Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
File: PjMt0plMbuiUNhWKLqwfSCkizSo.mft (raw, json)
Hash identifier: 1ME/rA4+RQyXUU4rWgYkT9+HUHbVfaLMAWvXDV/G+V4=
Subject key identifier: AE:0A:01:F7:CB:8F:0A:F1:87:BC:75:75:20:DC:72:94:C6:8E:BB:B8
Authority key identifier: 3E:33:2D:D2:99:4C:6E:E8:94:36:15:8A:2E:AC:1F:48:29:22:CD:2A
Certificate issuer: /CN=3e332dd2994c6ee89436158a2eac1f482922cd2a
Certificate serial: 0196A7D471CB2D10DEFFABE1B42DF3DC4E02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
Manifest number: 0640
Signing time: Tue 06 May 2025 23:00:39 +0000
Manifest this update: Tue 06 May 2025 23:00:39 +0000
Manifest next update: Wed 07 May 2025 23:00:39 +0000
Files and hashes: 1: Eg6f3oV_tmh90tuvdcGS4z7md3o.roa (hash: +iCyWfpNRgku+keY+1TZvk0pjaW3ZowUvCSdJVvHiXs=)
2: PjMt0plMbuiUNhWKLqwfSCkizSo.crl (hash: 3r9B9W7CYDKADT5DH30oUsv/r72/CMDP2m55RaVPtKs=)
3: hvAcV0p--qlqSvXjrIPln93SWWk.roa (hash: TjRxZCcsv470SMx3GoJIYlzXG8w9x5IPVw3HcGg4jOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:d4:71:cb:2d:10:de:ff:ab:e1:b4:2d:f3:dc:4e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e332dd2994c6ee89436158a2eac1f482922cd2a
Validity
Not Before: May 6 23:00:39 2025 GMT
Not After : May 7 23:00:39 2025 GMT
Subject: CN=ae0a01f7cb8f0af187bc757520dc7294c68ebbb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ff:f5:26:33:da:ad:db:29:03:47:89:b5:18:
8b:74:8b:52:97:30:b8:8a:3d:4f:98:ac:12:f9:b3:
07:19:12:00:f5:f2:2f:a0:3e:87:9a:95:db:92:e8:
0e:9e:1f:8b:ec:56:35:af:88:e8:71:17:dc:d6:70:
32:43:ea:de:ca:76:aa:be:6e:2e:32:b7:52:73:9d:
02:0b:05:55:f1:8c:a5:ed:9b:8e:84:97:ab:bc:a3:
b5:ea:df:50:0a:fb:c6:40:63:16:42:9c:ba:b0:ab:
05:56:ec:2a:ca:05:02:4f:40:98:82:b3:48:ab:21:
81:26:d0:4e:bd:0f:22:db:0a:ac:75:8b:88:38:74:
fc:18:e7:df:04:d4:f2:e4:f3:aa:ef:d1:4e:af:64:
be:fd:0b:b5:62:c1:5f:72:a2:d7:9e:16:4b:58:9e:
c4:ae:3e:8e:23:48:f0:50:ca:58:ad:26:4a:0a:e0:
99:26:c8:d4:5b:b2:28:0d:a7:f1:cc:4d:30:cf:af:
88:db:09:97:dd:b2:13:e4:90:5c:7f:8e:94:ee:d5:
04:a0:ee:40:99:6d:d0:21:1b:82:6c:45:76:65:98:
61:40:0d:6d:1e:8c:43:5e:c7:f3:b0:07:71:e0:eb:
a8:d4:e6:51:2b:76:af:4c:28:bf:aa:2f:80:cd:8d:
76:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0A:01:F7:CB:8F:0A:F1:87:BC:75:75:20:DC:72:94:C6:8E:BB:B8
X509v3 Authority Key Identifier:
keyid:3E:33:2D:D2:99:4C:6E:E8:94:36:15:8A:2E:AC:1F:48:29:22:CD:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:c1:0c:0d:44:f7:4f:e5:b4:d9:e0:60:73:2e:8b:e4:be:e3:
