Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
File: pk-mS7PC3keIMGMSxlLedJ7JNRc.mft (raw, json)
Hash identifier: u1/imTkbtthTFfZjwW+MU1sG0FZWa9rruiRnoEOLi+I=
Subject key identifier: F5:5E:F8:BF:1D:66:27:27:7F:7B:87:65:9A:61:4E:60:98:09:E5:10
Authority key identifier: A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
Certificate issuer: /CN=a64fa64bb3c2de4788306312c652de749ec93517
Certificate serial: 0197B6A1FB6E3D7BD48B8FA9701C7935980D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
Manifest number: 0EF4
Signing time: Sat 28 Jun 2025 13:02:38 +0000
Manifest this update: Sat 28 Jun 2025 13:02:38 +0000
Manifest next update: Sun 29 Jun 2025 13:02:38 +0000
Files and hashes: 1: DGbM08ZTsAqYw2-cwkwYARO53tE.roa (hash: vRmKPjIDxHKM6g2DoHk9sDKKAGwsNzCt7i6bkh/HxXk=)
2: pk-mS7PC3keIMGMSxlLedJ7JNRc.crl (hash: I3Q5F8UGuR8ICN1G4nkn0YlRC+MWE/uL8UIMllZZZjQ=)
3: rXPM57-D6wTVhLckZD7CZVwkBW8.roa (hash: fUjK4fhETtHvQdYsLgWmfiWiFboo/MkwlvPD3alJWYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:fb:6e:3d:7b:d4:8b:8f:a9:70:1c:79:35:98:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a64fa64bb3c2de4788306312c652de749ec93517
Validity
Not Before: Jun 28 13:02:38 2025 GMT
Not After : Jun 29 13:02:38 2025 GMT
Subject: CN=f55ef8bf1d6627277f7b87659a614e609809e510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b7:8f:75:5a:e7:13:e6:c3:de:de:09:0c:0f:
ad:0b:ff:1d:7c:85:5f:dd:b0:bf:0f:72:e3:45:7a:
07:f2:bf:8c:0f:b5:73:00:2b:fd:74:86:3b:62:25:
28:37:9c:77:9b:30:ab:72:5b:da:e2:9a:6f:75:a2:
6b:f9:db:1e:ce:ae:90:9c:d9:7f:24:57:c8:c4:0d:
06:fd:57:e2:8c:a4:a2:9e:1f:2f:b6:ff:57:c8:72:
ca:d8:2d:7e:27:ac:65:e1:ed:d0:bb:27:11:05:28:
49:b5:33:2f:43:83:7c:c9:28:14:01:74:70:64:a4:
3e:ed:31:b6:87:58:87:89:9f:6b:06:45:d6:14:8c:
81:85:2f:77:8c:e6:35:f9:e1:4f:37:cf:e0:e5:43:
a3:9a:84:16:0a:52:c4:f8:c2:f6:6c:5c:14:81:a4:
85:3d:12:a9:24:e8:4e:d3:78:a6:a1:ce:a5:c4:02:
b8:69:7d:43:56:20:65:3d:45:66:04:8f:f3:64:06:
4b:31:e4:40:a8:27:a7:a7:83:89:b7:f1:e6:13:00:
5d:7a:ae:c5:ec:e1:92:ea:16:0e:c7:ed:15:6d:7a:
c3:b2:03:04:c4:e3:77:ac:f3:88:51:fa:30:ea:0c:
b7:d0:63:3e:f9:a0:a9:c5:52:a7:12:53:88:b7:f8:
21:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5E:F8:BF:1D:66:27:27:7F:7B:87:65:9A:61:4E:60:98:09:E5:10
X509v3 Authority Key Identifier:
keyid:A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d5:3a:01:de:a1:48:01:53:5a:13:79:98:54:09:d1:d8:75:
