Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
File: pmJGuAbomrpA5-WIiPNXZROjk0o.mft (raw, json)
Hash identifier: otUBitSihK+nFYom8n/Vm2af4J18Ego1SMNSlk5t7oA=
Subject key identifier: 4A:70:E6:F2:4D:2B:97:5C:F5:B3:38:54:15:82:4E:CC:9E:71:8A:A0
Authority key identifier: A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
Certificate issuer: /CN=a66246b806e89aba40e7e58888f3576513a3934a
Certificate serial: 0199FB7CBFE18B8AB7D6241D7A28F52CEE47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 08:01:20 +0000
Manifest this update: Sun 19 Oct 2025 08:01:20 +0000
Manifest next update: Mon 20 Oct 2025 08:01:20 +0000
Files and hashes: 1: 6W6gmSc4k57Y4v5MIcHO8sDy0Nk.roa (hash: aByrM29yQlmUSgYmIxuh2nCAQIQ4+06fpCqZWYYHHbE=)
2: WwtbLNZ8w3CZaCckJBj7-wgL_Wg.roa (hash: awi9blZyXe6dA7Vb92PcI70MUj14FAGRwBheENnmVNg=)
3: pmJGuAbomrpA5-WIiPNXZROjk0o.crl (hash: 6d2WKmpzbVoUsKHdAKS/AnELlcfBPtV6kohWWivk7/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:bf:e1:8b:8a:b7:d6:24:1d:7a:28:f5:2c:ee:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66246b806e89aba40e7e58888f3576513a3934a
Validity
Not Before: Oct 19 08:01:20 2025 GMT
Not After : Oct 20 08:01:20 2025 GMT
Subject: CN=4a70e6f24d2b975cf5b3385415824ecc9e718aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:78:7e:98:96:ea:c7:19:74:4e:d7:07:13:5b:
f3:d3:1e:66:da:73:44:be:6b:92:3f:17:7d:b1:26:
7e:4c:54:5a:1d:12:9c:b2:eb:5d:11:63:6c:61:6b:
dd:3f:96:3d:1f:51:21:d5:a4:db:06:ff:8a:56:26:
e0:70:51:c9:60:b2:3d:df:44:0e:7f:00:4f:2f:71:
b3:d8:95:9f:cf:f8:f5:d9:3b:77:45:db:2e:57:9e:
9a:e3:87:78:eb:ff:b3:2c:4d:b2:5f:e8:56:6b:99:
78:4e:2a:cd:8b:db:aa:b9:a4:9e:eb:44:43:b9:92:
ec:f5:bf:d1:96:29:4a:1d:c6:ed:66:ea:27:e3:46:
75:b4:0e:ac:9e:c7:f4:df:31:2c:21:39:8e:e2:bb:
42:1c:a6:dc:19:a8:83:8a:58:de:aa:8d:09:2a:58:
b5:57:3d:86:82:88:4f:25:ed:92:8e:a3:34:86:fe:
a0:b2:01:57:24:ba:6b:5e:c2:88:5d:03:7c:cd:65:
72:5a:93:20:38:fb:70:35:49:b9:34:5c:5e:12:0b:
e5:13:51:43:8f:ec:69:c8:1b:00:cf:e2:1d:32:30:
ad:3f:b6:26:84:2b:ff:fe:ab:c5:83:73:14:b0:3b:
06:e9:77:ac:e4:40:81:f7:26:33:04:c9:f3:17:a8:
87:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:70:E6:F2:4D:2B:97:5C:F5:B3:38:54:15:82:4E:CC:9E:71:8A:A0
X509v3 Authority Key Identifier:
keyid:A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ab:ed:ba:4e:a1:ce:89:7f:88:bc:f0:36:70:aa:78:94:ec:
56:b6:8a:ec:07:a4:85:1b:d3:91:ae:52:1d:bd:da:8a:16:b0:
18:b5:32:e8:a0:55:9d:b8:12:91:32:56:1c:35:d0:ac:77:5d:
c9:ec:08:63:ed:d6:7d:f1:fb:58:cf:6d:e5:9a:e1:7c:7d:87:
88:6b:74:e2:1b:43:d4:5a:01:ee:fd:15:74:b9:f9:1e:14:23:
f7:10:8e:93:03:b8:55:ba:87:97:ef:c0:30:c2:2f:f9:f2:be:
18:01:72:a7:17:06:44:33:a0:6a:43:47:32:ad:1c:00:cd:03:
7a:6c:55:ee:83:16:16:f4:5e:ef:3d:1b:39:ff:d7:e9:d6:7e:
05:52:1b:75:f7:33:da:e2:13:81:10:f3:de:f2:65:37:1f:68:
e2:b8:8d:48:b6:74:68:79:75:7d:c4:52:de:8e:2a:cf:94:3d:
59:85:69:d9:08:a0:94:99:ba:a4:b2:b9:2b:1f:61:93:7d:7b:
65:ec:87:6b:84:e6:98:e2:b1:fc:a6:ff:9e:d3:2d:56:0d:0f:
b4:ce:5b:20:88:04:af:ea:b7:c3:33:bc:d3:68:2b:f0:f9:73:
ad:10:7e:bc:eb:df:aa:55:aa:d6:21:83:d9:a9:4b:f4:ae:9a:
25:90:1d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:58 2025 by rpki-client