Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft
File: pmnxwhNwxE39EOKvaIyMTg6hKVU.mft (raw, json)
Hash identifier: rs9j73wodwC+c3AfPlT84TagFSqkOaYU9FoOz8o/TAg=
Subject key identifier: 8D:0D:FA:1E:10:8F:8E:6F:7E:78:38:E3:54:46:75:34:5F:55:C9:A6
Authority key identifier: A6:69:F1:C2:13:70:C4:4D:FD:10:E2:AF:68:8C:8C:4E:0E:A1:29:55
Certificate issuer: /CN=a669f1c21370c44dfd10e2af688c8c4e0ea12955
Certificate serial: 0197B6D72A721573A3875AD5A588213F7E21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft
Manifest number: 0DFD
Signing time: Sat 28 Jun 2025 14:00:43 +0000
Manifest this update: Sat 28 Jun 2025 14:00:43 +0000
Manifest next update: Sun 29 Jun 2025 14:00:43 +0000
Files and hashes: 1: pmnxwhNwxE39EOKvaIyMTg6hKVU.crl (hash: vHzxp4dmcO4g16UW9G32EGC9pjtcrPJRwLc8dtlCuqQ=)
2: vdy1MmzFMK60AlIdpOXD1htDYPg.roa (hash: 0u0pMl1wwd/at2uaTP4vwjKf36kzodMgLoxEXn0lwwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:2a:72:15:73:a3:87:5a:d5:a5:88:21:3f:7e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a669f1c21370c44dfd10e2af688c8c4e0ea12955
Validity
Not Before: Jun 28 14:00:43 2025 GMT
Not After : Jun 29 14:00:43 2025 GMT
Subject: CN=8d0dfa1e108f8e6f7e7838e3544675345f55c9a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:58:ba:80:c9:0e:57:c1:11:ea:88:3b:ea:a2:
f7:13:4d:c3:d9:d9:3d:e0:b6:35:7c:3e:71:1b:0c:
ca:36:02:d7:6f:f4:80:00:93:05:46:2d:8a:e9:d4:
4c:ea:d5:8f:6d:05:06:01:bc:6b:53:52:4a:92:2d:
39:6e:a1:9b:2a:08:d5:26:87:b5:8c:96:22:53:f6:
9a:23:c8:67:a4:12:9d:c3:dc:5e:85:36:36:fd:22:
c2:ee:a7:ce:e5:38:f9:7d:d1:53:fa:20:ec:de:8d:
9b:64:67:c3:2a:0c:ac:7f:1b:d1:1c:46:a7:25:30:
c6:5d:21:d8:c0:bf:c3:e8:23:b6:bf:2d:39:31:b9:
9d:ee:db:04:a1:bf:7d:65:d6:5d:48:15:8b:57:e1:
13:e7:de:2d:33:be:a1:20:a9:54:b9:bd:19:89:5a:
30:1b:75:6e:6e:64:7a:db:20:da:76:b5:5b:7f:78:
f0:e6:29:16:48:7b:c5:63:3b:58:70:20:b4:42:b2:
49:64:24:ef:96:0e:28:11:7a:a0:64:8e:8f:39:e8:
89:21:fc:cd:ca:ff:f4:c8:ee:6a:60:0d:fe:df:76:
6a:1a:5e:81:29:06:a9:ab:ba:5e:3e:e4:ce:fe:a4:
0a:11:27:80:94:51:79:aa:b9:2c:9a:fc:2a:d0:05:
3d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0D:FA:1E:10:8F:8E:6F:7E:78:38:E3:54:46:75:34:5F:55:C9:A6
X509v3 Authority Key Identifier:
keyid:A6:69:F1:C2:13:70:C4:4D:FD:10:E2:AF:68:8C:8C:4E:0E:A1:29:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:6b:58:fe:da:ac:fd:1b:44:0b:dc:f6:d7:9b:1f:f8:28:d8:
0e:ee:c5:de:8f:50:2d:7c:40:57:93:a4:aa:58:34:72:9e:58:
a4:f4:4a:06:10:0b:8c:75:0d:8c:8f:ac:00:38:28:a3:c5:56:
09:a0:4f:13:9b:be:8c:5d:f9:8e:b9:ce:bb:18:f1:40:15:88:
74:10:7b:9f:5f:df:8d:c3:72:50:6b:83:81:32:b4:24:4c:43:
fb:7e:5a:3f:79:a1:b6:c4:82:62:33:9a:7a:77:cf:88:fb:67:
f5:3b:0d:6b:7e:da:b1:b8:a6:b4:04:89:fc:55:6e:31:41:3c:
5e:ea:90:9d:18:fe:a3:ac:38:31:c8:f2:95:b8:c3:43:40:46:
c8:4b:cb:4e:9a:17:83:73:b7:ee:34:9e:6b:ba:6f:a6:07:9c:
eb:5d:38:ab:3d:a0:12:79:be:93:63:76:15:87:10:c8:f0:e8:
7e:be:62:18:82:11:c4:f8:c7:45:4e:af:24:41:e4:db:a1:15:
4e:a7:89:9b:6e:60:f8:1a:a1:fb:5d:22:c3:38:cb:a4:0c:68:
72:c7:76:cb:a5:f6:4c:d3:b9:0a:c4:85:e1:8e:7c:09:db:84:
3c:cf:26:e5:92:d1:b7:76:f4:7d:c6:e5:42:59:e9:ad:90:2b:
bc:12:87:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:53:29 2025 by rpki-client