Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.mft
File: PmxFIHWfOk74uamifiUzznMsVBE.mft (raw, json)
Hash identifier: c679oKyd1nxLz6hUsOjwuFoKJP4lZpGMwmzOeCyOIn4=
Subject key identifier: 6E:B5:FF:13:8B:04:26:50:14:05:4F:92:06:A3:D5:C2:20:0F:B6:D4
Authority key identifier: 3E:6C:45:20:75:9F:3A:4E:F8:B9:A9:A2:7E:25:33:CE:73:2C:54:11
Certificate issuer: /CN=3e6c4520759f3a4ef8b9a9a27e2533ce732c5411
Certificate serial: 0197B6A07320173CAFE66E8E382BF43CE73E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmxFIHWfOk74uamifiUzznMsVBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.mft
Manifest number: 1548
Signing time: Sat 28 Jun 2025 13:00:57 +0000
Manifest this update: Sat 28 Jun 2025 13:00:57 +0000
Manifest next update: Sun 29 Jun 2025 13:00:57 +0000
Files and hashes: 1: PmxFIHWfOk74uamifiUzznMsVBE.crl (hash: rY01dBWQoLPReP8gzFFUeWN456VpAlWmzRGKBkRj45w=)
2: f62uVetw4VLEAcyA7iUss0CmbKk.roa (hash: KfBTV0RaWF6oQ2oIYy/lZbeXGP7Rdv40K79+xRa2szk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmxFIHWfOk74uamifiUzznMsVBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:73:20:17:3c:af:e6:6e:8e:38:2b:f4:3c:e7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6c4520759f3a4ef8b9a9a27e2533ce732c5411
Validity
Not Before: Jun 28 13:00:57 2025 GMT
Not After : Jun 29 13:00:57 2025 GMT
Subject: CN=6eb5ff138b04265014054f9206a3d5c2200fb6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3a:62:fa:aa:a8:3c:f7:f5:86:be:15:7b:d1:
78:9b:7e:0b:2d:d6:db:10:51:f1:3e:46:ca:22:bf:
ae:74:ce:25:05:93:5b:63:50:78:73:d4:ab:03:c4:
b9:9f:04:3c:ae:44:fe:2b:00:19:0d:00:56:b5:9e:
cf:09:62:d2:14:6d:d2:2a:ac:3d:44:c0:eb:ce:6b:
4e:7d:91:5b:85:91:27:2d:86:b8:7c:8b:fe:e9:39:
e8:3b:ec:e0:03:dd:f6:7a:8d:61:c7:6a:4e:f8:ef:
2e:ac:f9:1c:ee:74:e5:ad:5e:14:5f:a0:d0:0f:73:
5c:71:b3:08:8c:fd:c7:ce:95:ec:f8:06:0c:6b:0f:
db:c1:1a:c1:f9:9a:6c:8f:6f:ef:22:b5:98:d9:01:
3b:bf:7f:d2:15:54:dd:7c:2f:1f:a7:47:e0:09:83:
80:38:86:fe:cb:46:06:62:e4:ee:f5:8b:b9:55:50:
5e:aa:66:4d:25:12:ac:75:e8:de:fd:84:37:ed:a0:
da:dd:c6:51:8f:30:3d:79:9d:48:59:2f:d9:bd:3c:
44:53:c7:65:00:15:0e:3e:51:ca:82:9b:c8:d7:ed:
96:16:9b:60:16:3b:d7:ca:cd:11:a5:ac:07:7b:a3:
6e:32:ff:52:ee:72:fc:e2:2b:be:c0:14:58:b2:43:
5a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B5:FF:13:8B:04:26:50:14:05:4F:92:06:A3:D5:C2:20:0F:B6:D4
X509v3 Authority Key Identifier:
keyid:3E:6C:45:20:75:9F:3A:4E:F8:B9:A9:A2:7E:25:33:CE:73:2C:54:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmxFIHWfOk74uamifiUzznMsVBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a8:99:37:c3:b4:8f:e3:68:68:5b:6d:2f:4a:64:d0:8b:a0:
