Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft
File: pLm08Dm8goYBw44OrUwZWrvf_mM.mft (raw, json)
Hash identifier: IekrHuk17nJ92mdorL9hYON+8TYJZ0iSA/Vx5j0yPRE=
Subject key identifier: 4E:38:05:B8:5C:B0:F0:F1:EB:52:71:F4:3D:1F:0D:2A:A3:2B:E5:D5
Authority key identifier: A4:B9:B4:F0:39:BC:82:86:01:C3:8E:0E:AD:4C:19:5A:BB:DF:FE:63
Certificate issuer: /CN=a4b9b4f039bc828601c38e0ead4c195abbdffe63
Certificate serial: 0197C124A8999C91FB266104A0B1ADD2F25F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLm08Dm8goYBw44OrUwZWrvf_mM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft
Manifest number: 25
Signing time: Mon 30 Jun 2025 14:01:34 +0000
Manifest this update: Mon 30 Jun 2025 14:01:34 +0000
Manifest next update: Tue 01 Jul 2025 14:01:34 +0000
Files and hashes: 1: bbObKOeu6H0tOgWKFFpKvP9AQ5Y.roa (hash: 46+pO6LmE1DlkXffkxBwf62bOZBzvEVVCFmRWPQeevU=)
2: pLm08Dm8goYBw44OrUwZWrvf_mM.crl (hash: jUsTVenPa3yuDvWFjCJHVgQHbzwoVxV8zQ+JKP7mnp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLm08Dm8goYBw44OrUwZWrvf_mM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:24:a8:99:9c:91:fb:26:61:04:a0:b1:ad:d2:f2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b9b4f039bc828601c38e0ead4c195abbdffe63
Validity
Not Before: Jun 30 14:01:34 2025 GMT
Not After : Jul 1 14:01:34 2025 GMT
Subject: CN=4e3805b85cb0f0f1eb5271f43d1f0d2aa32be5d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:be:3f:22:59:1f:57:53:31:b7:bb:42:98:f8:
fa:24:02:3e:a0:b8:39:53:6d:84:95:9a:91:c5:8b:
2d:28:27:14:a0:6a:dc:43:dc:03:ec:8e:3a:a9:cc:
b6:50:97:63:cd:be:53:31:b6:32:d9:d6:28:ba:5c:
26:5a:ae:ef:34:1b:fe:1b:68:a5:bd:f7:aa:7a:cc:
8b:58:65:67:99:2c:94:39:fa:0d:e6:c6:51:cc:5c:
98:af:5b:dc:10:8a:16:18:a7:d2:e4:e9:19:2a:e8:
50:8f:04:c5:33:5b:30:fd:69:6c:55:3f:9a:e9:14:
11:e9:32:03:6c:af:6a:28:84:00:2f:d2:44:74:d3:
97:b3:c7:48:49:d9:0f:d9:b6:8f:93:f1:69:ae:a4:
23:c9:c6:03:4b:35:9f:14:bc:c8:80:b1:99:79:bf:
23:a0:d2:79:23:12:e1:51:51:b5:d1:8a:84:47:f2:
94:29:f4:d7:9c:a1:c7:a6:63:60:63:84:07:3c:ad:
2f:6d:00:e2:77:9d:82:c1:7c:dc:33:b6:53:7e:9b:
48:7b:05:b8:a4:70:95:a4:80:e0:62:cd:41:2a:fc:
a3:a7:c6:db:27:a9:67:28:6b:ac:82:e4:06:29:27:
36:88:b9:24:33:90:d0:11:d5:1a:e3:2c:31:fe:25:
14:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:38:05:B8:5C:B0:F0:F1:EB:52:71:F4:3D:1F:0D:2A:A3:2B:E5:D5
X509v3 Authority Key Identifier:
keyid:A4:B9:B4:F0:39:BC:82:86:01:C3:8E:0E:AD:4C:19:5A:BB:DF:FE:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLm08Dm8goYBw44OrUwZWrvf_mM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:63:70:2f:cc:ef:b1:23:1d:62:50:e4:a2:f6:04:e8:f8:da:
e5:c6:56:8b:72:dc:93:d0:ec:32:06:5f:c3:0a:cc:86:20:fe:
4e:54:0a:f7:65:3f:de:89:de:a1:ab:ef:7d:63:23:d7:bc:98:
51:ba:69:82:0f:6f:8e:08:93:dc:ce:d7:99:30:93:d7:5b:5b:
6e:a4:e1:8d:69:5d:5e:e3:4d:3c:6c:5f:0f:4d:4b:b2:ad:bb:
b0:04:23:bf:7b:87:4b:57:e2:78:e5:7d:c0:a0:41:9b:25:41:
f3:07:e3:ab:d6:80:4c:d5:9c:a1:c7:75:fe:05:79:b4:6e:f9:
66:79:23:8f:a7:e3:de:a7:c4:67:e4:63:ca:77:d7:23:d1:79:
c1:93:3b:60:e4:ec:0e:3b:2b:82:3f:d7:ff:17:75:b0:df:92:
0d:c6:a2:bb:66:ce:a5:91:9e:58:4d:0f:94:11:46:e1:7a:75:
5a:a9:bb:50:32:6f:95:0c:76:f5:20:5c:6a:b2:78:e0:cf:09:
98:67:11:96:30:05:ff:5e:0d:15:20:5e:d8:8f:39:29:22:7b:
ab:7f:9e:ba:cf:fc:59:52:ca:4d:b0:eb:ac:a4:08:93:c0:6c:
58:1b:ee:ab:0a:63:07:9f:04:27:01:4d:67:ee:76:23:5a:2e:
b5:b4:c7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:23:26 2025 by rpki-client