2c:e5:83:4b:6b:d8:e9:c7:f2:e2:62:8f:dc:90:56:
94:e6:36:d5:c7:8e:dc:75:e5:34:57:0f:ae:00:61:aa:c7:97:
38:27:ba:78:08:fa:79:ae:1c:29:07:27:85:93:eb:82:dd:79:
46:98:d4:d3:cb:86:dd:c9:70:05:96:d0:83:a9:05:8e:8b:64:
2d:92:fb:65:60:75:fb:3d:4d:31:35:cb:23:89:55:25:b6:45:
d8:fb:2b:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdV2eu/n7bDru8mK3ob/MzsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MTMzNTI0ZjI0YTRhOGEyMWQ0NmMwNmMxMDI1ZjQwZjM0
YWQyN2EwHhcNMjUwNjA5MTgwMDM0WhcNMjUwNjEwMTgwMDM0WjAzMTEwLwYDVQQD
EyhmODZkM2JhMWNlNzJhOTEyYzFjMDk0YzRiZTUwYjM5ZjE4NjA5MDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7dnytskjNkKbao2OcJ3Q6B1k4OVo
Rz9emL1VFBRFpCYcWWdloiAVznTiZMybZYlFUio3y4Ayt5JM0mm1NtM3ndtZH0RV
XOuNPajejvN16sFPd2yEDV2cOqXA87OUtjOhRQHY5DBs0+7EkX38HZaepJNiw2wb
d8b98wVRJxrYm2f5GlGX44yBBo8tiBE9kPm5SSPpp2IXNf+sEjcmRPFB9PMPmBtn
N4clwgMdsKXMuWGItonp+XSoGwVfmn0PUFdsELvMIrYZWBMwC8RVzlWgITRyUCZ7
x4ssby2pZwvVFy5ZohVjYBhT9EZtyhRsJf2UuABXwbpDGt3Sej1GZkIp3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhtO6HOcqkSwcCUxL5Qs58YYJA/MB8GA1UdIwQY
MBaAFKQTNSTySkqKIdRsBsECX0DzStJ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEJNMUpQSktTb29oMUd3R3dRSmZRUE5LMG5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zYzI0YmUtMjY2ZS00NTIyLTk3ZDYt
N2Q5ZTYyYWZjNDQ0LzEvcEJNMUpQSktTb29oMUd3R3dRSmZRUE5LMG5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zYzI0YmUtMjY2ZS00NTIyLTk3ZDYtN2Q5ZTYyYWZjNDQ0
LzEvcEJNMUpQSktTb29oMUd3R3dRSmZRUE5LMG5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYGuzk25m
52XpUBF2agHOhuoyAA0ezvGCm+VtOPKcIpTHGjE7u1gNGDxvKudNA7Q6+0fqOcIJ
uIoP0DzfxVbNyvJ3z3F3KTLpbKXUo6MCIYt/4tPcOC/jAtzRsFUxwCTFJJRJFW+p
tQqx6TkxV02M2Gt5mLtPbPg0dNDFMoFaMNPyyYbcLT4Uwu2u5Pg3ozukqgEqXKx9
6l6CQ92ZqNJBQdofju6nLOWDS2vY6cfy4mKP3JBWlOY21ceO3HXlNFcPrgBhqseX
OCe6eAj6ea4cKQcnhZPrgt15RpjU08uG3clwBZbQg6kFjotkLZL7ZWB1+z1NMTXL
I4lVJbZF2Psr2w==
-----END CERTIFICATE-----
Generated at Tue Jun 10 00:25:00 2025 by rpki-client