Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft
File: pWMWxxKYMeBREHlTLe2B3BLIHaA.mft (raw, json)
Hash identifier: QT/bVgAw+pJ6hE4c60Kywclu3ZFZZFtUfw0vrX2SIKc=
Subject key identifier: 6D:EC:FD:BF:EF:99:D6:AA:59:5A:76:33:8C:BD:4F:67:D5:62:F7:B0
Authority key identifier: A5:63:16:C7:12:98:31:E0:51:10:79:53:2D:ED:81:DC:12:C8:1D:A0
Certificate issuer: /CN=a56316c7129831e0511079532ded81dc12c81da0
Certificate serial: 0197CA9546E389734BE87DF01B0E724D5D3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWMWxxKYMeBREHlTLe2B3BLIHaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft
Manifest number: 0BCE
Signing time: Wed 02 Jul 2025 10:01:09 +0000
Manifest this update: Wed 02 Jul 2025 10:01:09 +0000
Manifest next update: Thu 03 Jul 2025 10:01:09 +0000
Files and hashes: 1: XAMH6mQExatvC2LMnoXanctLKzE.roa (hash: pCAATiBl9IRxnVx1ZfARnp3JybBqcsAW/QN7pstrTq0=)
2: pWMWxxKYMeBREHlTLe2B3BLIHaA.crl (hash: j8vRZUaIjZ3K8Pyr6EPLLt1j/Amf8pvUw4w+AIqxiOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pWMWxxKYMeBREHlTLe2B3BLIHaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 10:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:95:46:e3:89:73:4b:e8:7d:f0:1b:0e:72:4d:5d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a56316c7129831e0511079532ded81dc12c81da0
Validity
Not Before: Jul 2 10:01:09 2025 GMT
Not After : Jul 3 10:01:09 2025 GMT
Subject: CN=6decfdbfef99d6aa595a76338cbd4f67d562f7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ab:26:78:4b:95:66:2c:cf:13:12:43:bb:fe:
b8:76:f0:3c:7f:4f:70:c0:e2:3a:e2:6c:cd:e2:de:
f3:dc:35:1b:06:3e:1c:a2:83:06:2e:3c:63:fb:f7:
a1:c2:ee:95:30:7b:89:0f:c1:da:60:4f:cf:18:06:
9f:a1:a2:e9:5c:f1:b5:c5:70:90:a4:4c:12:ce:5d:
d8:2a:0d:9d:a5:d9:ac:cb:ef:7f:21:e7:bb:3a:a8:
e2:91:a6:6b:db:9d:70:61:0a:6e:3f:47:93:95:b6:
aa:4e:cb:2e:3e:3e:99:a5:ab:e5:e0:d4:e7:dc:64:
b4:98:1c:0f:5b:45:08:e8:53:02:57:56:9f:71:9a:
c4:3f:45:17:fc:b5:f5:9a:8b:5a:f2:22:30:0c:17:
66:5b:21:4f:43:e5:11:9e:c1:93:e0:80:b2:60:eb:
44:e2:98:a3:5e:9b:bf:4a:2c:84:ee:41:04:90:2b:
86:6a:b5:ce:ef:5c:69:c2:cc:59:1e:ca:04:f3:53:
08:1c:a8:87:68:96:34:3f:c3:36:2d:95:2c:47:81:
4a:83:63:38:ab:ce:74:de:0b:eb:0e:92:f4:a8:38:
e2:7f:00:21:42:1c:d3:79:21:83:3c:23:7d:3b:99:
41:7f:1c:86:6f:62:b2:a6:c0:8d:24:b2:f5:75:eb:
1c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:EC:FD:BF:EF:99:D6:AA:59:5A:76:33:8C:BD:4F:67:D5:62:F7:B0
X509v3 Authority Key Identifier:
keyid:A5:63:16:C7:12:98:31:E0:51:10:79:53:2D:ED:81:DC:12:C8:1D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWMWxxKYMeBREHlTLe2B3BLIHaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:27:84:22:21:8c:a5:6b:5b:29:2d:46:93:71:14:38:8e:7c:
7d:e7:48:e6:47:07:15:ef:f7:6a:00:a7:1d:bf:db:91:28:f2:
0b:54:d3:06:d3:55:19:d2:4d:3c:1d:1d:55:88:7a:1a:49:65:
31:81:c9:17:1e:4d:be:2a:84:57:80:75:0c:4d:67:95:b2:f8:
a6:0d:69:9e:8e:da:eb:c9:ea:66:ea:2b:f8:9b:58:96:f5:6b:
66:ce:8d:a5:2f:70:c8:29:09:3c:20:c0:d9:63:5f:74:39:ed:
4b:9c:c6:8f:69:77:c4:da:cc:ac:91:d3:0d:4c:3e:3e:99:98:
f1:30:27:7e:3f:93:76:60:dd:44:4d:87:54:db:22:0d:97:97:
86:fc:f2:46:31:9c:14:8c:2f:e4:05:b9:50:12:f3:00:a2:17:
ec:96:26:70:bb:d0:ec:6f:1d:23:55:56:44:a3:22:bb:ff:5f:
e5:de:a7:5b:7c:fa:88:bb:21:50:33:6c:ec:be:4a:b2:13:2b:
ef:8a:24:77:e9:f3:23:03:80:a8:13:4f:2f:d1:41:33:1a:b2:
3e:90:ce:b1:48:1f:34:7d:b2:48:c2:99:c4:f5:44:dd:9f:7a:
be:28:38:7f:98:38:66:64:ae:e1:04:22:cb:37:c6:95:39:d3:
01:7d:8a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:30:01 2025 by rpki-client