Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.mft
File: PmxFIHWfOk74uamifiUzznMsVBE.mft (raw, json)
Hash identifier: 60P/uv7P9tlClKS4sz/KuqiydmKx0T9VKI8wqxFL6w0=
Subject key identifier: A7:B8:C0:7B:B3:23:AE:02:32:E7:FA:B2:75:7C:DF:62:B6:4E:58:5C
Authority key identifier: 3E:6C:45:20:75:9F:3A:4E:F8:B9:A9:A2:7E:25:33:CE:73:2C:54:11
Certificate issuer: /CN=3e6c4520759f3a4ef8b9a9a27e2533ce732c5411
Certificate serial: 0198D473EB9B1D6D4ADC4186DFAAC6BE4F72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmxFIHWfOk74uamifiUzznMsVBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 01:03:43 +0000
Manifest this update: Sat 23 Aug 2025 01:03:43 +0000
Manifest next update: Sun 24 Aug 2025 01:03:43 +0000
Files and hashes: 1: PmxFIHWfOk74uamifiUzznMsVBE.crl (hash: Y8cpK5RovND2b3BLw8pafqsLc42O9SvIUxMXr8Jgi08=)
2: f62uVetw4VLEAcyA7iUss0CmbKk.roa (hash: KfBTV0RaWF6oQ2oIYy/lZbeXGP7Rdv40K79+xRa2szk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmxFIHWfOk74uamifiUzznMsVBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:eb:9b:1d:6d:4a:dc:41:86:df:aa:c6:be:4f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6c4520759f3a4ef8b9a9a27e2533ce732c5411
Validity
Not Before: Aug 23 01:03:43 2025 GMT
Not After : Aug 24 01:03:43 2025 GMT
Subject: CN=a7b8c07bb323ae0232e7fab2757cdf62b64e585c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:50:de:3e:77:e8:20:30:da:6e:bb:f6:23:bf:
74:7e:4a:bc:aa:83:46:c3:98:09:a7:a7:11:8e:23:
34:90:41:bf:ff:cc:3f:64:1e:e5:7c:65:af:41:a5:
53:be:c6:e3:2a:ee:6e:f4:07:8b:aa:ff:37:4e:ac:
79:6b:63:0a:7b:31:af:14:b5:a1:52:80:66:9f:f2:
a3:47:45:ba:0f:d9:a6:3e:ac:83:6c:90:ce:26:0d:
5a:f7:f7:c6:c5:75:91:c6:86:b0:32:5e:9c:0b:0e:
55:53:51:fd:16:1a:89:51:0f:93:cb:f5:98:06:1e:
a8:48:a8:18:be:f4:b8:5c:1a:55:a7:4a:3d:a9:c3:
26:f5:31:f9:21:e7:dd:0d:b4:3f:1d:6a:d5:4d:94:
c7:e1:ee:27:a4:4e:51:db:df:90:8f:3a:07:d4:d7:
f2:9a:20:d1:75:29:2c:1f:a9:c5:6e:fd:03:1f:d8:
0d:01:ee:fb:92:59:63:48:a4:48:88:90:cf:66:0d:
f3:ca:0c:ff:9f:52:d4:c6:72:d0:24:d0:1e:33:15:
63:90:ab:7c:33:ae:a5:52:51:12:d4:0a:d3:95:60:
6d:8b:72:8d:a0:a8:ed:6d:4b:28:9d:10:d5:59:5c:
88:41:df:3c:cf:8e:45:90:b0:11:ff:f9:d1:ac:a3:
c0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B8:C0:7B:B3:23:AE:02:32:E7:FA:B2:75:7C:DF:62:B6:4E:58:5C
X509v3 Authority Key Identifier:
keyid:3E:6C:45:20:75:9F:3A:4E:F8:B9:A9:A2:7E:25:33:CE:73:2C:54:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmxFIHWfOk74uamifiUzznMsVBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:39:e8:f3:65:bf:2b:5c:b2:e9:14:50:09:fb:c4:48:db:e0:
f6:ba:67:2f:62:37:b7:09:58:97:ab:52:95:6f:89:20:cb:3f:
45:81:98:c8:8a:8f:dd:53:18:56:05:be:dd:3c:1c:af:76:af:
0d:4e:04:f7:6f:a7:21:38:1a:c6:a2:98:06:77:45:72:ae:f0:
1f:55:0a:0b:0f:ea:ed:4d:08:7d:3d:e9:d8:2f:8a:d3:14:0b:
ea:c9:91:27:e7:17:10:cb:f9:4b:4a:85:59:5e:b5:e0:79:f5:
73:c8:2e:11:62:43:fd:19:8c:b5:5f:7a:57:9a:2e:54:08:78:
49:b1:ec:b5:fc:be:d2:7a:79:99:b9:4e:e8:8c:6b:02:cd:73:
b3:fa:35:f5:36:69:c9:e6:7b:7e:51:30:a8:90:41:a9:fa:1e:
27:21:7a:e7:60:b5:87:e8:80:16:d8:d8:fa:25:be:93:8c:2a:
fe:e7:92:39:02:6e:65:ba:3d:67:ea:49:9e:41:b9:fb:7d:3a:
1a:d6:36:0c:19:81:3b:0e:48:b5:0c:30:e3:3f:b9:90:b7:07:
3c:03:ae:65:5f:14:24:90:16:f3:d2:d3:b5:a2:ad:76:0c:d3:
45:86:fd:21:b1:60:90:5c:22:d2:3e:68:6f:c6:ad:a0:df:46:
df:ac:c5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:54 2025 by rpki-client