3c:0c:65:0b:a9:58:02:8a:2f:ea:8c:57:85:9b:59:72:79:2a:
ce:9a:73:db:83:3a:9a:31:66:f0:06:7d:6d:3b:50:43:e0:04:
f0:04:53:ac:ff:5c:c8:76:01:92:bc:45:a6:af:4f:7e:b1:df:
14:f4:5b:a3:c7:ad:c8:8c:6d:bd:9a:7f:f3:df:72:f2:e1:9f:
52:04:cd:5a:7d:e0:b8:95:c0:b6:80:8d:4e:91:78:b1:09:71:
26:82:63:03:65:5c:f9:1a:0a:55:c7:40:be:64:a3:ec:62:7d:
9d:b7:d8:ec:dd:1a:be:20:59:3b:bb:85:19:f1:4d:09:d3:47:
8e:c2:9a:7b:17:96:fa:8a:04:61:67:3d:e9:64:28:ba:68:d0:
16:0f:05:45:4b:f9:cd:41:75:ab:e7:9f:5d:e6:46:ec:2c:f0:
ba:58:36:8d:36:a7:04:78:fa:54:a8:61:fd:8f:57:5f:09:fd:
c7:7f:5c:39:11:4e:e7:78:aa:6b:63:d9:c1:98:62:dc:82:60:
59:16:ea:d5:20:d1:07:88:79:c7:a3:3e:f0:d9:fd:4b:1d:bc:
b4:6d:4b:96:92:c7:22:ab:2e:fc:96:c1:bd:0d:cf:b6:da:3d:
ac:fb:75:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oHMgFzyv5m6OOCv0POc+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNmM0NTIwNzU5ZjNhNGVmOGI5YTlhMjdlMjUzM2NlNzMy
YzU0MTEwHhcNMjUwNjI4MTMwMDU3WhcNMjUwNjI5MTMwMDU3WjAzMTEwLwYDVQQD
Eyg2ZWI1ZmYxMzhiMDQyNjUwMTQwNTRmOTIwNmEzZDVjMjIwMGZiNmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDpi+qqoPPf1hr4Ve9F4m34LLdbb
EFHxPkbKIr+udM4lBZNbY1B4c9SrA8S5nwQ8rkT+KwAZDQBWtZ7PCWLSFG3SKqw9
RMDrzmtOfZFbhZEnLYa4fIv+6TnoO+zgA932eo1hx2pO+O8urPkc7nTlrV4UX6DQ
D3NccbMIjP3HzpXs+AYMaw/bwRrB+Zpsj2/vIrWY2QE7v3/SFVTdfC8fp0fgCYOA
OIb+y0YGYuTu9Yu5VVBeqmZNJRKsdeje/YQ37aDa3cZRjzA9eZ1IWS/ZvTxEU8dl
ABUOPlHKgpvI1+2WFptgFjvXys0RpawHe6NuMv9S7nL84iu+wBRYskNa+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG61/xOLBCZQFAVPkgaj1cIgD7bUMB8GA1UdIwQY
MBaAFD5sRSB1nzpO+Lmpon4lM85zLFQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG14RklIV2ZPazc0dWFtaWZpVXp6bk1zVkJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni80ODNlMzMtYzc2Ny00NmI3LThmM2Et
OWMwYTBlMjc2N2FhLzEvUG14RklIV2ZPazc0dWFtaWZpVXp6bk1zVkJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni80ODNlMzMtYzc2Ny00NmI3LThmM2EtOWMwYTBlMjc2N2Fh
LzEvUG14RklIV2ZPazc0dWFtaWZpVXp6bk1zVkJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK6iZN8O0
j+NoaFttL0pk0IugPAxlC6lYAoov6oxXhZtZcnkqzppz24M6mjFm8AZ9bTtQQ+AE
8ARTrP9cyHYBkrxFpq9PfrHfFPRbo8etyIxtvZp/899y8uGfUgTNWn3guJXAtoCN
TpF4sQlxJoJjA2Vc+RoKVcdAvmSj7GJ9nbfY7N0aviBZO7uFGfFNCdNHjsKaexeW
+ooEYWc96WQoumjQFg8FRUv5zUF1q+efXeZG7Czwulg2jTanBHj6VKhh/Y9XXwn9
x39cORFO53iqa2PZwZhi3IJgWRbq1SDRB4h5x6M+8Nn9Sx28tG1LlpLHIqsu/JbB
vQ3Ptto9rPt1Jw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:18:22 2025 by rpki-client