Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
File: pmJGuAbomrpA5-WIiPNXZROjk0o.mft (raw, json)
Hash identifier: j4+G2/koAkdwDLwG3B3X4HcDkRSVnjYZcq5R1TrVgnU=
Subject key identifier: BA:37:C4:AF:82:64:1A:3F:E4:61:52:3E:CC:E4:4E:66:AE:4E:65:51
Authority key identifier: A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
Certificate issuer: /CN=a66246b806e89aba40e7e58888f3576513a3934a
Certificate serial: 0197B8210F974695921A3F05A954C43DE5E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
Manifest number: 15BD
Signing time: Sat 28 Jun 2025 20:01:03 +0000
Manifest this update: Sat 28 Jun 2025 20:01:03 +0000
Manifest next update: Sun 29 Jun 2025 20:01:03 +0000
Files and hashes: 1: 6W6gmSc4k57Y4v5MIcHO8sDy0Nk.roa (hash: aByrM29yQlmUSgYmIxuh2nCAQIQ4+06fpCqZWYYHHbE=)
2: WwtbLNZ8w3CZaCckJBj7-wgL_Wg.roa (hash: awi9blZyXe6dA7Vb92PcI70MUj14FAGRwBheENnmVNg=)
3: pmJGuAbomrpA5-WIiPNXZROjk0o.crl (hash: 8i8zkBlvIts1Sbu/5va9R6VwhLPNDC967+16oZVyfxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:0f:97:46:95:92:1a:3f:05:a9:54:c4:3d:e5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66246b806e89aba40e7e58888f3576513a3934a
Validity
Not Before: Jun 28 20:01:03 2025 GMT
Not After : Jun 29 20:01:03 2025 GMT
Subject: CN=ba37c4af82641a3fe461523ecce44e66ae4e6551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:44:bd:c3:e9:1d:0f:37:f9:38:fe:7e:dc:c1:
0e:49:7e:dc:03:60:42:09:00:21:c2:31:ed:42:9b:
d5:00:30:1b:1e:4a:62:3a:7f:a7:41:ca:4d:1f:2d:
60:00:be:52:3d:44:54:0a:a1:87:21:bf:d4:76:f7:
6a:82:ca:08:36:49:23:48:70:34:59:a8:30:45:46:
bf:ae:60:d4:49:9c:83:33:ec:2a:76:97:25:82:c4:
28:a8:85:87:03:ee:7a:85:19:49:c0:ed:c4:7f:09:
24:50:a8:90:93:e7:d6:97:83:43:f2:a8:a1:30:b2:
8e:3e:7f:91:7b:b3:e1:5e:17:5a:e3:4d:c2:28:7f:
16:9a:69:40:88:56:fa:f5:6f:85:d0:27:7e:13:a6:
f8:98:5e:13:40:fa:49:9a:e5:8d:0a:f1:3d:e1:dd:
23:c4:8a:47:38:c0:ab:41:13:ca:70:8c:3c:dd:61:
0d:46:ec:47:c4:46:ec:f5:b0:aa:c8:3a:d1:62:b6:
dc:93:06:87:cf:0b:25:05:ea:34:fb:d1:8e:96:5e:
5c:cb:fe:2a:c7:e7:8e:9c:0b:d8:75:6e:f1:03:8d:
6c:98:17:ed:54:89:9e:c7:a5:ef:d5:d1:be:91:0a:
3b:0c:9c:0e:b3:59:2c:2f:ad:f8:01:35:b0:5a:5e:
2f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:37:C4:AF:82:64:1A:3F:E4:61:52:3E:CC:E4:4E:66:AE:4E:65:51
X509v3 Authority Key Identifier:
keyid:A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:81:8e:a5:22:bc:81:2e:60:69:b6:ac:6c:4f:aa:db:39:4e:
a7:74:03:2f:b7:03:c0:3c:ff:5f:15:5e:2b:63:2b:c6:60:1d:
d5:87:29:d2:14:57:26:d5:b1:ad:aa:d5:7a:69:8d:2c:b7:88:
e7:ee:4e:54:38:e5:2b:5b:66:0f:f4:ca:8f:c4:95:e5:4a:4a:
c2:0a:8b:42:38:b3:91:2c:38:2f:2e:5c:03:32:44:fa:cb:ad:
50:b8:c2:d6:54:17:87:46:88:5e:3e:e3:1c:cd:d4:51:76:02:
86:57:a3:92:51:29:31:d6:81:2a:f3:69:64:3b:cf:18:74:33:
2a:36:3f:d6:40:e8:87:c9:eb:99:bb:a4:37:0a:35:a6:d1:a6:
69:10:83:c8:84:7b:15:71:80:85:ee:e0:5f:76:1c:54:cd:96:
58:55:aa:33:9b:ec:93:e8:f3:5a:ab:96:4a:2d:53:86:6e:3f:
06:88:d3:18:1d:9b:dd:c2:8c:e1:25:81:51:06:71:eb:cb:20:
ae:17:91:17:2b:8f:83:f3:54:e5:32:ec:ac:14:93:87:1b:09:
38:55:57:d2:40:f4:e6:05:a2:bd:69:8b:63:32:61:da:2e:06:
82:d4:e2:24:10:ac:cb:a2:df:c1:d2:73:5d:2a:a2:63:30:5d:
cf:99:87:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:32:54 2025 by rpki-client