Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
File: pmJGuAbomrpA5-WIiPNXZROjk0o.mft (raw, json)
Hash identifier: KK4A7x7vEY8BRXwzsqu2Ubvw/DmH7Ry5QXLEKROU0/c=
Subject key identifier: 82:99:C8:CF:BC:25:DC:3F:30:45:5C:61:62:D1:A2:37:6F:4B:11:E7
Authority key identifier: A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
Certificate issuer: /CN=a66246b806e89aba40e7e58888f3576513a3934a
Certificate serial: 0198D5F1659D4F5DD17AECAB6868E254E345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
Manifest number: 1651
Signing time: Sat 23 Aug 2025 08:00:23 +0000
Manifest this update: Sat 23 Aug 2025 08:00:23 +0000
Manifest next update: Sun 24 Aug 2025 08:00:23 +0000
Files and hashes: 1: 6W6gmSc4k57Y4v5MIcHO8sDy0Nk.roa (hash: aByrM29yQlmUSgYmIxuh2nCAQIQ4+06fpCqZWYYHHbE=)
2: WwtbLNZ8w3CZaCckJBj7-wgL_Wg.roa (hash: awi9blZyXe6dA7Vb92PcI70MUj14FAGRwBheENnmVNg=)
3: pmJGuAbomrpA5-WIiPNXZROjk0o.crl (hash: yG6AbBhNcuMEYr9wWxd9lqo23VVirA53clPyHnjej/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:65:9d:4f:5d:d1:7a:ec:ab:68:68:e2:54:e3:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66246b806e89aba40e7e58888f3576513a3934a
Validity
Not Before: Aug 23 08:00:23 2025 GMT
Not After : Aug 24 08:00:23 2025 GMT
Subject: CN=8299c8cfbc25dc3f30455c6162d1a2376f4b11e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:86:a0:c4:cf:46:8f:f9:cb:26:e3:09:37:81:
df:3f:13:21:05:a5:53:ff:33:e1:e4:32:9c:d4:a0:
c3:30:68:9e:f7:02:7f:9c:07:8c:0d:14:75:7f:58:
29:e8:ba:07:90:4a:77:26:5c:8e:55:11:fe:b8:f4:
3e:ea:9f:0e:23:c4:e3:93:cf:7d:89:a3:21:e4:20:
a4:eb:23:d1:9c:24:3f:bb:56:70:ea:99:cf:3f:20:
0b:67:50:a2:94:3d:1d:70:ec:77:dd:76:21:6d:e3:
f0:22:9c:ce:98:a7:70:3d:ca:5a:0c:17:25:61:32:
cf:2a:2b:4c:35:d6:36:ee:22:e4:63:40:96:69:a3:
4c:92:7f:d1:cf:be:c7:84:51:cc:54:b0:3f:72:d1:
27:17:58:3a:00:9b:97:f1:e8:74:bb:bc:72:5e:d9:
5c:18:9f:76:22:30:eb:cc:f1:a0:4b:5e:69:bd:c1:
b4:dd:13:5f:f2:1a:c6:85:94:b7:a6:c9:ad:8a:4b:
12:aa:03:eb:38:8b:af:0d:94:5a:59:0f:86:fc:49:
2e:7b:a9:41:58:d5:fa:d6:5c:cd:79:ad:68:56:f5:
8d:fd:42:ee:57:f1:46:f3:34:d5:36:25:2b:12:91:
8f:ac:7e:72:cd:dc:76:e0:e3:1c:70:79:f6:6c:6c:
f9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:99:C8:CF:BC:25:DC:3F:30:45:5C:61:62:D1:A2:37:6F:4B:11:E7
X509v3 Authority Key Identifier:
keyid:A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ee:b5:49:24:1f:34:15:ad:0f:0a:fd:f1:65:fd:b6:80:88:
d0:6e:11:14:57:04:35:07:8e:b4:36:cf:75:5b:c0:13:ea:a1:
b5:54:7c:83:5e:22:d2:ab:b3:38:31:6b:d2:4d:bd:23:17:e2:
e7:ed:f9:13:7b:00:78:6b:4e:3f:ed:7a:fe:8e:bb:bf:a5:75:
36:59:18:ac:5b:b3:7f:48:50:b4:33:6c:f4:4f:4d:7a:ce:d2:
a7:04:1e:2a:c2:ff:0f:86:b8:1d:89:84:22:dc:cb:ed:9a:b1:
ca:6c:c9:fc:74:90:0a:ec:1c:45:9c:7f:ff:70:36:29:e3:a5:
64:32:77:87:35:7f:21:5a:a3:99:f2:c7:bb:33:82:63:f8:44:
42:b4:b3:22:8b:d2:61:c2:58:47:0b:ec:f1:80:d9:85:d6:c0:
93:4d:7f:37:a8:f7:6d:88:3a:21:a0:46:ea:6a:8a:f6:23:a3:
1c:59:b0:e7:fb:b4:27:8e:0d:fb:3b:7d:11:d3:60:e3:e3:26:
2a:4f:20:84:fb:e8:79:4c:f5:43:c7:66:c9:9a:fd:28:3b:a7:
76:05:48:23:81:09:5d:7f:3a:c7:f2:b3:09:a9:25:09:25:be:
13:e3:52:30:2a:f6:13:80:c1:4b:13:8f:d5:a5:71:ae:c1:a2:
b0:14:7d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:09:51 2025 by rpki-client