Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
File: pBM1JPJKSooh1GwGwQJfQPNK0no.mft (raw, json)
Hash identifier: dRo2mfcI4LJKJ5gyCQ6QPbglXjDNgwjcy91gAHJEp9c=
Subject key identifier: 77:9B:4D:D8:B8:D7:98:D0:DB:54:B7:F9:BF:68:18:37:89:F5:70:FE
Authority key identifier: A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
Certificate issuer: /CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Certificate serial: 0197CDCD8F846DC62B588A8AD74BBD293EEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
Manifest number: 15C2
Signing time: Thu 03 Jul 2025 01:01:30 +0000
Manifest this update: Thu 03 Jul 2025 01:01:30 +0000
Manifest next update: Fri 04 Jul 2025 01:01:30 +0000
Files and hashes: 1: hDhJ2OmuACmi7Q_Pysi0Uy5-CBg.roa (hash: IpPR6/fjcqfY1Wb9zSV7h6VOKADAG8xAFr0zyQ+Kgzs=)
2: pBM1JPJKSooh1GwGwQJfQPNK0no.crl (hash: 1ACabSL+hjrOv0IRyyQWaUL2eNLrv5rnVpnRS77K+Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:cd:8f:84:6d:c6:2b:58:8a:8a:d7:4b:bd:29:3e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Validity
Not Before: Jul 3 01:01:30 2025 GMT
Not After : Jul 4 01:01:30 2025 GMT
Subject: CN=779b4dd8b8d798d0db54b7f9bf68183789f570fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:63:c4:ca:a9:29:fe:ba:68:12:33:e9:12:9e:
9a:b5:5e:f9:8e:3f:31:0a:c5:b4:b7:d7:dc:df:3a:
87:7d:1d:f2:f4:4b:6f:27:57:19:11:7d:b8:26:d8:
ea:db:e7:d8:08:39:c0:9f:25:4d:2f:2a:d6:22:36:
db:3f:6e:81:27:d1:61:0d:ec:14:55:90:8d:fa:3d:
71:7f:67:ab:a2:37:9a:0d:bb:c9:c0:87:7e:e2:78:
4f:81:33:60:4a:55:91:63:d4:10:0b:58:b2:48:fd:
b5:e3:7d:de:3a:02:35:8d:e4:90:b8:c5:fa:d5:be:
52:6e:c9:d0:00:e1:29:05:91:e4:32:27:9a:9e:c6:
88:a9:b3:e4:69:6a:54:a7:bb:54:8e:78:99:3c:91:
a0:85:19:b5:be:eb:fe:70:90:98:53:90:34:ad:de:
30:12:64:b0:14:44:8b:69:0d:53:e4:da:0f:d4:49:
d6:cb:ab:c4:ce:60:43:be:40:5e:84:fd:d1:08:2a:
00:ed:35:da:30:6e:40:bd:bb:3d:cb:fc:d6:2a:0c:
8a:fc:6d:9c:e4:53:ea:0c:fc:be:66:5c:7a:16:78:
31:cc:7e:35:fe:9e:03:11:8a:8b:52:d8:b5:f8:be:
7e:53:0e:de:7d:86:fa:12:08:4d:57:ae:75:f0:91:
e7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9B:4D:D8:B8:D7:98:D0:DB:54:B7:F9:BF:68:18:37:89:F5:70:FE
X509v3 Authority Key Identifier:
keyid:A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:58:1b:95:e5:26:dc:ec:85:72:f1:8b:d1:30:23:c8:7c:40:
d0:fd:d8:90:5b:94:9c:20:ff:fd:9b:38:86:a9:48:2e:b9:d1:
99:f7:99:bd:31:dd:15:bd:f3:a0:2d:89:34:87:59:61:07:c3:
f0:e4:a4:63:bf:46:7e:cc:1e:a2:0a:cd:51:1b:9e:c5:d6:ec:
96:a2:cd:3b:15:7a:ff:08:d3:87:50:b9:d0:0d:89:50:a0:97:
d5:a9:a9:63:92:8c:41:92:ba:4c:5c:20:b7:ba:9c:2f:ef:aa:
85:27:eb:21:d6:6d:21:3b:86:f8:ea:07:2b:1e:35:18:d7:04:
44:de:31:5a:a3:26:90:04:44:10:f4:e2:9d:57:26:a3:f4:98:
a0:35:72:12:7c:da:78:99:e3:e6:fb:bc:2f:eb:d9:d5:62:08:
da:06:ae:73:90:f9:46:78:30:e2:bd:0b:b2:df:1f:96:13:6f:
58:26:d0:4b:db:25:b2:d3:db:45:4d:e3:e3:7e:0d:d1:97:97:
df:53:b1:14:30:92:e0:98:cf:92:67:fd:c0:07:08:10:8e:3b:
ac:a8:8b:ea:69:ae:99:40:a8:3f:f6:73:45:1b:5a:dc:76:06:
f2:c2:34:f3:e7:53:8b:21:ad:02:7e:42:41:a0:2f:ca:9c:f2:
e3:be:87:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:09:04 2025 by rpki-client