Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
File: pBM1JPJKSooh1GwGwQJfQPNK0no.mft (raw, json)
Hash identifier: ddPo/jdPp3yAJ1eMlzkv/VSshwaSDx95kfrtu02wdLk=
Subject key identifier: 8A:6C:0C:56:9B:6F:F8:EF:07:D9:24:5D:4F:BF:6F:FD:2A:4A:CC:77
Authority key identifier: A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
Certificate issuer: /CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Certificate serial: 0196D287F8E5B1F4EB8078084F51DF1D07B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
Manifest number: 1540
Signing time: Thu 15 May 2025 06:00:48 +0000
Manifest this update: Thu 15 May 2025 06:00:48 +0000
Manifest next update: Fri 16 May 2025 06:00:48 +0000
Files and hashes: 1: hDhJ2OmuACmi7Q_Pysi0Uy5-CBg.roa (hash: IpPR6/fjcqfY1Wb9zSV7h6VOKADAG8xAFr0zyQ+Kgzs=)
2: pBM1JPJKSooh1GwGwQJfQPNK0no.crl (hash: IkERjMScVZphIf+V6wNP0HY858jX/P0WGYVUlTxE+J8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:87:f8:e5:b1:f4:eb:80:78:08:4f:51:df:1d:07:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Validity
Not Before: May 15 06:00:48 2025 GMT
Not After : May 16 06:00:48 2025 GMT
Subject: CN=8a6c0c569b6ff8ef07d9245d4fbf6ffd2a4acc77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6e:b7:33:41:77:57:96:82:33:9f:6f:7e:07:
ee:48:cc:70:b6:4e:68:a6:0b:43:4b:cc:c6:12:56:
12:78:63:cc:5d:f5:ca:60:86:04:82:93:47:68:5c:
b5:92:78:cf:63:3e:d2:75:ea:23:fd:92:73:c8:35:
7e:dc:43:79:a8:37:dd:41:64:1a:dd:44:09:25:8c:
a0:e5:d0:9c:17:d8:97:de:7b:44:d1:43:fb:f7:70:
c7:43:78:0c:20:b4:17:e8:99:d8:cc:ae:8d:22:3b:
78:96:f6:92:1b:7e:2c:09:25:a4:f7:53:79:36:8e:
64:3c:fd:90:6f:d3:7f:c5:9e:ca:04:af:6a:30:3a:
d1:1e:77:62:d6:62:68:23:24:68:f4:b4:48:29:15:
6c:0e:e1:4c:26:69:26:90:bc:d1:3a:dc:6f:0f:6d:
da:c0:a2:a1:a2:a0:ba:ee:a4:39:ca:61:0d:d6:29:
a9:bd:dc:cd:f0:da:4c:cb:32:28:ab:65:e5:a1:3c:
22:80:3f:b6:5b:db:a4:92:91:df:02:91:7c:f4:61:
dd:59:25:8e:11:80:8a:be:3d:e8:b5:1d:2f:7c:02:
80:c1:d0:e1:19:e2:a9:b3:9c:7a:7a:a3:e3:0a:7f:
83:49:b6:b3:5c:41:2a:ab:5d:8a:d7:a4:68:ba:25:
20:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6C:0C:56:9B:6F:F8:EF:07:D9:24:5D:4F:BF:6F:FD:2A:4A:CC:77
X509v3 Authority Key Identifier:
keyid:A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c9:7f:bb:d0:18:67:d2:eb:aa:b0:f9:af:1f:04:68:f0:42:
e2:c6:98:92:80:e3:c3:8f:6d:3b:80:8a:c5:58:7a:b0:01:a3:
5b:45:27:a6:6e:e2:9a:fe:7b:fe:64:6b:e2:d6:79:af:57:0c:
e3:e7:8b:00:5f:4a:98:72:10:ee:13:14:82:34:e9:aa:10:f0:
c2:33:56:06:90:79:70:b4:0c:bd:de:7f:16:d4:3f:47:c3:f8:
f5:a7:7e:be:63:6f:88:cb:39:be:61:b9:1d:f6:0a:cf:46:3e:
17:da:b5:1e:6f:4d:f4:bc:05:b5:f6:d1:a3:6a:ae:cf:f1:ac:
08:93:13:1c:94:77:45:63:91:5f:e8:3e:30:07:4b:da:ad:2f:
90:bb:51:06:0e:96:cd:1e:ff:3e:5c:0b:2e:ae:f5:1a:c3:df:
e5:a9:02:da:de:b6:bf:60:c3:db:f8:7a:51:bb:1b:96:47:bd:
42:05:89:c4:cc:30:d0:d7:27:c8:50:e0:5f:aa:e4:82:20:d6:
c6:e8:e8:65:3c:6d:a9:30:24:85:96:f0:15:8d:8c:fb:0d:36:
11:df:1b:1d:00:0e:41:6a:4c:bd:82:b2:4e:a6:e0:1d:c0:d4:
dc:28:bf:fd:72:ee:3e:90:c2:5a:51:11:51:c5:23:a8:2b:c9:
04:5a:f7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 15:57:16 2025 by rpki-client