e2:b0:a3:99:ae:47:7c:ea:2f:e1:b8:b1:74:06:7c:34:ac:51:
d6:5e:02:9c:c8:81:09:ee:14:6d:0a:17:c4:3d:96:ee:81:08:
f8:5a:97:d6:74:ca:6b:e5:36:fa:45:9a:28:b8:31:d0:fd:d5:
01:42:a3:49:49:38:69:0f:71:b5:5d:63:44:ae:22:c4:b4:f2:
f6:c3:dc:21:c7:10:c1:56:5f:d4:cf:2f:92:c8:77:90:b9:40:
5b:31:1f:82:99:d9:ac:1d:a9:0b:df:48:b7:b2:b7:d2:d1:1f:
70:23:13:d2:7b:d8:fe:0a:3c:56:26:56:1b:d5:15:c4:15:c5:
19:2c:be:56:5c:70:bf:59:5c:86:c1:49:64:84:67:08:62:17:
e2:30:7c:8e:b4:d4:95:fe:3a:0e:b0:0c:38:d8:fb:36:ee:41:
96:af:bb:c7:68:64:a9:65:fc:6e:7d:9b:ee:fc:d9:fc:04:58:
cd:d1:ba:7d:3d:06:9f:01:0d:40:24:8f:9c:bc:c5:b7:7d:82:
6f:08:25:28:42:75:19:cb:c2:26:78:44:cd:ca:a1:25:89:1c:
a5:c0:0c:7f:19:60:a2:64:c6:70:6a:a0:3d:8e:66:70:06:c2:
d6:38:63:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZan1HHLLRDe/6vhtC3z3E4CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMzMyZGQyOTk0YzZlZTg5NDM2MTU4YTJlYWMxZjQ4Mjky
MmNkMmEwHhcNMjUwNTA2MjMwMDM5WhcNMjUwNTA3MjMwMDM5WjAzMTEwLwYDVQQD
EyhhZTBhMDFmN2NiOGYwYWYxODdiYzc1NzUyMGRjNzI5NGM2OGViYmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0P/1JjPardspA0eJtRiLdItSlzC4
ij1PmKwS+bMHGRIA9fIvoD6HmpXbkugOnh+L7FY1r4jocRfc1nAyQ+reynaqvm4u
MrdSc50CCwVV8Yyl7ZuOhJervKO16t9QCvvGQGMWQpy6sKsFVuwqygUCT0CYgrNI
qyGBJtBOvQ8i2wqsdYuIOHT8GOffBNTy5POq79FOr2S+/Qu1YsFfcqLXnhZLWJ7E
rj6OI0jwUMpYrSZKCuCZJsjUW7IoDafxzE0wz6+I2wmX3bIT5JBcf46U7tUEoO5A
mW3QIRuCbEV2ZZhhQA1tHoxDXsfzsAdx4Ouo1OZRK3avTCi/qi+AzY12BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4KAffLjwrxh7x1dSDccpTGjru4MB8GA1UdIwQY
MBaAFD4zLdKZTG7olDYVii6sH0gpIs0qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGpNdDBwbE1idWlVTmhXS0xxd2ZTQ2tpelNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82MDhlMjEtNmE0MC00NzExLTljODMt
ZDAyNGFkNGI3YmViLzEvUGpNdDBwbE1idWlVTmhXS0xxd2ZTQ2tpelNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC82MDhlMjEtNmE0MC00NzExLTljODMtZDAyNGFkNGI3YmVi
LzEvUGpNdDBwbE1idWlVTmhXS0xxd2ZTQ2tpelNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAicEMDUT3
T+W02eBgcy6L5L7j4rCjma5HfOov4bixdAZ8NKxR1l4CnMiBCe4UbQoXxD2W7oEI
+FqX1nTKa+U2+kWaKLgx0P3VAUKjSUk4aQ9xtV1jRK4ixLTy9sPcIccQwVZf1M8v
ksh3kLlAWzEfgpnZrB2pC99It7K30tEfcCMT0nvY/go8ViZWG9UVxBXFGSy+Vlxw
v1lchsFJZIRnCGIX4jB8jrTUlf46DrAMONj7Nu5Blq+7x2hkqWX8bn2b7vzZ/ARY
zdG6fT0GnwENQCSPnLzFt32CbwglKEJ1GcvCJnhEzcqhJYkcpcAMfxlgomTGcGqg
PY5mcAbC1jhj0g==
-----END CERTIFICATE-----
Generated at Wed May 7 09:56:57 2025 by rpki-client