10:e7:36:42:8f:59:56:ef:ce:0e:bc:e2:f5:76:a5:fa:07:37:
c4:7e:c8:44:4a:58:cc:bb:dd:20:0b:71:71:fb:00:80:c0:f8:
96:5a:41:d9:c1:aa:74:8d:c8:21:3e:50:55:53:8a:e1:10:c7:
bb:75:78:17:4e:ee:65:79:90:78:0d:fb:1c:60:e3:b0:24:eb:
58:bc:eb:9b:0d:26:3d:f4:7a:58:fd:e9:45:ad:b1:38:d6:e6:
cc:fc:6f:c9:89:56:b8:22:53:cb:89:2c:05:2f:9c:c5:02:15:
17:b3:4b:ff:17:20:7d:35:36:20:1a:0d:d5:c9:e7:44:25:b5:
5b:64:cd:84:23:39:09:89:0a:e1:04:1b:52:7a:6c:05:20:22:
b5:2f:1f:73:99:c7:c2:8f:ac:f0:8b:17:83:42:c2:2c:4a:52:
68:0d:65:1d:f0:71:0a:7f:b4:9b:b0:67:a8:67:66:32:75:8f:
07:45:11:de:67:cc:ae:e7:93:16:85:5b:01:cd:51:2e:4a:81:
38:b0:6b:ff:e7:cb:b8:c8:fd:60:87:ce:eb:5d:7e:5c:91:f6:
b6:cf:fb:2c:f1:d2:a2:ed:bd:12:1b:54:06:f9:0f:04:e4:94:
4b:5c:01:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oftuPXvUi4+pcBx5NZgNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NGZhNjRiYjNjMmRlNDc4ODMwNjMxMmM2NTJkZTc0OWVj
OTM1MTcwHhcNMjUwNjI4MTMwMjM4WhcNMjUwNjI5MTMwMjM4WjAzMTEwLwYDVQQD
EyhmNTVlZjhiZjFkNjYyNzI3N2Y3Yjg3NjU5YTYxNGU2MDk4MDllNTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbePdVrnE+bD3t4JDA+tC/8dfIVf
3bC/D3LjRXoH8r+MD7VzACv9dIY7YiUoN5x3mzCrclva4ppvdaJr+dsezq6QnNl/
JFfIxA0G/VfijKSinh8vtv9XyHLK2C1+J6xl4e3QuycRBShJtTMvQ4N8ySgUAXRw
ZKQ+7TG2h1iHiZ9rBkXWFIyBhS93jOY1+eFPN8/g5UOjmoQWClLE+ML2bFwUgaSF
PRKpJOhO03imoc6lxAK4aX1DViBlPUVmBI/zZAZLMeRAqCenp4OJt/HmEwBdeq7F
7OGS6hYOx+0VbXrDsgMExON3rPOIUfow6gy30GM++aCpxVKnElOIt/ghWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPVe+L8dZicnf3uHZZphTmCYCeUQMB8GA1UdIwQY
MBaAFKZPpkuzwt5HiDBjEsZS3nSeyTUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGstbVM3UEMza2VJTUdNU3hsTGVkSjdKTlJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80MjdkYjItYzYxMy00ZTg0LWIzOGMt
OTA1NjliYzZjYTU0LzEvcGstbVM3UEMza2VJTUdNU3hsTGVkSjdKTlJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80MjdkYjItYzYxMy00ZTg0LWIzOGMtOTA1NjliYzZjYTU0
LzEvcGstbVM3UEMza2VJTUdNU3hsTGVkSjdKTlJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjdU6Ad6h
SAFTWhN5mFQJ0dh1EOc2Qo9ZVu/ODrzi9Xal+gc3xH7IREpYzLvdIAtxcfsAgMD4
llpB2cGqdI3IIT5QVVOK4RDHu3V4F07uZXmQeA37HGDjsCTrWLzrmw0mPfR6WP3p
Ra2xONbmzPxvyYlWuCJTy4ksBS+cxQIVF7NL/xcgfTU2IBoN1cnnRCW1W2TNhCM5
CYkK4QQbUnpsBSAitS8fc5nHwo+s8IsXg0LCLEpSaA1lHfBxCn+0m7BnqGdmMnWP
B0UR3mfMrueTFoVbAc1RLkqBOLBr/+fLuMj9YIfO611+XJH2ts/7LPHSou29EhtU
BvkPBOSUS1wBDQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:35:53 2025 by rpki-client